$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft File: FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft (raw, json) Hash identifier: 4nuz1e5t1PiumQhbK0PnZ+WTO+wFuGQSbXY7ZChqMR0= Subject key identifier: 2B:22:E4:2D:EA:99:45:34:F5:D2:B0:F6:61:83:3C:D8:12:7D:11:31 Authority key identifier: FE:D5:7B:6A:0C:A0:BB:25:22:DC:00:EC:0D:79:B4:7B:10:D2:D6:AB Certificate issuer: /CN=FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB Certificate serial: 1F786B3A1E1B9EA40F5A45DAB65EB0D00DE9E0ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 18:27:18 +0000 Manifest this update: Tue 02 Jun 2026 18:22:18 +0000 Manifest next update: Wed 03 Jun 2026 20:06:18 +0000 Files and hashes: 1: FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.crl (hash: 7MB6T6EkfJXran4HaATiLB8bHRVsDPoKtQwyDrE4/XA=) 2: 3130332e33392e35322e302f32342d3234203d3e203633353033.roa (hash: Fo5NB9vASxOhrtlcTFfuoSfV+Q1Mqfl65n0mUhSShiU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.crl rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 20:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:78:6b:3a:1e:1b:9e:a4:0f:5a:45:da:b6:5e:b0:d0:0d:e9:e0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB Validity Not Before: Jun 2 18:22:18 2026 GMT Not After : Jun 3 20:06:18 2026 GMT Subject: CN=2B22E42DEA994534F5D2B0F661833CD8127D1131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:17:6a:a3:99:c0:9d:f0:62:20:85:e9:0b: b3:1e:7d:9f:03:3a:ba:bb:17:e2:f1:9d:71:be:0d: 3d:08:8a:a7:cf:9c:51:a0:0b:41:a1:d6:00:29:00: 93:36:0d:c4:07:e7:47:d4:39:1d:df:5b:a2:67:0c: c9:74:48:89:94:4c:46:8b:22:26:bf:f5:bc:35:89: 20:66:03:93:ea:68:f7:12:f8:47:f4:2f:dd:de:56: 82:93:fd:70:a9:81:94:82:98:b7:bd:95:87:e8:73: e6:37:21:ab:2f:7e:0f:e2:98:1a:76:6b:a9:cc:fd: 50:8d:08:be:a2:ca:1e:56:65:58:54:e7:5c:83:72: 18:43:43:69:73:47:33:3a:c5:72:bb:85:01:b5:df: 80:d4:1d:28:aa:4b:b4:7c:04:e0:c5:5b:6e:ef:bb: b9:a7:1e:ea:b5:9f:01:b5:a5:90:34:cb:70:5b:3a: dc:c7:93:a2:dc:52:5a:1f:49:33:21:78:97:e0:24: be:31:b8:d5:da:2d:8d:9f:d9:1f:07:9c:b6:aa:6d: 74:ca:cb:fb:34:71:23:1c:47:88:13:4b:2e:6e:c9: cb:23:b2:e1:7b:fa:61:08:9a:f6:33:c1:6d:90:a1: 82:e1:9a:01:4a:d9:f9:d1:0e:5a:46:97:be:6a:16: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:22:E4:2D:EA:99:45:34:F5:D2:B0:F6:61:83:3C:D8:12:7D:11:31 X509v3 Authority Key Identifier: keyid:FE:D5:7B:6A:0C:A0:BB:25:22:DC:00:EC:0D:79:B4:7B:10:D2:D6:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FED57B6A0CA0BB2522DC00EC0D79B47B10D2D6AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:dc:32:95:f5:e7:9d:4e:c6:3e:1a:72:d1:79:7f:19:9d:7f: 50:d3:ef:37:0a:5e:a6:95:92:83:25:6e:bc:c0:2e:8c:df:17: d6:2d:10:6c:84:c2:86:38:d9:7d:c9:60:38:33:ab:75:35:86: f4:a3:51:77:bf:fc:ab:4f:3e:c1:aa:79:03:1c:14:20:64:e6: 4b:a3:ff:05:15:96:59:69:5c:5b:1c:5e:8e:45:48:71:7b:10: ae:d0:e7:f7:ab:d5:a9:e5:ad:e4:5c:ff:3c:42:87:9c:e7:35: f7:01:b6:e5:ef:49:eb:9a:bf:b8:1e:ea:19:3a:e7:a7:f5:36: 47:9a:23:bd:9e:4f:55:6c:99:a3:a8:d5:a9:7d:ba:df:14:48: 27:43:a6:8e:42:52:87:5c:3d:0d:c2:87:dd:9d:a7:6a:71:a4: cb:69:1c:aa:f8:17:50:a6:8e:81:a8:5a:48:80:3f:44:1e:87: 18:15:d8:8f:7b:df:f6:0b:58:ba:40:56:f2:52:93:81:c3:1c: 9c:a4:07:21:8e:96:a8:3e:56:b0:6a:c4:75:80:ea:75:34:b6: bf:1b:a8:4f:70:1c:96:44:3e:9a:85:70:31:f9:e0:0f:2b:17: 61:39:6b:e8:11:11:d3:fd:d5:b9:8c:92:7e:f9:5b:f0:cc:4f: cc:c7:27:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3hrOh4bnqQPWkXatl6w0A3p4O0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVENTdCNkEwQ0EwQkIyNTIyREMwMEVDMEQ3OUI0N0Ix MEQyRDZBQjAeFw0yNjA2MDIxODIyMThaFw0yNjA2MDMyMDA2MThaMDMxMTAvBgNV BAMTKDJCMjJFNDJERUE5OTQ1MzRGNUQyQjBGNjYxODMzQ0Q4MTI3RDExMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjxdqo5nAnfBiIIXpC7MefZ8D Orq7F+LxnXG+DT0IiqfPnFGgC0Gh1gApAJM2DcQH50fUOR3fW6JnDMl0SImUTEaL Iia/9bw1iSBmA5PqaPcS+Ef0L93eVoKT/XCpgZSCmLe9lYfoc+Y3Iasvfg/imBp2 a6nM/VCNCL6iyh5WZVhU51yDchhDQ2lzRzM6xXK7hQG134DUHSiqS7R8BODFW27v u7mnHuq1nwG1pZA0y3BbOtzHk6LcUlofSTMheJfgJL4xuNXaLY2f2R8HnLaqbXTK y/s0cSMcR4gTSy5uycsjsuF7+mEImvYzwW2QoYLhmgFK2fnRDlpGl75qFtAvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKyLkLeqZRTT10rD2YYM82BJ9ETEwHwYDVR0j BBgwFoAU/tV7agyguyUi3ADsDXm0exDS1qswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI5NzUyZjYtNjA2Ni00YjM4LTg3Y2MtOWJhNjNkMTllMjJjLzAvRkVENTdCNkEw Q0EwQkIyNTIyREMwMEVDMEQ3OUI0N0IxMEQyRDZBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRUQ1N0I2QTBDQTBCQjI1MjJEQzAwRUMwRDc5QjQ3QjEwRDJE NkFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI5NzUyZjYtNjA2Ni00YjM4LTg3 Y2MtOWJhNjNkMTllMjJjLzAvRkVENTdCNkEwQ0EwQkIyNTIyREMwMEVDMEQ3OUI0 N0IxMEQyRDZBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTcMpX1551Oxj4actF5fxmdf1DT7zcKXqaV koMlbrzALozfF9YtEGyEwoY42X3JYDgzq3U1hvSjUXe//KtPPsGqeQMcFCBk5kuj /wUVlllpXFscXo5FSHF7EK7Q5/er1anlreRc/zxCh5znNfcBtuXvSeuav7ge6hk6 56f1NkeaI72eT1VsmaOo1al9ut8USCdDpo5CUodcPQ3Ch92dp2pxpMtpHKr4F1Cm joGoWkiAP0QehxgV2I973/YLWLpAVvJSk4HDHJykByGOlqg+VrBqxHWA6nU0tr8b qE9wHJZEPpqFcDH54A8rF2E5a+gREdP91bmMkn75W/DMT8zHJ9Y= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:17 2026 by rpki-client