$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft File: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft (raw, json) Hash identifier: Ndq8+Kx/6CoR+xlR4ujq6zZeZVBrw2qDVxRiX01pPyY= Subject key identifier: A1:99:65:69:F6:D4:09:FD:6D:28:71:45:05:A9:B1:9A:4C:C5:E4:A3 Authority key identifier: 5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 Certificate issuer: /CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Certificate serial: 71889A5BE8ADBE1E739A132C5ADD3EA2C4BFA24E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:35:45 +0000 Manifest this update: Tue 12 May 2026 19:30:45 +0000 Manifest next update: Wed 13 May 2026 20:27:45 +0000 Files and hashes: 1: 5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl (hash: T2hTnHOPTfi3KHYmRTZBMc9Bh9W4bPu4LH/sW6IFE74=) 2: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (hash: JniyB+kykIY2ndXJuy/YxGMo3Dbdi9UVhfqGmbiBAvY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:88:9a:5b:e8:ad:be:1e:73:9a:13:2c:5a:dd:3e:a2:c4:bf:a2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495 Validity Not Before: May 12 19:30:45 2026 GMT Not After : May 13 20:27:45 2026 GMT Subject: CN=A1996569F6D409FD6D28714505A9B19A4CC5E4A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:05:79:f4:5d:63:6b:02:6f:1a:4c:fb:72: df:ee:99:1b:9d:18:d6:3e:01:7d:20:89:53:56:cb: a8:45:e4:08:70:92:ed:d6:0b:86:fb:a2:71:21:28: d9:dd:c1:4a:94:61:de:68:a1:96:ee:8c:2f:e8:15: ad:a0:12:75:22:f4:e0:53:6f:df:00:2f:a6:5d:3c: c3:1a:61:fd:ce:da:42:65:24:2b:64:1b:ed:3d:a5: 0f:4a:fc:8c:e4:37:81:49:52:a4:fe:ff:89:bd:7f: d5:60:b1:ab:cd:11:5c:cd:99:03:b1:fe:b0:d7:e1: c1:7f:dc:71:06:d9:85:9e:d6:d9:ef:fe:37:c5:f5: 16:d9:dc:d7:5e:2a:d5:86:23:94:4e:f1:64:ff:a3: e7:0f:98:ad:77:96:9e:d4:c2:7f:69:bb:db:b5:9e: f3:b5:f4:9c:a9:29:94:a5:59:03:ee:2b:e3:7f:6d: 51:d9:31:3b:16:cb:76:19:e7:18:98:99:b7:b9:87: 62:50:c1:9a:ed:bc:2f:64:65:f9:e4:05:ea:4d:7d: 35:96:dc:ce:e7:b3:22:38:49:bf:37:8e:72:04:a1: f1:1f:8a:dd:b5:1d:51:45:23:93:7b:81:d2:e9:31: e1:87:92:32:27:93:3a:ca:6b:dc:1a:56:50:61:8c: 76:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:99:65:69:F6:D4:09:FD:6D:28:71:45:05:A9:B1:9A:4C:C5:E4:A3 X509v3 Authority Key Identifier: keyid:5D:10:A7:2C:87:21:CE:50:C0:93:BD:9B:5D:1A:C9:BB:6F:E9:34:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/5D10A72C8721CE50C093BD9B5D1AC9BB6FE93495.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d8:99:da:50:79:22:3a:e7:7d:d9:7b:fb:24:98:5e:41:d7: 8a:c0:7a:f9:06:09:b8:a8:bc:9c:17:c4:c9:7a:ae:c5:58:0c: 73:a5:34:74:20:9c:e3:1f:34:d3:f6:fa:9e:8d:96:f9:e1:35: 16:50:2d:b8:87:28:75:2b:19:0a:17:55:6d:aa:78:e9:69:0d: a6:fa:e6:27:34:6a:b9:a5:6d:78:a6:a6:19:e2:86:de:8e:36: 31:e8:d1:1d:1d:83:cc:ff:f1:5d:0d:82:14:81:87:45:b6:9d: b1:64:48:b3:b2:80:e3:f3:0b:fa:4d:3d:97:35:dc:e2:9f:12: 88:49:de:07:a0:71:1f:f1:db:fc:dc:a7:18:b9:9a:71:1a:e2: 8f:69:10:61:97:69:bf:b2:e1:3e:32:52:5d:90:da:96:6d:73: 0e:f9:db:ec:8b:95:cb:75:c0:5c:f0:ed:e6:a3:1f:da:f1:1f: e5:03:d4:d5:0b:12:d6:66:00:80:8f:5b:50:51:56:51:d9:aa: e7:6c:9c:f6:b0:3e:5d:a7:65:06:8e:27:eb:9b:bb:44:f3:7e: fa:1d:f9:e0:97:3b:c7:b5:35:45:39:b5:a5:e3:52:dd:53:47: 60:7a:15:d8:a6:29:39:c9:c6:ad:cf:9c:ee:2f:44:25:ae:78: 16:56:9b:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcYiaW+itvh5zmhMsWt0+osS/ok4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2 RkU5MzQ5NTAeFw0yNjA1MTIxOTMwNDVaFw0yNjA1MTMyMDI3NDVaMDMxMTAvBgNV BAMTKEExOTk2NTY5RjZENDA5RkQ2RDI4NzE0NTA1QTlCMTlBNENDNUU0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dwV59F1jawJvGkz7ct/umRud GNY+AX0giVNWy6hF5Ahwku3WC4b7onEhKNndwUqUYd5ooZbujC/oFa2gEnUi9OBT b98AL6ZdPMMaYf3O2kJlJCtkG+09pQ9K/IzkN4FJUqT+/4m9f9VgsavNEVzNmQOx /rDX4cF/3HEG2YWe1tnv/jfF9RbZ3NdeKtWGI5RO8WT/o+cPmK13lp7Uwn9pu9u1 nvO19JypKZSlWQPuK+N/bVHZMTsWy3YZ5xiYmbe5h2JQwZrtvC9kZfnkBepNfTWW 3M7nsyI4Sb83jnIEofEfit21HVFFI5N7gdLpMeGHkjInkzrKa9waVlBhjHYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoZllafbUCf1tKHFFBamxmkzF5KMwHwYDVR0j BBgwFoAUXRCnLIchzlDAk72bXRrJu2/pNJUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRjMTAwN2QtZmQ2MS00NTQzLThmNWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4 NzIxQ0U1MEMwOTNCRDlCNUQxQUM5QkI2RkU5MzQ5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81RDEwQTcyQzg3MjFDRTUwQzA5M0JEOUI1RDFBQzlCQjZGRTkz NDk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRjMTAwN2QtZmQ2MS00NTQzLThm NWYtM2ZkZmZhNGIwMWU2LzAvNUQxMEE3MkM4NzIxQ0U1MEMwOTNCRDlCNUQxQUM5 QkI2RkU5MzQ5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXYmdpQeSI6533Ze/skmF5B14rAevkGCbio vJwXxMl6rsVYDHOlNHQgnOMfNNP2+p6NlvnhNRZQLbiHKHUrGQoXVW2qeOlpDab6 5ic0armlbXimphniht6ONjHo0R0dg8z/8V0NghSBh0W2nbFkSLOygOPzC/pNPZc1 3OKfEohJ3gegcR/x2/zcpxi5mnEa4o9pEGGXab+y4T4yUl2Q2pZtcw752+yLlct1 wFzw7eajH9rxH+UD1NULEtZmAICPW1BRVlHZqudsnPawPl2nZQaOJ+ubu0Tzfvod +eCXO8e1NUU5taXjUt1TR2B6FdimKTnJxq3PnO4vRCWueBZWm/k= -----END CERTIFICATE-----Generated at Wed May 13 01:41:27 2026 by rpki-client