$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft File: F03310D1D60B7C8D4880FEE5263129029C23044D.mft (raw, json) Hash identifier: O2ocTs0msgbFHq9byTRxXSVr3oKmLDp8oWFKhePOGxM= Subject key identifier: DE:AB:C7:E4:CC:DF:16:E4:B3:76:E6:8C:99:BC:A3:74:85:7B:76:E0 Authority key identifier: F0:33:10:D1:D6:0B:7C:8D:48:80:FE:E5:26:31:29:02:9C:23:04:4D Certificate issuer: /CN=F03310D1D60B7C8D4880FEE5263129029C23044D Certificate serial: 0C65180BE2D9371DA49663218A2D81F7CB46E84E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:33:07 +0000 Manifest this update: Tue 02 Jun 2026 22:28:07 +0000 Manifest next update: Thu 04 Jun 2026 01:19:07 +0000 Files and hashes: 1: F03310D1D60B7C8D4880FEE5263129029C23044D.crl (hash: Q+W6Qas3EurbUkrJyNH/HtNJnxv+CqKgSVsllWhDcwc=) 2: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: bhgEzRyKQSZ7x2UAdJ2y1POX6pQ5rtoByHdLeBGdbwk=) 3: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: oj0326y5Cx12gm92v2QPQwGd5h65A9BVPedBNOtACzM=) 4: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: 0UDfWdK0ccDtOWv3TneU4N8dGsBm8DxDAXGKlhp/dv4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.crl rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:65:18:0b:e2:d9:37:1d:a4:96:63:21:8a:2d:81:f7:cb:46:e8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03310D1D60B7C8D4880FEE5263129029C23044D Validity Not Before: Jun 2 22:28:07 2026 GMT Not After : Jun 4 01:19:07 2026 GMT Subject: CN=DEABC7E4CCDF16E4B376E68C99BCA374857B76E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b5:1c:91:ff:35:e9:ab:63:97:47:22:be:ea: ee:e2:00:43:a0:cd:b5:be:83:9c:88:3c:6e:d3:87: 76:3e:44:2f:24:2a:21:9f:f9:84:25:b3:a3:04:19: f3:58:89:6c:bf:18:e6:2a:72:25:dc:95:cc:54:be: cf:bd:ef:20:1e:3b:04:03:f2:99:cd:31:b8:72:36: 1d:26:a9:93:7d:1f:9e:43:ac:77:26:f2:94:44:7b: 7f:ce:ce:72:05:2a:46:70:7c:ee:7d:88:e9:53:e1: ea:82:c6:53:95:3f:5f:9d:0a:05:ef:01:93:e7:cc: d1:1f:f4:54:95:37:f9:66:af:39:19:8a:12:e6:85: 80:0c:69:89:b7:e7:07:d5:ce:7a:36:61:2d:59:f6: a8:19:5c:41:d5:96:78:31:f7:58:4c:93:87:1a:03: f5:c1:0a:f0:21:ab:1e:63:4f:15:b6:5f:3e:67:1f: e5:f6:3d:e5:90:79:5a:cb:8d:77:1d:cf:8a:d3:23: 71:be:cd:35:c9:4b:65:63:92:14:b6:85:d3:77:53: 1d:e3:ca:fc:1e:d9:ca:d4:37:fb:10:a1:99:28:29: c2:64:7f:e3:a5:03:cb:8b:73:95:bb:ee:79:f1:92: 48:e8:ab:9b:54:91:9b:b4:f1:24:5b:39:8d:3b:5f: 73:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AB:C7:E4:CC:DF:16:E4:B3:76:E6:8C:99:BC:A3:74:85:7B:76:E0 X509v3 Authority Key Identifier: keyid:F0:33:10:D1:D6:0B:7C:8D:48:80:FE:E5:26:31:29:02:9C:23:04:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F03310D1D60B7C8D4880FEE5263129029C23044D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/F03310D1D60B7C8D4880FEE5263129029C23044D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:85:d4:87:6d:38:19:cf:47:3b:fc:6a:eb:b2:3a:32:d0:2c: 8e:fe:97:19:92:67:b0:24:4f:b3:a1:2c:df:59:bd:fe:d3:05: 08:0d:ae:cc:d5:1c:fa:3f:a1:0a:29:9c:92:0a:3e:cb:cf:35: 33:e6:96:3f:f7:24:f6:06:b4:ea:40:80:b5:7f:04:7b:f5:07: 74:1a:f0:a2:f7:a5:0d:28:b3:da:6a:21:08:fb:dc:1b:fc:8b: d0:58:ab:24:66:7b:c5:24:e3:08:2a:1b:d7:10:db:ed:35:bf: b8:6e:9c:72:d2:d4:aa:52:4f:31:46:04:ef:14:a5:44:0e:f1: 59:1d:4d:6b:97:a6:ce:bc:01:8d:e0:f1:1c:0c:cb:4b:db:d7: c4:d6:32:cb:ed:33:72:d1:22:de:20:30:3c:c4:b7:74:23:1e: c5:70:a3:9f:52:bc:6a:b9:38:f2:12:77:bd:2c:db:66:fb:1b: d0:15:4d:07:2a:45:37:40:87:d6:16:40:db:88:54:1d:aa:bb: 06:95:a0:e0:a8:3c:1d:8d:42:08:42:72:ce:02:5d:03:5d:8f: c5:73:d0:76:32:0a:21:0a:3a:97:45:e6:50:48:d3:8f:a6:e9: 84:ec:78:be:73:d0:c3:b3:1c:ac:fb:d4:8d:eb:0e:f9:74:06: 06:95:e5:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGUYC+LZNx2klmMhii2B98tG6E4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzMzEwRDFENjBCN0M4RDQ4ODBGRUU1MjYzMTI5MDI5 QzIzMDQ0RDAeFw0yNjA2MDIyMjI4MDdaFw0yNjA2MDQwMTE5MDdaMDMxMTAvBgNV BAMTKERFQUJDN0U0Q0NERjE2RTRCMzc2RTY4Qzk5QkNBMzc0ODU3Qjc2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQtRyR/zXpq2OXRyK+6u7iAEOg zbW+g5yIPG7Th3Y+RC8kKiGf+YQls6MEGfNYiWy/GOYqciXclcxUvs+97yAeOwQD 8pnNMbhyNh0mqZN9H55DrHcm8pREe3/OznIFKkZwfO59iOlT4eqCxlOVP1+dCgXv AZPnzNEf9FSVN/lmrzkZihLmhYAMaYm35wfVzno2YS1Z9qgZXEHVlngx91hMk4ca A/XBCvAhqx5jTxW2Xz5nH+X2PeWQeVrLjXcdz4rTI3G+zTXJS2VjkhS2hdN3Ux3j yvwe2crUN/sQoZkoKcJkf+OlA8uLc5W77nnxkkjoq5tUkZu08SRbOY07X3MdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3qvH5MzfFuSzduaMmbyjdIV7duAwHwYDVR0j BBgwFoAU8DMQ0dYLfI1IgP7lJjEpApwjBE0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlMjNkYzQtNGZkNS00M2UyLWJiNmEtNGZkYzM4N2ViYzU4LzAvRjAzMzEwRDFE NjBCN0M4RDQ4ODBGRUU1MjYzMTI5MDI5QzIzMDQ0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDMzMTBEMUQ2MEI3QzhENDg4MEZFRTUyNjMxMjkwMjlDMjMw NDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlMjNkYzQtNGZkNS00M2UyLWJi NmEtNGZkYzM4N2ViYzU4LzAvRjAzMzEwRDFENjBCN0M4RDQ4ODBGRUU1MjYzMTI5 MDI5QzIzMDQ0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGF1IdtOBnPRzv8auuyOjLQLI7+lxmSZ7Ak T7OhLN9Zvf7TBQgNrszVHPo/oQopnJIKPsvPNTPmlj/3JPYGtOpAgLV/BHv1B3Qa 8KL3pQ0os9pqIQj73Bv8i9BYqyRme8Uk4wgqG9cQ2+01v7hunHLS1KpSTzFGBO8U pUQO8VkdTWuXps68AY3g8RwMy0vb18TWMsvtM3LRIt4gMDzEt3QjHsVwo59SvGq5 OPISd70s22b7G9AVTQcqRTdAh9YWQNuIVB2quwaVoOCoPB2NQghCcs4CXQNdj8Vz 0HYyCiEKOpdF5lBI04+m6YTseL5z0MOzHKz71I3rDvl0BgaV5VU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:29:53 2026 by rpki-client