$ rpki-client -vvf rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft File: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft (raw, json) Hash identifier: BQWuKj06EbYyB7so5Z9mZ3iTOfNQbJkC/5joe+FR81Y= Subject key identifier: 62:2A:12:E5:6E:AD:BB:2A:46:10:4D:D4:91:4D:1D:A4:C7:A6:BC:8F Authority key identifier: F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 Certificate issuer: /CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Certificate serial: 37E2035CF862021240EB904DB9E19EE8A29EF9D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft Manifest number: 2C Signing time: Wed 03 Jun 2026 01:26:30 +0000 Manifest this update: Wed 03 Jun 2026 01:21:30 +0000 Manifest next update: Thu 04 Jun 2026 03:32:30 +0000 Files and hashes: 1: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl (hash: 9nEIhnLwp2aPoOu5GOVa3+C87m+Jqpx6tu2gUlVyEDE=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: vFYZUwPOZFg6qgBQGFtuePgvWZXO4yFUVyM6qrVOlT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e2:03:5c:f8:62:02:12:40:eb:90:4d:b9:e1:9e:e8:a2:9e:f9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Validity Not Before: Jun 3 01:21:30 2026 GMT Not After : Jun 4 03:32:30 2026 GMT Subject: CN=622A12E56EADBB2A46104DD4914D1DA4C7A6BC8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:ba:8c:4a:29:be:cd:7f:d6:0a:31:3e:3b: 7e:f3:f7:b7:55:cd:14:0a:94:8b:0e:71:f0:39:76: 15:b8:f0:83:74:74:4e:65:7b:ea:93:47:28:76:a9: b4:78:ac:ee:8a:83:7c:e0:29:ba:c8:87:60:ef:c4: a7:fd:63:80:e4:68:0e:95:c2:b3:86:fe:f0:d2:04: 44:bf:8b:1c:2d:ea:95:f6:65:7d:0a:bb:20:75:f9: ff:f2:1c:38:88:4e:d9:23:e1:68:0e:d6:0f:9a:f9: b7:da:5c:75:e6:77:83:91:39:3a:85:e4:74:b5:0d: 0b:82:fa:97:95:c9:fe:a1:ee:b5:06:8b:cb:0d:39: d6:9e:d2:16:8c:6f:28:32:ac:53:f2:52:ec:4a:ea: b0:13:2b:76:72:c1:d6:67:8e:11:1b:c2:80:51:4b: 86:3a:c2:d9:75:ac:26:17:db:f3:44:ac:d3:65:ae: ad:8b:ce:61:a6:96:d3:31:36:d9:9c:6d:cb:58:a9: 84:78:89:e8:1b:03:1f:22:10:d7:d7:fa:41:20:8a: a1:ba:80:ef:a7:61:12:67:b7:9a:8a:92:ee:08:44: 1e:fa:9b:c6:4f:45:ab:64:52:f4:f1:25:8d:7b:f7: 70:6e:92:49:3d:c9:6e:c1:9d:9a:e9:37:87:03:47: 98:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2A:12:E5:6E:AD:BB:2A:46:10:4D:D4:91:4D:1D:A4:C7:A6:BC:8F X509v3 Authority Key Identifier: keyid:F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:12:94:3b:8d:9e:2d:7b:c8:43:63:c0:09:0b:e4:f3:62:c6: a4:a5:78:46:74:b9:87:c4:a9:ba:d6:49:24:1d:dd:04:01:02: a2:1d:81:7d:61:6a:d9:e6:5e:95:6b:21:7d:da:cc:00:15:9f: c4:3a:d6:07:78:8e:fb:c7:24:c1:48:02:36:62:83:fa:b5:c9: 85:cb:41:97:d1:f6:53:2a:ca:da:9a:f2:69:44:83:72:b8:c0: a3:f4:dd:bb:28:30:3e:83:2c:8a:75:d5:2e:bc:e0:d0:d0:a5: c8:fa:bc:bf:dc:46:13:0e:0f:3d:7e:b6:6f:ce:b2:26:f3:69: 23:2c:63:1e:f7:d3:5e:79:e7:fd:73:ee:f2:fd:01:03:4e:e2: 52:34:2b:11:b0:55:13:f0:59:08:49:f3:09:71:98:11:f1:89: 30:d2:5c:2b:6f:fd:38:71:55:ea:b6:df:2c:e4:df:f7:e6:76: d5:fc:a7:d9:2f:b7:af:da:58:49:a5:f9:f5:71:70:09:a4:4b: 34:c8:34:fc:0f:39:84:e6:d2:d3:79:f7:3d:14:53:48:71:8f: 93:1b:17:42:0f:77:8f:aa:6b:cd:0f:cd:93:e8:5c:3a:c4:2b: b8:1c:95:0d:c9:22:26:98:55:e8:30:70:24:2a:be:f9:75:f4: 54:2d:55:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+IDXPhiAhJA65BNueGe6KKe+dAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgzOEMy RkY2RjFFMzAeFw0yNjA2MDMwMTIxMzBaFw0yNjA2MDQwMzMyMzBaMDMxMTAvBgNV BAMTKDYyMkExMkU1NkVBREJCMkE0NjEwNERENDkxNEQxREE0QzdBNkJDOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+LqMSim+zX/WCjE+O37z97dV zRQKlIsOcfA5dhW48IN0dE5le+qTRyh2qbR4rO6Kg3zgKbrIh2DvxKf9Y4DkaA6V wrOG/vDSBES/ixwt6pX2ZX0KuyB1+f/yHDiITtkj4WgO1g+a+bfaXHXmd4OROTqF 5HS1DQuC+peVyf6h7rUGi8sNOdae0haMbygyrFPyUuxK6rATK3ZywdZnjhEbwoBR S4Y6wtl1rCYX2/NErNNlrq2LzmGmltMxNtmcbctYqYR4iegbAx8iENfX+kEgiqG6 gO+nYRJnt5qKku4IRB76m8ZPRatkUvTxJY1793Bukkk9yW7BnZrpN4cDR5iLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYioS5W6tuypGEE3UkU0dpMemvI8wHwYDVR0j BBgwFoAU8ohaIeIVhViuhkOo/9SDjC/28eMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFmMjU2MzQtZjU4My00NmJjLTllOGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFF MjE1ODU1OEFFODY0M0E4RkZENDgzOEMyRkY2RjFFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjg4NUEyMUUyMTU4NTU4QUU4NjQzQThGRkQ0ODM4QzJGRjZG MUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgz OEMyRkY2RjFFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYSlDuNni17yENjwAkL5PNixqSleEZ0uYfE qbrWSSQd3QQBAqIdgX1hatnmXpVrIX3azAAVn8Q61gd4jvvHJMFIAjZig/q1yYXL QZfR9lMqytqa8mlEg3K4wKP03bsoMD6DLIp11S684NDQpcj6vL/cRhMODz1+tm/O sibzaSMsYx7301555/1z7vL9AQNO4lI0KxGwVRPwWQhJ8wlxmBHxiTDSXCtv/Thx Veq23yzk3/fmdtX8p9kvt6/aWEml+fVxcAmkSzTINPwPOYTm0tN59z0UU0hxj5Mb F0IPd4+qa80PzZPoXDrEK7gclQ3JIiaYVegwcCQqvvl19FQtVTM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:12:12 2026 by rpki-client