$ rpki-client -vvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft File: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft (raw, json) Hash identifier: Iwfm84HL1IsmqFr/X56Ge82d/eyy2sLOB1HNCIqgFdU= Subject key identifier: 3E:8D:17:46:6E:21:67:50:64:8E:70:FD:2E:17:D0:D1:EF:FF:AF:64 Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 Certificate issuer: /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Certificate serial: 258F90D622A02278C8679ABF193A3E177A658C4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:32:25 +0000 Manifest this update: Tue 12 May 2026 20:27:25 +0000 Manifest next update: Wed 13 May 2026 20:49:25 +0000 Files and hashes: 1: F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl (hash: 7mSOjyeWMz7v6AsI8Q6yWXNVjJiqKYD33HoKdmIwBpE=) 2: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: 03BuWy0OfURI+FKE0txZsH5LInMm2YyYlx6DInNWH9E=) 3: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: KrFgsVnJ/CPVgce61GzFtNxXXABIAjXPOpkQ6UBGiUQ=) 4: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: ZdektWGBi3rfOIP5V7EV+AEsc9XAfei8AhQcCJZB3h0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8f:90:d6:22:a0:22:78:c8:67:9a:bf:19:3a:3e:17:7a:65:8c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Validity Not Before: May 12 20:27:25 2026 GMT Not After : May 13 20:49:25 2026 GMT Subject: CN=3E8D17466E216750648E70FD2E17D0D1EFFFAF64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:f8:90:38:92:93:f5:3d:f6:98:07:ab:6f: 4b:a1:f3:4d:a3:06:69:76:5d:0f:6e:d7:3b:de:73: a9:d2:ff:d5:69:18:04:6d:c4:78:89:2e:45:33:38: d9:d3:71:39:3b:7e:07:17:5d:ba:df:f5:d8:7e:78: be:f5:08:9b:fb:ef:ce:df:e3:3e:1e:ea:82:df:d5: cf:a7:ff:43:24:d5:03:f2:aa:34:26:42:02:b1:12: ff:c7:72:d8:df:eb:c8:c7:95:20:8f:a9:2a:7b:9b: 2f:3c:41:98:b6:3c:4d:a7:30:0b:cd:51:cd:2e:d6: ae:a4:bb:a4:e0:c6:1e:02:8f:13:f8:f2:b6:e7:53: 45:84:30:94:9d:c8:a3:4f:06:48:07:49:e7:ea:09: 62:e1:fa:fd:46:c1:df:24:6a:d6:13:f6:7d:d3:e8: d7:3b:d8:9a:d3:53:1c:87:49:59:ba:8a:4c:0c:94: 0a:3a:25:12:c0:51:05:70:ee:3b:e9:50:d9:ee:f2: 09:86:82:83:d3:68:71:7c:fe:8d:a0:01:8b:de:71: 9b:01:14:13:89:50:30:f8:a1:ff:39:47:5e:7d:41: bd:c7:b6:18:1b:49:c4:26:0e:3d:78:65:09:3b:24: c7:62:0f:eb:fd:1a:1f:16:ca:d2:0d:d6:70:73:c0: 2a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8D:17:46:6E:21:67:50:64:8E:70:FD:2E:17:D0:D1:EF:FF:AF:64 X509v3 Authority Key Identifier: keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:39:f5:5c:46:dd:03:36:a5:c4:c9:5a:5d:87:68:3a:63:21: 1f:75:22:59:e6:d3:a0:f8:42:63:39:74:ff:89:a8:f5:e8:05: 06:c0:e3:db:2d:a7:83:f0:03:83:aa:fc:8d:43:da:b5:b3:a6: 24:f6:ed:85:ff:98:1d:dc:0d:c6:44:54:25:b5:05:47:e8:08: 2d:94:01:83:75:3a:a8:29:dd:cd:21:a3:eb:1e:4e:66:93:49: 27:3f:7b:51:93:0e:41:98:12:4e:81:1c:7f:85:a0:88:61:1d: 27:6a:8c:8a:76:da:e3:93:2f:c5:e3:cd:82:1c:76:a7:84:8e: 5d:be:22:26:af:87:d6:d8:27:7d:9e:f7:ee:1d:2c:f8:66:b9: a5:dc:7f:0f:5a:a2:c0:9a:d9:61:ea:76:9c:b1:57:08:fe:7f: d8:19:39:30:c2:6b:8b:f5:79:16:49:17:e8:89:66:73:c3:30: e9:62:a5:7a:d9:95:18:e3:12:03:a5:0c:fc:f6:de:a6:dd:3b: 95:a2:a4:82:31:76:66:70:ab:b7:96:d9:d9:2b:65:79:3b:9a: b3:46:27:fe:33:33:70:ac:1d:7f:c9:33:c2:91:b3:07:13:c0: 56:8c:e4:1e:c2:29:0a:c2:45:ce:8c:07:61:28:8e:6b:82:96: 4d:bb:61:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJY+Q1iKgInjIZ5q/GTo+F3pljEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3Q0Qx RkUxRUFGNjAeFw0yNjA1MTIyMDI3MjVaFw0yNjA1MTMyMDQ5MjVaMDMxMTAvBgNV BAMTKDNFOEQxNzQ2NkUyMTY3NTA2NDhFNzBGRDJFMTdEMEQxRUZGRkFGNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3lPiQOJKT9T32mAerb0uh802j Bml2XQ9u1zvec6nS/9VpGARtxHiJLkUzONnTcTk7fgcXXbrf9dh+eL71CJv7787f 4z4e6oLf1c+n/0Mk1QPyqjQmQgKxEv/Hctjf68jHlSCPqSp7my88QZi2PE2nMAvN Uc0u1q6ku6Tgxh4CjxP48rbnU0WEMJSdyKNPBkgHSefqCWLh+v1Gwd8katYT9n3T 6Nc72JrTUxyHSVm6ikwMlAo6JRLAUQVw7jvpUNnu8gmGgoPTaHF8/o2gAYvecZsB FBOJUDD4of85R159Qb3HthgbScQmDj14ZQk7JMdiD+v9Gh8WytIN1nBzwCpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPo0XRm4hZ1BkjnD9LhfQ0e//r2QwHwYDVR0j BBgwFoAU9bXUbF3OhEcHwNeJYDl3zR/h6vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY5ZjhhYTgtODk3MS00ZTUxLThiNTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1 RENFODQ0NzA3QzBENzg5NjAzOTc3Q0QxRkUxRUFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNUI1RDQ2QzVEQ0U4NDQ3MDdDMEQ3ODk2MDM5NzdDRDFGRTFF QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3 Q0QxRkUxRUFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAk59VxG3QM2pcTJWl2HaDpjIR91Ilnm06D4 QmM5dP+JqPXoBQbA49stp4PwA4Oq/I1D2rWzpiT27YX/mB3cDcZEVCW1BUfoCC2U AYN1Oqgp3c0ho+seTmaTSSc/e1GTDkGYEk6BHH+FoIhhHSdqjIp22uOTL8XjzYIc dqeEjl2+Iiavh9bYJ32e9+4dLPhmuaXcfw9aosCa2WHqdpyxVwj+f9gZOTDCa4v1 eRZJF+iJZnPDMOlipXrZlRjjEgOlDPz23qbdO5WipIIxdmZwq7eW2dkrZXk7mrNG J/4zM3CsHX/JM8KRswcTwFaM5B7CKQrCRc6MB2EojmuClk27YWI= -----END CERTIFICATE-----Generated at Tue May 12 22:46:48 2026 by rpki-client