$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft File: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft (raw, json) Hash identifier: Lo31u4TEYN3oGrCr2KWmwVJdzFPQS9ZFMJXqW0Z0QIE= Subject key identifier: 63:2C:89:EE:08:EB:BF:03:FA:B4:8C:5A:EE:A6:B4:DE:F3:40:95:DB Authority key identifier: 5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 Certificate issuer: /CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Certificate serial: 258EF4A3679EC5DA542D5A2A402D1D80AA7AC41A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:03:10 +0000 Manifest this update: Tue 12 May 2026 06:58:10 +0000 Manifest next update: Wed 13 May 2026 08:40:10 +0000 Files and hashes: 1: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: CgpRUUxgJdvC2DaauFEj0ljqW/Af8HR5RmTcf5er/Ag=) 2: 5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl (hash: 2BzlESC/L9WkkRzSVWqhli6Wklm21ayYntU7xhWF8PQ=) 3: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: yFzJDaOR3ALC9R9lcLlFWOcSjWJQYhCD//08bWWKhcU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8e:f4:a3:67:9e:c5:da:54:2d:5a:2a:40:2d:1d:80:aa:7a:c4:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1 Validity Not Before: May 12 06:58:10 2026 GMT Not After : May 13 08:40:10 2026 GMT Subject: CN=632C89EE08EBBF03FAB48C5AEEA6B4DEF34095DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:5e:d2:e1:39:71:e4:45:58:d0:ab:44:75: 43:40:8c:3a:f6:57:96:17:32:3d:0b:36:35:a3:bc: 85:27:fa:2a:cd:9b:ef:dd:2d:33:8f:b2:62:5f:e4: e0:84:d3:89:04:2c:f1:d5:d8:ad:fd:83:0c:48:a9: 86:6f:35:74:9b:85:08:3e:df:79:84:1f:0c:8f:cd: 1c:ee:e0:ec:f1:3f:3c:87:65:c3:0b:f6:4e:ed:36: bd:85:0f:9b:82:19:a4:31:47:b6:43:d5:ab:cd:cf: 05:c5:cc:9c:e6:ce:6e:92:b7:e3:ea:26:c1:9a:b2: 7d:4d:0c:55:7d:24:41:e6:84:72:dd:b4:87:81:a7: 5e:6b:c1:fe:5f:1e:82:63:62:d7:d5:80:25:51:35: 21:ff:c7:51:d9:3b:e6:db:05:b0:14:ba:50:63:fa: fb:5d:8a:82:f2:95:6c:fa:32:33:7d:07:13:f0:d2: 1b:75:00:e0:dd:88:84:29:03:4a:ce:04:35:25:cf: 53:6b:b3:61:18:54:47:5d:ac:5e:4c:8c:8d:01:08: 4c:ce:f7:05:57:2f:d4:dd:4e:a9:4c:99:22:4b:e0: ac:6c:a0:e8:8b:0d:71:8e:8a:26:9e:21:62:37:0c: ab:c6:e7:02:f1:6d:58:5d:c0:19:b2:37:ac:b9:0f: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2C:89:EE:08:EB:BF:03:FA:B4:8C:5A:EE:A6:B4:DE:F3:40:95:DB X509v3 Authority Key Identifier: keyid:5E:D0:FC:9D:E3:C5:BF:0F:26:41:FB:C8:2E:03:53:3A:D5:A6:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5ED0FC9DE3C5BF0F2641FBC82E03533AD5A6C5C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:28:68:b6:2b:32:93:86:9c:5f:1a:97:5f:40:6f:6f:5e:d4: b3:1d:c3:eb:a9:ef:ee:c7:fd:6e:f5:9e:c9:a8:68:77:a8:bb: 40:94:f8:6e:be:c9:48:75:0d:1b:ea:37:d7:55:7c:02:3a:4f: bb:34:66:28:ae:5a:28:2b:9c:18:09:b9:cb:6b:20:43:24:04: f9:df:06:5f:51:4e:2c:39:c8:83:f6:e3:cc:7e:b9:88:3d:a9: 5b:28:dc:3d:1b:d2:22:17:fe:dc:96:39:4f:08:23:21:dc:d5: 7f:5d:4c:8a:a1:3b:42:67:96:40:1e:90:88:c1:9e:86:66:55: 05:07:7b:ed:79:83:15:82:0e:1c:e7:0b:0c:dd:98:0e:aa:5c: 56:b0:bc:89:55:0a:38:7c:6d:21:f3:ec:d9:e6:3b:32:23:5c: 73:06:fe:d6:67:79:b8:ce:08:4b:0e:7f:8c:76:6e:b9:b6:bc: 79:9d:62:05:5d:02:a5:a2:91:2c:73:19:e4:03:f0:55:a4:27: 63:60:48:7a:59:09:7f:e4:38:05:bd:09:16:e6:9d:2c:6f:c5: 32:9e:00:c9:c3:c1:d2:ad:ff:ca:2d:75:37:47:7f:e2:e6:2e: ea:e2:5e:5c:cc:a6:2c:c1:2e:21:18:e0:a9:fd:7e:aa:8b:10: 23:24:84:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJY70o2eexdpULVoqQC0dgKp6xBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FE NUE2QzVDMTAeFw0yNjA1MTIwNjU4MTBaFw0yNjA1MTMwODQwMTBaMDMxMTAvBgNV BAMTKDYzMkM4OUVFMDhFQkJGMDNGQUI0OEM1QUVFQTZCNERFRjM0MDk1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwV7S4Tlx5EVY0KtEdUNAjDr2 V5YXMj0LNjWjvIUn+irNm+/dLTOPsmJf5OCE04kELPHV2K39gwxIqYZvNXSbhQg+ 33mEHwyPzRzu4OzxPzyHZcML9k7tNr2FD5uCGaQxR7ZD1avNzwXFzJzmzm6St+Pq JsGasn1NDFV9JEHmhHLdtIeBp15rwf5fHoJjYtfVgCVRNSH/x1HZO+bbBbAUulBj +vtdioLylWz6MjN9BxPw0ht1AODdiIQpA0rOBDUlz1Nrs2EYVEddrF5MjI0BCEzO 9wVXL9TdTqlMmSJL4KxsoOiLDXGOiiaeIWI3DKvG5wLxbVhdwBmyN6y5D/R1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyyJ7gjrvwP6tIxa7qa03vNAldswHwYDVR0j BBgwFoAUXtD8nePFvw8mQfvILgNTOtWmxcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJkNjZkMTAtYjg1Ny00YmVmLTkzOTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURF M0M1QkYwRjI2NDFGQkM4MkUwMzUzM0FENUE2QzVDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RUQwRkM5REUzQzVCRjBGMjY0MUZCQzgyRTAzNTMzQUQ1QTZD NUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNUVEMEZDOURFM0M1QkYwRjI2NDFGQkM4MkUwMzUz M0FENUE2QzVDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMsoaLYrMpOGnF8al19Ab29e1LMdw+up7+7H /W71nsmoaHeou0CU+G6+yUh1DRvqN9dVfAI6T7s0ZiiuWigrnBgJuctrIEMkBPnf Bl9RTiw5yIP248x+uYg9qVso3D0b0iIX/tyWOU8IIyHc1X9dTIqhO0JnlkAekIjB noZmVQUHe+15gxWCDhznCwzdmA6qXFawvIlVCjh8bSHz7NnmOzIjXHMG/tZnebjO CEsOf4x2brm2vHmdYgVdAqWikSxzGeQD8FWkJ2NgSHpZCX/kOAW9CRbmnSxvxTKe AMnDwdKt/8otdTdHf+LmLuriXlzMpizBLiEY4Kn9fqqLECMkhCI= -----END CERTIFICATE-----Generated at Wed May 13 00:44:01 2026 by rpki-client