$ rpki-client -vvf rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft File: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft (raw, json) Hash identifier: mFOVpanaDMp8eE6iXhcK/PNzbZFT0ozPP3rcjR7h/7k= Subject key identifier: 51:AA:A7:43:D5:75:E5:25:A9:FA:67:58:1C:CA:EF:6F:FA:07:44:55 Authority key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 Certificate issuer: /CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Certificate serial: 2DF51107ECAE839FAB815DF409B4B36C5B1AE5CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:17:49 +0000 Manifest this update: Tue 02 Jun 2026 10:12:49 +0000 Manifest next update: Wed 03 Jun 2026 12:36:49 +0000 Files and hashes: 1: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: 7b9mH0AqpbaWOjZuhqAUMtLrNThijZIRNrCRnrYSzNM=) 2: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl (hash: /tV5Q1DMEHpLhkFuXXTUL5i+OKGvh+Y0xOJ+w+Uahy4=) 3: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: SMrMHroRrnR9209rBvRZEueHMTUoBXgkpdWBsenWKng=) 4: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: zPAHd45OpjoBbHs1U75wpIAsa5qEeUqNzEkLN1k94xM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f5:11:07:ec:ae:83:9f:ab:81:5d:f4:09:b4:b3:6c:5b:1a:e5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Validity Not Before: Jun 2 10:12:49 2026 GMT Not After : Jun 3 12:36:49 2026 GMT Subject: CN=51AAA743D575E525A9FA67581CCAEF6FFA074455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:e4:90:1d:c0:41:1a:45:8c:e4:7f:9d:8a: 7e:71:90:a9:4d:2d:40:65:b1:ec:ee:b0:00:54:e9: 5e:1b:b7:9a:4c:6a:5b:da:c1:0f:14:78:a0:93:4b: 38:dc:eb:5a:d5:47:65:4b:d4:18:79:c4:70:5e:7d: d8:e0:d6:80:8e:35:d5:5f:b6:ec:e1:e3:2f:5f:82: b2:8a:a0:83:06:87:7f:a1:ca:b1:b8:18:8c:bb:28: ea:af:08:c7:a1:7f:5e:b2:5d:6f:80:f8:96:14:51: 95:be:4e:36:42:58:67:04:df:9e:4d:64:36:d6:f5: 3f:58:fe:cb:3d:36:cf:a9:5a:8b:38:3a:73:cf:a1: 50:a1:50:75:e9:ff:2a:2d:76:97:e7:21:a5:60:be: 1a:f8:f7:eb:13:eb:88:b2:e0:b2:81:98:01:9e:ff: d0:89:5f:2b:5a:ae:2c:27:92:5b:34:aa:3a:5c:85: 4c:03:fd:ef:82:9a:5f:92:2c:8e:e5:de:e2:61:87: 5f:61:81:75:f7:ef:4e:08:5c:7b:25:33:5c:09:de: 20:a6:37:a1:8c:20:8f:07:1e:65:52:9b:fa:82:d2: 79:b2:28:00:b0:a4:74:6d:3b:ee:76:12:c0:e8:d3: e4:84:f1:8e:2a:a9:23:24:f5:bb:30:14:b2:b6:e2: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AA:A7:43:D5:75:E5:25:A9:FA:67:58:1C:CA:EF:6F:FA:07:44:55 X509v3 Authority Key Identifier: keyid:F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:59:74:17:29:5f:53:5b:a3:4a:c9:d1:6a:c2:10:19:11:15: ac:e4:aa:e8:b0:05:c8:6d:b5:8f:6d:5c:58:48:39:e9:87:1a: c5:b1:9e:02:98:72:73:8a:36:b9:8a:6b:ae:85:a5:0b:23:17: 41:2d:5d:30:3c:a1:7c:46:8b:ee:4a:9a:a0:55:0d:7d:cc:49: b9:b7:ed:9d:b7:0f:74:38:5e:c6:da:e7:d5:37:a8:f6:04:a8: e7:a6:11:97:94:01:5b:9d:18:00:03:2d:94:3d:7a:47:61:63: 35:76:02:60:90:2e:4d:79:48:9a:6c:50:a2:57:cd:5b:9b:94: a9:de:7a:9c:5c:97:b6:e3:ab:cc:6a:d8:a2:f7:90:56:d7:c5: 13:4a:9e:6f:ba:9a:3f:51:85:95:55:df:e8:aa:7a:61:2c:63: b1:f7:42:09:be:70:fb:27:af:44:6d:6e:3e:5b:7d:5f:f3:cf: a7:8a:fe:7f:38:64:50:ac:cb:0b:48:48:7e:f8:57:7f:5a:0b: f2:17:e7:93:d2:66:ad:10:e4:29:6f:33:29:50:4a:f8:64:4f: 3b:3c:79:93:73:fa:f3:8e:7b:00:68:98:80:d2:76:c4:39:aa: 3a:3a:19:7c:99:4f:ab:16:ee:65:18:d1:db:3c:4e:e3:eb:16: a1:92:70:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULfURB+yug5+rgV30CbSzbFsa5cswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIzM0RE MDYxRDlBNDAeFw0yNjA2MDIxMDEyNDlaFw0yNjA2MDMxMjM2NDlaMDMxMTAvBgNV BAMTKDUxQUFBNzQzRDU3NUU1MjVBOUZBNjc1ODFDQ0FFRjZGRkEwNzQ0NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91+SQHcBBGkWM5H+din5xkKlN LUBlsezusABU6V4bt5pMalvawQ8UeKCTSzjc61rVR2VL1Bh5xHBefdjg1oCONdVf tuzh4y9fgrKKoIMGh3+hyrG4GIy7KOqvCMehf16yXW+A+JYUUZW+TjZCWGcE355N ZDbW9T9Y/ss9Ns+pWos4OnPPoVChUHXp/yotdpfnIaVgvhr49+sT64iy4LKBmAGe /9CJXytariwnkls0qjpchUwD/e+Cml+SLI7l3uJhh19hgXX3704IXHslM1wJ3iCm N6GMII8HHmVSm/qC0nmyKACwpHRtO+52EsDo0+SE8Y4qqSMk9bswFLK24nC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUaqnQ9V15SWp+mdYHMrvb/oHRFUwHwYDVR0j BBgwFoAU+PZoZTLnu3BOgCttO0izPdBh2aQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIyNmJlN2ItMmUyOC00OTUwLWFhNGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUz MkU3QkI3MDRFODAyQjZEM0I0OEIzM0REMDYxRDlBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEY2Njg2NTMyRTdCQjcwNEU4MDJCNkQzQjQ4QjMzREQwNjFE OUE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh NGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIz M0REMDYxRDlBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZZdBcpX1Nbo0rJ0WrCEBkRFazkquiwBcht tY9tXFhIOemHGsWxngKYcnOKNrmKa66FpQsjF0EtXTA8oXxGi+5KmqBVDX3MSbm3 7Z23D3Q4Xsba59U3qPYEqOemEZeUAVudGAADLZQ9ekdhYzV2AmCQLk15SJpsUKJX zVublKneepxcl7bjq8xq2KL3kFbXxRNKnm+6mj9RhZVV3+iqemEsY7H3Qgm+cPsn r0Rtbj5bfV/zz6eK/n84ZFCsywtISH74V39aC/IX55PSZq0Q5ClvMylQSvhkTzs8 eZNz+vOOewBomIDSdsQ5qjo6GXyZT6sW7mUY0ds8TuPrFqGScCM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:45 2026 by rpki-client