$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft File: F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft (raw, json) Hash identifier: 0+ChVq+HB0BNeA6XDAxeFfY+1663MbkoXI6sfQA8Fx0= Subject key identifier: C4:E6:0E:E1:03:DE:1F:8C:85:F5:18:ED:09:90:9B:4B:35:07:67:4D Authority key identifier: F1:A3:DA:B9:00:12:12:D9:FD:6F:84:63:04:9F:31:2D:72:7B:FF:2C Certificate issuer: /CN=F1A3DAB9001212D9FD6F8463049F312D727BFF2C Certificate serial: 1BCB8B2FA05FAD2FCCF12342AAC3C7E93115CDF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:40:01 +0000 Manifest this update: Tue 02 Jun 2026 20:35:01 +0000 Manifest next update: Wed 03 Jun 2026 23:38:01 +0000 Files and hashes: 1: F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl (hash: mNwd0jK+/S1b4aG8AV5mmgm2nD9C10TuhPKPWwbYsTE=) 2: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: rJ/og/iKUK3xac6RdgdlO70UvsZ6axJQZfH2pg1L5Gs=) 3: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: X3tra53AFKAkL1Puu4ERpsixqEIRbM+P2BtQPxdqKUw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cb:8b:2f:a0:5f:ad:2f:cc:f1:23:42:aa:c3:c7:e9:31:15:cd:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1A3DAB9001212D9FD6F8463049F312D727BFF2C Validity Not Before: Jun 2 20:35:01 2026 GMT Not After : Jun 3 23:38:01 2026 GMT Subject: CN=C4E60EE103DE1F8C85F518ED09909B4B3507674D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:71:f2:a8:9c:a4:6b:4c:96:4e:0e:c5:ae: b2:e2:a7:aa:9f:f2:ec:71:68:24:da:05:c5:79:b5: d8:6c:6d:3f:48:ea:f8:e6:5a:31:23:7b:df:81:26: 93:1f:df:f8:26:2f:f9:92:e5:b0:ce:d7:5f:32:35: d8:7b:2e:9f:20:ac:71:43:da:2b:90:d6:1f:2a:0f: d5:82:d5:96:80:41:9a:48:24:c1:96:f5:cf:a7:b4: d1:f7:3f:bb:93:f0:29:d8:66:2e:5f:0b:a2:8b:9a: 5a:6d:bf:17:02:cc:77:e5:79:51:41:16:01:83:09: e8:af:c5:84:c1:e5:41:c2:40:3f:4e:06:32:b2:f8: 52:b9:ed:3b:29:35:b7:25:b0:9b:a8:b6:86:85:e8: 25:f6:8d:1f:e0:af:98:36:51:09:d2:ff:d3:14:6e: ac:00:de:23:6e:4f:d8:d8:6f:75:b0:f7:24:53:f6: e1:c7:73:f7:55:4a:a7:8a:17:f9:6b:5e:9d:41:6b: 6f:5c:52:b1:0c:73:59:d6:5c:24:1d:80:70:de:48: ed:db:af:73:04:3e:a6:e1:f3:94:74:47:23:70:38: 90:8d:ef:2e:e1:82:26:c9:e0:47:fd:6c:76:e5:26: 52:b7:fa:30:2d:c7:3b:c1:ab:bc:d9:02:7a:b7:6e: b3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E6:0E:E1:03:DE:1F:8C:85:F5:18:ED:09:90:9B:4B:35:07:67:4D X509v3 Authority Key Identifier: keyid:F1:A3:DA:B9:00:12:12:D9:FD:6F:84:63:04:9F:31:2D:72:7B:FF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/F1A3DAB9001212D9FD6F8463049F312D727BFF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:33:df:74:49:d1:66:51:26:52:bd:7a:48:fe:63:20:9a:ba: 1d:ba:b7:14:54:6a:4d:43:ca:8b:cf:b0:f0:d0:ac:21:3a:7f: f2:7e:3a:12:f4:83:8a:b5:7d:2f:ba:eb:49:bb:88:94:b6:8c: fd:01:55:93:c0:1c:ae:d5:a5:b1:62:8b:42:e7:02:c6:a8:1a: fd:5d:79:18:12:2a:58:93:e3:fc:86:09:17:1f:ce:58:c9:fb: 3e:9f:a0:ed:1b:c5:55:26:fc:55:0f:cb:66:09:e0:85:4b:c6: 35:b0:5b:04:a7:9d:a7:22:66:bb:62:49:08:1d:c5:11:a4:9e: 9c:44:62:66:d2:c0:9b:49:20:b5:76:f7:c1:0c:df:bf:fc:0b: ec:d3:9a:d6:6a:81:fb:35:bd:2d:5d:f9:1d:92:79:ae:e9:77: de:8c:9f:17:83:e7:df:04:d3:79:1d:09:3d:23:29:5c:8e:04: 13:34:6a:06:9b:f4:68:64:0c:64:1d:ff:3b:d1:9c:b9:14:32: 44:35:0b:73:16:62:16:37:f6:fa:a0:de:b3:da:f1:92:d8:d9: cd:bf:7f:d3:86:e9:7f:88:b8:ba:2d:dc:92:e2:05:06:60:b9: c6:a3:ec:64:79:25:2a:d7:44:37:9b:3a:d6:14:6c:95:ff:4b: fa:40:a0:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8uLL6BfrS/M8SNCqsPH6TEVzfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFBM0RBQjkwMDEyMTJEOUZENkY4NDYzMDQ5RjMxMkQ3 MjdCRkYyQzAeFw0yNjA2MDIyMDM1MDFaFw0yNjA2MDMyMzM4MDFaMDMxMTAvBgNV BAMTKEM0RTYwRUUxMDNERTFGOEM4NUY1MThFRDA5OTA5QjRCMzUwNzY3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABnHyqJyka0yWTg7FrrLip6qf 8uxxaCTaBcV5tdhsbT9I6vjmWjEje9+BJpMf3/gmL/mS5bDO118yNdh7Lp8grHFD 2iuQ1h8qD9WC1ZaAQZpIJMGW9c+ntNH3P7uT8CnYZi5fC6KLmlptvxcCzHfleVFB FgGDCeivxYTB5UHCQD9OBjKy+FK57TspNbclsJuotoaF6CX2jR/gr5g2UQnS/9MU bqwA3iNuT9jYb3Ww9yRT9uHHc/dVSqeKF/lrXp1Ba29cUrEMc1nWXCQdgHDeSO3b r3MEPqbh85R0RyNwOJCN7y7hgibJ4Ef9bHblJlK3+jAtxzvBq7zZAnq3brOnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxOYO4QPeH4yF9RjtCZCbSzUHZ00wHwYDVR0j BBgwFoAU8aPauQASEtn9b4RjBJ8xLXJ7/ywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NmMTcwNmItNmMxNy00Nzg2LWFiZDktNDdhMzg0NGRhOGY4LzAvRjFBM0RBQjkw MDEyMTJEOUZENkY4NDYzMDQ5RjMxMkQ3MjdCRkYyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMUEzREFCOTAwMTIxMkQ5RkQ2Rjg0NjMwNDlGMzEyRDcyN0JG RjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvRjFBM0RBQjkwMDEyMTJEOUZENkY4NDYzMDQ5RjMx MkQ3MjdCRkYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL8z33RJ0WZRJlK9ekj+YyCauh26txRUak1D yovPsPDQrCE6f/J+OhL0g4q1fS+660m7iJS2jP0BVZPAHK7VpbFii0LnAsaoGv1d eRgSKliT4/yGCRcfzljJ+z6foO0bxVUm/FUPy2YJ4IVLxjWwWwSnnaciZrtiSQgd xRGknpxEYmbSwJtJILV298EM37/8C+zTmtZqgfs1vS1d+R2Sea7pd96MnxeD598E 03kdCT0jKVyOBBM0agab9GhkDGQd/zvRnLkUMkQ1C3MWYhY39vqg3rPa8ZLY2c2/ f9OG6X+IuLot3JLiBQZgucaj7GR5JSrXRDebOtYUbJX/S/pAoIA= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:53 2026 by rpki-client