$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft File: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft (raw, json) Hash identifier: 7Gh5/yxmm+AW+E9JjVIX1LBWOC0SGJwfbkoCl1kVDl4= Subject key identifier: E6:E0:6E:11:98:BD:F4:A1:2D:03:C9:EF:A4:0A:45:32:D3:57:4F:9A Authority key identifier: F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F Certificate issuer: /CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F Certificate serial: 2C38D47CFDB9B6EC2991A367220D75C0B3DBCE2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:52:47 +0000 Manifest this update: Tue 02 Jun 2026 18:47:47 +0000 Manifest next update: Wed 03 Jun 2026 20:53:47 +0000 Files and hashes: 1: F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl (hash: M9bBsVku4L5qX53QSqNTxRE45ozCaeKkwNj384kscfU=) 2: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: WoyiyEwtcxrs6WeZl6+1LDF+/GCvDZPi/2jRACfAICg=) 3: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: FbWZ4d1oaoXc64Oi7ejcQls/PiOFOld1/wrHXSd2XuI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:38:d4:7c:fd:b9:b6:ec:29:91:a3:67:22:0d:75:c0:b3:db:ce:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D8F0D989586503859341DF7FF4AE8FF12A4A1F Validity Not Before: Jun 2 18:47:47 2026 GMT Not After : Jun 3 20:53:47 2026 GMT Subject: CN=E6E06E1198BDF4A12D03C9EFA40A4532D3574F9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:1e:48:ee:9c:81:7a:e6:d6:03:e4:40:5f: e2:39:67:31:8d:b8:fc:fe:ac:d0:af:3f:14:0c:b6: f9:d7:35:d6:57:93:a6:5e:06:5d:94:e3:5e:0f:99: 7f:44:93:7e:b7:56:11:b3:e1:40:3f:43:9c:20:04: fc:84:4a:db:e7:e0:7c:59:4c:1d:2b:aa:3f:4d:2d: 90:db:16:bc:28:5e:9a:e3:1e:bd:ff:fa:17:72:d2: 04:45:c6:ee:f6:44:00:e1:1d:5d:be:bb:d4:43:8f: 71:d6:e6:df:96:fa:0c:9a:f9:dc:1b:4c:7c:9b:5b: bb:2b:e6:85:d8:6d:28:68:92:49:45:2e:02:3b:36: c5:57:e5:e4:5a:48:88:1f:31:6b:b8:34:62:a7:55: f6:b5:54:8d:6b:ff:20:a4:4c:c0:1f:45:47:73:d2: 0c:4c:d1:c5:a1:6f:9b:74:84:59:01:20:a3:75:ce: cc:75:ea:d9:19:1e:7f:0e:b6:84:e2:a2:8c:c9:19: 33:16:6c:a9:79:46:65:b3:9e:c9:45:51:3a:b7:b2: 5d:a7:47:fa:84:1e:07:35:86:93:c3:42:bd:c3:d7: f6:74:06:35:13:94:8f:10:9c:a0:ed:40:06:36:a4: af:97:3e:f3:c2:31:2b:24:4b:8f:5f:d3:cd:84:0c: ee:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E0:6E:11:98:BD:F4:A1:2D:03:C9:EF:A4:0A:45:32:D3:57:4F:9A X509v3 Authority Key Identifier: keyid:F0:D8:F0:D9:89:58:65:03:85:93:41:DF:7F:F4:AE:8F:F1:2A:4A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/F0D8F0D989586503859341DF7FF4AE8FF12A4A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:cb:e2:f6:03:ba:3a:3a:2d:34:6e:9d:fb:70:5b:d9:6e:dd: 62:78:55:d7:30:20:cb:7f:57:52:31:2b:22:d5:84:c8:35:6a: 59:70:fb:de:ef:1c:f1:3c:82:ff:83:19:75:e0:33:5b:2b:2f: 39:b5:b6:2f:d2:4c:7e:a6:38:b1:ac:e6:a7:f8:c2:92:3b:c4: 46:f4:dd:fa:ee:ae:a9:5d:b3:78:71:26:0a:97:c7:47:5a:c1: a0:0d:d6:54:9b:29:61:3e:b6:4f:4b:3a:a9:de:42:60:28:eb: e7:28:ad:9a:4b:59:1d:a3:aa:ab:e6:f9:bb:17:1d:ca:b1:43: 4d:a1:db:eb:16:3c:73:63:81:23:6a:57:97:bc:0d:33:16:83: 1e:fd:30:10:32:9b:a7:d5:cb:77:87:e1:cd:c9:3b:66:95:35: b7:f2:5c:35:cb:23:52:c0:5d:e5:df:83:65:73:aa:80:32:48: 49:96:72:38:ac:0f:f7:78:ce:09:40:32:3e:27:b4:de:3f:9c: 1e:dc:14:15:e4:08:f9:64:1c:b0:63:aa:04:82:f4:b3:a0:4e: b2:4b:e2:cf:4a:1c:71:88:96:6c:e0:6d:86:62:24:7e:1c:07: e1:29:d4:28:c8:73:8e:c1:d1:4e:14:c3:25:04:93:c5:a4:26: a6:0f:f7:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDjUfP25tuwpkaNnIg11wLPbzi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZG MTJBNEExRjAeFw0yNjA2MDIxODQ3NDdaFw0yNjA2MDMyMDUzNDdaMDMxMTAvBgNV BAMTKEU2RTA2RTExOThCREY0QTEyRDAzQzlFRkE0MEE0NTMyRDM1NzRGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aB5I7pyBeubWA+RAX+I5ZzGN uPz+rNCvPxQMtvnXNdZXk6ZeBl2U414PmX9Ek363VhGz4UA/Q5wgBPyEStvn4HxZ TB0rqj9NLZDbFrwoXprjHr3/+hdy0gRFxu72RADhHV2+u9RDj3HW5t+W+gya+dwb THybW7sr5oXYbShokklFLgI7NsVX5eRaSIgfMWu4NGKnVfa1VI1r/yCkTMAfRUdz 0gxM0cWhb5t0hFkBIKN1zsx16tkZHn8OtoTioozJGTMWbKl5RmWznslFUTq3sl2n R/qEHgc1hpPDQr3D1/Z0BjUTlI8QnKDtQAY2pK+XPvPCMSskS49f082EDO7DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5uBuEZi99KEtA8nvpApFMtNXT5owHwYDVR0j BBgwFoAU8Njw2YlYZQOFk0Hff/Suj/EqSh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkZmY4MTktMmJhZC00ODNkLTlmYTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4 OTU4NjUwMzg1OTM0MURGN0ZGNEFFOEZGMTJBNEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEQ4RjBEOTg5NTg2NTAzODU5MzQxREY3RkY0QUU4RkYxMkE0 QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvRjBEOEYwRDk4OTU4NjUwMzg1OTM0MURGN0ZGNEFF OEZGMTJBNEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjL4vYDujo6LTRunftwW9lu3WJ4VdcwIMt/ V1IxKyLVhMg1allw+97vHPE8gv+DGXXgM1srLzm1ti/STH6mOLGs5qf4wpI7xEb0 3frurqlds3hxJgqXx0dawaAN1lSbKWE+tk9LOqneQmAo6+corZpLWR2jqqvm+bsX HcqxQ02h2+sWPHNjgSNqV5e8DTMWgx79MBAym6fVy3eH4c3JO2aVNbfyXDXLI1LA XeXfg2VzqoAySEmWcjisD/d4zglAMj4ntN4/nB7cFBXkCPlkHLBjqgSC9LOgTrJL 4s9KHHGIlmzgbYZiJH4cB+Ep1CjIc47B0U4UwyUEk8WkJqYP92U= -----END CERTIFICATE-----Generated at Wed Jun 3 03:28:22 2026 by rpki-client