$ rpki-client -vvf rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft File: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft (raw, json) Hash identifier: nW7jGRz4LhrZqVRIH9fEORm0Q/5Pcfp7YveWZ12os3w= Subject key identifier: 2E:C0:DA:0C:F0:F9:3E:62:08:0E:68:CB:52:10:D4:4F:4B:67:DE:F4 Authority key identifier: 5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF Certificate issuer: /CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Certificate serial: 68D9521382634D73593295893C9BEDE892C4875B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:27:19 +0000 Manifest this update: Tue 12 May 2026 20:22:19 +0000 Manifest next update: Wed 13 May 2026 21:40:19 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: vnC+Tp+yt/9nwnboVLS+akmr5GJGP+dBJLMu3nh/zV0=) 2: 5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl (hash: 1iNJ5vAcnSpVcuyTzorFj53gN3MMVUpVjzhxCaBfWkw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d9:52:13:82:63:4d:73:59:32:95:89:3c:9b:ed:e8:92:c4:87:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F61C10A56FB0A38DADA17E57F585D59C03BBEBF Validity Not Before: May 12 20:22:19 2026 GMT Not After : May 13 21:40:19 2026 GMT Subject: CN=2EC0DA0CF0F93E62080E68CB5210D44F4B67DEF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:13:44:70:b5:e2:dd:73:5d:11:71:f3:64: 29:1a:fa:20:d4:d0:14:87:31:a4:95:56:70:b3:2f: b8:86:7f:1b:67:c1:b7:3a:e2:2d:69:ee:c1:48:ba: 54:0b:eb:67:73:db:b2:ee:6c:25:2a:e9:93:73:9a: 00:a6:7e:f0:04:f7:4b:40:17:73:34:5d:5b:88:dc: ef:3f:e0:b1:c5:54:44:b8:b7:3d:82:8d:27:3e:e4: 3e:bc:0a:da:f8:67:cc:f5:2d:71:36:e0:e7:ca:bc: 6a:b3:7e:4f:cd:a9:f8:a3:f3:0a:3b:77:c7:bc:3b: 4d:d7:b2:be:1a:f1:f6:3e:70:e7:b9:9d:bb:c8:ea: af:e1:49:7e:6a:d2:0c:e5:f8:8a:c4:08:b2:eb:4a: 71:73:74:dc:a5:87:49:70:b1:be:3d:82:b6:b8:b7: 28:20:49:69:e5:59:30:9c:59:b4:5a:b4:b8:ce:d0: e5:34:27:40:06:15:96:62:93:48:41:34:da:7d:9f: 60:cf:39:fb:e1:11:f4:db:37:d9:b6:53:42:d4:8e: 2e:82:9d:ed:24:f4:a3:3b:a6:be:96:dd:a8:20:1e: 69:8f:9d:98:fb:d9:f9:b4:f1:df:87:59:4e:df:0e: 9b:70:31:fc:10:7e:ad:3b:64:29:df:ca:8d:e9:45: 1e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C0:DA:0C:F0:F9:3E:62:08:0E:68:CB:52:10:D4:4F:4B:67:DE:F4 X509v3 Authority Key Identifier: keyid:5F:61:C1:0A:56:FB:0A:38:DA:DA:17:E5:7F:58:5D:59:C0:3B:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/5F61C10A56FB0A38DADA17E57F585D59C03BBEBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:86:b1:63:d5:e5:d6:2b:e7:d5:43:ac:20:c9:2e:26:a6:f2: 22:db:0c:f8:f6:d6:47:94:e8:5f:97:2e:9d:d8:19:f3:82:ab: eb:2c:18:53:50:b4:2b:1e:fa:41:68:b3:85:35:50:e0:2d:c2: 17:27:4f:5b:03:39:94:3f:ca:ef:f9:d4:84:be:e8:48:e9:4b: 4f:17:6b:68:3d:6a:71:56:81:6c:d4:bf:23:7a:8d:d2:3b:95: 40:0f:6e:75:64:a6:e1:6e:7c:94:51:33:db:37:b4:5d:75:41: d3:27:de:b4:63:b8:8d:ce:b2:4e:6e:ea:8b:6d:1c:91:e5:57: 7f:bc:b9:a7:65:30:da:17:8a:fc:1e:84:d8:2f:b5:b7:6c:c4: 03:c8:5a:a1:d1:9f:e9:c6:d0:5b:c4:e1:54:ee:d6:bd:23:3e: b3:4a:46:c1:02:7a:5a:b5:20:10:81:8d:b5:f1:13:95:9a:6e: 55:53:a8:7d:70:6e:eb:a8:4e:9f:84:9e:70:87:07:0e:37:04: 1f:40:6a:0c:eb:e0:c6:1f:df:72:9b:77:39:bc:b0:be:f3:0b: 67:a4:4b:cc:f1:ba:22:d2:48:ed:60:25:51:f9:5f:a7:29:13: 18:cf:78:4c:4e:1e:b9:fa:a1:a4:62:be:27:62:30:f8:ae:2d: ab:5a:29:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNlSE4JjTXNZMpWJPJvt6JLEh1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVENTlD MDNCQkVCRjAeFw0yNjA1MTIyMDIyMTlaFw0yNjA1MTMyMTQwMTlaMDMxMTAvBgNV BAMTKDJFQzBEQTBDRjBGOTNFNjIwODBFNjhDQjUyMTBENDRGNEI2N0RFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCouhNEcLXi3XNdEXHzZCka+iDU 0BSHMaSVVnCzL7iGfxtnwbc64i1p7sFIulQL62dz27LubCUq6ZNzmgCmfvAE90tA F3M0XVuI3O8/4LHFVES4tz2CjSc+5D68Ctr4Z8z1LXE24OfKvGqzfk/Nqfij8wo7 d8e8O03Xsr4a8fY+cOe5nbvI6q/hSX5q0gzl+IrECLLrSnFzdNylh0lwsb49gra4 tyggSWnlWTCcWbRatLjO0OU0J0AGFZZik0hBNNp9n2DPOfvhEfTbN9m2U0LUji6C ne0k9KM7pr6W3aggHmmPnZj72fm08d+HWU7fDptwMfwQfq07ZCnfyo3pRR5/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULsDaDPD5PmIIDmjLUhDUT0tn3vQwHwYDVR0j BBgwFoAUX2HBClb7Cjja2hflf1hdWcA7vr8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODRkYTQxNWItNWYxNy00NjAyLTliZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1 NkZCMEEzOERBREExN0U1N0Y1ODVENTlDMDNCQkVCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RjYxQzEwQTU2RkIwQTM4REFEQTE3RTU3RjU4NUQ1OUMwM0JC RUJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvNUY2MUMxMEE1NkZCMEEzOERBREExN0U1N0Y1ODVE NTlDMDNCQkVCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISGsWPV5dYr59VDrCDJLiam8iLbDPj21keU 6F+XLp3YGfOCq+ssGFNQtCse+kFos4U1UOAtwhcnT1sDOZQ/yu/51IS+6EjpS08X a2g9anFWgWzUvyN6jdI7lUAPbnVkpuFufJRRM9s3tF11QdMn3rRjuI3Osk5u6ott HJHlV3+8uadlMNoXivwehNgvtbdsxAPIWqHRn+nG0FvE4VTu1r0jPrNKRsECelq1 IBCBjbXxE5WablVTqH1wbuuoTp+EnnCHBw43BB9Aagzr4MYf33Kbdzm8sL7zC2ek S8zxuiLSSO1gJVH5X6cpExjPeExOHrn6oaRividiMPiuLataKbk= -----END CERTIFICATE-----Generated at Wed May 13 01:35:09 2026 by rpki-client