$ rpki-client -vvf rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft File: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft (raw, json) Hash identifier: AqBXEqnXApaKM1TfFhF1+seh4ALCM8YsWwbA6WXhDpc= Subject key identifier: 34:C5:5B:A5:A3:FE:AE:C0:04:B8:30:FB:23:DC:09:81:E2:3A:6D:C8 Authority key identifier: 56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B Certificate issuer: /CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B Certificate serial: 4534751F780FA3D2035A9E7532D8F386C6113357 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:18:30 +0000 Manifest this update: Tue 12 May 2026 18:13:30 +0000 Manifest next update: Wed 13 May 2026 20:03:30 +0000 Files and hashes: 1: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: Wb6gH+JiAvO+ARbeGk8L44agijONRst7EWLeoO4CUoU=) 2: 5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl (hash: cCXENbMMQBXHFELRzaQPjHVFuMrG5QaBpJFXELVNJiU=) 3: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: tFFR6+x+fpHHrNjo8i5wrXGQVmpCIjPUzPsVU8CszYg=) 4: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: PFdBLc9JDIxArwgoU/YzuObUbGI99im6tjm/eoPLbM8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:34:75:1f:78:0f:a3:d2:03:5a:9e:75:32:d8:f3:86:c6:11:33:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B Validity Not Before: May 12 18:13:30 2026 GMT Not After : May 13 20:03:30 2026 GMT Subject: CN=34C55BA5A3FEAEC004B830FB23DC0981E23A6DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:e3:3c:08:98:f9:91:3e:25:07:b7:2c:c7: 5e:97:b2:cc:36:1e:c7:1c:97:d6:8d:fd:aa:ce:3a: e7:78:5e:85:d9:4d:21:17:77:aa:bb:6c:a0:12:5c: 05:f5:49:5f:ef:d0:94:7c:09:6c:e3:69:6a:5d:1a: b3:c9:2b:d7:a1:8c:60:fc:86:e7:68:94:7c:45:07: 2e:7f:45:28:5b:6a:34:26:64:02:af:54:aa:ae:bf: 25:eb:a8:14:c7:d8:64:34:f8:1e:a7:16:82:d5:cf: a3:a4:b2:2c:c2:0b:b5:00:73:ae:cf:f0:f5:49:77: 9e:6d:fe:d7:50:3a:fa:61:e5:90:56:79:59:e3:f7: e2:ae:f1:37:14:76:29:48:89:1b:75:90:0c:21:ec: d0:ca:3e:c8:9e:36:2b:09:c1:36:e9:10:ce:b0:8f: 2d:8a:09:12:d8:18:f5:25:f5:af:90:05:17:66:db: a7:ec:23:b1:02:92:ca:da:41:d3:0c:e7:00:b1:0f: b1:44:96:6d:90:db:f0:06:72:16:bc:95:1f:09:66: 4f:23:1c:f1:17:07:88:71:b6:0d:e5:eb:ee:80:c4: 2a:2b:32:7e:31:f9:04:01:b9:fc:98:3e:f7:7b:d4: fe:9c:4d:3c:a7:fd:c6:2e:50:77:ab:01:c2:1c:a6: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C5:5B:A5:A3:FE:AE:C0:04:B8:30:FB:23:DC:09:81:E2:3A:6D:C8 X509v3 Authority Key Identifier: keyid:56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:41:df:39:39:ca:05:66:07:00:bc:d1:59:dd:61:87:ff:df: 11:43:30:fd:9f:3b:ca:ff:2c:a3:0a:55:f2:3a:dc:ca:91:14: 41:4b:ef:10:5b:2e:66:f0:74:57:13:12:94:a5:aa:d8:b2:5c: a8:54:ee:4b:32:05:7c:a7:27:4f:c9:5f:60:0d:cd:7c:dc:1f: e2:bc:27:d7:0e:68:36:72:e7:a7:6e:af:95:ce:40:79:f6:30: e4:e1:63:2c:40:e2:24:54:e5:c9:8d:23:1f:5c:39:fc:a0:d5: 12:53:d0:f7:d7:73:14:21:64:5c:8d:87:a7:24:42:84:a1:13: 65:73:36:60:f0:6c:9b:f1:39:cc:c4:80:08:e8:1a:19:af:b0: 82:91:17:87:70:9a:c5:03:49:c9:5d:0e:40:eb:a0:f5:2f:6e: e6:51:83:bd:ff:13:df:5e:cb:19:28:ba:78:f2:ac:58:35:f7: 8f:ce:29:4b:76:de:76:83:a3:2c:3c:74:b4:6f:c4:7b:c8:1d: a2:30:88:08:24:6b:e1:9b:ee:06:a0:13:ba:9a:75:2f:c1:cf: 90:59:71:2a:a0:2e:e5:0d:96:d7:52:0b:ea:48:b6:7f:5b:d2: 1f:a7:87:01:af:85:46:f6:db:b4:35:6e:f5:bd:2b:ca:ec:cc: ce:3f:f6:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTR1H3gPo9IDWp51MtjzhsYRM1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2M0IyOTcwNUZGOUQyRDcyMDhDRDM5NEM1NzY3RDVB Mjg5OUYxQjAeFw0yNjA1MTIxODEzMzBaFw0yNjA1MTMyMDAzMzBaMDMxMTAvBgNV BAMTKDM0QzU1QkE1QTNGRUFFQzAwNEI4MzBGQjIzREMwOTgxRTIzQTZEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8OM8CJj5kT4lB7csx16Xssw2 Hsccl9aN/arOOud4XoXZTSEXd6q7bKASXAX1SV/v0JR8CWzjaWpdGrPJK9ehjGD8 hudolHxFBy5/RShbajQmZAKvVKquvyXrqBTH2GQ0+B6nFoLVz6OksizCC7UAc67P 8PVJd55t/tdQOvph5ZBWeVnj9+Ku8TcUdilIiRt1kAwh7NDKPsieNisJwTbpEM6w jy2KCRLYGPUl9a+QBRdm26fsI7ECksraQdMM5wCxD7FElm2Q2/AGcha8lR8JZk8j HPEXB4hxtg3l6+6AxCorMn4x+QQBufyYPvd71P6cTTyn/cYuUHerAcIcpuqvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNMVbpaP+rsAEuDD7I9wJgeI6bcgwHwYDVR0j BBgwFoAUVmOylwX/nS1yCM05TFdn1aKJnxswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIyN2IxNzYtNGMxNy00MjQ0LWJhZGYtZjQ5NmJjYjE1ZTIwLzAvNTY2M0IyOTcw NUZGOUQyRDcyMDhDRDM5NEM1NzY3RDVBMjg5OUYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NjYzQjI5NzA1RkY5RDJENzIwOENEMzk0QzU3NjdENUEyODk5 RjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvNTY2M0IyOTcwNUZGOUQyRDcyMDhDRDM5NEM1NzY3 RDVBMjg5OUYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZB3zk5ygVmBwC80VndYYf/3xFDMP2fO8r/ LKMKVfI63MqRFEFL7xBbLmbwdFcTEpSlqtiyXKhU7ksyBXynJ0/JX2ANzXzcH+K8 J9cOaDZy56dur5XOQHn2MOThYyxA4iRU5cmNIx9cOfyg1RJT0PfXcxQhZFyNh6ck QoShE2VzNmDwbJvxOczEgAjoGhmvsIKRF4dwmsUDScldDkDroPUvbuZRg73/E99e yxkounjyrFg194/OKUt23naDoyw8dLRvxHvIHaIwiAgka+Gb7gagE7qadS/Bz5BZ cSqgLuUNltdSC+pItn9b0h+nhwGvhUb227Q1bvW9K8rszM4/9jI= -----END CERTIFICATE-----Generated at Wed May 13 07:56:33 2026 by rpki-client