$ rpki-client -vvf rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft File: FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft (raw, json) Hash identifier: IHpA5Lq+2usYFXZJwxYvf5pdXZHgdjDvpjmVeuFvZDg= Subject key identifier: BA:52:1F:23:21:EC:71:6B:68:B6:C7:01:07:29:56:5F:66:5A:D1:27 Authority key identifier: FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 Certificate issuer: /CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Certificate serial: 2A99DDA49893C3B43BB615527B677664DD6E3C45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 14:32:50 +0000 Manifest this update: Tue 02 Jun 2026 14:27:50 +0000 Manifest next update: Wed 03 Jun 2026 16:50:50 +0000 Files and hashes: 1: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: 1Tk9QAHZ0ijLeVFuLiIRsfqrrSPDFu+yHnjWDMhhwpg=) 2: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: wvIAxFKPShLQpqf7iVcqajkRTzgNz/nJFo4xan5f+EA=) 3: FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl (hash: /wHrMNLhZRe51UHX1FAC92k3SV07wCiO5KVIAr2TcXM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:99:dd:a4:98:93:c3:b4:3b:b6:15:52:7b:67:76:64:dd:6e:3c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD353187FB0D364FA7086A1728B9894B9F43AFA7 Validity Not Before: Jun 2 14:27:50 2026 GMT Not After : Jun 3 16:50:50 2026 GMT Subject: CN=BA521F2321EC716B68B6C7010729565F665AD127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d0:0f:64:a2:23:f5:81:a3:c1:35:1f:0d:b7: 3d:26:39:0a:7b:ee:4b:bf:1b:4b:63:eb:64:46:de: 15:a1:c1:7c:3e:d9:8e:25:5c:f4:71:25:4c:0c:45: 37:f6:e2:a4:c0:70:62:b3:a4:57:80:08:e6:3d:50: 10:0c:77:47:ad:f4:2f:e1:13:99:4f:9a:b6:5f:ab: 2e:50:22:9c:0f:4b:ee:c5:ab:66:c4:f3:1c:c9:4d: 1a:91:27:c2:8b:e3:5a:88:6f:4e:14:fe:e7:fd:33: 92:8e:3b:29:00:c8:3d:98:5b:4a:cb:3e:f1:d0:1d: db:24:67:2a:c7:4f:73:cc:bc:3e:0e:9a:82:d9:7d: 0c:e2:89:b4:6f:b4:e6:b4:4d:04:a7:d8:67:8f:b3: 72:75:a1:20:dc:c0:1d:80:43:dd:0f:ab:6d:d4:a9: 15:e2:06:6e:2f:e8:a1:0e:4a:8d:16:96:94:ef:41: d7:14:32:d8:d9:1d:dd:21:f0:63:8e:75:06:df:93: 99:35:36:19:67:1c:f8:d3:c2:78:b5:d5:8a:a1:c0: 6f:4a:5e:78:70:d0:46:13:9d:33:d1:87:c6:50:25: a0:47:37:65:5a:8e:9e:6a:82:c9:00:d2:24:50:f2: 17:04:7a:93:e7:7d:09:c2:71:b5:34:13:7a:03:47: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:52:1F:23:21:EC:71:6B:68:B6:C7:01:07:29:56:5F:66:5A:D1:27 X509v3 Authority Key Identifier: keyid:FD:35:31:87:FB:0D:36:4F:A7:08:6A:17:28:B9:89:4B:9F:43:AF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD353187FB0D364FA7086A1728B9894B9F43AFA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/FD353187FB0D364FA7086A1728B9894B9F43AFA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:59:f3:14:cb:03:99:f1:40:22:fc:72:93:3d:fb:dd:cb:da: c8:27:74:6f:60:dd:a7:23:68:0b:27:b7:d9:48:cd:3b:25:ae: cd:3e:bb:93:38:ed:55:ed:b3:3c:3c:ae:3f:b4:5c:48:66:77: 84:7f:cc:07:cc:3e:bc:09:d1:da:5e:67:76:0a:d1:f4:ca:f8: d9:c7:c1:77:99:c8:fe:a1:70:69:d5:94:72:68:36:30:b7:b4: 75:d0:a6:a4:01:32:c0:c3:f9:51:d2:a8:56:e6:1b:4a:ea:07: 43:37:97:75:1a:86:e2:68:59:33:bd:ea:c3:60:40:c3:4c:15: 6d:c3:b9:49:ab:c4:e9:40:ef:c2:37:aa:15:5b:9d:5f:ce:52: 8b:c8:e4:f3:f0:61:cb:a6:c2:39:25:fb:bc:e2:11:61:4d:9d: 28:cf:b8:cd:79:15:e7:ef:95:c9:30:5c:10:ae:61:42:0b:47: 68:64:75:90:38:f9:52:d8:55:32:c2:8f:cd:b8:fe:dc:a4:ac: d0:28:0c:30:12:3d:e9:1f:14:05:7b:01:6a:ec:33:b4:d9:bd: 74:59:ae:ce:84:11:e5:bb:48:bc:3f:26:c1:13:a9:f3:9c:04: 38:74:b4:90:d6:1d:ac:74:23:e1:06:cb:9e:15:95:b2:90:4c: 73:02:9a:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpndpJiTw7Q7thVSe2d2ZN1uPEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5 RjQzQUZBNzAeFw0yNjA2MDIxNDI3NTBaFw0yNjA2MDMxNjUwNTBaMDMxMTAvBgNV BAMTKEJBNTIxRjIzMjFFQzcxNkI2OEI2QzcwMTA3Mjk1NjVGNjY1QUQxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0A9koiP1gaPBNR8Ntz0mOQp7 7ku/G0tj62RG3hWhwXw+2Y4lXPRxJUwMRTf24qTAcGKzpFeACOY9UBAMd0et9C/h E5lPmrZfqy5QIpwPS+7Fq2bE8xzJTRqRJ8KL41qIb04U/uf9M5KOOykAyD2YW0rL PvHQHdskZyrHT3PMvD4OmoLZfQziibRvtOa0TQSn2GePs3J1oSDcwB2AQ90Pq23U qRXiBm4v6KEOSo0WlpTvQdcUMtjZHd0h8GOOdQbfk5k1NhlnHPjTwni11YqhwG9K Xnhw0EYTnTPRh8ZQJaBHN2Vajp5qgskA0iRQ8hcEepPnfQnCcbU0E3oDR8JxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUulIfIyHscWtotscBBylWX2Za0ScwHwYDVR0j BBgwFoAU/TUxh/sNNk+nCGoXKLmJS59Dr6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA0ZDAzOTctZmZhMC00OTAzLTgwNWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdG QjBEMzY0RkE3MDg2QTE3MjhCOTg5NEI5RjQzQUZBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1MzE4N0ZCMEQzNjRGQTcwODZBMTcyOEI5ODk0QjlGNDNB RkE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvRkQzNTMxODdGQjBEMzY0RkE3MDg2QTE3MjhCOTg5 NEI5RjQzQUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpZ8xTLA5nxQCL8cpM9+93L2sgndG9g3acj aAsnt9lIzTslrs0+u5M47VXtszw8rj+0XEhmd4R/zAfMPrwJ0dpeZ3YK0fTK+NnH wXeZyP6hcGnVlHJoNjC3tHXQpqQBMsDD+VHSqFbmG0rqB0M3l3UahuJoWTO96sNg QMNMFW3DuUmrxOlA78I3qhVbnV/OUovI5PPwYcumwjkl+7ziEWFNnSjPuM15Fefv lckwXBCuYUILR2hkdZA4+VLYVTLCj824/tykrNAoDDASPekfFAV7AWrsM7TZvXRZ rs6EEeW7SLw/JsETqfOcBDh0tJDWHax0I+EGy54VlbKQTHMCmk4= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:57 2026 by rpki-client