$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft File: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft (raw, json) Hash identifier: 2oHEO+QVtSFkRkSnjaLJOoWPVbW9cjE2qa5gpyVmO4s= Subject key identifier: 57:B9:CA:4B:CD:17:A0:FC:D2:B5:4F:01:6F:F7:81:FF:04:12:E8:59 Authority key identifier: 55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D Certificate issuer: /CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D Certificate serial: 06DD0614A2F831338835698C2A29C96C38B40134 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:37:27 +0000 Manifest this update: Tue 12 May 2026 17:32:27 +0000 Manifest next update: Wed 13 May 2026 20:14:27 +0000 Files and hashes: 1: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (hash: 8JHdIEqNbeJfT5OVw6EBi4k3e542O+VmKhuJlmXA+os=) 2: 5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl (hash: xUTrAt90uUU6qb043m6aAbMh0ISwDrMG50oReJb9ADY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:dd:06:14:a2:f8:31:33:88:35:69:8c:2a:29:c9:6c:38:b4:01:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5503FF5657012337EDF3A39CDA8A20EFCD9F725D Validity Not Before: May 12 17:32:27 2026 GMT Not After : May 13 20:14:27 2026 GMT Subject: CN=57B9CA4BCD17A0FCD2B54F016FF781FF0412E859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a3:60:29:fe:d2:62:0a:11:2e:3a:48:12:3f: 21:f1:a6:bb:a7:6f:ff:aa:97:58:c3:99:39:9c:28: 48:50:2e:46:59:39:4b:16:1c:66:87:42:6f:aa:44: ad:cf:a6:e4:c5:05:92:58:c8:1e:5f:54:de:f2:57: 1e:0f:46:da:ca:c9:7e:e2:eb:38:16:3d:b6:2e:eb: 18:b0:07:f4:db:82:d6:55:a0:be:3e:ff:19:4a:ff: 37:e9:4e:2c:4e:fd:2e:42:92:f3:4d:b5:ed:9a:4c: 8b:d9:9e:39:f4:f1:d0:4b:ef:25:a3:08:70:c6:b5: 50:38:71:5c:fe:17:d1:dd:2e:86:81:dc:60:d4:fc: 6e:62:ce:cb:5a:54:40:40:f7:6d:ef:6a:1d:6a:90: 58:7f:d9:03:ff:bf:04:4e:d4:93:36:c3:28:c8:e0: 21:72:c5:fd:07:11:1b:33:fe:4d:73:56:2d:47:bf: 62:b3:8a:84:71:97:b0:7a:bb:12:37:59:ee:ce:44: f2:bb:60:a8:6f:e2:96:e0:f4:52:8c:df:8d:be:7a: a9:2e:e1:49:2c:05:e8:f3:da:16:33:c4:41:3c:64: f6:0d:b7:9e:20:0e:a0:bc:5d:35:c5:15:1a:8c:80: 4b:ec:e6:39:2d:ff:fd:0b:14:60:ec:49:8a:7f:a4: 2d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B9:CA:4B:CD:17:A0:FC:D2:B5:4F:01:6F:F7:81:FF:04:12:E8:59 X509v3 Authority Key Identifier: keyid:55:03:FF:56:57:01:23:37:ED:F3:A3:9C:DA:8A:20:EF:CD:9F:72:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/5503FF5657012337EDF3A39CDA8A20EFCD9F725D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:12:4c:ed:51:c9:f8:4d:e5:e4:3e:c5:f8:7b:f5:bf:37:0f: 7e:27:d9:e1:02:57:71:62:b2:c5:6c:8b:e0:bf:73:40:40:80: 97:f8:29:87:e6:0e:bc:dc:a0:67:65:43:aa:bc:7f:52:23:ef: a4:c8:1a:e4:53:73:04:d5:18:94:b2:ee:5c:63:ca:34:15:32: 8b:55:c8:e8:62:2a:77:20:8d:65:b4:39:61:8c:04:6b:c3:a6: 29:88:06:1a:d3:3c:08:3e:df:18:22:99:5f:ae:6e:45:7f:69: 58:c2:25:70:86:0a:2c:0d:0f:70:ec:c2:5b:c7:cf:bc:e5:03: f3:92:3c:00:81:ff:a4:82:ce:d1:7e:a2:1a:92:c0:06:60:59: 02:6d:68:70:5c:7d:06:9e:06:24:0f:ce:32:c0:0d:ac:3b:c4: 5d:62:19:a6:ea:dc:89:13:28:50:6d:10:20:79:5e:06:f2:23: 92:92:5f:b2:a0:c7:d2:86:4e:d0:92:9c:9a:90:84:4d:85:3e: e9:86:fa:96:3c:4d:68:8b:30:19:80:dd:71:83:4d:49:57:9a: 94:ea:13:84:4f:a1:3c:e3:6f:e1:5d:34:d3:35:fe:0d:46:c0: c7:9e:45:94:9b:5a:e2:9c:2c:88:fc:29:13:8e:d7:0f:29:6f: 98:8a:68:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBt0GFKL4MTOINWmMKinJbDi0ATQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwM0ZGNTY1NzAxMjMzN0VERjNBMzlDREE4QTIwRUZD RDlGNzI1RDAeFw0yNjA1MTIxNzMyMjdaFw0yNjA1MTMyMDE0MjdaMDMxMTAvBgNV BAMTKDU3QjlDQTRCQ0QxN0EwRkNEMkI1NEYwMTZGRjc4MUZGMDQxMkU4NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKo2Ap/tJiChEuOkgSPyHxprun b/+ql1jDmTmcKEhQLkZZOUsWHGaHQm+qRK3PpuTFBZJYyB5fVN7yVx4PRtrKyX7i 6zgWPbYu6xiwB/TbgtZVoL4+/xlK/zfpTixO/S5CkvNNte2aTIvZnjn08dBL7yWj CHDGtVA4cVz+F9HdLoaB3GDU/G5izstaVEBA923vah1qkFh/2QP/vwRO1JM2wyjI 4CFyxf0HERsz/k1zVi1Hv2KzioRxl7B6uxI3We7ORPK7YKhv4pbg9FKM342+eqku 4UksBejz2hYzxEE8ZPYNt54gDqC8XTXFFRqMgEvs5jkt//0LFGDsSYp/pC2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV7nKS80XoPzStU8Bb/eB/wQS6FkwHwYDVR0j BBgwFoAUVQP/VlcBIzft86Oc2oog782fcl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhNWZmZGMtMTUxYS00YWFkLWEyYjctNDMyNjQ5ZGU2ZGJlLzAvNTUwM0ZGNTY1 NzAxMjMzN0VERjNBMzlDREE4QTIwRUZDRDlGNzI1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NTAzRkY1NjU3MDEyMzM3RURGM0EzOUNEQThBMjBFRkNEOUY3 MjVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhNWZmZGMtMTUxYS00YWFkLWEy YjctNDMyNjQ5ZGU2ZGJlLzAvNTUwM0ZGNTY1NzAxMjMzN0VERjNBMzlDREE4QTIw RUZDRDlGNzI1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0STO1RyfhN5eQ+xfh79b83D34n2eECV3Fi ssVsi+C/c0BAgJf4KYfmDrzcoGdlQ6q8f1Ij76TIGuRTcwTVGJSy7lxjyjQVMotV yOhiKncgjWW0OWGMBGvDpimIBhrTPAg+3xgimV+ubkV/aVjCJXCGCiwND3DswlvH z7zlA/OSPACB/6SCztF+ohqSwAZgWQJtaHBcfQaeBiQPzjLADaw7xF1iGabq3IkT KFBtECB5XgbyI5KSX7Kgx9KGTtCSnJqQhE2FPumG+pY8TWiLMBmA3XGDTUlXmpTq E4RPoTzjb+FdNNM1/g1GwMeeRZSbWuKcLIj8KROO1w8pb5iKaHo= -----END CERTIFICATE-----Generated at Tue May 12 22:52:20 2026 by rpki-client