$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft File: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft (raw, json) Hash identifier: GLiWoOq8jBOXt7rBbkdiQHHoQM/ZajkinotbGWWcCKQ= Subject key identifier: 8C:31:03:E1:D2:81:6A:E3:BB:BD:7D:F5:AF:17:0B:42:77:FE:2E:5C Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Certificate serial: 0E88AE026CB6BB41DD1063BEFA09C9A7A3DEC64C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:51:19 +0000 Manifest this update: Tue 12 May 2026 19:46:19 +0000 Manifest next update: Wed 13 May 2026 20:58:19 +0000 Files and hashes: 1: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: Xm5n/XLcKtlX7vaWLbK2D/7cXu3TQ6c3pSXsVlfA9/0=) 2: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=) 3: 5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl (hash: UHgsUkKr4OCQRcj6KUA41h2JsG77BxNhptqHOV305V0=) 4: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: NHw4QH7kx6gwhf24chR9MVQWVvSl6RuQvk3rMGt5qyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:88:ae:02:6c:b6:bb:41:dd:10:63:be:fa:09:c9:a7:a3:de:c6:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF Validity Not Before: May 12 19:46:19 2026 GMT Not After : May 13 20:58:19 2026 GMT Subject: CN=8C3103E1D2816AE3BBBD7DF5AF170B4277FE2E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b2:d4:ab:15:49:fb:ea:8b:f2:6e:21:22:c2: bc:3b:f1:ef:e3:d5:be:85:90:ed:ee:17:01:63:e6: 6e:21:30:bb:99:10:71:5f:f0:dc:36:ff:3e:53:4a: 61:4f:55:76:79:ee:2d:ac:6b:b9:8b:bc:21:ac:60: 24:8b:6c:67:d8:08:f1:2e:5b:b6:19:dd:5b:31:81: 07:3b:94:e6:98:48:97:59:2e:ae:ab:04:ff:14:58: 93:70:c3:31:f5:13:55:9c:d8:e9:6d:70:27:40:5e: 58:8e:4a:c0:96:c6:b0:a7:b3:59:d4:23:8a:bf:88: 21:3a:42:0b:40:1c:1b:2d:4a:53:32:e4:f5:72:f1: 47:19:6f:6b:12:2d:aa:e5:d6:4b:bd:56:72:a3:9c: fc:ba:33:3c:47:ab:9d:e9:1b:32:f7:68:48:2f:12: d2:ca:50:b5:e4:75:b6:a5:07:1e:75:8d:c2:55:c6: 8f:50:fa:5e:fc:0c:62:66:75:cf:e6:8b:79:6a:eb: 4e:7a:61:e7:c3:d9:63:76:9c:b2:b5:5f:88:76:06: f4:a3:d9:64:fe:aa:23:c7:77:0f:3d:de:a3:7d:48: 44:71:de:5b:f7:f4:ec:f4:44:b6:01:12:89:37:88: c0:1e:d1:41:0d:ba:ac:f3:17:a6:e3:2d:c2:c3:52: a9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:31:03:E1:D2:81:6A:E3:BB:BD:7D:F5:AF:17:0B:42:77:FE:2E:5C X509v3 Authority Key Identifier: keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d1:02:f6:64:87:d8:af:54:6e:59:f3:7d:33:03:b7:2c:f8: 65:8d:6d:e0:ac:5c:37:09:1e:20:23:a6:16:b1:3c:45:cf:c3: 68:40:c1:0d:f9:29:f2:88:4f:34:ca:03:67:00:3a:c8:01:fe: e5:d2:86:f9:15:24:e2:63:21:d9:69:3b:f0:02:f5:f7:01:b4: 5e:f0:44:71:d5:16:d2:29:91:c4:86:52:9d:4d:74:94:36:f1: 9e:0b:24:34:71:85:91:0b:ae:c7:88:b0:f3:42:2b:13:90:ca: 54:78:cc:a9:2d:2b:9c:fb:42:46:58:33:d2:14:01:5d:1b:fc: 8f:f6:45:6d:46:68:f7:73:02:1c:ca:36:e5:c4:18:8b:aa:ac: 01:df:d9:4a:26:f3:99:e3:44:c5:81:df:11:ed:0b:05:e3:08: 2a:58:6a:bb:60:6f:1d:87:2c:69:f5:58:f9:48:7c:93:7f:7b: b3:92:b9:2a:b7:46:41:1f:41:5e:29:31:be:85:d5:b8:1b:75: 20:16:4c:5f:7a:f7:80:cf:67:ef:65:24:76:58:8b:49:a8:d2: 54:45:9a:55:7f:65:7b:ff:6c:3c:93:85:59:17:64:f9:6b:67: e9:c2:fb:93:b3:8a:17:25:2c:45:57:62:4b:7d:0f:33:55:f7: a3:3b:14:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDoiuAmy2u0HdEGO++gnJp6PexkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx QTE2RjhERjAeFw0yNjA1MTIxOTQ2MTlaFw0yNjA1MTMyMDU4MTlaMDMxMTAvBgNV BAMTKDhDMzEwM0UxRDI4MTZBRTNCQkJEN0RGNUFGMTcwQjQyNzdGRTJFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkstSrFUn76ovybiEiwrw78e/j 1b6FkO3uFwFj5m4hMLuZEHFf8Nw2/z5TSmFPVXZ57i2sa7mLvCGsYCSLbGfYCPEu W7YZ3VsxgQc7lOaYSJdZLq6rBP8UWJNwwzH1E1Wc2OltcCdAXliOSsCWxrCns1nU I4q/iCE6QgtAHBstSlMy5PVy8UcZb2sSLarl1ku9VnKjnPy6MzxHq53pGzL3aEgv EtLKULXkdbalBx51jcJVxo9Q+l78DGJmdc/mi3lq6056YefD2WN2nLK1X4h2BvSj 2WT+qiPHdw893qN9SERx3lv39Oz0RLYBEok3iMAe0UENuqzzF6bjLcLDUqmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjDED4dKBauO7vX31rxcLQnf+LlwwHwYDVR0j BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1 MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG OERGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEz QzgxQTE2RjhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHRAvZkh9ivVG5Z830zA7cs+GWNbeCsXDcJ HiAjphaxPEXPw2hAwQ35KfKITzTKA2cAOsgB/uXShvkVJOJjIdlpO/AC9fcBtF7w RHHVFtIpkcSGUp1NdJQ28Z4LJDRxhZELrseIsPNCKxOQylR4zKktK5z7QkZYM9IU AV0b/I/2RW1GaPdzAhzKNuXEGIuqrAHf2Uom85njRMWB3xHtCwXjCCpYartgbx2H LGn1WPlIfJN/e7OSuSq3RkEfQV4pMb6F1bgbdSAWTF9694DPZ+9lJHZYi0mo0lRF mlV/ZXv/bDyThVkXZPlrZ+nC+5OzihclLEVXYkt9DzNV96M7FME= -----END CERTIFICATE-----Generated at Tue May 12 22:47:08 2026 by rpki-client