$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft File: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft (raw, json) Hash identifier: 8bsm6an38j2m02hzZn0CZru9pmMetLfrj8NHF9pAh2o= Subject key identifier: 43:97:57:60:B2:AC:54:C7:43:CD:96:5B:43:64:97:DB:10:32:99:E8 Authority key identifier: 5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 Certificate issuer: /CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Certificate serial: 1A02F8645ACC2C91A8FC12297BE3FE5F12CDC1F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:32:44 +0000 Manifest this update: Tue 12 May 2026 03:27:44 +0000 Manifest next update: Wed 13 May 2026 07:10:44 +0000 Files and hashes: 1: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: EBT29i1PsqgcTeXQev4zG3xPyCKZ73fS930Tr0addJQ=) 2: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: UIelaNmfU5flXZDJq0nsLusBExENtoFESIIlQRjCnSM=) 3: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: WS8lomwMTaspR/6nCKhD2CzQyU48KkvD9JTWAS0vGqs=) 4: 5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl (hash: MYubl1zzu0DvBGsUN6pnpiRS+csDOzJbQTeKPzMi77A=) 5: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 7DiSKTCfGBXxBlqPDk9dxpdFDrZ/cVVBzOWF8p4BC1M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:02:f8:64:5a:cc:2c:91:a8:fc:12:29:7b:e3:fe:5f:12:cd:c1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C0A4962486392EE3F998AF6D4FF7039A83FF3 Validity Not Before: May 12 03:27:44 2026 GMT Not After : May 13 07:10:44 2026 GMT Subject: CN=43975760B2AC54C743CD965B436497DB103299E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:1c:e3:c5:c2:4f:83:9f:46:6e:9b:c5:f3: d3:64:32:d9:a7:92:21:b4:aa:c7:52:cd:a5:7d:43: 22:ae:1e:d2:bb:3e:d5:82:9d:f5:0a:0f:33:00:74: 90:06:09:79:27:fa:3b:8c:34:75:47:67:bb:b2:6c: 66:09:07:4f:c4:26:6a:82:b9:72:3f:c2:5f:7f:58: fe:17:90:00:f8:ee:e5:0f:b8:24:cb:39:4f:cb:98: 28:2e:16:0f:24:2a:f2:b0:9b:0e:97:d5:3a:2f:a8: 78:42:1e:4d:8d:e0:9b:cc:64:0d:f4:71:64:41:20: 05:23:64:9d:4a:ee:30:65:1d:f8:a0:f0:72:c8:73: 33:8e:f2:4c:ac:63:53:a1:5e:56:b8:1f:a7:56:1e: e4:4b:8e:98:76:93:ac:f7:d0:6e:a9:1b:2f:7f:a4: 3a:ac:77:ef:46:ec:e0:6a:d6:46:99:f1:f6:63:7c: 92:ee:48:86:c5:fa:15:1a:eb:6a:9a:6c:26:91:05: 84:77:67:d3:ca:7c:9d:31:28:4c:d4:15:2d:f3:4b: 5c:28:aa:49:aa:95:a6:bf:e9:5d:1a:31:7e:ea:09: c9:97:9e:bf:3c:d5:e6:e4:f8:2c:d1:bf:d6:84:b8: 11:00:bd:5b:b2:c2:45:4b:fe:cf:98:46:8a:78:1b: 28:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:97:57:60:B2:AC:54:C7:43:CD:96:5B:43:64:97:DB:10:32:99:E8 X509v3 Authority Key Identifier: keyid:5A:1C:0A:49:62:48:63:92:EE:3F:99:8A:F6:D4:FF:70:39:A8:3F:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/5A1C0A4962486392EE3F998AF6D4FF7039A83FF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f5:12:a0:91:32:ca:c6:b7:3c:f3:4c:98:fe:92:80:ca:f2: 52:37:79:20:cf:77:8b:dd:4e:ed:12:78:9a:81:db:c8:15:49: fa:a8:a6:47:fd:ea:9e:1d:f9:23:9a:c3:b8:07:ff:56:84:18: b5:49:6f:53:86:03:46:43:31:ca:b4:7d:b1:6a:e8:dd:0a:39: 15:ad:dc:d1:2c:4d:a1:d3:0a:c2:60:77:9d:b3:ce:46:eb:71: dc:bc:07:77:d7:82:ba:16:34:1e:10:db:6c:8f:aa:1a:32:7e: e6:94:1f:0f:82:19:4a:fc:d8:a4:de:88:01:b0:ad:d3:b2:04: c4:a4:b1:70:3c:45:f8:56:95:34:66:37:84:c6:66:e5:be:8e: 0d:5f:40:60:e5:bb:20:de:68:c4:7c:9e:b4:bb:c0:8f:7b:e6: 44:0b:0b:ed:ce:87:c4:6d:50:78:8f:8d:ef:9d:5e:70:89:db: 6b:ff:20:0b:a8:f8:f4:71:2d:33:8b:31:63:45:df:59:40:62: 6c:10:4b:08:e8:12:0d:f2:ec:0a:bd:41:65:67:c1:09:57:d9: f1:23:b1:0b:cd:42:63:af:da:e9:50:27:f7:f0:bc:0e:cc:21: f1:ac:fa:f3:01:a5:90:10:85:25:c4:3c:7d:df:ef:9d:d8:b8: e5:b3:78:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgL4ZFrMLJGo/BIpe+P+XxLNwfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAz OUE4M0ZGMzAeFw0yNjA1MTIwMzI3NDRaFw0yNjA1MTMwNzEwNDRaMDMxMTAvBgNV BAMTKDQzOTc1NzYwQjJBQzU0Qzc0M0NEOTY1QjQzNjQ5N0RCMTAzMjk5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0qxzjxcJPg59GbpvF89NkMtmn kiG0qsdSzaV9QyKuHtK7PtWCnfUKDzMAdJAGCXkn+juMNHVHZ7uybGYJB0/EJmqC uXI/wl9/WP4XkAD47uUPuCTLOU/LmCguFg8kKvKwmw6X1TovqHhCHk2N4JvMZA30 cWRBIAUjZJ1K7jBlHfig8HLIczOO8kysY1OhXla4H6dWHuRLjph2k6z30G6pGy9/ pDqsd+9G7OBq1kaZ8fZjfJLuSIbF+hUa62qabCaRBYR3Z9PKfJ0xKEzUFS3zS1wo qkmqlaa/6V0aMX7qCcmXnr881ebk+CzRv9aEuBEAvVuywkVL/s+YRop4GyiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ5dXYLKsVMdDzZZbQ2SX2xAymegwHwYDVR0j BBgwFoAUWhwKSWJIY5LuP5mK9tT/cDmoP/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJmMjg4NzktNDg0NC00MmRlLWIyZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2 MjQ4NjM5MkVFM0Y5OThBRjZENEZGNzAzOUE4M0ZGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QTFDMEE0OTYyNDg2MzkyRUUzRjk5OEFGNkQ0RkY3MDM5QTgz RkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvNUExQzBBNDk2MjQ4NjM5MkVFM0Y5OThBRjZENEZG NzAzOUE4M0ZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACH1EqCRMsrGtzzzTJj+koDK8lI3eSDPd4vd Tu0SeJqB28gVSfqopkf96p4d+SOaw7gH/1aEGLVJb1OGA0ZDMcq0fbFq6N0KORWt 3NEsTaHTCsJgd52zzkbrcdy8B3fXgroWNB4Q22yPqhoyfuaUHw+CGUr82KTeiAGw rdOyBMSksXA8RfhWlTRmN4TGZuW+jg1fQGDluyDeaMR8nrS7wI975kQLC+3Oh8Rt UHiPje+dXnCJ22v/IAuo+PRxLTOLMWNF31lAYmwQSwjoEg3y7Aq9QWVnwQlX2fEj sQvNQmOv2ulQJ/fwvA7MIfGs+vMBpZAQhSXEPH3f753YuOWzeKs= -----END CERTIFICATE-----Generated at Tue May 12 22:19:39 2026 by rpki-client