$ rpki-client -vvf rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft File: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft (raw, json) Hash identifier: l46naoJowK7YqayF06+w7YGzibV3um+IuXJi28EXpd4= Subject key identifier: 77:FB:F5:D8:E3:D4:4C:75:F1:84:AD:47:31:7D:48:1F:8B:C0:79:94 Authority key identifier: F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC Certificate issuer: /CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Certificate serial: 43A149982F0850C62EB0DD4D5704BEAAF40D252D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:17:54 +0000 Manifest this update: Tue 02 Jun 2026 10:12:54 +0000 Manifest next update: Wed 03 Jun 2026 12:15:54 +0000 Files and hashes: 1: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl (hash: 3Ry2UaYhvz6De2/VQwJ6xT3BdcyZt10e99EAuW02JpM=) 2: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: 9YTg5pUgG1yWPgrR170uu8850b7NAdZ62v5ToMnLz5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a1:49:98:2f:08:50:c6:2e:b0:dd:4d:57:04:be:aa:f4:0d:25:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Validity Not Before: Jun 2 10:12:54 2026 GMT Not After : Jun 3 12:15:54 2026 GMT Subject: CN=77FBF5D8E3D44C75F184AD47317D481F8BC07994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:2d:fe:ae:6e:8d:25:39:a5:0f:03:d8:37: 00:c6:d0:b9:bc:b0:d3:99:c9:e5:41:42:97:0f:93: 94:44:6a:c0:c9:e3:72:5e:c5:25:1b:f5:b5:d0:15: 4c:c5:45:5d:a7:2b:53:1f:0f:e0:78:2c:ce:00:11: 63:ff:5f:39:59:58:63:04:15:d0:dd:ff:49:06:d5: 03:b7:ba:72:26:ae:aa:54:8e:28:a2:39:83:29:44: bf:a9:57:ee:33:5a:47:67:ea:cf:99:02:01:e0:d3: 68:cf:06:0b:a2:95:03:13:f2:2b:b4:c7:cd:f2:39: 8b:2a:81:27:0e:0d:2d:7e:77:13:0a:74:e8:4f:01: 01:36:c0:e4:73:03:11:51:33:00:c2:40:fe:83:db: d4:59:7e:4b:dd:f9:ab:1f:7e:72:50:5b:69:03:71: a3:32:10:28:6a:b0:35:70:66:f9:57:c7:1c:23:66: b3:9e:98:1d:52:03:8b:53:74:1c:82:07:49:d5:3b: 59:79:13:25:8f:00:70:d7:d6:e8:f9:38:c5:e7:fb: 53:af:01:3d:b4:05:1c:d8:c9:1a:37:0b:08:4a:10: 6c:c4:93:ab:db:7d:c8:62:1a:97:db:22:77:d8:8e: 01:70:b0:e9:4d:04:68:52:5d:48:4c:af:97:19:f7: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FB:F5:D8:E3:D4:4C:75:F1:84:AD:47:31:7D:48:1F:8B:C0:79:94 X509v3 Authority Key Identifier: keyid:F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:5b:e6:58:9a:bb:dc:48:56:cc:40:81:7c:cc:6f:b1:c5:f5: 31:6a:3f:b3:b6:c5:fc:4b:31:1a:f3:49:f6:ac:8c:44:3c:a3: c6:45:b8:4f:7f:59:1e:e1:07:6c:d6:7f:b0:fd:56:0e:21:fb: d6:e1:35:9e:5d:7d:90:66:d2:51:ba:dd:f3:b8:b7:00:97:6a: d6:f0:69:8f:73:80:66:05:96:57:a7:7e:0e:b1:73:39:1f:fb: 3a:90:6f:af:2f:9f:f6:08:b9:a2:6e:33:f9:91:d6:c6:ba:bf: 5b:ab:3d:f0:c7:f6:7c:1a:e2:56:8c:72:88:6c:8d:ab:d0:74: dd:19:11:17:89:44:62:cd:b8:87:d7:60:59:b0:35:bd:4f:85: a7:8a:db:86:07:24:92:9f:33:0d:cc:f4:b9:c4:49:5d:e5:68: cb:fa:58:3b:b0:55:8b:14:cd:78:2c:69:6f:e1:58:83:9c:25: f9:ea:ca:01:f3:f8:06:c8:57:f4:dd:78:88:c5:c4:89:49:50: c1:94:10:2d:a1:64:fa:a1:bd:94:47:f3:db:db:40:7e:76:be: d9:96:7a:7a:84:bb:3f:54:f7:04:2a:5d:7e:8c:d9:12:ef:31: 09:a0:36:86:ff:36:eb:cc:3e:ef:97:6b:35:b0:39:5f:ae:46: 90:f6:cd:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6FJmC8IUMYusN1NVwS+qvQNJS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjRCQzA5QUZBOEE2RTNBOTdEMDBDNjEwMDRENjVFOUZB Q0Q0RDhEQzAeFw0yNjA2MDIxMDEyNTRaFw0yNjA2MDMxMjE1NTRaMDMxMTAvBgNV BAMTKDc3RkJGNUQ4RTNENDRDNzVGMTg0QUQ0NzMxN0Q0ODFGOEJDMDc5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZUS3+rm6NJTmlDwPYNwDG0Lm8 sNOZyeVBQpcPk5REasDJ43JexSUb9bXQFUzFRV2nK1MfD+B4LM4AEWP/XzlZWGME FdDd/0kG1QO3unImrqpUjiiiOYMpRL+pV+4zWkdn6s+ZAgHg02jPBguilQMT8iu0 x83yOYsqgScODS1+dxMKdOhPAQE2wORzAxFRMwDCQP6D29RZfkvd+asffnJQW2kD caMyEChqsDVwZvlXxxwjZrOemB1SA4tTdByCB0nVO1l5EyWPAHDX1uj5OMXn+1Ov AT20BRzYyRo3CwhKEGzEk6vbfchiGpfbInfYjgFwsOlNBGhSXUhMr5cZ9x2LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd/v12OPUTHXxhK1HMX1IH4vAeZQwHwYDVR0j BBgwFoAU9LwJr6im46l9AMYQBNZen6zU2NwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ5N2Q4MjgtOTg0YS00M2YxLTliNmUtYTAxYmEyMWJiNTE4LzAvRjRCQzA5QUZB OEE2RTNBOTdEMDBDNjEwMDRENjVFOUZBQ0Q0RDhEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNEJDMDlBRkE4QTZFM0E5N0QwMEM2MTAwNEQ2NUU5RkFDRDRE OERDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvRjRCQzA5QUZBOEE2RTNBOTdEMDBDNjEwMDRENjVF OUZBQ0Q0RDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNb5liau9xIVsxAgXzMb7HF9TFqP7O2xfxL MRrzSfasjEQ8o8ZFuE9/WR7hB2zWf7D9Vg4h+9bhNZ5dfZBm0lG63fO4twCXatbw aY9zgGYFllenfg6xczkf+zqQb68vn/YIuaJuM/mR1sa6v1urPfDH9nwa4laMcohs javQdN0ZEReJRGLNuIfXYFmwNb1PhaeK24YHJJKfMw3M9LnESV3laMv6WDuwVYsU zXgsaW/hWIOcJfnqygHz+AbIV/TdeIjFxIlJUMGUEC2hZPqhvZRH89vbQH52vtmW enqEuz9U9wQqXX6M2RLvMQmgNob/NuvMPu+XazWwOV+uRpD2zew= -----END CERTIFICATE-----Generated at Wed Jun 3 04:53:02 2026 by rpki-client