$ rpki-client -vvf rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft File: 5BD70FF0C393471CFAF795433474B327BD4832F9.mft (raw, json) Hash identifier: MouKHygLBOe4aWjKeJhr8Ohaca/WCE0JlbZNNZzuC/U= Subject key identifier: 9F:13:94:EB:0F:FE:64:C6:4E:01:99:C2:B5:2D:07:24:02:83:ED:87 Authority key identifier: 5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 Certificate issuer: /CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Certificate serial: 1110C60DA314D996FC94A241723F9E39CCC2FC07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:25:44 +0000 Manifest this update: Tue 12 May 2026 22:20:44 +0000 Manifest next update: Thu 14 May 2026 00:21:44 +0000 Files and hashes: 1: 5BD70FF0C393471CFAF795433474B327BD4832F9.crl (hash: ojeB41lhPsQhoeM+IBqr8spUC+y6gJaz2/U35hkvvQs=) 2: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: kDdkImc9WCIWpXnaeyzXyBkOibkDgoSjiG8qhXynUZA=) 3: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: tdzqlaQf0fF4d+ZUvSQhNIWl0HYGOdoxh6aHUWDnZjg=) 4: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: VRIdIq5putn/ECgQ5btezrubt1dqb54ZcZ8apLF1yIY=) 5: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: bBQLsVkx2CpNTLhQIb39ezRJZR+3VFuLJFWKGpnOARA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:10:c6:0d:a3:14:d9:96:fc:94:a2:41:72:3f:9e:39:cc:c2:fc:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD70FF0C393471CFAF795433474B327BD4832F9 Validity Not Before: May 12 22:20:44 2026 GMT Not After : May 14 00:21:44 2026 GMT Subject: CN=9F1394EB0FFE64C64E0199C2B52D07240283ED87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:c2:b1:54:8d:42:bd:ef:cb:05:88:0b:fa: 0e:16:22:57:f5:da:4a:9c:bb:14:5c:7b:a9:af:41: 51:e6:5f:19:76:a3:23:13:9c:18:81:8c:9c:b7:4c: 05:80:b6:c1:4b:44:e6:da:ba:d0:3c:d9:83:31:4b: 10:77:ca:3f:56:47:7d:fd:a8:d7:f2:14:fe:57:5f: d9:12:be:59:e1:bb:f5:b7:d8:11:c1:e4:4e:96:0d: 3f:bf:36:22:57:d0:0a:4e:1f:6a:b2:0f:d2:36:78: 6b:a0:95:2a:1b:f6:67:ff:08:04:35:69:b6:a4:7b: 51:65:51:65:b8:e9:8f:c7:58:de:fc:9b:3d:3d:c3: 8b:67:7a:ac:ba:72:1c:26:de:2f:ff:b9:81:ce:76: 33:75:e0:41:0f:8b:df:4a:73:1b:ba:55:40:d9:4a: e4:e4:33:65:51:d8:7e:58:e7:02:87:ac:47:d5:b7: b1:14:d5:31:33:fa:48:81:ef:ce:ec:15:1d:8c:90: ec:34:ae:15:98:e1:08:4a:2e:2d:98:2f:e7:97:87: de:c3:9a:bf:1c:6a:eb:f3:90:30:89:b1:80:13:79: c9:18:9c:28:64:d1:2f:cc:ab:00:d6:02:54:ab:60: 77:b9:f2:88:ac:f5:97:6e:55:2a:d9:7e:cb:37:8c: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:13:94:EB:0F:FE:64:C6:4E:01:99:C2:B5:2D:07:24:02:83:ED:87 X509v3 Authority Key Identifier: keyid:5B:D7:0F:F0:C3:93:47:1C:FA:F7:95:43:34:74:B3:27:BD:48:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5BD70FF0C393471CFAF795433474B327BD4832F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/5BD70FF0C393471CFAF795433474B327BD4832F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d2:95:fc:12:85:31:ac:85:e0:0c:94:0e:d9:57:5a:6f:c5: c2:65:9b:ae:e2:1f:5c:f4:2d:9a:39:4a:14:b0:6e:be:56:3f: 89:1e:bc:fb:55:b0:22:4e:ad:4d:8a:a8:31:62:ce:fa:9f:62: 73:fd:b4:d7:c2:2c:a7:07:23:68:fe:2a:c2:4e:fb:0f:74:54: 3b:66:b4:bb:e0:91:0b:07:98:f9:7c:82:f2:9b:e0:f2:6c:4e: 8e:48:f5:76:94:28:10:12:68:26:b6:4a:52:56:85:58:85:32: 1b:ff:55:e3:18:1f:19:66:ba:41:98:98:7c:b4:36:87:70:fb: 66:8d:08:64:12:f3:66:b1:4b:01:27:c8:e3:a7:43:e0:da:cd: 4d:31:14:2b:1d:6e:48:44:48:a4:bb:1f:85:d9:6c:22:c9:7c: 0b:31:62:62:00:45:1d:03:45:f3:f8:d3:61:2a:95:c0:75:a5: ac:90:71:d2:44:04:d5:1c:c6:81:00:dd:0c:9e:80:fd:d5:04: d4:21:52:85:7e:51:32:1a:37:e8:00:0c:29:4b:60:09:ff:47: 3a:49:10:51:d5:fd:4d:5a:2c:8c:fb:b9:39:c7:cd:63:83:28: 37:2b:d3:08:17:16:e6:9b:6c:65:4c:b9:e0:08:44:f5:4a:cb: 60:72:68:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERDGDaMU2Zb8lKJBcj+eOczC/AcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdC RDQ4MzJGOTAeFw0yNjA1MTIyMjIwNDRaFw0yNjA1MTQwMDIxNDRaMDMxMTAvBgNV BAMTKDlGMTM5NEVCMEZGRTY0QzY0RTAxOTlDMkI1MkQwNzI0MDI4M0VEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVv8KxVI1Cve/LBYgL+g4WIlf1 2kqcuxRce6mvQVHmXxl2oyMTnBiBjJy3TAWAtsFLRObautA82YMxSxB3yj9WR339 qNfyFP5XX9kSvlnhu/W32BHB5E6WDT+/NiJX0ApOH2qyD9I2eGuglSob9mf/CAQ1 abake1FlUWW46Y/HWN78mz09w4tneqy6chwm3i//uYHOdjN14EEPi99Kcxu6VUDZ SuTkM2VR2H5Y5wKHrEfVt7EU1TEz+kiB787sFR2MkOw0rhWY4QhKLi2YL+eXh97D mr8cauvzkDCJsYATeckYnChk0S/MqwDWAlSrYHe58ois9ZduVSrZfss3jNwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnxOU6w/+ZMZOAZnCtS0HJAKD7YcwHwYDVR0j BBgwFoAUW9cP8MOTRxz695VDNHSzJ71IMvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkyNGZhOWEtZTVmMy00MjY1LTllMWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBD MzkzNDcxQ0ZBRjc5NTQzMzQ3NEIzMjdCRDQ4MzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QkQ3MEZGMEMzOTM0NzFDRkFGNzk1NDMzNDc0QjMyN0JENDgz MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvNUJENzBGRjBDMzkzNDcxQ0ZBRjc5NTQzMzQ3NEIz MjdCRDQ4MzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzSlfwShTGsheAMlA7ZV1pvxcJlm67iH1z0 LZo5ShSwbr5WP4kevPtVsCJOrU2KqDFizvqfYnP9tNfCLKcHI2j+KsJO+w90VDtm tLvgkQsHmPl8gvKb4PJsTo5I9XaUKBASaCa2SlJWhViFMhv/VeMYHxlmukGYmHy0 Nodw+2aNCGQS82axSwEnyOOnQ+DazU0xFCsdbkhESKS7H4XZbCLJfAsxYmIARR0D RfP402EqlcB1payQcdJEBNUcxoEA3QyegP3VBNQhUoV+UTIaN+gADClLYAn/RzpJ EFHV/U1aLIz7uTnHzWODKDcr0wgXFuabbGVMueAIRPVKy2ByaHE= -----END CERTIFICATE-----Generated at Wed May 13 02:40:27 2026 by rpki-client