$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft File: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft (raw, json) Hash identifier: va6vFAyIM1PHckzmTFVnE22at+zFvpoMKf5tOKJu9c0= Subject key identifier: 3F:95:31:2B:A2:A6:A9:98:34:D8:10:A3:FF:E0:97:0A:21:0B:57:0A Authority key identifier: F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 Certificate issuer: /CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Certificate serial: 5AE066321A0DC799D83ECFFDD5F133C93A639075 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:53:38 +0000 Manifest this update: Tue 02 Jun 2026 22:48:38 +0000 Manifest next update: Thu 04 Jun 2026 01:34:38 +0000 Files and hashes: 1: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: prj58PGbUwDLvrT9h5jO7nMgDDmjvocJnN5ph+z3PrU=) 2: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: 9E/Ti671GF/WZdUwZ2RH1G2YB9kJfWY4JlzPZetlvoI=) 3: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: VGZWopnP5E+cpki2YrX/ob7V+wdxOvea5qW0A+eDkWM=) 4: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl (hash: K/GZ3qd4hU5VfWq8YBa12BSc3mZXAK7j392suI7zch4=) 5: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ebJX0xmBUCyzAXEckdnMbEf0pSEsLD4g9s9OXuyGYmM=) 6: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: rPbVerJ1hIqpxViNC0hFDNp8HCiflf0mjWJTLUhjlFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e0:66:32:1a:0d:c7:99:d8:3e:cf:fd:d5:f1:33:c9:3a:63:90:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Validity Not Before: Jun 2 22:48:38 2026 GMT Not After : Jun 4 01:34:38 2026 GMT Subject: CN=3F95312BA2A6A99834D810A3FFE0970A210B570A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:af:a9:55:f0:e7:ca:42:ea:c5:41:83:4b:5a: 55:b9:96:cd:40:62:3a:90:44:c0:d8:26:f4:6c:e2: df:80:1a:6f:ff:2f:4f:86:1d:f3:bb:99:cb:0b:0c: 22:6c:97:b8:fe:ac:cb:29:70:ca:6e:8d:8c:9b:7e: 7e:0a:d9:76:33:11:3c:1d:4e:ec:57:37:6d:90:77: ec:44:eb:db:59:dd:fa:3c:47:5e:d8:0b:66:10:03: 67:ce:89:9c:6c:b8:3f:ac:af:85:e3:18:da:d2:36: 5b:a6:cd:7a:08:6b:fa:78:e6:3f:8d:d3:5a:6f:9f: b7:7c:29:b4:b3:66:03:28:a0:80:bf:32:03:fd:85: 46:02:80:46:c6:e9:06:7d:3e:1a:7e:14:4b:b7:d1: 72:ef:8c:40:21:1d:8b:85:6e:25:26:bf:20:57:04: c9:b3:f6:df:6d:ae:a1:09:bc:a1:04:94:1a:0a:c9: ca:23:bf:a4:33:b9:b7:0d:f6:b2:48:ab:4a:6b:82: 0d:59:2a:86:95:0c:8f:85:b6:17:32:95:3e:fc:98: 84:7f:78:a9:60:17:71:68:83:3d:cb:01:0a:94:62: 40:b3:f3:3b:75:a2:5e:2a:82:37:7e:28:4f:4d:43: cc:82:64:36:1e:c8:5d:f1:5f:9f:e1:e5:9f:67:34: 27:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:95:31:2B:A2:A6:A9:98:34:D8:10:A3:FF:E0:97:0A:21:0B:57:0A X509v3 Authority Key Identifier: keyid:F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:35:c1:b0:3a:e4:3f:10:1f:c9:bf:8b:55:83:db:68:c2:65: 61:59:98:49:d8:52:d0:a6:c6:bc:b9:61:0c:5b:22:63:6d:ae: f2:0b:58:51:42:18:2f:43:8b:96:ff:78:fe:08:9d:88:44:46: 46:91:f8:da:97:77:81:4e:9d:00:27:9e:aa:62:6d:3d:78:42: 50:bf:ba:05:cc:59:ff:e3:71:ac:f7:93:b2:e0:c5:4e:c2:d7: e7:a2:bc:a4:f7:ea:e6:02:6b:7d:c3:ec:74:38:c6:e4:5d:c9: fb:2e:c5:33:8a:da:28:dc:3a:8b:19:2e:98:f1:a3:7b:8c:ab: 1b:99:03:c4:4d:0f:37:b9:75:ed:3f:b9:d3:bf:a9:80:85:ab: 9f:87:1b:97:18:15:ef:6a:f2:da:82:da:89:41:04:bd:10:b4: 8d:90:b6:29:8e:a4:26:fd:28:1c:24:fc:c0:22:b6:ec:ae:49: f1:e4:da:53:e5:4e:b9:fb:28:a4:47:98:dc:7b:6d:87:99:96: 99:04:23:40:3f:6e:3b:3f:fb:e4:42:fe:29:e8:28:8c:f2:55: 1a:d5:77:f9:b8:fd:3d:14:be:0d:03:e0:28:0a:0e:68:ea:d1: fb:6e:a7:e5:6a:81:42:42:fa:43:29:c7:1c:ea:88:0e:e6:25: 1f:87:2c:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWuBmMhoNx5nYPs/91fEzyTpjkHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlC MUVCRDIxNDAeFw0yNjA2MDIyMjQ4MzhaFw0yNjA2MDQwMTM0MzhaMDMxMTAvBgNV BAMTKDNGOTUzMTJCQTJBNkE5OTgzNEQ4MTBBM0ZGRTA5NzBBMjEwQjU3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdr6lV8OfKQurFQYNLWlW5ls1A YjqQRMDYJvRs4t+AGm//L0+GHfO7mcsLDCJsl7j+rMspcMpujYybfn4K2XYzETwd TuxXN22Qd+xE69tZ3fo8R17YC2YQA2fOiZxsuD+sr4XjGNrSNlumzXoIa/p45j+N 01pvn7d8KbSzZgMooIC/MgP9hUYCgEbG6QZ9Php+FEu30XLvjEAhHYuFbiUmvyBX BMmz9t9trqEJvKEElBoKycojv6QzubcN9rJIq0prgg1ZKoaVDI+FthcylT78mIR/ eKlgF3Fogz3LAQqUYkCz8zt1ol4qgjd+KE9NQ8yCZDYeyF3xX5/h5Z9nNCc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP5UxK6KmqZg02BCj/+CXCiELVwowHwYDVR0j BBgwFoAU+OnUjRfMOONMv8dLXAf0qbHr0hQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOGQ5MDgtMWI5OS00NTVjLWFjNzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQx N0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlCMUVCRDIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEU5RDQ4RDE3Q0MzOEUzNENCRkM3NEI1QzA3RjRBOUIxRUJE MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0 QTlCMUVCRDIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHY1wbA65D8QH8m/i1WD22jCZWFZmEnYUtCm xry5YQxbImNtrvILWFFCGC9Di5b/eP4InYhERkaR+NqXd4FOnQAnnqpibT14QlC/ ugXMWf/jcaz3k7LgxU7C1+eivKT36uYCa33D7HQ4xuRdyfsuxTOK2ijcOosZLpjx o3uMqxuZA8RNDze5de0/udO/qYCFq5+HG5cYFe9q8tqC2olBBL0QtI2QtimOpCb9 KBwk/MAituyuSfHk2lPlTrn7KKRHmNx7bYeZlpkEI0A/bjs/++RC/inoKIzyVRrV d/m4/T0Uvg0D4CgKDmjq0ftup+VqgUJC+kMpxxzqiA7mJR+HLKU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:49 2026 by rpki-client