$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft File: 5340DB769DA0690FFA8A696A6047EDC148F1991A.mft (raw, json) Hash identifier: AnosyX4ZlbOmtha+3D5eBn+LRDoZBnwn4qFX5Iz3pX4= Subject key identifier: B4:1F:FF:21:DF:F2:07:44:90:A4:31:3A:80:8E:CC:C7:88:85:EA:47 Authority key identifier: 53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A Certificate issuer: /CN=5340DB769DA0690FFA8A696A6047EDC148F1991A Certificate serial: 5A63C5D8B6DF349260292DED6B8CCD9ABE3249AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:29:05 +0000 Manifest this update: Tue 12 May 2026 21:24:05 +0000 Manifest next update: Wed 13 May 2026 23:06:05 +0000 Files and hashes: 1: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (hash: ADXGlMGf5Kb+tXCSNEvEFMbQ1O+wDlMr9doBES2hSe0=) 2: 5340DB769DA0690FFA8A696A6047EDC148F1991A.crl (hash: RhNbokRD4TwfaiLieCSxXvH3ATWnXQlzlZQVsqKzcFw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:63:c5:d8:b6:df:34:92:60:29:2d:ed:6b:8c:cd:9a:be:32:49:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5340DB769DA0690FFA8A696A6047EDC148F1991A Validity Not Before: May 12 21:24:05 2026 GMT Not After : May 13 23:06:05 2026 GMT Subject: CN=B41FFF21DFF2074490A4313A808ECCC78885EA47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:37:98:9e:6c:b7:75:d0:1b:78:92:e2:8b: 89:e3:c6:ca:1d:ee:81:88:a8:77:d8:2e:db:11:d8: cf:8c:b2:5e:14:b8:40:b6:4b:f3:b7:98:9e:7b:1a: cf:9c:e1:2c:db:0a:2b:0f:b7:94:6a:90:6d:8b:c0: 91:87:f0:95:d5:49:e3:84:f2:f9:05:4c:54:28:1b: 0e:5a:b3:60:42:b3:2a:e1:bf:51:6d:03:6c:14:0d: 3b:fd:e3:92:dd:fb:93:77:0a:4e:f4:3f:e8:6a:89: 82:3e:70:fa:32:ff:16:9a:e2:dc:85:a4:67:99:5c: 46:5a:95:c7:87:3a:07:8f:58:7a:f9:e7:27:be:e1: a8:be:d6:af:33:1e:d3:5a:02:11:15:ce:de:f1:6b: d4:c8:18:ca:11:61:2b:28:b7:c5:05:74:2d:06:bb: 7c:0c:a2:6d:45:bf:d9:ee:bd:d8:38:83:7a:ad:45: 3b:c3:aa:8c:64:a1:6a:c4:6c:07:ca:fc:1e:97:0b: 45:e4:06:08:8f:91:75:60:70:46:df:12:c1:4a:ca: 5c:bb:bf:44:65:ca:17:5b:6a:c0:06:91:90:17:51: 1a:c1:5f:a2:96:5d:ae:d6:f6:56:a9:78:9d:3b:79: 9f:85:f4:6c:3c:75:ef:10:f8:7a:4e:3b:a7:ff:5f: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1F:FF:21:DF:F2:07:44:90:A4:31:3A:80:8E:CC:C7:88:85:EA:47 X509v3 Authority Key Identifier: keyid:53:40:DB:76:9D:A0:69:0F:FA:8A:69:6A:60:47:ED:C1:48:F1:99:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5340DB769DA0690FFA8A696A6047EDC148F1991A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/5340DB769DA0690FFA8A696A6047EDC148F1991A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:39:fe:17:30:ea:31:9d:a5:e6:50:e3:0b:f7:d4:e0:b8:cd: 40:d5:10:fe:72:4f:c4:07:fa:59:6d:eb:78:ad:39:8b:44:b8: 4a:a3:17:d4:61:fc:d9:53:75:02:ae:c0:d2:42:64:c3:c7:c5: e4:00:30:95:93:94:d7:9d:e7:a8:b4:78:8a:b5:50:9c:6a:8d: 36:14:27:af:41:9e:06:5c:1e:a6:df:a4:97:6a:ef:99:9b:6e: 69:92:c0:6d:c3:40:df:e4:41:73:14:92:23:ab:e2:24:4e:18: e2:05:30:6e:27:cf:af:ad:31:5c:94:07:04:e4:f3:5f:23:c3: d7:5b:68:1d:20:e1:f7:37:8d:77:ae:64:1c:4d:b9:c4:7c:e7: 7f:96:42:b8:90:22:b8:d6:13:25:0a:62:80:42:eb:a2:61:e3: e4:47:e2:23:66:b0:8d:e9:1e:31:54:d4:3b:0e:3a:d6:ee:30: 97:0d:ec:ff:c7:81:02:9c:01:4d:41:a0:52:b2:c9:37:b6:31: ad:7e:26:88:5d:e6:df:c5:6a:13:62:88:08:88:2f:30:50:28: bf:fa:54:a9:b8:f9:6e:6c:fb:62:0a:6d:a6:61:b6:01:6d:51: 66:15:3a:39:d7:97:5f:b9:27:85:c3:81:0e:cd:57:c0:fc:0d: 6c:c6:8e:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmPF2LbfNJJgKS3ta4zNmr4ySa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM0MERCNzY5REEwNjkwRkZBOEE2OTZBNjA0N0VEQzE0 OEYxOTkxQTAeFw0yNjA1MTIyMTI0MDVaFw0yNjA1MTMyMzA2MDVaMDMxMTAvBgNV BAMTKEI0MUZGRjIxREZGMjA3NDQ5MEE0MzEzQTgwOEVDQ0M3ODg4NUVBNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeWTeYnmy3ddAbeJLii4njxsod 7oGIqHfYLtsR2M+Msl4UuEC2S/O3mJ57Gs+c4SzbCisPt5RqkG2LwJGH8JXVSeOE 8vkFTFQoGw5as2BCsyrhv1FtA2wUDTv945Ld+5N3Ck70P+hqiYI+cPoy/xaa4tyF pGeZXEZalceHOgePWHr55ye+4ai+1q8zHtNaAhEVzt7xa9TIGMoRYSsot8UFdC0G u3wMom1Fv9nuvdg4g3qtRTvDqoxkoWrEbAfK/B6XC0XkBgiPkXVgcEbfEsFKyly7 v0RlyhdbasAGkZAXURrBX6KWXa7W9lapeJ07eZ+F9Gw8de8Q+HpOO6f/X6OBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtB//Id/yB0SQpDE6gI7Mx4iF6kcwHwYDVR0j BBgwFoAUU0Dbdp2gaQ/6imlqYEftwUjxmRowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM3MTQxMjItODYwYy00MTRlLWE2N2EtNjg0YTFiZTk2MGRlLzAvNTM0MERCNzY5 REEwNjkwRkZBOEE2OTZBNjA0N0VEQzE0OEYxOTkxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzQwREI3NjlEQTA2OTBGRkE4QTY5NkE2MDQ3RURDMTQ4RjE5 OTFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM3MTQxMjItODYwYy00MTRlLWE2 N2EtNjg0YTFiZTk2MGRlLzAvNTM0MERCNzY5REEwNjkwRkZBOEE2OTZBNjA0N0VE QzE0OEYxOTkxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF45/hcw6jGdpeZQ4wv31OC4zUDVEP5yT8QH +llt63itOYtEuEqjF9Rh/NlTdQKuwNJCZMPHxeQAMJWTlNed56i0eIq1UJxqjTYU J69BngZcHqbfpJdq75mbbmmSwG3DQN/kQXMUkiOr4iROGOIFMG4nz6+tMVyUBwTk 818jw9dbaB0g4fc3jXeuZBxNucR853+WQriQIrjWEyUKYoBC66Jh4+RH4iNmsI3p HjFU1DsOOtbuMJcN7P/HgQKcAU1BoFKyyTe2Ma1+Johd5t/FahNiiAiILzBQKL/6 VKm4+W5s+2IKbaZhtgFtUWYVOjnXl1+5J4XDgQ7NV8D8DWzGjq0= -----END CERTIFICATE-----Generated at Wed May 13 02:40:18 2026 by rpki-client