$ rpki-client -vvf rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft File: F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft (raw, json) Hash identifier: AL4IqBe1pCZDKAUWk1CFsu3bz4s1m+MZXDXB1M3/UP4= Subject key identifier: 9A:33:C3:0B:1A:9A:64:D2:35:9C:48:AE:C2:47:83:11:21:52:A7:87 Authority key identifier: F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A Certificate issuer: /CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A Certificate serial: 6B09B4E058B4DD3C6FEF7C2BD1987B1E20B56249 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:39:24 +0000 Manifest this update: Tue 02 Jun 2026 11:34:24 +0000 Manifest next update: Wed 03 Jun 2026 15:25:24 +0000 Files and hashes: 1: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: pP7hVh9pLCyGOsoGwijXmPq3n49Ada61D2NFfmF5PeU=) 2: F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl (hash: p4YqBuUBJMT3SAU4I2Qt6KbNYkYPYCIxskyocMqZAcM=) 3: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: p7VwLh9rGTmmzKRM+j0/DLnuVRuHxbeAnVLeUJIFLBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:09:b4:e0:58:b4:dd:3c:6f:ef:7c:2b:d1:98:7b:1e:20:b5:62:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F384542E14B9BCCFE27145D9C58EB1A785F1464A Validity Not Before: Jun 2 11:34:24 2026 GMT Not After : Jun 3 15:25:24 2026 GMT Subject: CN=9A33C30B1A9A64D2359C48AEC24783112152A787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:0d:ae:a2:c0:21:d9:e0:55:4f:d3:7e:3b: a8:5c:83:b0:11:9d:e6:bf:52:b6:e6:32:8a:11:7f: a9:74:11:70:6a:d8:51:fe:85:a2:c3:1f:1b:88:70: 59:e3:fe:3d:03:3f:57:5d:70:35:9e:75:48:14:ae: 6e:23:fe:67:4f:e4:46:d3:41:63:b3:7d:08:2a:9c: c4:3e:e1:4b:e4:0c:44:88:ad:b7:b4:8b:70:b3:4e: 6a:92:3a:20:76:66:7d:f4:4c:3e:b8:6d:28:eb:45: a7:bc:79:06:1d:2b:83:74:e9:b3:fd:35:5d:2f:e0: 2c:fc:89:22:6d:ab:a0:93:be:b4:d0:62:bc:07:84: 5e:8b:9e:d1:4a:b7:46:c6:6a:7b:1c:20:d7:17:d0: 61:4b:ea:cc:49:68:30:a0:99:70:d6:98:f2:c0:79: 7c:70:55:6c:3f:af:c2:03:9b:52:c5:86:c2:d2:90: b1:97:bf:e1:a8:11:f7:6a:02:dc:3c:0b:b1:2f:fd: 7c:e8:16:05:95:36:45:fd:f5:37:35:0f:6f:f2:c2: 4e:c5:76:ef:fa:3e:bf:19:c4:dc:e9:06:af:48:d9: 51:93:dd:b6:12:d2:b3:67:00:03:6a:7d:f4:37:34: bb:2b:84:5b:87:71:6b:b2:f9:f4:69:80:a6:8d:42: bd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:33:C3:0B:1A:9A:64:D2:35:9C:48:AE:C2:47:83:11:21:52:A7:87 X509v3 Authority Key Identifier: keyid:F3:84:54:2E:14:B9:BC:CF:E2:71:45:D9:C5:8E:B1:A7:85:F1:46:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F384542E14B9BCCFE27145D9C58EB1A785F1464A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/F384542E14B9BCCFE27145D9C58EB1A785F1464A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:62:ce:57:b0:6b:43:dd:2d:12:68:45:35:d6:72:63:a4:ef: 16:25:a5:2e:02:cb:ef:09:ae:1b:e9:9e:1f:36:a6:c6:00:63: 9c:c7:ce:31:94:2e:82:a1:aa:43:a8:8e:a3:50:80:a3:d4:7d: 67:f8:64:4e:b2:35:da:7d:1d:0c:04:ce:eb:58:60:eb:c7:2f: 17:09:b2:8f:4f:c0:7e:eb:cd:cd:b0:45:33:20:d3:a8:f0:47: fd:9c:90:f9:b5:69:34:38:ca:7e:4b:c8:80:26:c5:bb:2e:29: 63:7d:6f:ec:40:d1:04:21:3d:05:fb:7c:66:7d:69:cd:cb:a3: d0:c6:38:49:1e:91:00:60:fa:be:c5:bf:47:8e:b2:f9:c6:21: 27:35:00:90:8f:a7:e9:09:19:f1:24:6c:da:94:a2:a2:49:a1: 2c:6c:30:04:93:eb:53:16:b0:0d:f2:45:9b:14:ca:14:58:f5: 56:e3:ab:51:d0:79:b6:3c:30:52:a4:9d:ad:0b:c1:42:52:8f: 57:d8:50:d4:2b:ce:7c:b0:6a:ac:39:9b:4f:96:92:ac:d4:16: 35:91:81:3e:0f:59:1b:cd:1d:96:a0:90:8c:6a:7b:83:ec:0b: 72:1f:81:3f:47:d3:ec:87:7c:fa:fd:9c:76:b6:dc:c1:4d:d6: 2e:7d:4c:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUawm04Fi03Txv73wr0Zh7HiC1YkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4NDU0MkUxNEI5QkNDRkUyNzE0NUQ5QzU4RUIxQTc4 NUYxNDY0QTAeFw0yNjA2MDIxMTM0MjRaFw0yNjA2MDMxNTI1MjRaMDMxMTAvBgNV BAMTKDlBMzNDMzBCMUE5QTY0RDIzNTlDNDhBRUMyNDc4MzExMjE1MkE3ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfqA2uosAh2eBVT9N+O6hcg7AR nea/UrbmMooRf6l0EXBq2FH+haLDHxuIcFnj/j0DP1ddcDWedUgUrm4j/mdP5EbT QWOzfQgqnMQ+4UvkDESIrbe0i3CzTmqSOiB2Zn30TD64bSjrRae8eQYdK4N06bP9 NV0v4Cz8iSJtq6CTvrTQYrwHhF6LntFKt0bGanscINcX0GFL6sxJaDCgmXDWmPLA eXxwVWw/r8IDm1LFhsLSkLGXv+GoEfdqAtw8C7Ev/XzoFgWVNkX99Tc1D2/ywk7F du/6Pr8ZxNzpBq9I2VGT3bYS0rNnAANqffQ3NLsrhFuHcWuy+fRpgKaNQr3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmjPDCxqaZNI1nEiuwkeDESFSp4cwHwYDVR0j BBgwFoAU84RULhS5vM/icUXZxY6xp4XxRkowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGNkMjRlODItZjMwNi00NDAwLWIwMGEtZDU5YjQxZTI4NmJiLzAvRjM4NDU0MkUx NEI5QkNDRkUyNzE0NUQ5QzU4RUIxQTc4NUYxNDY0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzg0NTQyRTE0QjlCQ0NGRTI3MTQ1RDlDNThFQjFBNzg1RjE0 NjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRjM4NDU0MkUxNEI5QkNDRkUyNzE0NUQ5QzU4RUIx QTc4NUYxNDY0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRizlewa0PdLRJoRTXWcmOk7xYlpS4Cy+8J rhvpnh82psYAY5zHzjGULoKhqkOojqNQgKPUfWf4ZE6yNdp9HQwEzutYYOvHLxcJ so9PwH7rzc2wRTMg06jwR/2ckPm1aTQ4yn5LyIAmxbsuKWN9b+xA0QQhPQX7fGZ9 ac3Lo9DGOEkekQBg+r7Fv0eOsvnGISc1AJCPp+kJGfEkbNqUoqJJoSxsMAST61MW sA3yRZsUyhRY9Vbjq1HQebY8MFKkna0LwUJSj1fYUNQrznywaqw5m0+WkqzUFjWR gT4PWRvNHZagkIxqe4PsC3IfgT9H0+yHfPr9nHa23MFN1i59TLQ= -----END CERTIFICATE-----Generated at Wed Jun 3 04:21:02 2026 by rpki-client