$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft File: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft (raw, json) Hash identifier: 8c4rEm+G7710PIEA0THM2LNVo5I9vTyzFQcq7xa/MO4= Subject key identifier: C9:86:92:D7:18:74:9D:BA:CB:8D:9F:84:E3:3F:E7:B9:98:42:41:DA Authority key identifier: 5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 Certificate issuer: /CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Certificate serial: 5C6A68CAFFE824939F77BA8278BEB4B69414BA5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:33:57 +0000 Manifest this update: Tue 12 May 2026 07:28:57 +0000 Manifest next update: Wed 13 May 2026 08:30:57 +0000 Files and hashes: 1: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: SfQvGENDC41waooB6j4WUvvJFAlrc4V5XQaGfGIyIVQ=) 2: 5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl (hash: Tqv6ro4/SWH6ZQX5v4av258ptbttdMTaA1PkxGwi2j8=) 3: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: oPlCdoIfmCJKqeBLs55VVkT8uc2vPldYwiU3y8pfCsM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:6a:68:ca:ff:e8:24:93:9f:77:ba:82:78:be:b4:b6:94:14:ba:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F7C0CBF5BB8C4661C32A0E043E500560DBF4729 Validity Not Before: May 12 07:28:57 2026 GMT Not After : May 13 08:30:57 2026 GMT Subject: CN=C98692D718749DBACB8D9F84E33FE7B9984241DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:9e:2a:b0:a7:8e:72:69:90:32:52:a2:11: e0:01:f0:1f:f3:fc:3e:a7:7f:16:78:f4:a8:77:c7: 31:ed:a0:68:2e:ce:87:b4:bf:8f:79:4f:54:25:eb: ef:71:37:f2:e1:ca:0f:84:40:84:4c:7a:83:70:2b: 84:c9:19:e5:f0:6a:3f:1c:5b:8d:10:3b:2f:68:21: 99:5c:b3:38:ff:8c:02:ef:e0:c1:ff:5b:09:bb:6d: 68:e7:91:cf:36:a6:09:b5:aa:89:21:6c:62:21:d9: b8:5d:3b:12:9b:47:54:8b:7f:1b:ed:e5:85:d5:6e: fa:69:72:7d:a0:ca:2f:ff:b7:35:37:70:bf:61:dc: 74:86:af:fc:90:32:aa:54:10:1f:66:fe:9d:77:40: 91:98:44:25:35:80:26:e5:3b:6f:08:46:71:b0:9d: b0:45:ee:92:e2:98:53:f0:53:eb:55:2f:ac:ee:a1: d2:ad:51:2d:7c:b3:80:e4:43:82:89:d1:22:4a:24: 68:f4:fe:84:00:57:6a:8b:94:1e:41:96:47:fd:ae: 5b:e1:a6:7e:64:2e:4c:8c:59:ba:9e:f4:b5:5c:bd: 80:f8:bd:71:0a:63:e0:6d:9e:9c:f4:f3:3b:23:a1: 9e:ad:0c:57:6a:47:d1:ca:32:c5:47:3e:74:59:7d: 4a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:86:92:D7:18:74:9D:BA:CB:8D:9F:84:E3:3F:E7:B9:98:42:41:DA X509v3 Authority Key Identifier: keyid:5F:7C:0C:BF:5B:B8:C4:66:1C:32:A0:E0:43:E5:00:56:0D:BF:47:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/5F7C0CBF5BB8C4661C32A0E043E500560DBF4729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a8:1e:93:ca:5f:3d:0d:6a:6c:40:03:72:6f:e0:af:53:7e: 5a:82:10:f6:b9:02:75:36:bb:5e:c9:46:30:4f:d5:6d:1a:fe: c4:16:59:44:11:63:0b:ee:ab:1c:ae:1a:f3:8a:de:b3:26:a8: 15:eb:6a:ee:86:40:b6:f3:7f:bd:b1:f7:b0:e8:67:4d:cf:3c: eb:74:b9:da:ef:54:71:5f:44:3c:1a:cc:85:74:96:bf:c0:6d: c3:99:32:f9:d0:9b:23:61:f9:81:e9:88:8b:a2:24:00:a8:98: d4:fa:ee:2f:50:ae:47:35:4f:45:55:17:ca:51:63:b8:09:c4: 80:01:44:3b:0f:71:91:62:60:d2:56:19:0f:43:19:a2:e5:f8: 4c:17:73:18:b8:42:f4:93:2e:17:9d:2b:d7:24:b9:f2:ff:00: 0a:e0:c2:4b:7c:56:70:5e:de:bf:a3:34:6a:f5:f5:21:05:a6: 77:34:10:44:a5:05:4f:b7:c3:21:1d:23:ab:c6:20:a6:3b:26: bd:06:7a:ab:27:08:1c:a3:95:be:55:18:5d:d3:be:fc:79:83: b4:f7:75:48:25:db:09:b1:4c:60:6b:eb:9b:95:78:48:05:d3: 48:23:9a:f8:3d:72:57:c4:95:97:ac:d3:00:6e:9d:79:4d:91: e9:23:ce:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXGpoyv/oJJOfd7qCeL60tpQUul8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYw REJGNDcyOTAeFw0yNjA1MTIwNzI4NTdaFw0yNjA1MTMwODMwNTdaMDMxMTAvBgNV BAMTKEM5ODY5MkQ3MTg3NDlEQkFDQjhEOUY4NEUzM0ZFN0I5OTg0MjQxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIZ4qsKeOcmmQMlKiEeAB8B/z /D6nfxZ49Kh3xzHtoGguzoe0v495T1Ql6+9xN/Lhyg+EQIRMeoNwK4TJGeXwaj8c W40QOy9oIZlcszj/jALv4MH/Wwm7bWjnkc82pgm1qokhbGIh2bhdOxKbR1SLfxvt 5YXVbvppcn2gyi//tzU3cL9h3HSGr/yQMqpUEB9m/p13QJGYRCU1gCblO28IRnGw nbBF7pLimFPwU+tVL6zuodKtUS18s4DkQ4KJ0SJKJGj0/oQAV2qLlB5Blkf9rlvh pn5kLkyMWbqe9LVcvYD4vXEKY+Btnpz08zsjoZ6tDFdqR9HKMsVHPnRZfUqXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyYaS1xh0nbrLjZ+E4z/nuZhCQdowHwYDVR0j BBgwFoAUX3wMv1u4xGYcMqDgQ+UAVg2/RykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU5YWJiMWEtZDZjMC00NTRmLTg3MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1 QkI4QzQ2NjFDMzJBMEUwNDNFNTAwNTYwREJGNDcyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RjdDMENCRjVCQjhDNDY2MUMzMkEwRTA0M0U1MDA1NjBEQkY0 NzI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvNUY3QzBDQkY1QkI4QzQ2NjFDMzJBMEUwNDNFNTAw NTYwREJGNDcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeoHpPKXz0NamxAA3Jv4K9TflqCEPa5AnU2 u17JRjBP1W0a/sQWWUQRYwvuqxyuGvOK3rMmqBXrau6GQLbzf72x97DoZ03PPOt0 udrvVHFfRDwazIV0lr/AbcOZMvnQmyNh+YHpiIuiJAComNT67i9Qrkc1T0VVF8pR Y7gJxIABRDsPcZFiYNJWGQ9DGaLl+EwXcxi4QvSTLhedK9ckufL/AArgwkt8VnBe 3r+jNGr19SEFpnc0EESlBU+3wyEdI6vGIKY7Jr0GeqsnCByjlb5VGF3Tvvx5g7T3 dUgl2wmxTGBr65uVeEgF00gjmvg9clfElZes0wBunXlNkekjzl0= -----END CERTIFICATE-----Generated at Tue May 12 22:19:44 2026 by rpki-client