$ rpki-client -vvf rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft File: F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft (raw, json) Hash identifier: TqKtWw7dEEbQ6ttI74nHa2lPZuzDme5bzH09Nwf+Gfc= Subject key identifier: 41:71:07:9A:AD:67:2A:49:8E:3F:92:C7:45:43:C9:61:A3:6A:45:0D Authority key identifier: F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA Certificate issuer: /CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA Certificate serial: 37D2630C8C3B39DF915FCD02F6517C7F3589A21D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:11:22 +0000 Manifest this update: Tue 02 Jun 2026 09:06:22 +0000 Manifest next update: Wed 03 Jun 2026 11:25:22 +0000 Files and hashes: 1: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: qEG4LxFSDZmW4WNTreFkTFdisp7JtEexuG522GtAKfg=) 2: F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl (hash: mwNYkgCivnZkSkzvhJC++oKv8JxYpAH4ghwUxSPCohU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d2:63:0c:8c:3b:39:df:91:5f:cd:02:f6:51:7c:7f:35:89:a2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0FC57FF24DAE357E0792B0418ADF9F1833B56CA Validity Not Before: Jun 2 09:06:22 2026 GMT Not After : Jun 3 11:25:22 2026 GMT Subject: CN=4171079AAD672A498E3F92C74543C961A36A450D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4a:28:29:10:94:7d:39:38:fe:00:28:53:19: db:6e:b2:df:2d:ab:02:b0:df:46:9e:cc:31:6f:30: fc:ac:74:c8:33:0b:fa:f7:49:92:c7:43:04:50:d4: ca:bc:4b:7c:0f:dd:db:11:a5:b5:d3:43:ae:6a:c1: 14:9f:45:9c:d2:c8:06:6f:cb:ac:f4:34:a3:90:ef: d2:a5:7f:05:ff:bb:de:1e:d1:64:7a:b8:70:51:78: cd:51:2a:cb:d8:f3:11:da:80:5b:4d:97:7e:a1:bb: 37:e8:38:5f:5f:ee:6e:91:76:82:92:73:be:2b:b0: 7e:c3:14:9c:93:bc:47:41:ab:79:c9:87:c4:e7:a4: d6:51:05:48:9b:89:06:e6:b4:26:95:c8:ee:f8:3e: fd:45:9c:2a:c7:23:fe:1e:bd:a7:58:f5:2e:29:cf: 9e:21:4c:58:2c:c4:5d:ad:b8:3d:8f:75:28:04:46: 7d:65:67:47:69:3d:8b:22:36:78:61:e5:57:5b:3a: 39:84:40:04:48:dd:3a:3f:fa:b8:50:ae:c1:7a:89: d0:5d:b2:f0:91:c9:8a:32:54:23:fb:0b:34:81:26: ef:b7:8e:00:48:68:52:92:0b:18:a3:0c:d2:71:de: 12:86:2b:09:b4:ae:71:75:fc:6b:41:b7:4b:03:c4: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:71:07:9A:AD:67:2A:49:8E:3F:92:C7:45:43:C9:61:A3:6A:45:0D X509v3 Authority Key Identifier: keyid:F0:FC:57:FF:24:DA:E3:57:E0:79:2B:04:18:AD:F9:F1:83:3B:56:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/F0FC57FF24DAE357E0792B0418ADF9F1833B56CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a1:8b:92:ed:da:8b:cd:9a:33:0a:0a:b1:14:72:41:3d:41: 6c:6c:20:07:e3:3b:d9:1e:69:ac:84:2a:ee:af:2f:20:1a:9e: 12:cb:1c:42:58:6f:60:70:8f:65:d9:f7:09:c3:ea:b8:9c:64: a6:92:4b:ae:38:32:3b:8d:49:04:ab:54:a5:35:94:15:65:cd: 80:a1:f3:e5:2d:90:f6:96:15:e6:32:0c:73:86:f6:eb:84:fc: dd:0a:4b:b7:73:48:52:18:47:49:f1:1a:30:20:b6:c6:dc:d0: 3f:ad:43:76:df:9b:7d:f3:e1:8f:79:3b:e7:2e:7c:9f:d8:55: 54:72:41:6b:02:c8:82:bb:90:f6:cc:42:aa:fa:60:76:16:7b: a5:6a:d0:c5:b4:93:be:28:24:58:e3:3e:57:dd:bc:8c:bc:e7: e4:d9:6e:ec:95:05:46:de:ba:57:d5:34:03:84:8a:68:4c:93: 8c:1d:f9:c3:11:ad:b6:fb:db:6c:e4:0d:13:19:38:2b:51:24: 6c:3d:ea:c0:61:ff:91:99:f7:9f:fc:b0:8f:8c:e0:a0:1f:51: 2b:09:8b:9d:ae:65:f6:36:db:04:41:75:7c:c0:fb:3e:21:b6: 4f:30:03:8e:85:c9:ca:44:7d:f5:02:a4:e7:f6:a8:56:07:5d: 3f:1f:9c:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9JjDIw7Od+RX80C9lF8fzWJoh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGQzU3RkYyNERBRTM1N0UwNzkyQjA0MThBREY5RjE4 MzNCNTZDQTAeFw0yNjA2MDIwOTA2MjJaFw0yNjA2MDMxMTI1MjJaMDMxMTAvBgNV BAMTKDQxNzEwNzlBQUQ2NzJBNDk4RTNGOTJDNzQ1NDNDOTYxQTM2QTQ1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdSigpEJR9OTj+AChTGdtust8t qwKw30aezDFvMPysdMgzC/r3SZLHQwRQ1Mq8S3wP3dsRpbXTQ65qwRSfRZzSyAZv y6z0NKOQ79KlfwX/u94e0WR6uHBReM1RKsvY8xHagFtNl36huzfoOF9f7m6RdoKS c74rsH7DFJyTvEdBq3nJh8TnpNZRBUibiQbmtCaVyO74Pv1FnCrHI/4evadY9S4p z54hTFgsxF2tuD2PdSgERn1lZ0dpPYsiNnhh5VdbOjmEQARI3To/+rhQrsF6idBd svCRyYoyVCP7CzSBJu+3jgBIaFKSCxijDNJx3hKGKwm0rnF1/GtBt0sDxHaJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQXEHmq1nKkmOP5LHRUPJYaNqRQ0wHwYDVR0j BBgwFoAU8PxX/yTa41fgeSsEGK358YM7VsowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdkY2YwYTQtYWQxYi00YjcyLTg0MGYtMWY0YTgwN2Y2NTk0LzAvRjBGQzU3RkYy NERBRTM1N0UwNzkyQjA0MThBREY5RjE4MzNCNTZDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEZDNTdGRjI0REFFMzU3RTA3OTJCMDQxOEFERjlGMTgzM0I1 NkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdkY2YwYTQtYWQxYi00YjcyLTg0 MGYtMWY0YTgwN2Y2NTk0LzAvRjBGQzU3RkYyNERBRTM1N0UwNzkyQjA0MThBREY5 RjE4MzNCNTZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHehi5Lt2ovNmjMKCrEUckE9QWxsIAfjO9ke aayEKu6vLyAanhLLHEJYb2Bwj2XZ9wnD6ricZKaSS644MjuNSQSrVKU1lBVlzYCh 8+UtkPaWFeYyDHOG9uuE/N0KS7dzSFIYR0nxGjAgtsbc0D+tQ3bfm33z4Y95O+cu fJ/YVVRyQWsCyIK7kPbMQqr6YHYWe6Vq0MW0k74oJFjjPlfdvIy85+TZbuyVBUbe ulfVNAOEimhMk4wd+cMRrbb722zkDRMZOCtRJGw96sBh/5GZ95/8sI+M4KAfUSsJ i52uZfY22wRBdXzA+z4htk8wA46FycpEffUCpOf2qFYHXT8fnCI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:21:00 2026 by rpki-client