$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft File: F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft (raw, json) Hash identifier: eysmINGZaLEGoiI/pp0/XSChFbzXe8oB7Y6J0cJ22zo= Subject key identifier: 88:95:99:30:AF:42:A2:D3:BA:80:F3:9F:05:80:7F:9D:2F:17:F6:FE Authority key identifier: F6:4D:06:FB:29:DD:7C:63:FD:12:E0:D2:83:1D:00:CF:CC:9D:3B:CA Certificate issuer: /CN=F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA Certificate serial: 33B4464DDBCECA4EB6C8BB36F53FD0213EC2A7FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:44:05 +0000 Manifest this update: Tue 02 Jun 2026 15:39:05 +0000 Manifest next update: Wed 03 Jun 2026 18:33:05 +0000 Files and hashes: 1: F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl (hash: jgwEEu/SJoLx6mfzE1tpdKiOlKLKf2IwlzudD3iqHDE=) 2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: BZY0+bJnzvWTGl0me+IsT0sdxq8LsPOVFzv3Xd1pRAM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b4:46:4d:db:ce:ca:4e:b6:c8:bb:36:f5:3f:d0:21:3e:c2:a7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA Validity Not Before: Jun 2 15:39:05 2026 GMT Not After : Jun 3 18:33:05 2026 GMT Subject: CN=88959930AF42A2D3BA80F39F05807F9D2F17F6FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:03:48:a3:7d:02:03:69:be:6c:44:c2:1c: d3:54:a0:71:7f:b4:4d:42:76:bb:bb:ea:e4:31:7e: 42:f5:53:21:c7:1c:3f:40:37:37:4c:50:68:ec:88: 91:aa:2a:7c:04:9f:4e:56:a9:7c:a7:7c:91:a8:98: 88:e1:6a:76:ee:4b:2c:f3:7f:c0:98:d6:de:d3:27: cc:df:9a:0d:6f:3d:1c:cf:ac:c4:f0:4c:e6:85:1a: c6:e0:f9:0f:e2:5f:19:5a:85:96:85:e8:75:fe:d7: ce:5c:33:d8:9c:29:07:b4:96:6a:fe:41:a1:3f:5f: 62:8c:db:ff:64:91:e7:6d:c1:ef:20:6d:41:f1:00: 1f:c8:f7:8d:e1:11:3a:63:fc:c8:00:6a:0f:c6:fc: 7b:d0:74:02:ac:fa:1a:83:23:e6:70:33:fe:f9:27: e6:d0:93:38:7b:55:c1:22:49:20:9a:f0:1e:2a:9f: 92:4e:b3:fc:d1:b8:f9:b1:d7:fe:dc:cd:21:78:ac: aa:c0:bd:ec:97:d8:d0:9b:64:ed:13:1d:99:e8:01: 25:ac:ee:d3:9c:a6:96:f8:92:3c:ab:c5:f8:31:0b: 3b:ed:00:3b:0b:68:75:5c:85:b3:ef:55:1e:30:24: f2:70:24:61:a8:7a:fe:de:c1:b8:66:30:3a:33:d9: 27:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:95:99:30:AF:42:A2:D3:BA:80:F3:9F:05:80:7F:9D:2F:17:F6:FE X509v3 Authority Key Identifier: keyid:F6:4D:06:FB:29:DD:7C:63:FD:12:E0:D2:83:1D:00:CF:CC:9D:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/F64D06FB29DD7C63FD12E0D2831D00CFCC9D3BCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ed:65:f6:8e:0f:59:ea:a8:e3:44:ca:eb:ff:ad:d5:c8:60: 03:49:dd:1b:33:f8:7a:25:24:79:f4:7a:a6:89:94:bf:ff:e7: 4a:11:da:a0:21:d8:94:b9:7b:09:7b:7d:d2:95:11:19:83:3e: 55:53:14:1e:b3:09:bc:40:bb:fb:1d:81:0a:c7:52:7e:a5:6b: 56:ab:c7:e9:09:7c:44:c7:90:5f:cc:81:a0:bb:1b:2b:34:12: da:83:ba:e0:75:12:a1:5f:49:42:e1:57:79:3c:01:de:8a:61: 4e:3a:45:a7:d0:4c:f1:c4:33:8b:a4:74:a2:d5:61:43:2a:f2: 85:9c:d6:1f:51:c1:67:e1:46:ae:c7:41:8b:93:bf:75:6a:ac: d2:aa:1d:a4:5d:c6:d7:c8:85:21:49:b8:3c:8c:04:f6:3a:9a: 76:ff:79:17:c5:16:09:a4:d1:57:79:91:ee:10:1f:a1:5a:bd: 25:35:d3:c8:0e:09:30:75:5f:35:a1:c4:41:da:a9:fd:5e:f0: d2:c6:bb:3d:85:d4:c2:18:f2:67:9c:5d:26:a1:61:3c:9b:9b: a2:ae:6c:42:69:04:b1:66:80:1e:dd:eb:0f:d6:2f:83:71:b8: f5:8c:13:57:43:cf:e4:d4:6a:f0:a6:4d:5e:2f:47:42:4a:72: c6:be:f3:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7RGTdvOyk62yLs29T/QIT7Cp/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY0RDA2RkIyOUREN0M2M0ZEMTJFMEQyODMxRDAwQ0ZD QzlEM0JDQTAeFw0yNjA2MDIxNTM5MDVaFw0yNjA2MDMxODMzMDVaMDMxMTAvBgNV BAMTKDg4OTU5OTMwQUY0MkEyRDNCQTgwRjM5RjA1ODA3RjlEMkYxN0Y2RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8swNIo30CA2m+bETCHNNUoHF/ tE1Cdru76uQxfkL1UyHHHD9ANzdMUGjsiJGqKnwEn05WqXynfJGomIjhanbuSyzz f8CY1t7TJ8zfmg1vPRzPrMTwTOaFGsbg+Q/iXxlahZaF6HX+185cM9icKQe0lmr+ QaE/X2KM2/9kkedtwe8gbUHxAB/I943hETpj/MgAag/G/HvQdAKs+hqDI+ZwM/75 J+bQkzh7VcEiSSCa8B4qn5JOs/zRuPmx1/7czSF4rKrAveyX2NCbZO0THZnoASWs 7tOcppb4kjyrxfgxCzvtADsLaHVchbPvVR4wJPJwJGGoev7ewbhmMDoz2Se5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiJWZMK9CotO6gPOfBYB/nS8X9v4wHwYDVR0j BBgwFoAU9k0G+yndfGP9EuDSgx0Az8ydO8owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTdlOGRkNDAtYmI5NC00ZDQzLWI4ODktOGEwOThkN2Y0NWFjLzAvRjY0RDA2RkIy OUREN0M2M0ZEMTJFMEQyODMxRDAwQ0ZDQzlEM0JDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjREMDZGQjI5REQ3QzYzRkQxMkUwRDI4MzFEMDBDRkNDOUQz QkNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvRjY0RDA2RkIyOUREN0M2M0ZEMTJFMEQyODMxRDAw Q0ZDQzlEM0JDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPtZfaOD1nqqONEyuv/rdXIYANJ3Rsz+Hol JHn0eqaJlL//50oR2qAh2JS5ewl7fdKVERmDPlVTFB6zCbxAu/sdgQrHUn6la1ar x+kJfETHkF/MgaC7Gys0EtqDuuB1EqFfSULhV3k8Ad6KYU46RafQTPHEM4ukdKLV YUMq8oWc1h9RwWfhRq7HQYuTv3VqrNKqHaRdxtfIhSFJuDyMBPY6mnb/eRfFFgmk 0Vd5ke4QH6FavSU108gOCTB1XzWhxEHaqf1e8NLGuz2F1MIY8mecXSahYTybm6Ku bEJpBLFmgB7d6w/WL4NxuPWME1dDz+TUavCmTV4vR0JKcsa+800= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:17 2026 by rpki-client