$ rpki-client -vvf rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft File: 01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft (raw, json) Hash identifier: USvyeji4v//SyCu9+qEvWc35XAAY3TK+0CqT1fjqdbU= Subject key identifier: 37:46:A5:BE:DB:32:29:04:00:20:64:D4:C2:D5:7B:76:CE:10:BC:A8 Authority key identifier: 01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0 Certificate issuer: /CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0 Certificate serial: 3444C0CF09E1F654D1EC8BB94644575B19A6D31E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:08:51 +0000 Manifest this update: Tue 02 Jun 2026 11:03:51 +0000 Manifest next update: Wed 03 Jun 2026 13:49:51 +0000 Files and hashes: 1: 01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl (hash: eaXQkaP6sggfUMVS3GtYhlE+aQKftMKYeak1LQjLIbc=) 2: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: ySzed5uDLDabSH9SesSAtowh1c9UjHu8DGpoOUcm2mA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:44:c0:cf:09:e1:f6:54:d1:ec:8b:b9:46:44:57:5b:19:a6:d3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0 Validity Not Before: Jun 2 11:03:51 2026 GMT Not After : Jun 3 13:49:51 2026 GMT Subject: CN=3746A5BEDB322904002064D4C2D57B76CE10BCA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:b9:4c:b0:21:c7:c0:f1:b2:ff:33:e0:a7: 9b:74:29:b9:c6:ac:8b:65:0c:e3:4e:b6:81:38:03: 18:78:3b:7f:33:72:39:fc:df:3a:3b:10:ef:e0:69: 7a:cd:4b:f5:04:8f:58:ec:dc:f5:f5:77:3a:3d:60: 26:ec:00:ea:e0:a3:31:20:4e:88:e6:0c:fa:b8:94: b9:e8:bd:b3:57:8b:6e:2a:d8:00:32:95:c0:4d:bf: db:04:42:18:da:f3:cb:66:69:56:9f:e7:10:e6:12: ea:56:08:1a:c8:85:16:a4:36:68:50:86:bb:30:35: b9:a1:f9:a8:84:97:15:51:1c:fd:0f:9b:e2:fa:53: 6e:c7:1c:46:94:a0:86:24:49:bf:d0:f7:f3:ed:ec: 5d:e5:5c:05:6c:a4:f4:a3:3c:6a:9e:27:c7:06:b9: c9:7b:8e:93:89:0a:f1:26:78:2c:a5:d9:29:ce:ae: a2:44:96:cf:cd:d2:9c:a2:b2:2a:58:29:82:aa:bf: c4:42:7e:0e:b7:74:3c:b0:0a:28:98:f8:d6:6b:8a: b7:31:3d:fb:da:87:aa:e8:6b:ef:bd:1a:80:66:20: 81:7d:69:7e:d7:63:0e:aa:a2:bc:97:f4:e6:bc:07: 5e:a6:74:d5:49:0d:ff:d9:fe:60:95:2e:58:9e:5d: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:46:A5:BE:DB:32:29:04:00:20:64:D4:C2:D5:7B:76:CE:10:BC:A8 X509v3 Authority Key Identifier: keyid:01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:27:f5:39:a6:05:02:ed:70:b6:57:10:0b:36:3a:09:88:54: 0b:58:5f:cb:e8:45:ad:95:e2:d7:05:7f:5e:77:9f:c3:9e:50: bb:14:a0:2a:a6:a3:cd:0b:02:ec:d4:12:dc:b4:44:d6:cd:cc: 8a:0a:2c:91:52:a5:a0:c2:49:d4:0f:5c:25:27:af:29:91:f5: 97:08:b4:33:9e:06:54:54:08:34:c7:af:1e:53:34:7d:ea:a0: bb:ee:aa:85:8a:99:3c:d7:a1:7a:a7:4e:ae:96:d0:56:a6:88: 3c:dd:50:8e:c9:34:45:f9:d8:39:23:ec:25:8d:11:92:84:87: 6d:01:8e:ca:2d:7c:0f:fc:72:23:82:c0:24:f6:9d:89:df:2a: 93:ee:8a:96:17:be:df:90:25:58:92:e9:11:7b:c6:b6:9a:c9: 73:ef:09:c1:64:b3:69:3f:fa:43:8b:2a:67:e7:dd:b6:a2:60: 02:31:e1:12:b9:82:35:d3:a9:bb:61:75:04:c7:00:25:c3:51: 2a:fa:60:dd:a6:b5:fb:ed:4e:32:97:5e:61:ba:4d:98:b3:bc: 2c:5b:dc:aa:ac:40:6f:8e:f4:da:a1:30:fa:0d:b9:8b:5d:19: d5:25:e8:57:2c:fb:33:e1:88:4e:80:d4:46:5f:c9:31:40:60: 0c:16:cc:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNETAzwnh9lTR7Iu5RkRXWxmm0x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGM0ZEQzg2MDgxQ0ZFMUIzNEU4OUNDODlGRDEzRTNG QzU1MjBBMDAeFw0yNjA2MDIxMTAzNTFaFw0yNjA2MDMxMzQ5NTFaMDMxMTAvBgNV BAMTKDM3NDZBNUJFREIzMjI5MDQwMDIwNjRENEMyRDU3Qjc2Q0UxMEJDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiY7lMsCHHwPGy/zPgp5t0KbnG rItlDONOtoE4Axh4O38zcjn83zo7EO/gaXrNS/UEj1js3PX1dzo9YCbsAOrgozEg TojmDPq4lLnovbNXi24q2AAylcBNv9sEQhja88tmaVaf5xDmEupWCBrIhRakNmhQ hrswNbmh+aiElxVRHP0Pm+L6U27HHEaUoIYkSb/Q9/Pt7F3lXAVspPSjPGqeJ8cG ucl7jpOJCvEmeCyl2SnOrqJEls/N0pyisipYKYKqv8RCfg63dDywCiiY+NZrircx Pfvah6roa++9GoBmIIF9aX7XYw6qoryX9Oa8B16mdNVJDf/Z/mCVLlieXcx5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN0alvtsyKQQAIGTUwtV7ds4QvKgwHwYDVR0j BBgwFoAUAfP9yGCBz+GzTonMif0T4/xVIKAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc5ODA5MWUtYzFhZS00MDQ5LTk2ZDItYzRjZTM3ZmRjMzViLzAvMDFGM0ZEQzg2 MDgxQ0ZFMUIzNEU4OUNDODlGRDEzRTNGQzU1MjBBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMUYzRkRDODYwODFDRkUxQjM0RTg5Q0M4OUZEMTNFM0ZDNTUy MEEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMDFGM0ZEQzg2MDgxQ0ZFMUIzNEU4OUNDODlGRDEz RTNGQzU1MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQn9TmmBQLtcLZXEAs2OgmIVAtYX8voRa2V 4tcFf153n8OeULsUoCqmo80LAuzUEty0RNbNzIoKLJFSpaDCSdQPXCUnrymR9ZcI tDOeBlRUCDTHrx5TNH3qoLvuqoWKmTzXoXqnTq6W0FamiDzdUI7JNEX52Dkj7CWN EZKEh20BjsotfA/8ciOCwCT2nYnfKpPuipYXvt+QJViS6RF7xraayXPvCcFks2k/ +kOLKmfn3baiYAIx4RK5gjXTqbthdQTHACXDUSr6YN2mtfvtTjKXXmG6TZizvCxb 3KqsQG+O9NqhMPoNuYtdGdUl6Fcs+zPhiE6A1EZfyTFAYAwWzAo= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:48 2026 by rpki-client