$ rpki-client -vvf rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft File: F328EAEFA60AA0B57B040C04D541138249BE47A3.mft (raw, json) Hash identifier: ZEwqRQcpLOGYBqiyj9C4dH/vIPujmH4IUxGKlYPqXzo= Subject key identifier: B5:CF:FB:E4:7C:54:4B:A4:CE:D6:AC:51:B4:35:2E:35:F9:91:38:9A Authority key identifier: F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 Certificate issuer: /CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Certificate serial: 0BAF569E51042532AC10FDE3F7645EE0E0BF0D83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:22:54 +0000 Manifest this update: Tue 02 Jun 2026 22:17:54 +0000 Manifest next update: Thu 04 Jun 2026 02:11:54 +0000 Files and hashes: 1: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: D90T03o6j8g6AIOKzGOLBAM7pUvAQ3WBKqv9zbNkYu4=) 2: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: 7Po7ALrAR6J4a8bNfBNoSUzyyO7xwSetD9n1ziA4ooo=) 3: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: 6HPQtYJFdlYFmn46WjveSZCOXYCIp+a2PMZ4d4GJwfY=) 4: F328EAEFA60AA0B57B040C04D541138249BE47A3.crl (hash: wu1W1Gi13EkGRzchM2gWnK8uDfGGJkiKxmfe8PAcYJo=) 5: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: /FAsg1d5HOXN4IRL/RMI5oxHPMjWm4jYt7UGojb2reQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:af:56:9e:51:04:25:32:ac:10:fd:e3:f7:64:5e:e0:e0:bf:0d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Validity Not Before: Jun 2 22:17:54 2026 GMT Not After : Jun 4 02:11:54 2026 GMT Subject: CN=B5CFFBE47C544BA4CED6AC51B4352E35F991389A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:37:8b:13:7c:a5:c3:6a:0f:98:69:b8:3b: 42:d7:77:bd:b9:54:14:ee:4e:5a:2a:f1:08:43:fa: 7a:a9:f7:15:11:78:97:83:c0:15:6c:9d:5f:7e:d8: f9:16:70:3d:9b:37:b3:70:ec:ef:7b:ae:04:7e:67: c8:6f:59:ef:94:a6:28:fe:3e:bc:4f:9d:78:80:ec: 4d:c8:34:29:8b:91:fe:95:04:4f:80:28:fa:de:e6: ad:fe:a2:88:8f:77:16:3a:0c:d0:5a:fd:bb:dc:e3: 3b:91:71:5d:6d:39:cb:b7:2b:2c:a4:cf:5c:95:20: bc:a8:33:01:1b:d6:97:47:4b:8b:ad:20:fd:5d:75: b7:5b:26:8b:b5:94:a6:03:02:ca:0d:99:e2:39:56: 69:61:b5:d0:8a:a8:72:99:d2:f1:70:86:a0:42:4e: 68:79:6a:ae:32:29:73:8d:de:dc:2f:24:e7:2a:83: 74:1b:5f:96:23:d2:65:d7:d9:8e:17:0d:3f:8e:f2: 11:cb:60:53:75:e1:88:f1:a0:45:6c:3a:5f:ef:61: 89:d0:c8:1d:b5:ab:8c:b1:ce:48:b4:23:ab:81:f7: ab:a3:77:78:70:38:e3:0d:a0:0d:16:3d:8d:8e:27: 42:53:a9:ae:06:dc:bd:0e:5b:30:0b:23:62:80:ad: 85:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CF:FB:E4:7C:54:4B:A4:CE:D6:AC:51:B4:35:2E:35:F9:91:38:9A X509v3 Authority Key Identifier: keyid:F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ed:18:cd:7c:48:20:ea:e3:b0:d9:a6:b2:ec:38:3c:fe:00: c8:fd:c7:f3:79:2e:5a:ba:e4:a2:d6:17:2b:6d:a0:59:80:37: e6:ed:63:0a:26:24:0e:42:0a:0e:10:dc:1c:0d:7e:5d:35:f2: 22:72:70:64:f0:ec:ae:1d:86:3b:32:02:db:28:52:ef:4f:ee: b3:93:9c:c7:54:f8:1a:8d:63:f2:a8:41:98:7b:db:97:8c:12: 9b:a0:46:fd:f1:19:48:ac:3c:b4:be:a4:04:39:d7:96:e9:24: 49:ee:55:01:c3:20:b7:f9:19:35:3e:64:6a:1f:5d:7e:3d:f3: f8:50:0e:f4:7a:ac:23:d7:ee:dc:20:20:b8:b8:f8:fa:d6:a2: 3b:17:8b:8e:22:06:10:89:7a:30:56:28:f7:35:fb:12:35:14: 85:b8:da:f5:f0:9b:cc:ce:17:47:6e:c3:71:dd:10:f8:14:a1: e5:3e:d0:d3:fa:75:44:2b:0e:f6:90:0c:5a:e4:82:51:92:cc: 2c:a0:90:c4:93:94:09:f5:ce:c3:0f:35:69:10:59:99:2e:79: d4:d3:38:b2:97:6f:d9:ee:e3:75:1c:be:b0:4c:e9:a8:8a:27: d3:6e:d9:09:c8:05:0d:fb:52:da:bf:f4:fe:21:7b:21:97:80: 5b:b1:f6:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC69WnlEEJTKsEP3j92Re4OC/DYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0 OUJFNDdBMzAeFw0yNjA2MDIyMjE3NTRaFw0yNjA2MDQwMjExNTRaMDMxMTAvBgNV BAMTKEI1Q0ZGQkU0N0M1NDRCQTRDRUQ2QUM1MUI0MzUyRTM1Rjk5MTM4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI/jeLE3ylw2oPmGm4O0LXd725 VBTuTloq8QhD+nqp9xUReJeDwBVsnV9+2PkWcD2bN7Nw7O97rgR+Z8hvWe+Upij+ PrxPnXiA7E3INCmLkf6VBE+AKPre5q3+ooiPdxY6DNBa/bvc4zuRcV1tOcu3Kyyk z1yVILyoMwEb1pdHS4utIP1ddbdbJou1lKYDAsoNmeI5VmlhtdCKqHKZ0vFwhqBC Tmh5aq4yKXON3twvJOcqg3QbX5Yj0mXX2Y4XDT+O8hHLYFN14YjxoEVsOl/vYYnQ yB21q4yxzki0I6uB96ujd3hwOOMNoA0WPY2OJ0JTqa4G3L0OWzALI2KArYVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtc/75HxUS6TO1qxRtDUuNfmROJowHwYDVR0j BBgwFoAU8yjq76YKoLV7BAwE1UETgkm+R6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEwN2ZkOGEtMTUwZi00NTNmLWEwZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZB NjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0OUJFNDdBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzI4RUFFRkE2MEFBMEI1N0IwNDBDMDRENTQxMTM4MjQ5QkU0 N0EzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEz ODI0OUJFNDdBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLtGM18SCDq47DZprLsODz+AMj9x/N5Llq6 5KLWFyttoFmAN+btYwomJA5CCg4Q3BwNfl018iJycGTw7K4dhjsyAtsoUu9P7rOT nMdU+BqNY/KoQZh725eMEpugRv3xGUisPLS+pAQ515bpJEnuVQHDILf5GTU+ZGof XX498/hQDvR6rCPX7twgILi4+PrWojsXi44iBhCJejBWKPc1+xI1FIW42vXwm8zO F0duw3HdEPgUoeU+0NP6dUQrDvaQDFrkglGSzCygkMSTlAn1zsMPNWkQWZkuedTT OLKXb9nu43UcvrBM6aiKJ9Nu2QnIBQ37Utq/9P4heyGXgFux9mw= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:22 2026 by rpki-client