$ rpki-client -vvf rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft File: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft (raw, json) Hash identifier: GNBnrfTn4n522oRCabFCvy7nvQN0ta3X/2taM+Knip8= Subject key identifier: 35:57:7A:97:F9:CA:05:10:24:03:1D:FF:8B:36:20:3A:1F:D5:8D:B9 Authority key identifier: F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 Certificate issuer: /CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Certificate serial: 0A6BA63F9A24B0706252C2CB4CB6FD789DA3A8D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:04:58 +0000 Manifest this update: Tue 02 Jun 2026 11:59:58 +0000 Manifest next update: Wed 03 Jun 2026 15:27:58 +0000 Files and hashes: 1: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl (hash: s29BwpHCYBrl/D0u8GgYvLb2slGFsruaBSnfSZwxx4Y=) 2: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: s7j6V9XRLybSdB07wL0FpooAGZX0voKMcNhL/PIgeG4=) 3: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 44fFhWX4KLV5BZcGJB0E9Z9h7E7YxWEzvM4c3ibp+FI=) 4: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: IUK+vwB76Q4G08ehK2Gx52lgwmgXNziNTOU2tmOlHFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 15:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:6b:a6:3f:9a:24:b0:70:62:52:c2:cb:4c:b6:fd:78:9d:a3:a8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Validity Not Before: Jun 2 11:59:58 2026 GMT Not After : Jun 3 15:27:58 2026 GMT Subject: CN=35577A97F9CA051024031DFF8B36203A1FD58DB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bc:d1:b0:34:72:8c:f5:42:da:21:bd:90:74: 9f:81:d0:73:78:10:52:8b:60:5b:4a:fc:6f:23:8c: 99:bd:29:4c:1e:70:9a:10:34:e1:8c:f3:8d:1e:76: b5:23:27:00:32:d4:7d:c8:83:b3:af:04:ac:49:ab: 87:cc:d4:ac:8c:d1:ae:a7:9c:b4:e8:96:04:f5:64: ea:eb:5c:77:24:c1:11:32:f6:2e:0f:d6:49:ed:c4: 25:cd:58:5d:f2:4a:5d:57:24:f6:32:09:c6:30:0f: 8e:27:b5:8d:19:41:d1:0c:1e:c0:a9:9a:3b:7c:42: 2a:bc:67:18:b0:63:80:3b:7e:9f:c3:56:71:48:59: cd:d5:74:b3:3f:30:90:7d:b7:10:99:2e:7c:89:f1: 34:bd:7f:f5:c4:4b:f1:6a:f7:8f:96:05:c8:a8:a5: 16:99:54:de:0c:bb:8b:4e:49:9f:e2:22:0c:f7:a3: 60:c2:69:dc:16:a3:7d:a3:60:3b:fa:34:3a:ff:4e: 5b:46:6a:03:6e:14:a0:35:64:e3:49:8b:e2:3c:85: 43:89:38:21:c3:4b:51:e0:a5:11:6a:8f:f2:f4:fd: 0d:89:6a:16:9f:e4:b1:a7:84:ed:53:83:a5:1a:5b: b6:be:f0:1d:9c:9e:7d:20:ae:c3:f4:f8:8b:70:2d: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:57:7A:97:F9:CA:05:10:24:03:1D:FF:8B:36:20:3A:1F:D5:8D:B9 X509v3 Authority Key Identifier: keyid:F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:83:43:82:4c:cc:80:85:11:8e:5a:a1:fc:f3:16:76:42:f1: bf:96:22:40:b3:21:ad:b5:41:78:4e:93:fd:93:d2:31:c5:fc: 15:ce:79:53:5e:bd:40:28:c2:8e:50:ff:2b:b8:22:8a:a9:0d: b2:c9:41:06:53:3d:8f:c8:d7:51:40:10:c8:39:3c:67:4f:7e: 59:4d:87:12:6e:41:d8:c5:15:23:05:c7:e9:d0:2b:3c:be:a4: 70:41:1f:e1:2b:21:ef:9f:4c:67:1d:09:e5:20:05:a3:8a:ce: b4:d6:2f:5f:3f:cd:41:62:33:e2:2c:ed:88:b2:64:0d:1c:72: 4b:b7:bd:c8:8e:c6:bd:12:39:7b:56:3c:85:0d:21:e9:f5:9f: 18:3d:47:b2:74:ff:09:e7:9a:93:eb:46:d7:f6:76:cd:1e:63: aa:b8:cf:38:1a:3c:8d:72:4d:dc:2e:db:64:b2:66:c6:be:69: 31:79:0c:a5:ce:c3:a5:22:a2:42:72:42:7d:53:e0:87:ed:fd: c8:f9:60:e6:3d:4c:76:74:7b:34:00:d8:10:4e:fe:4f:3d:cd: 53:62:ab:82:0f:4b:88:1a:c6:52:97:f6:fc:d2:6c:00:4e:b9: 04:c1:c0:c5:de:b2:ba:28:72:13:bf:37:c6:d3:0f:7f:f2:7a: 95:d6:d0:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCmumP5oksHBiUsLLTLb9eJ2jqNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1 Mzk5QTdEMTAeFw0yNjA2MDIxMTU5NThaFw0yNjA2MDMxNTI3NThaMDMxMTAvBgNV BAMTKDM1NTc3QTk3RjlDQTA1MTAyNDAzMURGRjhCMzYyMDNBMUZENThEQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvNGwNHKM9ULaIb2QdJ+B0HN4 EFKLYFtK/G8jjJm9KUwecJoQNOGM840edrUjJwAy1H3Ig7OvBKxJq4fM1KyM0a6n nLTolgT1ZOrrXHckwREy9i4P1kntxCXNWF3ySl1XJPYyCcYwD44ntY0ZQdEMHsCp mjt8Qiq8ZxiwY4A7fp/DVnFIWc3VdLM/MJB9txCZLnyJ8TS9f/XES/Fq94+WBcio pRaZVN4Mu4tOSZ/iIgz3o2DCadwWo32jYDv6NDr/TltGagNuFKA1ZONJi+I8hUOJ OCHDS1HgpRFqj/L0/Q2Jahaf5LGnhO1Tg6UaW7a+8B2cnn0grsP0+ItwLfahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNVd6l/nKBRAkAx3/izYgOh/VjbkwHwYDVR0j BBgwFoAU8t7X0a9SW9rWQUs+K697UFOZp9EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk3MmY5YTItYjBmZi00Mjk4LThkYTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFB RjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1Mzk5QTdEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkRFRDdEMUFGNTI1QkRBRDY0MTRCM0UyQkFGN0I1MDUzOTlB N0QxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdC NTA1Mzk5QTdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaDQ4JMzICFEY5aofzzFnZC8b+WIkCzIa21 QXhOk/2T0jHF/BXOeVNevUAowo5Q/yu4IoqpDbLJQQZTPY/I11FAEMg5PGdPfllN hxJuQdjFFSMFx+nQKzy+pHBBH+ErIe+fTGcdCeUgBaOKzrTWL18/zUFiM+Is7Yiy ZA0ccku3vciOxr0SOXtWPIUNIen1nxg9R7J0/wnnmpPrRtf2ds0eY6q4zzgaPI1y Tdwu22SyZsa+aTF5DKXOw6UiokJyQn1T4Ift/cj5YOY9THZ0ezQA2BBO/k89zVNi q4IPS4gaxlKX9vzSbABOuQTBwMXesroochO/N8bTD3/yepXW0Dg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:39 2026 by rpki-client