$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft File: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft (raw, json) Hash identifier: dkX1suJpMDUsDmdj0Z6EdV33kLVBwWeEnnKaAffQa/g= Subject key identifier: 64:91:85:90:6D:6D:89:65:54:BB:4F:7E:B0:1A:63:DE:23:92:CC:39 Authority key identifier: 5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 Certificate issuer: /CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Certificate serial: 68C33531A7BCC015B09E0E8283534F735CB629A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:27:42 +0000 Manifest this update: Tue 12 May 2026 03:22:42 +0000 Manifest next update: Wed 13 May 2026 06:16:42 +0000 Files and hashes: 1: 3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa (hash: 85nzKNKm1prDMlKjYCs/G3skXgXdFpd3BSx7AhsXh80=) 2: 3130332e3134322e38392e302f32342d3234203d3e20313339333638.roa (hash: 4JRcCjrbt6UQy9keTGtyxuVyA16nB/RDNc0x3IcBoFU=) 3: 3130332e3134322e38382e302f32342d3234203d3e20313339333638.roa (hash: tQktaum4KycUd3NVfEb+S8gEbr6uIhyBlDiFsL9oiH8=) 4: 5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl (hash: wdL1Kztnnfh5qhgTyKElmlk9tQrEVgAmg26ASj8TLro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c3:35:31:a7:bc:c0:15:b0:9e:0e:82:83:53:4f:73:5c:b6:29:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564 Validity Not Before: May 12 03:22:42 2026 GMT Not After : May 13 06:16:42 2026 GMT Subject: CN=649185906D6D896554BB4F7EB01A63DE2392CC39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:aa:f2:8e:bf:5a:72:86:52:18:e1:c6:fc: b6:b3:fa:22:18:35:3f:de:db:3e:7a:87:6b:b2:fc: 69:61:89:ab:39:1e:a1:60:55:7f:1b:90:9c:7d:52: 92:56:12:74:1f:a7:44:10:20:a0:9e:ac:30:97:1b: fd:7c:9e:3c:af:80:7b:6f:e0:f7:72:0d:af:58:41: 35:5a:66:db:32:b5:1f:2e:cc:c1:3a:e7:da:dd:1e: ed:a7:23:bc:ee:d0:79:79:aa:ca:83:72:b3:b0:aa: 00:91:d5:ee:bd:69:f8:cd:99:fc:55:cf:fb:af:24: 0e:86:a3:4f:c6:ff:18:3b:ba:dc:43:c4:e3:01:26: 95:84:6b:b8:f1:a2:0a:67:7d:e7:5d:c5:9f:72:37: 89:81:9c:42:27:85:54:a6:9a:ab:68:fc:46:e3:21: 95:fe:cb:cd:11:23:b6:64:ae:1a:eb:8e:4f:2f:cf: ac:2b:07:84:05:65:5c:9e:4f:b4:a0:3e:93:ae:f3: 54:df:74:d5:12:fb:67:b3:22:50:01:d0:23:d1:d1: 06:ad:b8:dc:30:04:bb:e6:21:3e:64:cf:45:7c:59: 13:cc:19:01:7b:8d:3a:4f:8d:c2:fa:c1:21:a7:c6: 1e:cc:66:01:5f:dc:49:97:54:71:cb:17:e0:6f:9f: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:91:85:90:6D:6D:89:65:54:BB:4F:7E:B0:1A:63:DE:23:92:CC:39 X509v3 Authority Key Identifier: keyid:5D:F5:DB:B1:48:D0:F4:EA:BB:1A:70:87:D8:CA:D8:7F:B2:A9:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/5DF5DBB148D0F4EABB1A7087D8CAD87FB2A91564.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:94:b6:a5:b3:e1:6b:d5:d5:f1:23:7b:70:35:31:89:83:27: 18:6c:da:bb:17:51:d3:0f:b5:95:a8:9e:b6:54:2c:1d:e1:bc: 78:8f:f6:e0:55:a7:63:3a:8d:39:7a:2e:6f:c6:54:65:89:6d: 70:5f:a4:97:df:f4:b9:6e:e9:e6:ff:ad:af:4d:30:3b:87:ce: 60:6c:11:b1:d4:78:3a:81:56:89:43:26:51:11:8b:91:19:b9: 89:6f:89:45:aa:cc:e1:83:ec:f2:9f:37:14:51:44:85:bd:4f: 5c:01:4d:aa:da:f6:6b:ed:55:2c:ea:2c:48:66:4c:b2:28:ba: 8a:bd:04:31:85:29:75:8c:cc:51:7c:60:f2:76:9d:3e:ae:cf: 54:a4:34:33:44:d8:ae:5b:3d:8b:1c:fd:17:af:ab:bf:66:2b: 1e:69:be:06:ba:09:e7:31:63:f7:f1:d9:b8:9e:be:1d:a1:ff: 2c:7e:4c:93:36:69:86:d3:1b:e4:c3:55:6d:e9:27:ea:55:b4: 2e:63:6a:01:8f:06:2d:5e:c1:16:57:b8:da:f5:c9:d7:cb:e8: 67:b5:a4:c7:ca:0d:8d:4b:af:58:6d:b6:b9:9e:75:0c:7d:77: d4:a2:9a:98:93:21:2b:55:e1:ec:f8:50:70:b8:86:15:02:25: 6c:13:31:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMM1Mae8wBWwng6Cg1NPc1y2KacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZC MkE5MTU2NDAeFw0yNjA1MTIwMzIyNDJaFw0yNjA1MTMwNjE2NDJaMDMxMTAvBgNV BAMTKDY0OTE4NTkwNkQ2RDg5NjU1NEJCNEY3RUIwMUE2M0RFMjM5MkNDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfqryjr9acoZSGOHG/Laz+iIY NT/e2z56h2uy/Glhias5HqFgVX8bkJx9UpJWEnQfp0QQIKCerDCXG/18njyvgHtv 4PdyDa9YQTVaZtsytR8uzME659rdHu2nI7zu0Hl5qsqDcrOwqgCR1e69afjNmfxV z/uvJA6Go0/G/xg7utxDxOMBJpWEa7jxogpnfeddxZ9yN4mBnEInhVSmmqto/Ebj IZX+y80RI7Zkrhrrjk8vz6wrB4QFZVyeT7SgPpOu81TfdNUS+2ezIlAB0CPR0Qat uNwwBLvmIT5kz0V8WRPMGQF7jTpPjcL6wSGnxh7MZgFf3EmXVHHLF+Bvn8CjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZJGFkG1tiWVUu09+sBpj3iOSzDkwHwYDVR0j BBgwFoAUXfXbsUjQ9Oq7GnCH2MrYf7KpFWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWQ0OWQ0OWItZGFlYS00OGMwLThkNzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0 OEQwRjRFQUJCMUE3MDg3RDhDQUQ4N0ZCMkE5MTU2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81REY1REJCMTQ4RDBGNEVBQkIxQTcwODdEOENBRDg3RkIyQTkx NTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWQ0OWQ0OWItZGFlYS00OGMwLThk NzctMTM3MzhiNzQ1NzcyLzAvNURGNURCQjE0OEQwRjRFQUJCMUE3MDg3RDhDQUQ4 N0ZCMkE5MTU2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGUtqWz4WvV1fEje3A1MYmDJxhs2rsXUdMP tZWonrZULB3hvHiP9uBVp2M6jTl6Lm/GVGWJbXBfpJff9Llu6eb/ra9NMDuHzmBs EbHUeDqBVolDJlERi5EZuYlviUWqzOGD7PKfNxRRRIW9T1wBTara9mvtVSzqLEhm TLIouoq9BDGFKXWMzFF8YPJ2nT6uz1SkNDNE2K5bPYsc/Revq79mKx5pvga6Cecx Y/fx2bievh2h/yx+TJM2aYbTG+TDVW3pJ+pVtC5jagGPBi1ewRZXuNr1ydfL6Ge1 pMfKDY1Lr1httrmedQx9d9SimpiTIStV4ez4UHC4hhUCJWwTMd8= -----END CERTIFICATE-----Generated at Tue May 12 23:20:46 2026 by rpki-client