$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft File: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft (raw, json) Hash identifier: G57oiaZFVSdTlENK1Mpi87zXxXxjLI1MsSpJMzydqCE= Subject key identifier: 93:DD:47:03:55:49:07:36:73:EE:2C:34:24:B9:D2:4A:07:C3:5E:10 Authority key identifier: 5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A Certificate issuer: /CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Certificate serial: 5F648A7FF00E4DBF25EB404D8A613277E3F26FB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:28:55 +0000 Manifest this update: Tue 12 May 2026 18:23:55 +0000 Manifest next update: Wed 13 May 2026 19:23:55 +0000 Files and hashes: 1: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: 0nfe7ULTCbnllmGpbf8D6GJGB5XbaGw6kKl4Vys0voA=) 2: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: CZzWnarJZGz+1ihXkwXcLlHMFIQJITOjnmvNdl7iuE0=) 3: 5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl (hash: aoe+aF/AzW7HzlXRseNZdWTXeB87AaArTIqxEBoPjlk=) 4: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: FPQ2j3eI8yNWuffWW/KivobaVVZM8ZwQRSH4Q+fMF+8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:64:8a:7f:f0:0e:4d:bf:25:eb:40:4d:8a:61:32:77:e3:f2:6f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A Validity Not Before: May 12 18:23:55 2026 GMT Not After : May 13 19:23:55 2026 GMT Subject: CN=93DD47035549073673EE2C3424B9D24A07C35E10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:55:c5:82:7d:59:df:58:69:99:ee:f0:1d: 5e:cb:ae:bf:6a:8a:df:12:ac:b4:11:df:3d:bb:6b: 02:29:3c:38:09:9a:63:e6:28:fd:64:a7:2e:65:aa: 71:6b:5b:b4:4d:ad:de:05:23:cc:85:ac:60:4a:56: ac:54:31:41:f2:aa:4b:ea:36:16:7c:67:57:b9:e6: 77:03:c6:67:a2:03:71:1c:81:70:9d:5e:d4:97:80: 34:17:f1:d5:3d:81:53:96:e2:ec:6c:d0:4f:7f:76: f1:94:e9:c0:d1:8e:84:e3:78:df:a9:b4:e9:27:7b: 02:b2:8d:c3:4d:8b:73:7b:82:8b:a5:10:75:08:a5: 4d:1b:e3:d0:c1:a1:f3:fd:fb:74:ec:6d:69:09:bf: 87:28:bb:ce:7a:33:49:be:dc:6d:14:47:d8:b8:8a: 4c:15:df:e8:ee:64:a3:77:2a:28:21:d6:bc:59:cd: 3b:22:4f:02:23:e8:14:9e:8f:ea:6e:96:d5:52:af: 76:cd:df:25:69:32:fe:58:5f:5e:13:74:0d:fd:ec: 04:40:eb:8d:0e:3c:1c:78:02:98:60:c9:74:3f:17: 0e:6f:2d:03:20:79:e8:fb:88:e8:60:9a:b1:37:3c: 82:c5:19:5b:33:3f:28:a8:a4:53:b5:ea:3b:8d:af: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DD:47:03:55:49:07:36:73:EE:2C:34:24:B9:D2:4A:07:C3:5E:10 X509v3 Authority Key Identifier: keyid:5B:E4:C2:9E:EA:3D:D9:3B:A1:C2:71:DC:BA:88:BA:B8:BC:D9:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5BE4C29EEA3DD93BA1C271DCBA88BAB8BCD9DA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:fa:01:d8:71:e4:9f:43:4d:63:10:81:a2:87:8d:50:72:0b: 52:a2:d5:f6:f5:fb:1a:d4:78:89:2b:57:f3:b5:84:49:46:ae: fd:9e:a5:44:29:ab:ee:c0:1d:81:a9:fe:19:08:ed:f5:07:84: ff:c3:b4:2f:2b:15:6f:b6:a4:d5:1b:2b:31:70:12:9f:bc:c9: fb:7b:52:f7:77:94:d8:3e:b6:f4:a1:b7:be:bf:50:be:ec:79: 26:90:cf:81:2e:d0:65:82:ac:20:c2:9a:d1:4e:0c:37:ec:04: 31:e8:70:d1:ad:99:99:0b:f6:71:ee:d5:da:f7:6c:2c:b7:af: 3a:e8:9e:c4:e9:3d:48:44:7f:fb:f4:ef:6e:e5:17:ff:25:3e: 49:b1:8e:24:67:be:48:38:44:68:96:53:2f:bd:07:f6:f7:4f: ec:ef:b0:77:6f:7c:26:b4:a9:a3:6a:fa:f2:ec:83:ac:2a:87: 65:ff:29:25:00:94:56:88:23:77:0c:94:13:9e:86:6a:89:9c: e6:ab:ea:44:5a:b5:c3:57:25:f4:ac:7a:17:33:d7:e3:ff:47: a7:0a:0d:bf:66:d2:7e:e0:aa:2a:7e:24:26:5c:b8:3a:77:47: e1:f6:29:9a:66:66:23:9c:2e:b6:ae:0b:d2:d5:49:9a:d2:2f: cf:8a:76:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2SKf/AOTb8l60BNimEyd+Pyb7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJBQjhC Q0Q5REE2QTAeFw0yNjA1MTIxODIzNTVaFw0yNjA1MTMxOTIzNTVaMDMxMTAvBgNV BAMTKDkzREQ0NzAzNTU0OTA3MzY3M0VFMkMzNDI0QjlEMjRBMDdDMzVFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsFXFgn1Z31hpme7wHV7Lrr9q it8SrLQR3z27awIpPDgJmmPmKP1kpy5lqnFrW7RNrd4FI8yFrGBKVqxUMUHyqkvq NhZ8Z1e55ncDxmeiA3EcgXCdXtSXgDQX8dU9gVOW4uxs0E9/dvGU6cDRjoTjeN+p tOknewKyjcNNi3N7goulEHUIpU0b49DBofP9+3TsbWkJv4cou856M0m+3G0UR9i4 ikwV3+juZKN3Kigh1rxZzTsiTwIj6BSej+pultVSr3bN3yVpMv5YX14TdA397ARA 640OPBx4AphgyXQ/Fw5vLQMgeej7iOhgmrE3PILFGVszPyiopFO16juNr+zZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk91HA1VJBzZz7iw0JLnSSgfDXhAwHwYDVR0j BBgwFoAUW+TCnuo92TuhwnHcuoi6uLzZ2mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmEwNzE1MTQtZTRkZS00YWNlLWEwZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVF QTNERDkzQkExQzI3MURDQkE4OEJBQjhCQ0Q5REE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkU0QzI5RUVBM0REOTNCQTFDMjcxRENCQTg4QkFCOEJDRDlE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNUJFNEMyOUVFQTNERDkzQkExQzI3MURDQkE4OEJB QjhCQ0Q5REE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/6Adhx5J9DTWMQgaKHjVByC1Ki1fb1+xrU eIkrV/O1hElGrv2epUQpq+7AHYGp/hkI7fUHhP/DtC8rFW+2pNUbKzFwEp+8yft7 Uvd3lNg+tvSht76/UL7seSaQz4Eu0GWCrCDCmtFODDfsBDHocNGtmZkL9nHu1dr3 bCy3rzronsTpPUhEf/v0727lF/8lPkmxjiRnvkg4RGiWUy+9B/b3T+zvsHdvfCa0 qaNq+vLsg6wqh2X/KSUAlFaII3cMlBOehmqJnOar6kRatcNXJfSsehcz1+P/R6cK Db9m0n7gqip+JCZcuDp3R+H2KZpmZiOcLrauC9LVSZrSL8+KdiQ= -----END CERTIFICATE-----Generated at Tue May 12 22:47:14 2026 by rpki-client