$ rpki-client -vvf rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft File: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft (raw, json) Hash identifier: Q9xAG3+Y4x/yK+DmGKzGxrCmJ2jlPuqj9Oe5Xcuxlos= Subject key identifier: 67:66:BF:A6:C5:73:66:F3:5E:AA:72:55:B8:1D:08:1E:CB:99:A1:D4 Authority key identifier: F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA Certificate issuer: /CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Certificate serial: 29424C74FA3352D237337397EA160A930D98B611 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:22:38 +0000 Manifest this update: Tue 02 Jun 2026 14:17:38 +0000 Manifest next update: Wed 03 Jun 2026 16:30:38 +0000 Files and hashes: 1: 3130332e3135352e3139322e302f32332d3233203d3e20313431303639.roa (hash: 95q1wdIN5xFaDjhByaZc0LA7ZtrsvihoQfqYrsCn+uc=) 2: F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl (hash: T/JgcNjPCECiAB0nPL7swmZyzFrJxLabzhbYBWTfTXc=) 3: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (hash: Q22MEgPVR0f+tL92VX04m4XuP6YQLIKMlMPaJZ8fbYE=) 4: 3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (hash: XZr4Qm+n8o7er/+eUBzkmen2AskfpDrwMEA3kRcHwsg=) 5: 3130332e3135352e3139322e302f32342d3234203d3e20313431303639.roa (hash: BEHpudyQRtuwFf2QCG10V78UvnovrE5OkEiSNy4zuO4=) 6: 323430363a373563303a3a2f33322d3332203d3e20313431303639.roa (hash: wf52tNtWGqvJu4jJ0bY+suECblDw6T8omf+yFePGyuM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:42:4c:74:fa:33:52:d2:37:33:73:97:ea:16:0a:93:0d:98:b6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA Validity Not Before: Jun 2 14:17:38 2026 GMT Not After : Jun 3 16:30:38 2026 GMT Subject: CN=6766BFA6C57366F35EAA7255B81D081ECB99A1D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:79:43:22:10:b8:c7:85:7c:2c:0e:6e:ea:a0: 29:9e:40:ca:b9:4e:4a:01:e8:3f:a4:7d:48:e9:5f: da:c5:e2:ce:60:3b:bc:9f:dd:64:28:07:c0:4c:04: 3d:8e:d5:64:17:df:c7:2d:2f:bb:35:c1:62:2d:b1: 60:8a:1f:5e:47:f7:1d:5e:1b:aa:7a:94:eb:57:96: b3:60:66:ce:a7:09:e2:c6:96:9d:0e:98:91:80:68: da:f8:2a:ab:eb:d6:fe:3b:7b:62:49:9d:f0:93:d0: c9:70:0e:1a:de:25:4c:4c:35:2a:50:43:0d:21:b7: 0b:d2:3e:4f:e2:55:dc:72:84:d5:01:7e:a2:02:56: 60:c3:42:a3:61:41:28:ac:7a:a6:05:99:4a:8b:3a: 8c:37:16:b7:4b:51:e4:01:8f:08:70:a1:fe:59:7e: ad:12:d7:6d:7d:5f:77:32:aa:00:b7:6e:1d:10:12: 41:76:bc:aa:ec:5c:b1:a3:ee:b5:b9:c1:55:cd:15: 8c:36:87:fb:5f:aa:ea:47:bc:51:ae:d3:73:10:ba: a3:0a:f2:e4:af:ad:81:0b:a9:45:64:eb:c0:83:c1: 56:a2:b7:97:70:62:69:b9:fa:f6:a9:52:51:96:50: 9a:44:2d:e8:aa:0e:d6:66:21:d0:07:f8:d4:3b:83: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:66:BF:A6:C5:73:66:F3:5E:AA:72:55:B8:1D:08:1E:CB:99:A1:D4 X509v3 Authority Key Identifier: keyid:F0:D3:48:1C:E1:72:4B:32:24:37:7F:DE:7E:9A:BD:9D:41:D7:CC:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/F0D3481CE1724B3224377FDE7E9ABD9D41D7CCDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:c5:e9:4a:03:33:4a:71:92:c6:01:45:1b:f8:a0:cc:87:4f: 92:e1:d4:90:b8:e1:4b:8c:92:7f:a6:7a:3c:3a:9f:ec:5b:cc: 2a:4b:03:2b:63:a4:cf:91:45:f8:48:d0:d4:c3:4f:a3:c0:13: dd:32:76:86:6d:9a:99:62:90:51:f4:53:16:ef:3d:a2:e1:70: 7a:27:51:ef:3a:97:e4:b9:31:19:fe:c5:7b:6d:eb:6d:fe:7d: 87:02:07:c3:f9:f7:fc:e8:45:3a:84:8d:f4:da:c9:1f:17:0e: 97:70:42:09:d7:a5:8e:75:ab:1f:e9:55:c3:86:ae:e6:83:c6: a3:58:4d:a0:c3:a2:9d:4c:69:96:b5:8c:72:87:72:6c:bc:80: 44:11:21:72:14:15:23:10:34:85:10:52:08:77:7b:c9:64:49: 29:1c:6f:0a:57:a6:19:ac:c6:66:37:08:a5:ed:e9:9b:e8:3c: 49:f7:9d:b4:b3:3f:da:1c:1a:66:b8:b1:ee:e0:2e:7c:13:5b: 8a:de:b8:6c:77:4e:04:5e:fb:79:d4:d8:c2:d5:fb:9f:0e:af: bc:65:3d:22:ec:90:3d:04:47:69:75:a0:84:e9:c5:c1:49:01: 78:fa:c5:2a:e0:59:26:f7:b6:81:ad:b1:e4:eb:30:a8:db:a2: 1e:06:f5:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUJMdPozUtI3M3OX6hYKkw2YthEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0 MUQ3Q0NEQTAeFw0yNjA2MDIxNDE3MzhaFw0yNjA2MDMxNjMwMzhaMDMxMTAvBgNV BAMTKDY3NjZCRkE2QzU3MzY2RjM1RUFBNzI1NUI4MUQwODFFQ0I5OUExRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDieUMiELjHhXwsDm7qoCmeQMq5 TkoB6D+kfUjpX9rF4s5gO7yf3WQoB8BMBD2O1WQX38ctL7s1wWItsWCKH15H9x1e G6p6lOtXlrNgZs6nCeLGlp0OmJGAaNr4Kqvr1v47e2JJnfCT0MlwDhreJUxMNSpQ Qw0htwvSPk/iVdxyhNUBfqICVmDDQqNhQSiseqYFmUqLOow3FrdLUeQBjwhwof5Z fq0S1219X3cyqgC3bh0QEkF2vKrsXLGj7rW5wVXNFYw2h/tfqupHvFGu03MQuqMK 8uSvrYELqUVk68CDwVait5dwYmm5+vapUlGWUJpELeiqDtZmIdAH+NQ7g3fZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ2a/psVzZvNeqnJVuB0IHsuZodQwHwYDVR0j BBgwFoAU8NNIHOFySzIkN3/efpq9nUHXzNowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQ1MGQ5NTYtOWIwMC00NmMxLWE2MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNF MTcyNEIzMjI0Mzc3RkRFN0U5QUJEOUQ0MUQ3Q0NEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMEQzNDgxQ0UxNzI0QjMyMjQzNzdGREU3RTlBQkQ5RDQxRDdD Q0RBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ1MGQ5NTYtOWIwMC00NmMxLWE2 MzEtMzU2NGUxODZhMDc5LzAvRjBEMzQ4MUNFMTcyNEIzMjI0Mzc3RkRFN0U5QUJE OUQ0MUQ3Q0NEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/F6UoDM0pxksYBRRv4oMyHT5Lh1JC44UuM kn+mejw6n+xbzCpLAytjpM+RRfhI0NTDT6PAE90ydoZtmplikFH0UxbvPaLhcHon Ue86l+S5MRn+xXtt623+fYcCB8P59/zoRTqEjfTayR8XDpdwQgnXpY51qx/pVcOG ruaDxqNYTaDDop1MaZa1jHKHcmy8gEQRIXIUFSMQNIUQUgh3e8lkSSkcbwpXphms xmY3CKXt6ZvoPEn3nbSzP9ocGma4se7gLnwTW4reuGx3TgRe+3nU2MLV+58Or7xl PSLskD0ER2l1oITpxcFJAXj6xSrgWSb3toGtseTrMKjboh4G9XA= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:23 2026 by rpki-client