$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft File: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft (raw, json) Hash identifier: qiAfF9QaH8UqGPJUlR0W9XkmHt0Ep/n3xXzKmDgV+Mk= Subject key identifier: 20:42:9A:DB:49:D2:10:D4:D1:22:AA:13:6D:DC:F0:62:EB:F1:F6:D3 Authority key identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 Certificate issuer: /CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Certificate serial: 1AC206744EA3C85DE8080BFDD49F8545D494F2B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:05:15 +0000 Manifest this update: Tue 12 May 2026 22:00:15 +0000 Manifest next update: Wed 13 May 2026 22:44:15 +0000 Files and hashes: 1: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: YDSkpFGq8xybThgooh1RThJN9W0fBsfNyr37Omd1f4w=) 2: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: FXO9CsmctV8fdA5KiII/rw/3Y+5l9AlF4P2ED3TDR8A=) 3: 5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl (hash: 44p9/QLspA1p9zVn1gzb5Vm9YJesQDuoU8TCqEKPkFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c2:06:74:4e:a3:c8:5d:e8:08:0b:fd:d4:9f:85:45:d4:94:f2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204 Validity Not Before: May 12 22:00:15 2026 GMT Not After : May 13 22:44:15 2026 GMT Subject: CN=20429ADB49D210D4D122AA136DDCF062EBF1F6D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e9:8b:5a:b4:4d:fe:e1:48:18:5e:ca:45:db: c3:b8:20:73:e7:c6:76:8d:60:c2:38:34:8d:2c:94: 5d:f5:1c:ed:cc:99:a3:8f:4d:a5:b0:88:f3:bf:cc: 3b:a0:37:6c:be:2e:19:84:aa:4a:b5:37:a0:e9:06: cf:69:73:06:ee:89:9b:ca:6a:f2:45:78:8a:22:5d: dd:27:ad:0f:33:40:21:41:df:c9:cc:7b:22:2c:48: 23:61:e3:5d:90:12:7f:68:0e:ff:93:56:5c:56:cb: ba:d0:27:bf:06:d0:71:49:e9:51:86:f4:5d:d7:db: b0:f2:a0:88:1c:84:dc:20:da:10:17:f0:89:f2:02: c3:64:70:96:9a:5c:6d:6e:52:a4:e1:43:39:ac:96: c6:5f:43:df:14:17:42:b2:3c:2e:28:aa:5d:df:1f: d2:5e:05:b5:02:2e:00:c2:ad:71:7b:48:ee:58:8c: a4:df:a5:36:d5:d2:c5:c2:61:02:49:b0:ec:59:0a: 89:5b:dc:b1:9c:e7:63:e1:46:5b:8c:e6:ae:83:3c: 60:b0:f5:b6:56:55:99:d9:3a:e9:41:69:83:c5:1c: 7e:b1:84:5f:45:08:81:08:be:6f:36:27:d8:cf:df: f4:09:2b:46:5b:2f:7f:6a:41:3b:c6:75:2b:12:5f: 73:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:42:9A:DB:49:D2:10:D4:D1:22:AA:13:6D:DC:F0:62:EB:F1:F6:D3 X509v3 Authority Key Identifier: keyid:5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ca:27:45:df:1d:e2:1d:c7:ab:90:48:54:38:97:80:8c:82: 32:39:c3:c2:61:34:eb:b2:c8:6a:f2:46:ee:bd:44:bc:d2:8d: b9:fc:bc:ba:4a:02:73:dc:ac:08:4d:8d:4d:5d:a2:b3:e0:cd: 44:f0:fe:c8:01:06:80:44:41:bb:81:6c:81:f8:0b:03:13:e6: 01:c7:d6:60:3a:15:89:82:5a:a6:94:a8:60:9c:35:68:5d:0a: ed:6c:c2:2e:b3:d2:7d:20:e6:e4:0d:87:9e:10:aa:74:f9:66: cb:89:c1:1e:8e:e3:13:f2:01:dc:90:65:44:e3:0b:f3:63:e7: ba:68:50:a3:e0:6b:c6:95:ec:e8:ce:52:bf:83:6b:3a:95:77: 9a:96:a8:9b:ae:63:85:ef:e5:a3:5b:13:05:8b:e6:00:11:05: 1e:a3:59:50:b1:70:0b:78:ce:43:71:53:73:e2:97:c3:6b:b4: 54:95:59:01:69:d7:ba:dd:9f:9b:e6:50:17:67:1b:27:9e:ba: f2:a0:2a:4f:03:e7:94:1c:bc:11:5e:df:42:53:cf:08:fa:e2: 5f:5b:a6:b2:12:66:cc:62:f0:49:80:ba:1e:6a:af:24:f5:24: 66:de:d7:c8:06:23:5a:d8:3a:c5:b6:d2:3c:42:b6:87:b1:29: ed:58:12:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsIGdE6jyF3oCAv91J+FRdSU8rgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3 RDJDMjIwNDAeFw0yNjA1MTIyMjAwMTVaFw0yNjA1MTMyMjQ0MTVaMDMxMTAvBgNV BAMTKDIwNDI5QURCNDlEMjEwRDREMTIyQUExMzZERENGMDYyRUJGMUY2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96YtatE3+4UgYXspF28O4IHPn xnaNYMI4NI0slF31HO3MmaOPTaWwiPO/zDugN2y+LhmEqkq1N6DpBs9pcwbuiZvK avJFeIoiXd0nrQ8zQCFB38nMeyIsSCNh412QEn9oDv+TVlxWy7rQJ78G0HFJ6VGG 9F3X27DyoIgchNwg2hAX8InyAsNkcJaaXG1uUqThQzmslsZfQ98UF0KyPC4oql3f H9JeBbUCLgDCrXF7SO5YjKTfpTbV0sXCYQJJsOxZColb3LGc52PhRluM5q6DPGCw 9bZWVZnZOulBaYPFHH6xhF9FCIEIvm82J9jP3/QJK0ZbL39qQTvGdSsSX3MjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIEKa20nSENTRIqoTbdzwYuvx9tMwHwYDVR0j BBgwFoAUXHRFweE3bkp7QEvFOnGskn0sIgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWM3MmVlM2MtZTE4MC00Mjk2LTlkYWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFF MTM3NkU0QTdCNDA0QkM1M0E3MUFDOTI3RDJDMjIwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81Qzc0NDVDMUUxMzc2RTRBN0I0MDRCQzUzQTcxQUM5MjdEMkMy MjA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvNUM3NDQ1QzFFMTM3NkU0QTdCNDA0QkM1M0E3MUFD OTI3RDJDMjIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7KJ0XfHeIdx6uQSFQ4l4CMgjI5w8JhNOuy yGryRu69RLzSjbn8vLpKAnPcrAhNjU1dorPgzUTw/sgBBoBEQbuBbIH4CwMT5gHH 1mA6FYmCWqaUqGCcNWhdCu1swi6z0n0g5uQNh54QqnT5ZsuJwR6O4xPyAdyQZUTj C/Nj57poUKPga8aV7OjOUr+DazqVd5qWqJuuY4Xv5aNbEwWL5gARBR6jWVCxcAt4 zkNxU3Pil8NrtFSVWQFp17rdn5vmUBdnGyeeuvKgKk8D55QcvBFe30JTzwj64l9b prISZsxi8EmAuh5qryT1JGbe18gGI1rYOsW20jxCtoexKe1YEsQ= -----END CERTIFICATE-----Generated at Wed May 13 02:12:59 2026 by rpki-client