$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft File: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft (raw, json) Hash identifier: KNCcabLgCJQc696YllU4Qonzuet2j6yVTEfns6krMYQ= Subject key identifier: D5:26:84:BD:A0:16:E0:51:B3:B9:DB:EC:29:09:9C:A5:23:74:5E:16 Authority key identifier: F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A Certificate issuer: /CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Certificate serial: 201B3170CF0054E89EB12C7C0E2DDB0C3D8EAC94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:10:39 +0000 Manifest this update: Tue 12 May 2026 16:05:39 +0000 Manifest next update: Wed 13 May 2026 18:54:39 +0000 Files and hashes: 1: F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl (hash: sVgZR7M22tcQRt/k1vrbuVko4Rn3KpgucRc8WiRAqUM=) 2: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: +u/9D9vfsyaLH2MwRf/oL8GHy2QY5reW5CdS1r9iLUo=) 3: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: cRnHdJ6ERY/gOe2MatEAOxOT41WEyNcMegmve8GczJo=) 4: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: +WK4iRrSPfnkrJEz8Gq8cT5bkygdZQkUoe49fePODB0=) 5: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: pZiifrcLbDchRtYwQAPaQx4TCr202zft6iysN0v48zg=) 6: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: noFGhrWS2shsN12iREyShnTzBgPrE7wgh7GcY82aKhc=) 7: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: QWT8clnM0WSHO8g469pTliT/WCBN4Kmg5lPcdlpi8/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1b:31:70:cf:00:54:e8:9e:b1:2c:7c:0e:2d:db:0c:3d:8e:ac:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A Validity Not Before: May 12 16:05:39 2026 GMT Not After : May 13 18:54:39 2026 GMT Subject: CN=D52684BDA016E051B3B9DBEC29099CA523745E16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:71:ed:cf:ac:9c:c1:41:a3:fb:4c:79:d8: 65:0a:46:d5:da:28:78:6d:c6:96:df:30:eb:1b:0f: 2b:e1:0c:e4:84:3a:e0:55:5c:4a:bd:4f:51:97:9f: 6c:7b:f4:58:41:37:99:42:c4:2e:21:d0:7b:55:dc: 43:b9:9b:cd:d2:38:3b:65:f9:ca:2c:77:19:30:9e: b6:1d:fb:26:47:07:40:0d:90:52:f6:6a:a1:48:f7: 9c:a7:9b:eb:45:9a:12:16:32:4b:d7:b5:ab:21:b0: 03:bd:ac:98:d9:1a:07:93:d0:5a:bd:6f:fe:a5:59: 04:1f:31:c5:dc:13:f7:52:ef:fc:8e:16:8e:86:e8: 08:e3:e4:5e:ef:97:9f:39:1d:89:49:aa:b3:64:74: a9:0a:f4:23:5e:aa:03:e8:18:7e:c6:d2:26:7b:35: 47:63:24:ea:b7:29:49:de:cc:82:25:59:e1:07:3f: ae:4d:7f:02:86:cb:a5:0c:ef:3e:9b:19:24:2d:1a: e7:23:21:52:6a:f4:7b:eb:6d:88:3f:ae:98:f9:43: e2:26:08:2b:06:13:38:fd:de:85:da:4d:18:3f:9e: 8b:44:d1:fe:8e:21:18:40:14:ff:32:88:7e:7a:95: 3a:dc:07:0c:98:cb:74:8a:71:e7:a7:42:b2:99:83: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:26:84:BD:A0:16:E0:51:B3:B9:DB:EC:29:09:9C:A5:23:74:5E:16 X509v3 Authority Key Identifier: keyid:F5:E1:33:BC:E5:01:4B:7A:79:AE:6E:8E:48:0B:C3:5B:D3:C3:18:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/F5E133BCE5014B7A79AE6E8E480BC35BD3C3187A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ff:33:41:6d:e9:7c:36:0d:5d:0f:92:3e:f4:95:99:22:1c: 25:ae:d2:f3:5b:ec:0b:63:8b:e6:57:32:ef:3c:47:a5:5e:f0: 9d:26:1a:e1:7b:75:af:d3:e0:89:da:7b:73:09:21:d0:c8:f2: 84:ad:8a:a9:2f:e1:99:3a:51:67:59:ea:42:c8:eb:63:98:5c: 1b:ae:a6:ff:2c:c7:2d:b4:a9:bb:3e:db:ce:60:e7:6a:76:52: 06:49:db:99:b9:ee:26:2b:23:7e:7f:b7:9f:6f:6b:03:c1:ef: a4:27:59:38:9e:78:14:9e:40:b2:11:d3:46:da:63:9b:93:6b: 4f:a9:7a:ac:c7:e2:bd:fd:e4:05:cb:0c:af:3b:79:6a:48:91: f8:99:12:ec:8f:e7:39:09:75:ce:ad:d9:c3:e8:e5:8c:22:62: 10:b2:57:fa:e4:56:ab:43:4c:d9:4f:2a:29:07:c0:a7:68:05: 25:d0:01:11:07:dd:66:84:e5:4d:56:d7:51:03:2f:ae:79:74: ad:3f:7d:08:05:09:ec:dc:3c:75:f7:5d:2f:95:2f:71:a6:c5: e5:e6:49:d1:33:7d:10:00:2d:7c:31:a8:3c:8d:a9:53:53:9b: 54:94:f9:d4:81:ca:42:bc:75:e7:62:cd:c7:90:ce:eb:f0:d6: 0b:9b:45:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBsxcM8AVOiesSx8Di3bDD2OrJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVFMTMzQkNFNTAxNEI3QTc5QUU2RThFNDgwQkMzNUJE M0MzMTg3QTAeFw0yNjA1MTIxNjA1MzlaFw0yNjA1MTMxODU0MzlaMDMxMTAvBgNV BAMTKEQ1MjY4NEJEQTAxNkUwNTFCM0I5REJFQzI5MDk5Q0E1MjM3NDVFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+v3Htz6ycwUGj+0x52GUKRtXa KHhtxpbfMOsbDyvhDOSEOuBVXEq9T1GXn2x79FhBN5lCxC4h0HtV3EO5m83SODtl +cosdxkwnrYd+yZHB0ANkFL2aqFI95ynm+tFmhIWMkvXtashsAO9rJjZGgeT0Fq9 b/6lWQQfMcXcE/dS7/yOFo6G6Ajj5F7vl585HYlJqrNkdKkK9CNeqgPoGH7G0iZ7 NUdjJOq3KUnezIIlWeEHP65NfwKGy6UM7z6bGSQtGucjIVJq9HvrbYg/rpj5Q+Im CCsGEzj93oXaTRg/notE0f6OIRhAFP8yiH56lTrcBwyYy3SKceenQrKZg479AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1SaEvaAW4FGzudvsKQmcpSN0XhYwHwYDVR0j BBgwFoAU9eEzvOUBS3p5rm6OSAvDW9PDGHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNlNDUwMzktNmVkMC00ODNkLWExYjktYzRmNDg1NGM1Y2Y1LzAvRjVFMTMzQkNF NTAxNEI3QTc5QUU2RThFNDgwQkMzNUJEM0MzMTg3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUUxMzNCQ0U1MDE0QjdBNzlBRTZFOEU0ODBCQzM1QkQzQzMx ODdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvRjVFMTMzQkNFNTAxNEI3QTc5QUU2RThFNDgwQkMz NUJEM0MzMTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKD/M0Ft6Xw2DV0Pkj70lZkiHCWu0vNb7Atj i+ZXMu88R6Ve8J0mGuF7da/T4Inae3MJIdDI8oStiqkv4Zk6UWdZ6kLI62OYXBuu pv8sxy20qbs+285g52p2UgZJ25m57iYrI35/t59vawPB76QnWTieeBSeQLIR00ba Y5uTa0+peqzH4r395AXLDK87eWpIkfiZEuyP5zkJdc6t2cPo5YwiYhCyV/rkVqtD TNlPKikHwKdoBSXQAREH3WaE5U1W11EDL655dK0/fQgFCezcPHX3XS+VL3GmxeXm SdEzfRAALXwxqDyNqVNTm1SU+dSBykK8dedizceQzuvw1gubRcU= -----END CERTIFICATE-----Generated at Wed May 13 06:58:01 2026 by rpki-client