$ rpki-client -vvf rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft File: 7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft (raw, json) Hash identifier: ze+U5jcp38ZQZdrJ94CSKD2mNPj2WQC8re9YI7wsnrA= Subject key identifier: 1C:85:FC:53:43:74:57:8A:06:3C:EC:2E:4D:32:04:B7:F5:FD:94:0A Authority key identifier: 7F:CE:3E:28:E2:99:EC:07:17:F5:78:A2:31:AB:B6:5F:9B:3E:2F:20 Certificate issuer: /CN=7FCE3E28E299EC0717F578A231ABB65F9B3E2F20 Certificate serial: 28C3520DC46A57A57F4C6185EBC7372E5F16FEAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:49:45 +0000 Manifest this update: Tue 02 Jun 2026 23:44:45 +0000 Manifest next update: Thu 04 Jun 2026 02:18:45 +0000 Files and hashes: 1: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: f9D+tmlskJQe+GGM2u5fqymt4sZqzjW31b307vrzFZA=) 2: 7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl (hash: D/4ck8ZD99OKkeA8GgrOfZOpEv8CLAvQ5GWbpHw2KMY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c3:52:0d:c4:6a:57:a5:7f:4c:61:85:eb:c7:37:2e:5f:16:fe:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FCE3E28E299EC0717F578A231ABB65F9B3E2F20 Validity Not Before: Jun 2 23:44:45 2026 GMT Not After : Jun 4 02:18:45 2026 GMT Subject: CN=1C85FC534374578A063CEC2E4D3204B7F5FD940A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:33:d1:de:62:33:34:bd:92:77:22:4e:0a:83: 1f:83:0c:98:dd:ad:ed:a9:75:ed:92:a2:df:df:16: d0:f5:89:fe:e1:64:d7:82:4d:ad:60:0c:28:fb:e4: d2:bb:e7:cf:c6:15:7d:01:2f:88:4f:a2:ee:11:4e: e9:3a:72:d1:37:5f:92:50:02:e8:c1:45:6f:62:54: f4:d8:a9:41:51:38:c2:7c:cc:47:47:50:8b:eb:ad: 54:79:34:58:41:41:a6:de:68:0c:7c:8a:96:21:1c: 47:a9:32:dd:0a:80:e1:10:35:bc:27:aa:ae:00:5b: f9:51:01:76:04:8b:ea:8f:ff:e9:1a:94:c2:da:af: 69:4e:8a:59:ca:02:3b:8a:d6:4d:93:0c:49:1a:8b: 0b:44:bd:fa:4b:26:0a:3a:13:fe:f4:a5:47:db:f4: 86:2a:7d:1f:43:a7:24:92:6f:8c:e0:86:0f:11:ed: c9:35:cb:97:a0:5c:33:8f:4d:19:59:6d:d5:22:76: 38:64:3c:51:93:80:c2:73:5e:72:66:09:09:f7:76: 39:6b:31:2b:9a:5b:67:d3:a9:b5:ea:a0:0d:44:54: fb:63:64:78:58:eb:f2:f3:cf:c2:82:c9:67:5d:a6: 32:e8:75:c5:b9:be:b1:28:46:21:73:7a:2e:28:b2: 96:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:85:FC:53:43:74:57:8A:06:3C:EC:2E:4D:32:04:B7:F5:FD:94:0A X509v3 Authority Key Identifier: keyid:7F:CE:3E:28:E2:99:EC:07:17:F5:78:A2:31:AB:B6:5F:9B:3E:2F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/7FCE3E28E299EC0717F578A231ABB65F9B3E2F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:53:f0:d6:a9:94:3a:dc:42:ff:bb:df:70:e1:a3:97:15:23: bf:22:dd:af:6b:ba:02:92:e6:55:66:d4:50:5b:f9:e1:de:d3: 4d:8a:e7:e1:c2:60:ad:f1:4e:c3:06:f0:bb:70:3d:0e:1f:56: 99:ab:06:74:4c:79:1e:50:88:70:99:8e:ad:30:4f:b6:7a:86: 30:80:f9:73:57:27:27:0c:fd:4e:fa:d9:9a:93:3a:b5:8b:d7: eb:52:46:d7:df:63:9b:66:6f:04:ad:e9:7a:f4:91:86:43:1c: 40:79:ab:02:27:68:a8:e6:3a:ee:1a:1c:1e:a4:83:4c:17:66: e3:d3:51:5d:18:ae:7c:4a:32:3d:cd:ea:af:90:e8:78:05:13: 62:2d:9e:64:de:f4:bb:d5:84:75:0d:bd:6e:75:30:0b:20:91: 65:a9:44:e0:43:2f:83:1f:51:f2:4a:c3:61:db:c8:5d:1c:0c: 63:06:38:a3:3c:ed:b0:0e:74:d4:31:14:0e:b1:7f:ae:38:7a: 32:5a:ab:10:39:f1:85:ad:f2:81:d0:28:47:9f:99:99:3d:60: 32:95:fc:ae:48:0f:99:58:8c:da:c2:3d:32:c4:38:6b:7f:d1: 20:06:88:44:4b:9b:62:25:e4:ee:72:24:c8:b7:e1:14:9b:fa: 34:8c:4b:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMNSDcRqV6V/TGGF68c3Ll8W/q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZDRTNFMjhFMjk5RUMwNzE3RjU3OEEyMzFBQkI2NUY5 QjNFMkYyMDAeFw0yNjA2MDIyMzQ0NDVaFw0yNjA2MDQwMjE4NDVaMDMxMTAvBgNV BAMTKDFDODVGQzUzNDM3NDU3OEEwNjNDRUMyRTREMzIwNEI3RjVGRDk0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlM9HeYjM0vZJ3Ik4Kgx+DDJjd re2pde2Sot/fFtD1if7hZNeCTa1gDCj75NK758/GFX0BL4hPou4RTuk6ctE3X5JQ AujBRW9iVPTYqUFROMJ8zEdHUIvrrVR5NFhBQabeaAx8ipYhHEepMt0KgOEQNbwn qq4AW/lRAXYEi+qP/+kalMLar2lOilnKAjuK1k2TDEkaiwtEvfpLJgo6E/70pUfb 9IYqfR9DpySSb4zghg8R7ck1y5egXDOPTRlZbdUidjhkPFGTgMJzXnJmCQn3djlr MSuaW2fTqbXqoA1EVPtjZHhY6/Lzz8KCyWddpjLodcW5vrEoRiFzei4ospaJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHIX8U0N0V4oGPOwuTTIEt/X9lAowHwYDVR0j BBgwFoAUf84+KOKZ7AcX9XiiMau2X5s+LyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMTRlM2EtNWJlMC00NmQxLTkwM2MtMDU5YjBiNjg4ODIxLzAvN0ZDRTNFMjhF Mjk5RUMwNzE3RjU3OEEyMzFBQkI2NUY5QjNFMkYyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RkNFM0UyOEUyOTlFQzA3MTdGNTc4QTIzMUFCQjY1RjlCM0Uy RjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvN0ZDRTNFMjhFMjk5RUMwNzE3RjU3OEEyMzFBQkI2 NUY5QjNFMkYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdT8NaplDrcQv+733Dho5cVI78i3a9rugKS 5lVm1FBb+eHe002K5+HCYK3xTsMG8LtwPQ4fVpmrBnRMeR5QiHCZjq0wT7Z6hjCA +XNXJycM/U762ZqTOrWL1+tSRtffY5tmbwSt6Xr0kYZDHEB5qwInaKjmOu4aHB6k g0wXZuPTUV0YrnxKMj3N6q+Q6HgFE2ItnmTe9LvVhHUNvW51MAsgkWWpROBDL4Mf UfJKw2HbyF0cDGMGOKM87bAOdNQxFA6xf644ejJaqxA58YWt8oHQKEefmZk9YDKV /K5ID5lYjNrCPTLEOGt/0SAGiERLm2Il5O5yJMi34RSb+jSMS3k= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:31 2026 by rpki-client