$ rpki-client -vvf rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft File: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft (raw, json) Hash identifier: ubfVgKUDZ7+84sdlEiEmqBfAPdk8aHxSxcU8dcTZOnE= Subject key identifier: 19:BB:F8:B9:91:A0:FE:1E:BF:F9:72:D9:8B:46:1F:BE:D8:24:6C:64 Authority key identifier: 5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 Certificate issuer: /CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Certificate serial: 466E6E1F1DC483619F7ECCECF3ACBD5F9D0C0957 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:30:54 +0000 Manifest this update: Tue 12 May 2026 22:25:54 +0000 Manifest next update: Thu 14 May 2026 00:29:54 +0000 Files and hashes: 1: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: BWylbxtj1ROm+MVww31ybQOgEWW9jWHft5tLSvCMDwM=) 2: 5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl (hash: szru6cPB3V1IadaD8dgYImGrOCJNzS+htiW9UT8nv+M=) 3: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: ZSQfDBDx08SMOJ9/mfQRF6dJyZ/7l6GG2dcY9tQkt/U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:6e:6e:1f:1d:c4:83:61:9f:7e:cc:ec:f3:ac:bd:5f:9d:0c:09:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8474CD5AD7F598A4826899DD65217A1BB85C61 Validity Not Before: May 12 22:25:54 2026 GMT Not After : May 14 00:29:54 2026 GMT Subject: CN=19BBF8B991A0FE1EBFF972D98B461FBED8246C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b4:f8:dd:88:ed:43:b8:80:c9:e6:0c:98:6e: b5:53:e1:1b:b7:cd:fc:e1:6b:47:04:95:36:f5:e5: 76:b5:da:d4:f5:59:cb:87:30:85:9c:b9:83:e5:4e: eb:6d:e7:5d:cb:bc:2a:e4:f2:3a:b1:c0:c2:02:8f: 1e:14:7d:b1:a9:bf:b6:06:82:5e:d4:93:95:e4:8f: 5b:26:32:25:2d:32:b7:41:30:7b:f9:80:e7:a0:e5: aa:f1:59:a2:23:ac:28:e1:89:55:34:6b:76:50:92: 3c:79:0a:db:10:08:3d:d3:46:50:2b:08:80:41:32: b7:2a:2e:0e:75:02:5b:71:00:a1:f0:de:ce:5a:88: 76:41:e6:7b:78:9d:cc:ae:55:60:ef:48:cb:cb:86: 93:eb:43:07:fe:fa:b7:72:21:97:c7:7b:4b:da:e9: 65:5a:a0:37:c5:7f:d3:9f:05:e0:5f:6c:56:e6:6e: a5:fd:49:61:a6:a7:56:71:d7:69:a2:16:18:a7:e2: 28:14:e8:94:e1:bf:3f:94:65:e0:b8:0c:76:a2:75: e0:6d:97:aa:57:6d:1f:ee:d6:98:85:5f:f2:a9:f0: 6c:2c:c5:47:7f:4c:70:e5:1b:6b:b6:77:32:e8:18: 98:9f:72:3b:5a:2d:f0:d9:62:71:c1:32:e5:36:73: 8e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BB:F8:B9:91:A0:FE:1E:BF:F9:72:D9:8B:46:1F:BE:D8:24:6C:64 X509v3 Authority Key Identifier: keyid:5B:84:74:CD:5A:D7:F5:98:A4:82:68:99:DD:65:21:7A:1B:B8:5C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5B8474CD5AD7F598A4826899DD65217A1BB85C61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/5B8474CD5AD7F598A4826899DD65217A1BB85C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c0:c5:8e:06:66:5e:4f:29:41:a3:a0:5c:94:33:e7:e2:90: 6e:0e:8f:a0:2e:0c:5f:71:c8:9a:d1:22:d1:db:d8:13:9f:bf: 11:05:7a:ec:0a:17:0c:ef:29:a3:6a:6f:ca:e4:32:74:57:da: b0:42:b7:6d:30:a5:00:2d:46:e8:93:74:0c:dd:1d:93:87:32: 4c:31:6d:72:3e:a0:2c:b0:b7:ec:5d:4d:69:25:70:8c:ee:68: 82:f6:b9:4d:21:f3:75:8f:a3:09:be:4d:c8:13:d5:63:01:d4: e1:ad:d4:c4:6c:b6:eb:f9:f5:a2:92:d7:f5:50:eb:b9:72:88: bf:b6:fa:f1:b5:3f:20:fb:d9:96:0f:19:c8:2d:59:38:d5:0d: 4c:67:cb:4a:fc:98:ca:8e:b9:da:ce:04:f1:31:cb:04:db:70: ae:8a:5e:bf:1b:68:83:8c:c7:16:b3:55:d0:18:91:f7:43:a5: df:27:3a:0f:da:45:f6:4a:54:5f:fb:f0:c4:6c:67:53:73:d6: d4:7d:ef:84:1a:3e:ab:a2:f1:b9:f0:a2:b0:88:72:45:ed:43: 27:b1:e3:f7:96:36:f7:d7:34:a4:27:e5:ed:fa:70:2d:1e:62: 1e:29:66:eb:23:34:90:78:6a:ee:81:b6:5e:be:e7:0f:b2:9f: 3e:39:24:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURm5uHx3Eg2Gffszs86y9X50MCVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0Ex QkI4NUM2MTAeFw0yNjA1MTIyMjI1NTRaFw0yNjA1MTQwMDI5NTRaMDMxMTAvBgNV BAMTKDE5QkJGOEI5OTFBMEZFMUVCRkY5NzJEOThCNDYxRkJFRDgyNDZDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDstPjdiO1DuIDJ5gyYbrVT4Ru3 zfzha0cElTb15Xa12tT1WcuHMIWcuYPlTutt513LvCrk8jqxwMICjx4UfbGpv7YG gl7Uk5Xkj1smMiUtMrdBMHv5gOeg5arxWaIjrCjhiVU0a3ZQkjx5CtsQCD3TRlAr CIBBMrcqLg51AltxAKHw3s5aiHZB5nt4ncyuVWDvSMvLhpPrQwf++rdyIZfHe0va 6WVaoDfFf9OfBeBfbFbmbqX9SWGmp1Zx12miFhin4igU6JThvz+UZeC4DHaideBt l6pXbR/u1piFX/Kp8GwsxUd/THDlG2u2dzLoGJifcjtaLfDZYnHBMuU2c449AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGbv4uZGg/h6/+XLZi0YfvtgkbGQwHwYDVR0j BBgwFoAUW4R0zVrX9ZikgmiZ3WUhehu4XGEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3YTZiY2ItOWViNi00OWRlLWI5OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1 QUQ3RjU5OEE0ODI2ODk5REQ2NTIxN0ExQkI4NUM2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Qjg0NzRDRDVBRDdGNTk4QTQ4MjY4OTlERDY1MjE3QTFCQjg1 QzYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNUI4NDc0Q0Q1QUQ3RjU5OEE0ODI2ODk5REQ2NTIx N0ExQkI4NUM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfAxY4GZl5PKUGjoFyUM+fikG4Oj6AuDF9x yJrRItHb2BOfvxEFeuwKFwzvKaNqb8rkMnRX2rBCt20wpQAtRuiTdAzdHZOHMkwx bXI+oCywt+xdTWklcIzuaIL2uU0h83WPowm+TcgT1WMB1OGt1MRstuv59aKS1/VQ 67lyiL+2+vG1PyD72ZYPGcgtWTjVDUxny0r8mMqOudrOBPExywTbcK6KXr8baIOM xxazVdAYkfdDpd8nOg/aRfZKVF/78MRsZ1Nz1tR974QaPqui8bnworCIckXtQyex 4/eWNvfXNKQn5e36cC0eYh4pZusjNJB4au6Btl6+5w+ynz45JHA= -----END CERTIFICATE-----Generated at Wed May 13 02:16:00 2026 by rpki-client