$ rpki-client -vvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft File: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft (raw, json) Hash identifier: KAS7k+bey3/htXEZRoosG3uMeC6e7cAO+/4fNyrcQFs= Subject key identifier: 91:DA:2D:83:08:E2:10:76:B0:7C:54:7F:22:B6:2B:A6:48:7E:3C:F7 Authority key identifier: 58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14 Certificate issuer: /CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214 Certificate serial: 34D6D4B4B0700F4A0A5C222E76D932646DCA04E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:30:06 +0000 Manifest this update: Tue 12 May 2026 15:25:06 +0000 Manifest next update: Wed 13 May 2026 15:59:06 +0000 Files and hashes: 1: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: DqsdEihr1ttmWqRVkhtn/IKvZWR3wypbn1l1kKvrrac=) 2: 5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl (hash: mEqANc7oQEqMubapZCQxPOQeLjmZRnXTYVq833+QTAg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d6:d4:b4:b0:70:0f:4a:0a:5c:22:2e:76:d9:32:64:6d:ca:04:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5863EFCF8CE7061CDFF1BACEEAFCFDB185613214 Validity Not Before: May 12 15:25:06 2026 GMT Not After : May 13 15:59:06 2026 GMT Subject: CN=91DA2D8308E21076B07C547F22B62BA6487E3CF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:82:61:05:db:34:33:58:fc:b3:b7:72:74: d7:f4:b6:35:bf:df:40:c7:2b:14:91:b8:d8:70:72: 4b:d3:51:14:76:cb:41:95:e3:40:c6:76:e4:89:46: 27:fb:51:ea:f5:01:25:15:75:6a:bc:9c:19:24:cf: fa:24:09:16:63:b0:5f:99:b9:ed:b8:f6:08:1f:b4: f6:87:bf:e8:3c:7b:54:6e:df:74:61:d8:c1:e9:c6: cd:8a:7d:b5:e6:30:1b:e2:7e:de:56:12:2d:59:a0: e6:8c:3f:52:24:9f:d1:ca:72:d2:26:0d:c3:59:3d: af:a9:0a:cc:bf:79:23:8d:98:c1:39:9f:bd:a6:6f: 0a:06:bc:8f:28:ca:6a:94:f6:cd:57:1b:ab:d8:3b: 1e:cc:db:a4:e5:04:d4:72:f1:da:4b:9b:01:1f:38: bf:ff:0d:68:40:5b:18:4a:8b:3d:f9:bb:cf:f6:50: aa:95:a6:ce:14:0f:59:53:a3:3a:56:f6:34:0d:2d: 70:d7:83:10:dd:0f:96:94:98:53:32:64:b9:36:18: 66:7c:82:f1:f6:53:f1:2d:e2:d3:25:14:9e:37:4a: 23:4d:54:0d:d8:0c:e7:2a:fc:44:c5:2c:91:be:e0: 3d:d1:56:08:d8:59:56:a6:4c:82:e7:ba:5e:9e:dd: 29:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DA:2D:83:08:E2:10:76:B0:7C:54:7F:22:B6:2B:A6:48:7E:3C:F7 X509v3 Authority Key Identifier: keyid:58:63:EF:CF:8C:E7:06:1C:DF:F1:BA:CE:EA:FC:FD:B1:85:61:32:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/5863EFCF8CE7061CDFF1BACEEAFCFDB185613214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:34:4d:f8:20:bd:be:54:d3:e0:ff:4f:52:23:4f:f5:f1:2b: 91:ab:40:91:9d:37:42:25:7a:5e:1f:d5:b0:a0:36:b1:9c:2d: 2a:b5:4c:ae:f5:d9:33:99:99:a1:85:9a:aa:1a:a7:59:6b:e2: 80:e4:e0:25:41:04:ac:0a:10:6f:85:93:10:9b:f0:44:11:2e: 67:3d:f0:54:7c:a7:fb:c7:55:99:16:19:86:99:b7:02:3b:79: 93:32:6e:bd:dc:e1:4e:2c:91:aa:73:58:1b:2b:5d:16:fe:3c: b8:ec:84:0c:4c:cf:3d:79:98:6d:be:ab:98:d3:16:33:32:db: 77:c0:0d:18:da:88:1c:d8:ef:b8:fa:b3:d8:ed:9d:e0:9c:60: 2c:80:ee:e4:e7:91:d6:4a:11:58:8f:76:04:00:75:c6:c4:f2: 0f:9f:59:f3:ba:da:3b:d3:5c:3f:30:30:12:e0:5b:8e:30:2a: b7:4e:ea:b0:53:af:9d:d4:5f:46:ed:14:dc:be:63:cd:9c:24: b3:9a:82:05:13:ac:fa:6d:77:3b:0d:36:94:93:9e:3f:07:85: 16:6a:2d:b0:ba:58:2d:96:d2:6e:bd:74:2a:66:f9:50:76:0c: ce:e4:de:62:a1:6e:3e:fe:c7:61:a9:53:45:d3:cc:e1:78:18: e8:b4:04:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNNbUtLBwD0oKXCIudtkyZG3KBOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZEQjE4 NTYxMzIxNDAeFw0yNjA1MTIxNTI1MDZaFw0yNjA1MTMxNTU5MDZaMDMxMTAvBgNV BAMTKDkxREEyRDgzMDhFMjEwNzZCMDdDNTQ3RjIyQjYyQkE2NDg3RTNDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfDoJhBds0M1j8s7dydNf0tjW/ 30DHKxSRuNhwckvTURR2y0GV40DGduSJRif7Uer1ASUVdWq8nBkkz/okCRZjsF+Z ue249ggftPaHv+g8e1Ru33Rh2MHpxs2KfbXmMBvift5WEi1ZoOaMP1Ikn9HKctIm DcNZPa+pCsy/eSONmME5n72mbwoGvI8oymqU9s1XG6vYOx7M26TlBNRy8dpLmwEf OL//DWhAWxhKiz35u8/2UKqVps4UD1lTozpW9jQNLXDXgxDdD5aUmFMyZLk2GGZ8 gvH2U/Et4tMlFJ43SiNNVA3YDOcq/ETFLJG+4D3RVgjYWVamTILnul6e3SnlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdotgwjiEHawfFR/IrYrpkh+PPcwHwYDVR0j BBgwFoAUWGPvz4znBhzf8brO6vz9sYVhMhQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzAvNTg2M0VGQ0Y4 Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZEQjE4NTYxMzIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81ODYzRUZDRjhDRTcwNjFDREZGMUJBQ0VFQUZDRkRCMTg1NjEz MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvNTg2M0VGQ0Y4Q0U3MDYxQ0RGRjFCQUNFRUFGQ0ZE QjE4NTYxMzIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAI0Tfggvb5U0+D/T1IjT/XxK5GrQJGdN0Il el4f1bCgNrGcLSq1TK712TOZmaGFmqoap1lr4oDk4CVBBKwKEG+FkxCb8EQRLmc9 8FR8p/vHVZkWGYaZtwI7eZMybr3c4U4skapzWBsrXRb+PLjshAxMzz15mG2+q5jT FjMy23fADRjaiBzY77j6s9jtneCcYCyA7uTnkdZKEViPdgQAdcbE8g+fWfO62jvT XD8wMBLgW44wKrdO6rBTr53UX0btFNy+Y82cJLOaggUTrPptdzsNNpSTnj8HhRZq LbC6WC2W0m69dCpm+VB2DM7k3mKhbj7+x2GpU0XTzOF4GOi0BAE= -----END CERTIFICATE-----Generated at Tue May 12 22:46:45 2026 by rpki-client