$ rpki-client -vvf rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft File: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft (raw, json) Hash identifier: 2jG0N8zxuscifkWBC8Uv5CtvkqGydvDBm1mu9Q7CXf8= Subject key identifier: 25:A0:4B:DE:11:8A:0E:43:5E:A6:DB:4B:DE:66:27:C4:48:D1:50:A5 Authority key identifier: 5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 Certificate issuer: /CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Certificate serial: 516B4C91EA4A5F732B2A80D9F9B4F367DF99D4A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:59:34 +0000 Manifest this update: Tue 12 May 2026 14:54:34 +0000 Manifest next update: Wed 13 May 2026 18:54:34 +0000 Files and hashes: 1: 5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl (hash: rzfrgIB8sP9ioerg4WlD8eQesgjqrjNGoHOJK7Wby1s=) 2: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: YzbPSpHu4Y/3sNkzMjgGkQaP8RKL2rlB1MRk9WcO/JU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6b:4c:91:ea:4a:5f:73:2b:2a:80:d9:f9:b4:f3:67:df:99:d4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4 Validity Not Before: May 12 14:54:34 2026 GMT Not After : May 13 18:54:34 2026 GMT Subject: CN=25A04BDE118A0E435EA6DB4BDE6627C448D150A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:5d:44:38:a4:02:e9:59:2d:97:4b:cd:4e: fd:d7:db:b0:3f:4e:66:f5:97:2d:9b:8a:fd:59:5e: 8b:f2:3e:1a:cf:66:06:16:fb:9f:5f:ee:eb:17:c7: 4a:88:f4:ab:94:78:8f:bc:24:12:82:02:4e:46:a2: 69:75:4e:6a:1b:10:9a:02:c7:54:f4:38:c9:ab:19: 09:9a:f7:85:fb:72:e9:0a:35:7d:b9:ce:72:86:60: 94:e3:df:2d:6c:64:48:19:f8:a5:76:f6:5c:13:90: f5:20:18:ff:a2:21:76:b7:33:84:2c:0d:fa:06:bc: e1:b9:a9:10:01:b3:e8:26:90:a3:53:51:2c:ec:5b: c4:80:e5:43:c5:20:5e:d5:d3:b0:a6:63:f7:d9:46: b4:07:31:c7:23:51:43:59:da:30:38:ec:8b:da:1c: d6:d6:91:f7:d8:68:ab:a2:d5:25:17:68:31:e0:b4: 0d:df:1d:1d:5c:4a:70:69:b4:c0:6e:7a:01:4a:c7: 5b:ee:75:71:8f:83:50:d9:cf:a0:4b:33:d2:c1:7a: a9:14:eb:88:43:5b:ff:9b:53:da:78:65:73:bc:13: 5b:fd:2c:1f:37:10:91:9e:4d:b5:27:79:29:57:3a: c5:dc:be:c8:1d:aa:96:34:3c:e1:ff:75:f1:01:ca: 62:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A0:4B:DE:11:8A:0E:43:5E:A6:DB:4B:DE:66:27:C4:48:D1:50:A5 X509v3 Authority Key Identifier: keyid:5F:C6:89:EA:B9:41:D2:E0:F4:03:F4:D8:FE:7B:88:64:9C:CD:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/5FC689EAB941D2E0F403F4D8FE7B88649CCD7DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:63:e2:a1:34:7f:30:73:fa:24:0a:fb:41:a3:a0:0b:9e:7c: 6b:d2:ad:86:ea:47:78:b4:3c:c3:5a:a1:0e:4a:8d:8d:00:48: db:8b:09:85:86:94:73:85:18:ac:bf:c3:92:69:10:12:0a:82: c5:66:54:29:51:f9:cb:d4:84:9b:36:53:e5:54:da:1a:1f:3f: cf:e7:9b:cb:ab:f4:67:d2:3f:de:fe:f2:a1:4b:4c:da:8a:56: 2a:ba:c9:dc:12:66:b1:ae:e8:d0:37:bf:6a:b1:05:10:18:fd: 92:91:06:13:f3:01:73:fc:27:14:7d:77:53:7b:3a:e8:c2:bf: b9:10:2e:29:b6:f4:d2:49:89:97:fb:a9:d1:1a:a9:0c:f9:4d: 23:3d:ec:6a:53:a3:23:ac:66:bf:f6:73:48:6d:b2:5f:f8:20: d9:bc:7c:b3:05:73:b6:06:b0:09:ec:e4:4d:59:17:12:19:27: cf:8e:df:df:ca:7f:d0:49:78:b1:0d:e2:92:bd:c5:20:a3:cb: b3:be:ad:00:ec:8c:1a:af:da:74:1e:69:ad:9a:85:e8:a0:7d: d7:be:2f:91:b9:c6:1b:9e:35:89:8d:18:c3:2d:99:34:72:f7: 88:f0:1c:e4:a2:50:bb:91:34:25:e8:2d:37:fe:f7:f9:38:09: 8a:c4:ed:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUWtMkepKX3MrKoDZ+bTzZ9+Z1KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5 Q0NEN0RDNDAeFw0yNjA1MTIxNDU0MzRaFw0yNjA1MTMxODU0MzRaMDMxMTAvBgNV BAMTKDI1QTA0QkRFMTE4QTBFNDM1RUE2REI0QkRFNjYyN0M0NDhEMTUwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcF1EOKQC6Vktl0vNTv3X27A/ Tmb1ly2biv1ZXovyPhrPZgYW+59f7usXx0qI9KuUeI+8JBKCAk5Goml1TmobEJoC x1T0OMmrGQma94X7cukKNX25znKGYJTj3y1sZEgZ+KV29lwTkPUgGP+iIXa3M4Qs DfoGvOG5qRABs+gmkKNTUSzsW8SA5UPFIF7V07CmY/fZRrQHMccjUUNZ2jA47Iva HNbWkffYaKui1SUXaDHgtA3fHR1cSnBptMBuegFKx1vudXGPg1DZz6BLM9LBeqkU 64hDW/+bU9p4ZXO8E1v9LB83EJGeTbUneSlXOsXcvsgdqpY0POH/dfEBymL/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJaBL3hGKDkNepttL3mYnxEjRUKUwHwYDVR0j BBgwFoAUX8aJ6rlB0uD0A/TY/nuIZJzNfcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFlOGJjYzktNDNhMS00YmFiLWI2ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFC OTQxRDJFMEY0MDNGNEQ4RkU3Qjg4NjQ5Q0NEN0RDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RkM2ODlFQUI5NDFEMkUwRjQwM0Y0RDhGRTdCODg2NDlDQ0Q3 REM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvNUZDNjg5RUFCOTQxRDJFMEY0MDNGNEQ4RkU3Qjg4 NjQ5Q0NEN0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlj4qE0fzBz+iQK+0GjoAuefGvSrYbqR3i0 PMNaoQ5KjY0ASNuLCYWGlHOFGKy/w5JpEBIKgsVmVClR+cvUhJs2U+VU2hofP8/n m8ur9GfSP97+8qFLTNqKViq6ydwSZrGu6NA3v2qxBRAY/ZKRBhPzAXP8JxR9d1N7 OujCv7kQLim29NJJiZf7qdEaqQz5TSM97GpToyOsZr/2c0htsl/4INm8fLMFc7YG sAns5E1ZFxIZJ8+O39/Kf9BJeLEN4pK9xSCjy7O+rQDsjBqv2nQeaa2aheigfde+ L5G5xhueNYmNGMMtmTRy94jwHOSiULuRNCXoLTf+9/k4CYrE7W8= -----END CERTIFICATE-----Generated at Tue May 12 23:46:00 2026 by rpki-client