$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft File: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft (raw, json) Hash identifier: VfaAC1xZO8ZCNHkpOWRMp0Y0ecjz7D4R4dUALhOKh/w= Subject key identifier: 88:AB:4F:9D:3B:F6:8F:E9:DA:F9:8F:10:22:83:DB:89:F2:36:3E:51 Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 Certificate issuer: /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Certificate serial: 64A649B0999FC5E58E434A1F1D6CD735C8C97A8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:46:26 +0000 Manifest this update: Tue 12 May 2026 16:41:26 +0000 Manifest next update: Wed 13 May 2026 20:07:26 +0000 Files and hashes: 1: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: sW+l8TDeWzgFji1PeDbQ2pWWxA4Q2fxlWjumQ/6eJhY=) 2: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: bF7MXIfp5h8uckMq7JCvq4uvQ9qMJ5YCdRjxIwunYqI=) 3: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: LT7RL4AshZZWaOQ5M4cXziGumEcUQNnqOVToVNyckMU=) 4: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: QFfNhq0siSwOs18xtBIQVVrABzIP0gTxhbpkKx5UaAs=) 5: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: W77EgJV2LrTum+AXobDiJMY0VCB5QZlN1pW9AzTxaMA=) 6: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: nEP4w2fSSO/JQDFjA5Ly4wgPOtkX8Po6PEn4YaYfsXM=) 7: 5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl (hash: XncDNVBEM11MNDFQqLtXkRQmsI9IE9/6ID/kB/iZZ+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a6:49:b0:99:9f:c5:e5:8e:43:4a:1f:1d:6c:d7:35:c8:c9:7a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10 Validity Not Before: May 12 16:41:26 2026 GMT Not After : May 13 20:07:26 2026 GMT Subject: CN=88AB4F9D3BF68FE9DAF98F102283DB89F2363E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:0f:f3:ce:ab:e4:d4:cf:10:ce:76:50:b4: 60:96:55:45:51:ef:86:8f:42:e7:a2:cd:87:31:36: fb:ba:eb:bc:ad:f8:16:8c:4f:4f:2a:66:2e:ee:9f: 9e:e6:20:88:47:1c:e8:b5:31:08:3c:66:85:f9:30: ad:25:f8:85:dc:aa:2c:95:27:f7:2c:c3:c6:b0:df: 26:21:2b:56:ab:53:78:f0:e7:7a:a6:32:fa:d7:89: 88:b7:e6:08:43:30:05:f3:28:f0:d5:41:57:fe:16: 01:d5:33:8b:c0:6b:2a:5b:79:6e:9b:45:93:d1:ae: 45:82:83:d0:c0:4f:e3:38:1d:eb:ea:20:74:06:a7: b6:67:5a:82:9b:29:53:93:21:f6:dd:2a:64:37:ed: 3f:d0:b2:74:47:32:04:3f:5f:9d:a8:80:d8:bf:f0: 4e:51:fd:a0:57:37:2a:59:e8:0d:4a:3e:03:58:18: 08:16:0b:8e:ca:dd:35:bf:7c:b1:3e:19:77:d3:cf: e0:b1:aa:7a:cf:b1:88:13:ac:eb:46:b9:20:f5:40: 06:97:6f:0b:c2:8d:b4:a3:70:22:a2:fb:d4:e2:7c: 3e:7a:6f:e7:21:a1:a0:0f:7c:1c:4a:94:ef:a1:00: 2a:09:74:ae:0c:9a:89:4e:fa:67:c5:73:b8:49:47: 28:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AB:4F:9D:3B:F6:8F:E9:DA:F9:8F:10:22:83:DB:89:F2:36:3E:51 X509v3 Authority Key Identifier: keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:84:a3:8b:0b:d2:1a:f3:13:71:a8:cb:03:db:c3:a9:37:07: 8d:0d:21:97:e0:16:1d:b8:44:7c:04:48:28:83:5a:c1:f5:46: ff:a1:4b:2a:76:43:dc:52:ac:d4:7f:b0:e8:40:cf:4a:00:71: 46:e4:f3:f9:d7:8c:8f:ac:eb:06:23:1d:a7:95:03:77:35:7b: 58:64:c7:80:99:8a:0b:34:d2:df:a7:6e:f4:ff:a1:68:f2:26: cf:68:74:c6:85:87:a8:ae:5d:74:d7:c5:5d:11:cd:43:3a:19: 06:28:0f:a7:50:3a:6f:14:79:0d:7f:7b:a6:99:60:a6:93:ef: 7d:c0:2b:b2:af:be:54:01:ff:fe:22:53:26:5c:f0:8f:48:39: ec:22:2a:4e:0b:9f:c2:e6:92:11:70:4f:11:1d:26:af:51:61: 9c:07:45:90:1f:f3:72:5e:76:cc:04:83:2a:98:ee:48:ca:20: 14:87:67:33:5b:f2:6f:15:71:70:1a:61:93:a5:9c:95:c8:88: 79:ce:5f:d1:c7:23:d2:e6:ba:5f:bb:c8:04:f5:61:67:1b:4f: f4:b9:f2:0f:53:8a:a4:5b:80:23:74:9a:1d:69:e4:33:f5:02: 2d:c1:33:0b:dc:28:e2:4d:f7:89:8e:85:16:ee:8c:13:4e:5e: f5:36:61:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZKZJsJmfxeWOQ0ofHWzXNcjJeo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlGMURD MUVBM0YxMDAeFw0yNjA1MTIxNjQxMjZaFw0yNjA1MTMyMDA3MjZaMDMxMTAvBgNV BAMTKDg4QUI0RjlEM0JGNjhGRTlEQUY5OEYxMDIyODNEQjg5RjIzNjNFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ZA/zzqvk1M8QznZQtGCWVUVR 74aPQueizYcxNvu667yt+BaMT08qZi7un57mIIhHHOi1MQg8ZoX5MK0l+IXcqiyV J/csw8aw3yYhK1arU3jw53qmMvrXiYi35ghDMAXzKPDVQVf+FgHVM4vAaypbeW6b RZPRrkWCg9DAT+M4HevqIHQGp7ZnWoKbKVOTIfbdKmQ37T/QsnRHMgQ/X52ogNi/ 8E5R/aBXNypZ6A1KPgNYGAgWC47K3TW/fLE+GXfTz+CxqnrPsYgTrOtGuSD1QAaX bwvCjbSjcCKi+9TifD56b+choaAPfBxKlO+hACoJdK4MmolO+mfFc7hJRyiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiKtPnTv2j+na+Y8QIoPbifI2PlEwHwYDVR0j BBgwFoAUXRO/hLjZGooayAhiJ9WfHcHqPxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjFhNzdhZGQtYTQ5YS00YzhmLWE3MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRC OEQ5MUE4QTFBQzgwODYyMjdENTlGMURDMUVBM0YxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDEzQkY4NEI4RDkxQThBMUFDODA4NjIyN0Q1OUYxREMxRUEz RjEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3 MzUtZWY5NmMzM2FiMjlmLzAvNUQxM0JGODRCOEQ5MUE4QTFBQzgwODYyMjdENTlG MURDMUVBM0YxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyEo4sL0hrzE3GoywPbw6k3B40NIZfgFh24 RHwESCiDWsH1Rv+hSyp2Q9xSrNR/sOhAz0oAcUbk8/nXjI+s6wYjHaeVA3c1e1hk x4CZigs00t+nbvT/oWjyJs9odMaFh6iuXXTXxV0RzUM6GQYoD6dQOm8UeQ1/e6aZ YKaT733AK7KvvlQB//4iUyZc8I9IOewiKk4Ln8LmkhFwTxEdJq9RYZwHRZAf83Je dswEgyqY7kjKIBSHZzNb8m8VcXAaYZOlnJXIiHnOX9HHI9Lmul+7yAT1YWcbT/S5 8g9TiqRbgCN0mh1p5DP1Ai3BMwvcKOJN94mOhRbujBNOXvU2Ydc= -----END CERTIFICATE-----Generated at Tue May 12 22:20:02 2026 by rpki-client