$ rpki-client -vvf rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft File: F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft (raw, json) Hash identifier: k4fNRmzvjphGlGFV3dojqcC3+lPqjirD2ejjUsYMRAg= Subject key identifier: 65:53:57:E8:2B:38:61:7D:99:AC:37:DC:82:98:DA:9B:7C:2C:63:61 Authority key identifier: F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D Certificate issuer: /CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D Certificate serial: 3B84B35EDE81B762F77A7474C1D218F0DCD7262C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:52:18 +0000 Manifest this update: Tue 02 Jun 2026 21:47:18 +0000 Manifest next update: Wed 03 Jun 2026 22:59:18 +0000 Files and hashes: 1: 3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa (hash: XONanozPD8at5BU77v08+BcvjpWg0G96Hwi2FNBJOcs=) 2: 3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa (hash: f47a49V3YxCF+Lv56KFQm6oHGHVoS/JPApI1aBIRXJE=) 3: 3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa (hash: exG4AdJRVuQMX1UGtjkLTqWmxcQunulo0tEKmdw4iDY=) 4: F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl (hash: GCnnnlxN2qKVhvEot+8X+kx/pJgXgpUQ9KtpQlv0Yy8=) 5: 323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa (hash: +fmCqGE1N+8rTm5OExPB+Qrmtcx74bskEpH/ZHGnYVA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:84:b3:5e:de:81:b7:62:f7:7a:74:74:c1:d2:18:f0:dc:d7:26:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D Validity Not Before: Jun 2 21:47:18 2026 GMT Not After : Jun 3 22:59:18 2026 GMT Subject: CN=655357E82B38617D99AC37DC8298DA9B7C2C6361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:3d:99:d5:9b:2c:02:4a:a0:a2:c2:9c:b2: c8:05:82:25:ea:79:60:83:cf:af:3b:85:ed:18:a8: 0c:72:ef:45:04:4e:52:2e:15:2e:27:46:cc:52:a4: 72:51:fd:e9:69:d0:dd:66:ef:53:15:1f:0a:9b:f7: 62:3c:45:81:da:e2:a6:3f:dd:8e:fa:95:01:a4:0a: 9c:93:0b:17:51:bb:85:57:8a:5b:c7:c3:31:07:ae: d1:bd:c0:6a:a4:51:91:f1:db:0f:28:cd:ec:ec:ca: 6d:e7:06:e2:d7:60:33:b8:48:f3:4e:2b:e1:1c:12: aa:49:a9:05:68:bb:8f:55:e7:33:86:3a:f3:c3:0b: 49:a4:d8:83:18:19:9b:50:8c:be:ff:7c:e5:87:f5: e4:41:f1:59:e1:f7:aa:e3:de:9e:8f:0a:24:4f:49: b6:55:a3:0f:ec:89:01:be:a3:e0:b2:04:4b:42:cc: e1:3b:7e:4b:77:09:44:19:5a:a2:b4:70:bf:2d:92: 64:45:42:1a:17:86:d4:e8:8c:6c:2e:b2:65:0b:03: 85:34:47:1a:d7:5d:75:45:03:e3:35:4d:82:45:88: 5f:28:f7:94:1c:20:51:6f:29:e9:e8:27:fa:9c:18: 6a:6b:a0:f7:0c:ac:54:a7:59:7f:2e:2c:17:5c:88: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:53:57:E8:2B:38:61:7D:99:AC:37:DC:82:98:DA:9B:7C:2C:63:61 X509v3 Authority Key Identifier: keyid:F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:34:61:e2:5a:5a:e0:31:c2:c1:d0:6b:e2:fa:b3:2d:9f:5e: 36:3a:dc:6d:32:96:10:f3:e7:49:13:77:8a:5b:93:da:16:3d: ce:73:70:bb:23:2b:c5:20:b2:de:92:1f:8e:2f:fc:51:73:18: ea:b9:50:1f:5d:6d:e4:8f:72:ab:20:d3:ee:e4:f7:2d:a0:13: 8b:81:f0:d7:69:c0:9e:85:98:00:13:6a:2d:c9:36:b4:30:7b: 9d:20:60:4b:5b:80:05:1f:e2:98:2f:53:0e:09:e3:bd:58:70: da:9e:b1:c9:4f:dd:84:9b:09:39:c2:73:40:22:bf:9b:0e:13: aa:3e:65:6e:0e:cd:20:99:4f:c5:72:c7:8c:05:e6:53:c8:c2: 35:d4:6b:7a:8f:e3:34:0e:af:a8:69:b3:29:69:c5:26:10:fb: 30:1a:2d:e7:06:f6:67:7e:6c:7b:7e:dc:d4:ee:17:a2:3f:5a: a5:32:a4:53:9e:18:91:06:29:25:80:a9:7d:95:c1:f5:ae:a9: 78:a3:2b:71:d4:5e:c7:fe:bb:6a:d0:44:f0:eb:00:ad:45:a2: dc:ab:b0:ab:13:92:41:b7:f0:09:d9:46:86:27:87:20:42:0b: be:1d:e0:08:34:9d:4f:14:e8:bd:39:ca:54:f1:be:ba:02:ca: 51:8b:10:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4SzXt6Bt2L3enR0wdIY8NzXJiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0QTQzQUYyNUI3MzZCRUYxMDc0Mzc1QzVGQkZGNTYy RTJCQjkxRDAeFw0yNjA2MDIyMTQ3MThaFw0yNjA2MDMyMjU5MThaMDMxMTAvBgNV BAMTKDY1NTM1N0U4MkIzODYxN0Q5OUFDMzdEQzgyOThEQTlCN0MyQzYzNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+iT2Z1ZssAkqgosKcssgFgiXq eWCDz687he0YqAxy70UETlIuFS4nRsxSpHJR/elp0N1m71MVHwqb92I8RYHa4qY/ 3Y76lQGkCpyTCxdRu4VXilvHwzEHrtG9wGqkUZHx2w8ozezsym3nBuLXYDO4SPNO K+EcEqpJqQVou49V5zOGOvPDC0mk2IMYGZtQjL7/fOWH9eRB8Vnh96rj3p6PCiRP SbZVow/siQG+o+CyBEtCzOE7fkt3CUQZWqK0cL8tkmRFQhoXhtTojGwusmULA4U0 RxrXXXVFA+M1TYJFiF8o95QcIFFvKenoJ/qcGGproPcMrFSnWX8uLBdciGPZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZVNX6Cs4YX2ZrDfcgpjam3wsY2EwHwYDVR0j BBgwFoAU80pDryW3Nr7xB0N1xfv/Vi4ruR0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg0NjMyODUtN2MyOC00MzVhLTgyYmItZmNjMzJkNTgwMjBlLzAvRjM0QTQzQUYy NUI3MzZCRUYxMDc0Mzc1QzVGQkZGNTYyRTJCQjkxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzRBNDNBRjI1QjczNkJFRjEwNzQzNzVDNUZCRkY1NjJFMkJC OTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg0NjMyODUtN2MyOC00MzVhLTgy YmItZmNjMzJkNTgwMjBlLzAvRjM0QTQzQUYyNUI3MzZCRUYxMDc0Mzc1QzVGQkZG NTYyRTJCQjkxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFA0YeJaWuAxwsHQa+L6sy2fXjY63G0ylhDz 50kTd4pbk9oWPc5zcLsjK8Ugst6SH44v/FFzGOq5UB9dbeSPcqsg0+7k9y2gE4uB 8NdpwJ6FmAATai3JNrQwe50gYEtbgAUf4pgvUw4J471YcNqesclP3YSbCTnCc0Ai v5sOE6o+ZW4OzSCZT8Vyx4wF5lPIwjXUa3qP4zQOr6hpsylpxSYQ+zAaLecG9md+ bHt+3NTuF6I/WqUypFOeGJEGKSWAqX2VwfWuqXijK3HUXsf+u2rQRPDrAK1Fotyr sKsTkkG38AnZRoYnhyBCC74d4Ag0nU8U6L05ylTxvroCylGLELE= -----END CERTIFICATE-----Generated at Wed Jun 3 03:40:06 2026 by rpki-client