$ rpki-client -vvf rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft File: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft (raw, json) Hash identifier: hWjnQnzjOhmIftx5pU82CXuJs5SpRcyRSUKG7F3yBqo= Subject key identifier: CF:6B:33:A2:99:0E:D0:4D:E4:20:8B:8D:9E:EA:EE:62:5C:F0:94:50 Authority key identifier: 5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 Certificate issuer: /CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Certificate serial: 11445055809C1913B1DAC6EEE70B6E676D34447A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:50:22 +0000 Manifest this update: Tue 12 May 2026 15:45:22 +0000 Manifest next update: Wed 13 May 2026 18:12:22 +0000 Files and hashes: 1: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 4g4u+OEshRSiXLYJx+dZnyPxCHcmqZ8djxIy4N3tcCM=) 2: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: fc+4JU1Tpp/1O31vstVFMWqbX3rMZmX9kGoVnJ5dzDQ=) 3: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: KmWWkFu4uWgTsq2Hfq2FHIMCUvYeIO46DVlLY6UTkvU=) 4: 5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl (hash: WMiv8YaE3itj9lm2F++3ZCmsqp/YY/QjABmZkxNLYlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:44:50:55:80:9c:19:13:b1:da:c6:ee:e7:0b:6e:67:6d:34:44:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0 Validity Not Before: May 12 15:45:22 2026 GMT Not After : May 13 18:12:22 2026 GMT Subject: CN=CF6B33A2990ED04DE4208B8D9EEAEE625CF09450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:3d:a0:15:7e:d3:4c:39:9d:21:e9:11:20: bc:93:33:20:2f:11:d6:0c:a9:17:ea:24:c8:29:24: 0c:4b:45:eb:20:7e:ba:ed:9f:84:63:2e:fb:2c:81: 46:0f:c3:90:82:e7:d1:8b:4d:ee:d7:91:9f:33:17: 0f:09:da:7d:0e:aa:aa:3c:a5:9d:cb:3d:c7:1e:45: c6:7d:81:d6:95:c9:26:bc:ee:ff:5f:8a:ca:1c:67: a3:ca:16:77:d4:42:43:d7:76:6a:4f:f9:a2:85:d6: ef:d2:cd:7f:79:8e:0a:8f:6e:80:cd:1a:2d:ba:d8: 0d:77:92:38:e9:52:bd:9c:2d:fd:5c:ed:cc:ee:1d: ca:c6:d8:8c:7c:44:f5:fa:9b:cc:15:1b:d2:96:b1: 33:44:3f:cc:52:e7:27:eb:98:d1:b2:d1:4c:b2:0e: 8e:75:be:83:a3:ee:b5:21:43:5b:d1:03:4c:cf:50: d1:57:e7:d9:a0:58:f9:60:14:28:4a:39:14:35:c7: 8b:7e:89:17:3d:09:b8:8e:20:13:93:ca:b0:08:11: 94:01:3e:8b:a3:f1:a5:b3:78:fa:70:9f:17:16:39: 9d:ad:42:02:5d:84:3c:bc:b7:1b:b4:e5:61:61:b3: 94:b9:ad:5a:09:ab:cb:4a:f2:e3:20:d9:83:75:a3: f4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6B:33:A2:99:0E:D0:4D:E4:20:8B:8D:9E:EA:EE:62:5C:F0:94:50 X509v3 Authority Key Identifier: keyid:5A:C7:FD:C1:38:0E:98:33:9F:28:DB:DC:57:B2:1E:7D:2F:95:A0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/5AC7FDC1380E98339F28DBDC57B21E7D2F95A0C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:90:29:3a:59:33:7f:5d:bf:96:98:ef:41:b4:4b:90:aa:47: 8c:6f:2e:7f:4e:03:de:40:b1:88:d1:1d:16:16:b5:22:53:c0: 0e:ff:18:d7:28:d7:84:d7:39:00:8d:99:a9:d7:f5:7a:a4:af: 6b:2b:18:1e:a6:61:eb:af:95:ae:25:e7:f0:ca:79:a4:1b:78: 08:75:a2:c1:00:bf:d9:3c:af:ac:56:2e:6a:e6:5d:eb:f1:c9: d7:d6:8d:34:35:a3:dd:d1:60:c6:f1:a8:2c:7c:1f:84:2a:2c: 78:33:24:44:62:90:dc:93:6f:73:e7:82:91:00:ce:c9:fc:59: 7c:c7:96:07:c2:66:f2:da:35:6e:1b:ef:70:bc:8f:ae:7c:17: cd:90:08:27:9f:5a:3b:a2:16:60:ff:c4:68:3e:40:8a:fb:d0: 53:b9:fb:08:ce:ef:5f:35:8b:a0:fb:58:5f:fd:97:df:e4:cd: fb:17:24:ea:30:49:e8:e3:aa:58:dd:a5:a4:4d:a7:05:cc:01: b4:32:e4:3b:fb:8f:60:d0:46:11:76:2d:33:36:5b:f2:dc:c9: 4d:85:bf:50:b9:53:ef:7f:9f:b6:ac:80:8c:64:b7:ec:d4:2b: ba:a7:c3:45:c3:f2:e9:1f:0d:c6:c7:c5:f6:07:2b:9a:0b:a2: e2:62:82:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEURQVYCcGROx2sbu5wtuZ200RHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFFN0Qy Rjk1QTBDMDAeFw0yNjA1MTIxNTQ1MjJaFw0yNjA1MTMxODEyMjJaMDMxMTAvBgNV BAMTKENGNkIzM0EyOTkwRUQwNERFNDIwOEI4RDlFRUFFRTYyNUNGMDk0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRT2gFX7TTDmdIekRILyTMyAv EdYMqRfqJMgpJAxLResgfrrtn4RjLvssgUYPw5CC59GLTe7XkZ8zFw8J2n0Oqqo8 pZ3LPcceRcZ9gdaVySa87v9fisocZ6PKFnfUQkPXdmpP+aKF1u/SzX95jgqPboDN Gi262A13kjjpUr2cLf1c7czuHcrG2Ix8RPX6m8wVG9KWsTNEP8xS5yfrmNGy0Uyy Do51voOj7rUhQ1vRA0zPUNFX59mgWPlgFChKORQ1x4t+iRc9CbiOIBOTyrAIEZQB Pouj8aWzePpwnxcWOZ2tQgJdhDy8txu05WFhs5S5rVoJq8tK8uMg2YN1o/TvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz2szopkO0E3kIIuNnuruYlzwlFAwHwYDVR0j BBgwFoAUWsf9wTgOmDOfKNvcV7IefS+VoMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNiODU4ZjYtZGUyMC00MTIxLWJjZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEz ODBFOTgzMzlGMjhEQkRDNTdCMjFFN0QyRjk1QTBDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUM3RkRDMTM4MEU5ODMzOUYyOERCREM1N0IyMUU3RDJGOTVB MEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvNUFDN0ZEQzEzODBFOTgzMzlGMjhEQkRDNTdCMjFF N0QyRjk1QTBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmQKTpZM39dv5aY70G0S5CqR4xvLn9OA95A sYjRHRYWtSJTwA7/GNco14TXOQCNmanX9Xqkr2srGB6mYeuvla4l5/DKeaQbeAh1 osEAv9k8r6xWLmrmXevxydfWjTQ1o93RYMbxqCx8H4QqLHgzJERikNyTb3PngpEA zsn8WXzHlgfCZvLaNW4b73C8j658F82QCCefWjuiFmD/xGg+QIr70FO5+wjO7181 i6D7WF/9l9/kzfsXJOowSejjqljdpaRNpwXMAbQy5Dv7j2DQRhF2LTM2W/LcyU2F v1C5U+9/n7asgIxkt+zUK7qnw0XD8ukfDcbHxfYHK5oLouJigvo= -----END CERTIFICATE-----Generated at Tue May 12 22:46:54 2026 by rpki-client