$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft File: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft (raw, json) Hash identifier: iz5TBrFc0Q3Kl0kLsq3a3MvlThVwYjf2dCySPKHPIsI= Subject key identifier: 3E:05:8F:BD:5A:67:54:93:7D:F6:BC:D6:19:37:0E:39:BB:D4:B1:34 Authority key identifier: F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF Certificate issuer: /CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF Certificate serial: 7BA9F341D6513DF2427D19FA2D7496AD6E362C8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:10:04 +0000 Manifest this update: Tue 02 Jun 2026 12:05:04 +0000 Manifest next update: Wed 03 Jun 2026 15:20:04 +0000 Files and hashes: 1: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl (hash: IU4q/Qa9iSji/ocP+Ef4/jGDvT2vezbphLwzTfo4Bsc=) 2: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: 25pMisvX0/Q8rpjasSNLO/3FyTnfpVPB5JoH3mYAK2Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a9:f3:41:d6:51:3d:f2:42:7d:19:fa:2d:74:96:ad:6e:36:2c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF Validity Not Before: Jun 2 12:05:04 2026 GMT Not After : Jun 3 15:20:04 2026 GMT Subject: CN=3E058FBD5A6754937DF6BCD619370E39BBD4B134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:bf:3c:ba:77:62:f8:27:7f:67:1e:21:ea: fd:68:70:2e:1e:0b:00:4b:04:98:e5:8d:43:30:c0: 3c:71:0f:7c:9d:54:da:18:73:75:79:78:11:e7:e2: 08:52:3c:2b:7f:85:55:b1:d2:ba:38:32:74:07:e9: 09:c4:4a:30:01:08:60:ee:1f:2d:f0:93:f4:5c:1d: d8:7b:8e:fa:98:9b:74:78:b5:10:ea:0e:2b:dd:2b: e0:0e:9d:cc:37:ed:dd:99:ba:7f:24:84:90:2e:f9: c3:5f:2c:b2:f8:c5:49:01:b8:de:e0:17:be:9e:d5: 38:92:c4:cf:2f:9c:8e:a9:74:dd:e5:fd:69:e8:dc: 54:86:e7:85:72:22:43:71:2a:d5:00:57:71:4a:32: 4d:8d:39:b0:5f:90:6d:11:1e:c4:ab:81:5d:88:5e: 24:fe:06:0c:9f:19:46:0a:4c:62:e1:1c:db:04:e5: a1:ff:10:ab:85:8f:6b:e9:80:13:e2:56:ad:9e:f2: 6d:36:3c:fe:9e:59:cc:5e:18:47:f3:29:e5:c3:e9: 64:11:18:00:c6:84:4a:0d:37:e9:a4:2e:9a:9b:db: 42:cb:fb:8b:f6:73:c4:bc:60:27:4e:5c:95:12:7b: f3:33:6b:c6:84:ef:2a:a0:b8:20:4b:10:d5:c3:1c: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:05:8F:BD:5A:67:54:93:7D:F6:BC:D6:19:37:0E:39:BB:D4:B1:34 X509v3 Authority Key Identifier: keyid:F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e5:ba:f8:24:ba:b3:29:fd:db:29:f5:2c:2e:49:eb:b5:ca: ea:76:a7:c1:de:32:c6:4a:ac:10:d2:ca:1c:0a:f0:3a:12:dd: e2:a0:76:02:61:d4:e8:60:40:4f:0b:64:3e:83:46:f5:1c:6f: 05:d5:ea:b5:88:4f:e7:bd:34:c5:59:86:3c:92:e1:36:e1:1c: 38:dc:18:c8:4c:11:39:7d:19:d9:40:25:5c:74:4c:74:aa:d9: c0:87:3b:c4:54:16:c7:18:9f:cc:09:b6:c6:7f:f3:c3:a2:62: 60:a6:c4:95:54:d3:46:d1:7c:f7:2d:e0:32:8a:ac:ef:ff:19: fb:91:7d:30:98:36:59:2f:4d:c7:0f:0a:ac:9f:70:f9:90:c3: cf:b9:27:0b:d3:9e:68:1d:08:5c:03:ed:b4:ea:9f:34:f8:a8: 05:21:31:78:d7:f1:13:d7:92:24:72:d3:84:39:a4:6a:e7:6c: cc:bd:9e:69:03:36:1e:e1:89:02:28:2b:39:43:58:2b:08:75: 17:05:96:a9:8b:89:58:4d:d5:73:ff:cf:a2:f3:eb:4d:b7:ff: 3c:c5:c1:42:4c:3b:d4:b9:96:33:ce:22:47:db:cb:24:73:44: c8:f5:3d:a5:ab:2c:68:22:66:df:4e:d6:09:94:62:b9:d0:74: 8b:81:a2:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6nzQdZRPfJCfRn6LXSWrW42LIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1 MzAyODdERjAeFw0yNjA2MDIxMjA1MDRaFw0yNjA2MDMxNTIwMDRaMDMxMTAvBgNV BAMTKDNFMDU4RkJENUE2NzU0OTM3REY2QkNENjE5MzcwRTM5QkJENEIxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGr88undi+Cd/Zx4h6v1ocC4e CwBLBJjljUMwwDxxD3ydVNoYc3V5eBHn4ghSPCt/hVWx0ro4MnQH6QnESjABCGDu Hy3wk/RcHdh7jvqYm3R4tRDqDivdK+AOncw37d2Zun8khJAu+cNfLLL4xUkBuN7g F76e1TiSxM8vnI6pdN3l/Wno3FSG54VyIkNxKtUAV3FKMk2NObBfkG0RHsSrgV2I XiT+BgyfGUYKTGLhHNsE5aH/EKuFj2vpgBPiVq2e8m02PP6eWcxeGEfzKeXD6WQR GADGhEoNN+mkLpqb20LL+4v2c8S8YCdOXJUSe/Mza8aE7yqguCBLENXDHEdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPgWPvVpnVJN99rzWGTcOObvUsTQwHwYDVR0j BBgwFoAU9ijd3D82se5Kr7J6UqnTXlMCh98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFkNzM4OTUtYzg0Yy00NjRmLTliNGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMz RjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1MzAyODdERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjI4REREQzNGMzZCMUVFNEFBRkIyN0E1MkE5RDM1RTUzMDI4 N0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli NGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQz NUU1MzAyODdERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPluvgkurMp/dsp9SwuSeu1yup2p8HeMsZK rBDSyhwK8DoS3eKgdgJh1OhgQE8LZD6DRvUcbwXV6rWIT+e9NMVZhjyS4TbhHDjc GMhMETl9GdlAJVx0THSq2cCHO8RUFscYn8wJtsZ/88OiYmCmxJVU00bRfPct4DKK rO//GfuRfTCYNlkvTccPCqyfcPmQw8+5JwvTnmgdCFwD7bTqnzT4qAUhMXjX8RPX kiRy04Q5pGrnbMy9nmkDNh7hiQIoKzlDWCsIdRcFlqmLiVhN1XP/z6Lz6023/zzF wUJMO9S5ljPOIkfbyyRzRMj1PaWrLGgiZt9O1gmUYrnQdIuBoqI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:44 2026 by rpki-client