$ rpki-client -vvf rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft File: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft (raw, json) Hash identifier: 9or/Hn2uty93m62O4NlsOpXnb9N7UMp+Bj8mkQgmjdM= Subject key identifier: B2:AF:A7:BE:D9:CA:E4:CA:DC:FB:A3:59:49:F2:44:99:24:6C:07:27 Authority key identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 Certificate issuer: /CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Certificate serial: 3BD9ADA8246DA69B28510B92590202B7181C2724 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 15:28:46 +0000 Manifest this update: Tue 02 Jun 2026 15:23:46 +0000 Manifest next update: Wed 03 Jun 2026 17:23:46 +0000 Files and hashes: 1: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: fL4L75ZfG95OnrYdBzJ8U8ScmLKPMhj+AxoVCGeag9U=) 2: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: te19ceZ+0Is6+1+3K4x4WYPLY+2HU9qAD9W8DfxT5gI=) 3: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: Dt38mAxvAME6FBzgF8BBYH7xxdpz5knQ2OEkqmtxaaE=) 4: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: AYoGa7j37L8hrtr5+H0Rn8sSOm5spOm3kBm4+aOmlpA=) 5: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl (hash: x+P3mIeCNCvVCyTxXy53wCgvpzNLfrBkk5MzA+afVTQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 17:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d9:ad:a8:24:6d:a6:9b:28:51:0b:92:59:02:02:b7:18:1c:27:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Validity Not Before: Jun 2 15:23:46 2026 GMT Not After : Jun 3 17:23:46 2026 GMT Subject: CN=B2AFA7BED9CAE4CADCFBA35949F24499246C0727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:54:6d:51:b9:e3:a5:b7:71:f9:f7:a9:62:ed: 2d:10:ba:a0:a1:18:5f:47:3a:21:f2:1f:29:93:af: 62:21:5a:da:cb:65:e1:95:f2:69:b4:c6:7f:eb:26: 50:21:69:55:db:a5:7d:db:f3:a3:cf:00:22:9d:28: bb:eb:4f:76:c0:59:34:90:50:9d:f3:71:e1:dc:d3: 60:4a:2f:a4:4b:49:19:d7:6c:b0:42:37:91:e5:6b: 51:8c:61:a0:e1:ae:ab:46:fe:2e:af:43:22:ae:54: 99:87:7e:ad:b3:05:7b:c4:df:d8:92:65:f1:01:ca: d5:ff:70:ea:65:10:90:43:1d:bb:08:58:65:f1:97: 0c:08:5a:0c:56:ac:3d:0d:8d:20:b1:11:18:af:91: d4:4f:13:18:53:a6:04:a0:2e:c8:ba:ca:f8:38:15: 2c:78:a3:fb:9b:9f:b9:60:4b:31:5c:00:b9:f3:c7: 0e:c4:c2:a8:3a:db:b7:37:1e:cb:d8:a7:f1:c3:50: 33:91:d2:02:86:a2:78:f3:76:7c:7d:ca:b8:35:01: 94:dd:c1:ed:b3:77:f8:69:fd:a6:b4:86:21:38:62: 10:80:f7:0a:d1:06:e4:1e:9f:a2:95:d6:db:3d:15: 4e:00:e2:e7:6c:4b:67:b0:51:db:90:1a:cb:ea:4d: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AF:A7:BE:D9:CA:E4:CA:DC:FB:A3:59:49:F2:44:99:24:6C:07:27 X509v3 Authority Key Identifier: keyid:F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:26:31:b2:7f:50:0e:47:db:08:98:8c:e6:07:07:12:91:91: a5:ce:91:9b:22:57:b7:2d:57:e4:d4:80:c9:48:d1:d5:a5:5f: b9:89:53:c0:65:e4:fd:97:66:5b:c1:c5:61:dd:ad:d5:f8:33: 10:60:b4:5a:be:a4:e4:89:49:63:db:9a:74:e8:a3:b7:53:bd: 20:61:eb:58:e0:b3:40:3e:2b:f1:63:17:3e:f8:9b:5c:f1:08: e1:3d:10:96:6e:e8:63:15:09:70:4a:4b:4a:7a:bc:1f:fb:83: d4:e1:f6:6d:eb:0a:d3:b2:51:61:04:75:15:1b:0f:f9:0e:5a: b3:e5:93:65:5a:2e:2f:f1:dc:87:0e:9a:35:b3:46:25:04:af: 8a:3a:5c:51:e1:4b:63:f0:87:46:92:42:8c:23:ee:52:b9:a9: b8:51:d4:2a:d6:f2:e9:d1:a8:71:dd:2a:0d:fb:cf:26:2d:2a: 9b:e1:eb:0b:2e:23:a5:4f:02:78:61:f4:f8:2a:8f:57:63:d1: 85:b3:5d:60:68:35:dc:21:9c:85:d6:c9:96:c5:bb:75:3f:28: 8f:71:b6:bf:ef:51:98:77:1b:ef:01:19:2a:d6:d0:93:a3:bd: d0:fd:bb:de:aa:7c:85:29:2a:05:0e:0b:e1:e0:6d:cd:be:37: 81:78:da:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9mtqCRtppsoUQuSWQICtxgcJyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2 QjlCMjg4MzAeFw0yNjA2MDIxNTIzNDZaFw0yNjA2MDMxNzIzNDZaMDMxMTAvBgNV BAMTKEIyQUZBN0JFRDlDQUU0Q0FEQ0ZCQTM1OTQ5RjI0NDk5MjQ2QzA3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVG1RueOlt3H596li7S0QuqCh GF9HOiHyHymTr2IhWtrLZeGV8mm0xn/rJlAhaVXbpX3b86PPACKdKLvrT3bAWTSQ UJ3zceHc02BKL6RLSRnXbLBCN5Hla1GMYaDhrqtG/i6vQyKuVJmHfq2zBXvE39iS ZfEBytX/cOplEJBDHbsIWGXxlwwIWgxWrD0NjSCxERivkdRPExhTpgSgLsi6yvg4 FSx4o/ubn7lgSzFcALnzxw7Ewqg627c3HsvYp/HDUDOR0gKGonjzdnx9yrg1AZTd we2zd/hp/aa0hiE4YhCA9wrRBuQen6KV1ts9FU4A4udsS2ewUduQGsvqTZq5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsq+nvtnK5Mrc+6NZSfJEmSRsBycwHwYDVR0j BBgwFoAU8jbHp3pjcdF/6HyF4sW2lmubKIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdmOGY2YTQtOGQ4Ny00ZWYzLWI0ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3 QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2QjlCMjg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjM2QzdBNzdBNjM3MUQxN0ZFODdDODVFMkM1QjY5NjZCOUIy ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2 OTY2QjlCMjg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAmMbJ/UA5H2wiYjOYHBxKRkaXOkZsiV7ct V+TUgMlI0dWlX7mJU8Bl5P2XZlvBxWHdrdX4MxBgtFq+pOSJSWPbmnToo7dTvSBh 61jgs0A+K/FjFz74m1zxCOE9EJZu6GMVCXBKS0p6vB/7g9Th9m3rCtOyUWEEdRUb D/kOWrPlk2VaLi/x3IcOmjWzRiUEr4o6XFHhS2Pwh0aSQowj7lK5qbhR1CrW8unR qHHdKg37zyYtKpvh6wsuI6VPAnhh9Pgqj1dj0YWzXWBoNdwhnIXWyZbFu3U/KI9x tr/vUZh3G+8BGSrW0JOjvdD9u96qfIUpKgUOC+Hgbc2+N4F42ic= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:09 2026 by rpki-client