$ rpki-client -vvf rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft File: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft (raw, json) Hash identifier: YeQr740/XnClDYzu3s6QkLrPGKjwFNJWG5bix6x8NQE= Subject key identifier: 0A:84:0B:A3:AD:22:C2:F2:8B:86:01:FB:3C:D8:55:DF:C8:43:B9:15 Authority key identifier: F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB Certificate issuer: /CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Certificate serial: 2CDA3BF473B23E329C1F3043432CE7612676FD42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:55:20 +0000 Manifest this update: Tue 02 Jun 2026 16:50:20 +0000 Manifest next update: Wed 03 Jun 2026 18:20:20 +0000 Files and hashes: 1: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: wGUQKy4FIVL/pJvzv4ocXf6nJRNeroqTQeM/u7L/DBg=) 2: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: 4SizHs7Y7jbN84W7yqURK/C+aTckSwx11cvn67uUtqg=) 3: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl (hash: em1hwu1uK+EpArR6vK/eZErVTUEkEo18GU1XWT33xtM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:da:3b:f4:73:b2:3e:32:9c:1f:30:43:43:2c:e7:61:26:76:fd:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Validity Not Before: Jun 2 16:50:20 2026 GMT Not After : Jun 3 18:20:20 2026 GMT Subject: CN=0A840BA3AD22C2F28B8601FB3CD855DFC843B915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:59:be:c0:7c:60:3b:3e:c8:f4:99:a4:9f: bf:95:f8:3d:27:17:24:18:b9:74:f1:e2:11:6c:85: d7:39:92:c2:12:1a:50:0f:8c:9a:bb:cc:bb:23:bd: 4a:53:14:f8:37:56:fd:75:b8:cc:89:42:e0:3d:f4: c9:c3:c2:d2:8b:41:d2:5e:cd:c1:38:4e:9b:98:af: 54:7d:58:2a:b5:4e:e1:46:68:37:31:c1:ab:81:78: 3a:d3:2d:b3:27:54:f5:73:96:20:46:e3:2c:08:a0: 9d:b4:11:bb:89:32:d8:68:f7:5e:cb:1d:ab:d6:38: 76:05:33:04:3a:3c:5c:b1:18:bb:b5:31:bb:31:a6: 96:59:23:78:17:6a:78:29:8e:bb:79:dd:c5:a5:3a: d3:13:d1:09:59:d1:bd:fa:31:a5:3a:ad:9b:12:55: 57:01:d7:d8:d2:3e:ff:fe:da:40:a7:6c:bd:18:9c: a0:cc:b7:68:35:ef:bc:13:d7:f0:6f:7a:99:64:84: 09:ee:c0:97:72:4a:5c:d1:82:c0:95:53:43:52:78: a0:80:2a:9c:ed:36:fb:ca:9a:e1:32:6e:7d:62:4b: c5:15:16:74:30:6d:f3:e2:c7:0a:e3:a4:24:5e:61: 59:2a:0d:41:a3:9a:7c:fa:54:9a:3e:26:b9:4d:65: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:84:0B:A3:AD:22:C2:F2:8B:86:01:FB:3C:D8:55:DF:C8:43:B9:15 X509v3 Authority Key Identifier: keyid:F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4b:71:88:31:8e:c6:18:f9:e7:b8:94:a9:46:17:6a:95:cf: 20:82:5a:3e:ab:8a:97:45:64:40:16:d1:32:f2:80:42:00:3d: 00:e0:ae:a5:59:94:f7:8c:38:08:36:93:74:58:7f:d3:0a:2e: 76:94:07:85:61:1b:25:43:8d:4e:8d:cf:a6:3f:4c:bb:cf:f8: 12:89:3a:05:47:9a:dd:79:ab:e7:43:d2:0b:02:11:e4:af:55: a4:59:ab:4d:64:5d:e0:ac:65:4e:d8:34:da:7c:74:20:cb:49: 4b:31:ae:d3:77:70:4c:5c:39:f1:30:17:88:00:ab:6a:86:4b: de:84:2b:b6:e1:df:bc:ea:76:61:cd:c0:7c:24:30:b9:fb:b2: c0:36:6a:a4:cc:e8:f0:2f:df:45:1f:1a:58:13:3a:7d:f5:30: ab:58:1e:6a:b2:e5:97:14:9c:46:74:b1:32:b4:c7:d9:db:37: 32:a0:86:de:a8:74:15:61:9a:a8:0d:70:b0:78:1c:9c:d4:68: 2c:bd:27:4a:55:8c:e9:ec:1f:b5:30:5e:6a:5c:5b:38:da:f4: 93:3c:bb:5c:db:07:6f:2f:5d:c5:15:76:8e:3e:f6:82:2e:7e: 91:64:8e:dc:b4:06:9a:ba:68:60:17:6d:3f:95:91:aa:75:c7: 00:a7:03:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNo79HOyPjKcHzBDQyznYSZ2/UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2 QTA0NDNCQjAeFw0yNjA2MDIxNjUwMjBaFw0yNjA2MDMxODIwMjBaMDMxMTAvBgNV BAMTKDBBODQwQkEzQUQyMkMyRjI4Qjg2MDFGQjNDRDg1NURGQzg0M0I5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7c1m+wHxgOz7I9Jmkn7+V+D0n FyQYuXTx4hFshdc5ksISGlAPjJq7zLsjvUpTFPg3Vv11uMyJQuA99MnDwtKLQdJe zcE4TpuYr1R9WCq1TuFGaDcxwauBeDrTLbMnVPVzliBG4ywIoJ20EbuJMtho917L HavWOHYFMwQ6PFyxGLu1MbsxppZZI3gXangpjrt53cWlOtMT0QlZ0b36MaU6rZsS VVcB19jSPv/+2kCnbL0YnKDMt2g177wT1/BveplkhAnuwJdySlzRgsCVU0NSeKCA KpztNvvKmuEybn1iS8UVFnQwbfPixwrjpCReYVkqDUGjmnz6VJo+JrlNZSuTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCoQLo60iwvKLhgH7PNhV38hDuRUwHwYDVR0j BBgwFoAU+O8+5XGw5VITKyxqujDvgWoEQ7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NThiNThhZWUtZThlZS00Mjg3LWEyYjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3 MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2QTA0NDNCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVGM0VFNTcxQjBFNTUyMTMyQjJDNkFCQTMwRUY4MTZBMDQ0 M0JCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVG ODE2QTA0NDNCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtLcYgxjsYY+ee4lKlGF2qVzyCCWj6ripdF ZEAW0TLygEIAPQDgrqVZlPeMOAg2k3RYf9MKLnaUB4VhGyVDjU6Nz6Y/TLvP+BKJ OgVHmt15q+dD0gsCEeSvVaRZq01kXeCsZU7YNNp8dCDLSUsxrtN3cExcOfEwF4gA q2qGS96EK7bh37zqdmHNwHwkMLn7ssA2aqTM6PAv30UfGlgTOn31MKtYHmqy5ZcU nEZ0sTK0x9nbNzKght6odBVhmqgNcLB4HJzUaCy9J0pVjOnsH7UwXmpcWzja9JM8 u1zbB28vXcUVdo4+9oIufpFkjty0Bpq6aGAXbT+Vkap1xwCnA3k= -----END CERTIFICATE-----Generated at Wed Jun 3 03:56:59 2026 by rpki-client