$ rpki-client -vvf rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft File: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft (raw, json) Hash identifier: l8suZHzJowpXgbvP7JCwBJZWHA190G2YNysv57MJwhk= Subject key identifier: D2:B5:B4:CC:98:0B:11:28:35:16:94:AD:52:9C:F5:8F:44:DF:36:01 Authority key identifier: 5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA Certificate issuer: /CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA Certificate serial: 4E009477A4BA5789C2F41D1ECAB6A821685E6FAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:53:28 +0000 Manifest this update: Tue 12 May 2026 03:48:28 +0000 Manifest next update: Wed 13 May 2026 05:00:28 +0000 Files and hashes: 1: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: 59pE6Ft4WIHTXAP3g5lUlDtYPeQDKcESjhCmblAbyfo=) 2: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: SYK3QYwE1Bkhg2g4VRE2icwWvyuVDU6csoYcYgAZP3U=) 3: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: 1KOQAKv6O99pd7ry74vlSf/BC5MqWkjxGtXhI66S9EE=) 4: 5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl (hash: 9EUiSsP6vbDSDAP2RsYRi5wRfu5B1tEmRv34CHczEnw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:00:94:77:a4:ba:57:89:c2:f4:1d:1e:ca:b6:a8:21:68:5e:6f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA Validity Not Before: May 12 03:48:28 2026 GMT Not After : May 13 05:00:28 2026 GMT Subject: CN=D2B5B4CC980B1128351694AD529CF58F44DF3601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0c:7e:b2:10:52:68:75:a4:79:94:fb:de:54: 15:f3:c5:7e:4e:59:1c:90:16:55:2b:88:74:fe:6f: 2d:c6:45:e8:49:0b:99:8c:f2:a7:82:bc:2d:11:f0: 9b:34:9c:f0:a6:13:d2:1a:92:d9:b4:96:5c:f1:7b: 73:0f:38:e5:55:34:ce:bb:79:a2:9e:b3:48:19:bd: ec:b0:b5:da:bf:07:49:18:b7:48:dd:4e:22:35:c5: 4e:26:a6:3a:e0:f0:8b:51:0b:20:15:77:e2:f7:43: 71:af:d2:b2:12:3d:12:43:6c:bc:79:28:91:1c:a4: b4:9b:71:60:6f:21:d0:5c:3e:9b:9e:05:30:98:b4: c6:70:1f:0d:ac:7e:77:e5:a7:aa:a5:2d:7f:79:5f: ef:b5:e3:ae:72:47:8a:dd:89:38:df:0b:ba:3e:ae: b7:e2:c6:c1:cf:90:7f:d4:1b:bf:ce:83:d4:86:ca: f4:07:51:b9:8c:5a:d2:9a:d0:45:6a:71:e1:c3:20: 55:b3:34:53:63:4d:9b:4d:99:82:a9:03:bf:f1:9a: 15:69:9b:ad:91:21:26:1f:3a:59:b7:54:36:ad:32: 16:30:cf:ab:50:b9:74:bf:a4:74:14:3d:0b:51:4b: c0:5c:76:93:e8:89:87:fc:e4:5c:bf:89:99:32:99: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B5:B4:CC:98:0B:11:28:35:16:94:AD:52:9C:F5:8F:44:DF:36:01 X509v3 Authority Key Identifier: keyid:5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:46:12:26:63:b0:d6:17:14:17:00:1d:9a:8c:4e:8e:d0:96: 71:72:ca:80:6d:84:39:69:c7:88:8a:76:dd:c1:4b:03:a9:79: d5:d9:7f:b4:03:6e:0b:fc:8e:9f:41:21:ed:26:06:1d:6a:09: e4:17:54:38:53:ec:d0:0f:6a:1a:39:e8:ff:c3:30:8e:34:65: 90:c1:74:8b:8d:99:ad:0f:e8:13:90:e6:62:97:ad:14:91:7b: d4:44:be:81:e8:3d:1c:99:9b:15:d7:98:d4:98:78:bf:df:55: 82:a1:11:0d:6d:65:17:44:a0:f8:ea:c9:3f:5c:49:92:34:de: bd:8f:d8:11:74:1d:d7:1d:db:03:94:dd:58:82:0a:b9:1d:23: 8d:ac:36:43:88:ef:3b:2a:6e:7d:15:ea:80:71:3a:8c:1b:db: 40:4a:85:a6:75:69:67:5f:f8:fa:ed:0e:27:77:7c:61:11:89: 6f:f4:39:8f:7a:6d:f9:b4:eb:3c:37:42:41:61:f7:30:07:06: 1f:d7:58:f1:87:8f:c8:bc:87:aa:8f:14:65:2b:72:24:93:3a: 7f:eb:d4:e7:04:9d:de:80:4b:86:eb:3f:f5:0c:2c:d6:c1:aa: fe:c5:66:55:1d:d1:a2:6d:08:0d:2f:93:70:fc:ee:a6:d0:fe: 5a:bc:b0:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgCUd6S6V4nC9B0eyraoIWheb6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxRjhCODFCQTk1ODQ4RkE1MTg5NkUwOTVEQjdBNDI5 MjA5N0VGQTAeFw0yNjA1MTIwMzQ4MjhaFw0yNjA1MTMwNTAwMjhaMDMxMTAvBgNV BAMTKEQyQjVCNENDOTgwQjExMjgzNTE2OTRBRDUyOUNGNThGNDRERjM2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxDH6yEFJodaR5lPveVBXzxX5O WRyQFlUriHT+by3GRehJC5mM8qeCvC0R8Js0nPCmE9Iaktm0llzxe3MPOOVVNM67 eaKes0gZveywtdq/B0kYt0jdTiI1xU4mpjrg8ItRCyAVd+L3Q3Gv0rISPRJDbLx5 KJEcpLSbcWBvIdBcPpueBTCYtMZwHw2sfnflp6qlLX95X++1465yR4rdiTjfC7o+ rrfixsHPkH/UG7/Og9SGyvQHUbmMWtKa0EVqceHDIFWzNFNjTZtNmYKpA7/xmhVp m62RISYfOlm3VDatMhYwz6tQuXS/pHQUPQtRS8BcdpPoiYf85Fy/iZkymbvLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0rW0zJgLESg1FpStUpz1j0TfNgEwHwYDVR0j BBgwFoAUXB+LgbqVhI+lGJbgldt6QpIJfvowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTRlMWFjN2MtOTA0ZC00OTNmLWJhNWUtNWUwODM3ZGNiZDI5LzAvNUMxRjhCODFC QTk1ODQ4RkE1MTg5NkUwOTVEQjdBNDI5MjA5N0VGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QzFGOEI4MUJBOTU4NDhGQTUxODk2RTA5NURCN0E0MjkyMDk3 RUZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvNUMxRjhCODFCQTk1ODQ4RkE1MTg5NkUwOTVEQjdB NDI5MjA5N0VGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBGEiZjsNYXFBcAHZqMTo7QlnFyyoBthDlp x4iKdt3BSwOpedXZf7QDbgv8jp9BIe0mBh1qCeQXVDhT7NAPaho56P/DMI40ZZDB dIuNma0P6BOQ5mKXrRSRe9REvoHoPRyZmxXXmNSYeL/fVYKhEQ1tZRdEoPjqyT9c SZI03r2P2BF0Hdcd2wOU3ViCCrkdI42sNkOI7zsqbn0V6oBxOowb20BKhaZ1aWdf +PrtDid3fGERiW/0OY96bfm06zw3QkFh9zAHBh/XWPGHj8i8h6qPFGUrciSTOn/r 1OcEnd6AS4brP/UMLNbBqv7FZlUd0aJtCA0vk3D87qbQ/lq8sFA= -----END CERTIFICATE-----Generated at Tue May 12 22:19:43 2026 by rpki-client