$ rpki-client -vvf rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft File: F24F92FEE32EF3FD89B142D403B664674EC45F20.mft (raw, json) Hash identifier: fnSwX0r3DerGAEiCpGFY3YBUFsUy5xHMrcBp/QwhZAI= Subject key identifier: 5B:73:F2:6F:AA:6E:CF:3A:F8:13:B2:75:13:1F:B0:CD:8D:AD:BD:F2 Authority key identifier: F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20 Certificate issuer: /CN=F24F92FEE32EF3FD89B142D403B664674EC45F20 Certificate serial: 2FCB517CEFDDDBBE19701F46B4A126ED8C6F539D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft Manifest number: 2C Signing time: Wed 03 Jun 2026 02:43:02 +0000 Manifest this update: Wed 03 Jun 2026 02:38:02 +0000 Manifest next update: Thu 04 Jun 2026 02:50:02 +0000 Files and hashes: 1: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: bxuJHdBQ29ujm6ZiEr/payUgkQDlp15FaGJqOvION0Y=) 2: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: Fngj46n5ns0XL17tIcObVP8YgC9Tz2lNna69VH4sqhk=) 3: F24F92FEE32EF3FD89B142D403B664674EC45F20.crl (hash: By5+8hS6HsMwL2Rsjo2DtNJ+V0y5cmkd2YV4R+/Stuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.crl rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 02:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cb:51:7c:ef:dd:db:be:19:70:1f:46:b4:a1:26:ed:8c:6f:53:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24F92FEE32EF3FD89B142D403B664674EC45F20 Validity Not Before: Jun 3 02:38:02 2026 GMT Not After : Jun 4 02:50:02 2026 GMT Subject: CN=5B73F26FAA6ECF3AF813B275131FB0CD8DADBDF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e7:d6:09:74:d0:ad:dd:96:ff:4b:bb:c7:91: 89:a8:a5:31:c7:b4:48:f4:c6:c8:06:57:6e:8e:85: 77:0e:1e:9d:99:70:84:ea:75:51:7c:a4:7a:9b:52: 40:c8:d3:95:e8:21:0e:e4:bf:16:61:e4:d1:e2:17: f4:2a:57:92:38:a5:d8:fe:06:76:c9:c7:fa:e4:4c: 11:76:e4:b3:fc:2e:db:98:a5:64:1a:44:6d:ec:d4: c7:57:eb:00:a2:73:79:da:9f:98:75:dd:75:80:96: 70:17:7c:e3:ab:fa:d1:ee:d3:b4:e2:1e:d3:ad:38: dc:bf:36:4c:ee:b8:2b:78:b9:32:a9:68:89:8f:f8: c8:e0:81:b7:ea:b7:9c:5c:5a:f2:c7:76:68:3d:18: 28:56:19:79:7b:2f:28:72:00:d5:9c:5a:69:e3:89: 49:97:9f:03:82:3b:f4:76:56:e7:c1:fa:46:7f:85: 84:97:da:77:19:9d:52:b8:37:e2:4f:c4:16:0d:9a: d8:65:e3:c8:d4:07:3e:9f:cd:1e:71:81:27:a7:dd: ee:a0:2a:f9:9e:ac:43:a4:4f:9f:e9:69:e4:be:36: 73:d8:32:15:a7:b7:73:cd:96:48:c4:db:b4:03:df: d1:29:a8:44:2f:70:7a:62:75:27:5b:4b:0c:43:b7: a5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:73:F2:6F:AA:6E:CF:3A:F8:13:B2:75:13:1F:B0:CD:8D:AD:BD:F2 X509v3 Authority Key Identifier: keyid:F2:4F:92:FE:E3:2E:F3:FD:89:B1:42:D4:03:B6:64:67:4E:C4:5F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F24F92FEE32EF3FD89B142D403B664674EC45F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/F24F92FEE32EF3FD89B142D403B664674EC45F20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8d:81:76:4d:f4:84:5e:02:1a:ac:4d:fa:b6:ab:c1:eb:46: 02:0f:ae:90:06:84:3d:7b:7f:cc:86:4a:be:d9:10:13:99:2e: 40:64:85:de:ee:30:3d:58:9f:9a:d1:09:ab:a7:64:5c:f5:f6: 59:4d:2d:49:9c:d2:d6:d1:77:09:0d:56:34:20:26:1e:ce:ce: 45:59:30:8e:b9:52:78:9a:45:29:4e:f7:fb:d9:01:f1:e6:99: fa:8b:c9:d4:15:04:fc:17:f6:be:16:05:76:99:4c:1e:0c:ae: ce:45:89:b2:1e:fa:8d:b0:75:a2:48:44:f3:57:b7:86:7e:1c: de:d9:ae:0e:ab:07:da:1f:aa:ed:f8:78:28:6e:77:87:cb:a3: f6:20:b7:d0:3b:85:bc:cb:29:67:0e:f6:c0:7d:2b:0b:65:e9: 90:88:e7:17:bb:82:55:8f:cf:f0:bb:3a:14:0a:a2:03:4c:a4: cc:ca:a3:5b:57:53:b0:a8:21:6a:71:28:94:37:c0:f3:74:7a: cb:cf:60:fb:a4:e0:f4:18:05:4a:7a:23:53:2e:d9:91:91:58: c2:4b:ea:6a:0e:c0:36:7a:6f:91:78:e6:7b:bf:fe:2c:d6:49: 7a:97:08:f4:23:dc:8e:8a:5a:78:20:d3:e2:b5:41:96:5d:96: 35:a6:ab:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8tRfO/d274ZcB9GtKEm7YxvU50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0RjkyRkVFMzJFRjNGRDg5QjE0MkQ0MDNCNjY0Njc0 RUM0NUYyMDAeFw0yNjA2MDMwMjM4MDJaFw0yNjA2MDQwMjUwMDJaMDMxMTAvBgNV BAMTKDVCNzNGMjZGQUE2RUNGM0FGODEzQjI3NTEzMUZCMENEOERBREJERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT59YJdNCt3Zb/S7vHkYmopTHH tEj0xsgGV26OhXcOHp2ZcITqdVF8pHqbUkDI05XoIQ7kvxZh5NHiF/QqV5I4pdj+ BnbJx/rkTBF25LP8LtuYpWQaRG3s1MdX6wCic3nan5h13XWAlnAXfOOr+tHu07Ti HtOtONy/NkzuuCt4uTKpaImP+Mjggbfqt5xcWvLHdmg9GChWGXl7LyhyANWcWmnj iUmXnwOCO/R2VufB+kZ/hYSX2ncZnVK4N+JPxBYNmthl48jUBz6fzR5xgSen3e6g KvmerEOkT5/paeS+NnPYMhWnt3PNlkjE27QD39EpqEQvcHpidSdbSwxDt6V3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW3Pyb6puzzr4E7J1Ex+wzY2tvfIwHwYDVR0j BBgwFoAU8k+S/uMu8/2JsULUA7ZkZ07EXyAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODg3ODhhOGItNTQxYi00Y2JmLWJhYjktOGRjMzc3YmMxMjg0LzAvRjI0RjkyRkVF MzJFRjNGRDg5QjE0MkQ0MDNCNjY0Njc0RUM0NUYyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjRGOTJGRUUzMkVGM0ZEODlCMTQyRDQwM0I2NjQ2NzRFQzQ1 RjIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvRjI0RjkyRkVFMzJFRjNGRDg5QjE0MkQ0MDNCNjY0 Njc0RUM0NUYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyNgXZN9IReAhqsTfq2q8HrRgIPrpAGhD17 f8yGSr7ZEBOZLkBkhd7uMD1Yn5rRCaunZFz19llNLUmc0tbRdwkNVjQgJh7OzkVZ MI65UniaRSlO9/vZAfHmmfqLydQVBPwX9r4WBXaZTB4Mrs5FibIe+o2wdaJIRPNX t4Z+HN7Zrg6rB9ofqu34eChud4fLo/Ygt9A7hbzLKWcO9sB9Kwtl6ZCI5xe7glWP z/C7OhQKogNMpMzKo1tXU7CoIWpxKJQ3wPN0esvPYPuk4PQYBUp6I1Mu2ZGRWMJL 6moOwDZ6b5F45nu//izWSXqXCPQj3I6KWngg0+K1QZZdljWmq9I= -----END CERTIFICATE-----Generated at Wed Jun 3 04:40:47 2026 by rpki-client