$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft File: F5C77B8E76386E06F7C5963580F72FFDB6260833.mft (raw, json) Hash identifier: iXlJFEXVeAWYIwSspC7eyv4byN2MfAHzEx+ucZnlFvU= Subject key identifier: A6:DD:A4:A1:B4:51:E4:6E:70:46:F6:F2:7E:EF:19:10:E1:BE:DC:F4 Authority key identifier: F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33 Certificate issuer: /CN=F5C77B8E76386E06F7C5963580F72FFDB6260833 Certificate serial: 28EFCC0691513E41531D31DE588C413DC6898B19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:55:23 +0000 Manifest this update: Tue 02 Jun 2026 20:50:23 +0000 Manifest next update: Wed 03 Jun 2026 22:59:23 +0000 Files and hashes: 1: F5C77B8E76386E06F7C5963580F72FFDB6260833.crl (hash: j5ETlcLx5fdjGnCL4oPronaHu1WPSRLzYilKdtWPLyY=) 2: 3130332e3231302e332e302f32342d3234203d3e20313530393935.roa (hash: tCQps77ttUsG2B2A/jlIdsatXSph5WwOuMOklCzgjjQ=) 3: 3130332e3231302e322e302f32342d3234203d3e20313530393935.roa (hash: joivasnFvxLt2RiLhnE95QqxHVQvNgax7JJNC23DuLI=) 4: 3130332e3231302e322e302f32332d3233203d3e20313530393935.roa (hash: mV8+z8wbwRTe9z/LKU+76l90oXuk9i0hW/AMDNlrHl4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.crl rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ef:cc:06:91:51:3e:41:53:1d:31:de:58:8c:41:3d:c6:89:8b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5C77B8E76386E06F7C5963580F72FFDB6260833 Validity Not Before: Jun 2 20:50:23 2026 GMT Not After : Jun 3 22:59:23 2026 GMT Subject: CN=A6DDA4A1B451E46E7046F6F27EEF1910E1BEDCF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:46:da:c7:9a:fd:c7:8f:9c:bb:8d:6d:45:18: bd:5b:6e:74:a1:45:a4:6f:a1:eb:84:37:b6:e9:2f: 64:a0:49:9b:ad:c5:06:4e:18:a4:ca:bf:54:d1:5c: 21:44:d2:8a:f4:b3:a0:0e:e9:e5:d7:5b:86:ab:1d: a6:db:d5:69:d7:66:85:6b:28:0e:de:75:78:97:e4: d2:65:ec:87:15:45:bf:3e:25:e0:0c:e2:bd:88:48: 24:b5:2a:ef:3e:87:b1:43:3c:00:f5:2a:5c:44:d1: ef:f9:99:38:8a:1d:60:5e:95:20:4f:83:46:d1:14: 64:3f:f1:1b:08:8e:ab:5b:89:6e:38:f3:c0:70:43: 17:df:4e:df:58:dc:6a:c9:3d:ea:fd:b6:44:15:e4: 52:35:6d:6a:ff:99:c0:34:6c:1c:60:06:74:29:91: ca:9a:52:3e:ae:22:f7:41:c7:60:16:98:38:e2:37: 3c:f1:d2:a6:b2:33:5a:56:08:da:c3:57:f3:62:a0: 88:ab:38:3e:ac:47:c6:0b:43:39:36:3b:bc:09:e0: 14:79:4f:7e:03:4b:23:26:14:3d:ca:50:d0:28:69: 59:42:3a:04:0e:aa:e7:12:21:37:5c:30:6f:62:91: 1d:39:b4:3f:39:cc:a4:7f:39:6b:c3:84:0d:18:98: 7d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DD:A4:A1:B4:51:E4:6E:70:46:F6:F2:7E:EF:19:10:E1:BE:DC:F4 X509v3 Authority Key Identifier: keyid:F5:C7:7B:8E:76:38:6E:06:F7:C5:96:35:80:F7:2F:FD:B6:26:08:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5C77B8E76386E06F7C5963580F72FFDB6260833.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/F5C77B8E76386E06F7C5963580F72FFDB6260833.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:37:9e:3f:ef:0b:c4:8d:9b:4f:84:8e:34:80:e2:85:6d:9c: e2:15:f7:65:b5:f0:45:bb:a5:22:42:a3:80:b5:a2:9e:68:1b: 12:f0:73:8d:9f:4f:be:43:cf:a0:9f:c8:5f:ea:48:7b:36:09: 5b:36:6c:b6:35:e8:e3:a1:52:f0:88:06:0e:37:e3:e7:b8:10: c2:51:a0:b3:1a:77:36:76:ae:2e:98:03:05:70:0a:0c:a3:53: a3:dc:90:45:b3:7a:a2:cc:05:b1:79:52:c9:a3:33:27:15:fb: ed:2d:b8:36:32:ca:6c:f0:30:2c:dc:9d:f9:89:c1:ec:c7:6e: cd:85:19:e4:56:be:ad:6a:0e:62:ec:8c:b8:cf:68:8f:d2:ab: 48:af:60:38:60:8c:a3:10:7f:02:5e:45:87:ee:db:5c:4b:5d: 3a:5d:7a:f2:56:cb:4e:dc:6c:ea:b2:f5:1f:74:03:05:c0:29: db:f0:57:84:29:d0:d6:b3:07:64:fc:aa:95:5a:a7:dc:50:9d: b6:8c:e9:0b:e3:61:df:18:b5:15:d1:63:27:1d:cb:b6:a8:cb: b3:6e:0c:01:49:91:18:e9:22:ba:34:fc:51:cc:be:79:d1:eb: 22:e5:d2:c4:b5:5f:60:9c:06:56:b5:f1:66:69:32:95:6c:80: 8c:6d:70:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKO/MBpFRPkFTHTHeWIxBPcaJixkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVDNzdCOEU3NjM4NkUwNkY3QzU5NjM1ODBGNzJGRkRC NjI2MDgzMzAeFw0yNjA2MDIyMDUwMjNaFw0yNjA2MDMyMjU5MjNaMDMxMTAvBgNV BAMTKEE2RERBNEExQjQ1MUU0NkU3MDQ2RjZGMjdFRUYxOTEwRTFCRURDRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRtrHmv3Hj5y7jW1FGL1bbnSh RaRvoeuEN7bpL2SgSZutxQZOGKTKv1TRXCFE0or0s6AO6eXXW4arHabb1WnXZoVr KA7edXiX5NJl7IcVRb8+JeAM4r2ISCS1Ku8+h7FDPAD1KlxE0e/5mTiKHWBelSBP g0bRFGQ/8RsIjqtbiW4488BwQxffTt9Y3GrJPer9tkQV5FI1bWr/mcA0bBxgBnQp kcqaUj6uIvdBx2AWmDjiNzzx0qayM1pWCNrDV/NioIirOD6sR8YLQzk2O7wJ4BR5 T34DSyMmFD3KUNAoaVlCOgQOqucSITdcMG9ikR05tD85zKR/OWvDhA0YmH2nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpt2kobRR5G5wRvbyfu8ZEOG+3PQwHwYDVR0j BBgwFoAU9cd7jnY4bgb3xZY1gPcv/bYmCDMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZjMzBjNzEtZGYyZC00ZmM3LWI0MzUtNzUxMWRmMjg3YTZiLzAvRjVDNzdCOEU3 NjM4NkUwNkY3QzU5NjM1ODBGNzJGRkRCNjI2MDgzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNUM3N0I4RTc2Mzg2RTA2RjdDNTk2MzU4MEY3MkZGREI2MjYw ODMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZjMzBjNzEtZGYyZC00ZmM3LWI0 MzUtNzUxMWRmMjg3YTZiLzAvRjVDNzdCOEU3NjM4NkUwNkY3QzU5NjM1ODBGNzJG RkRCNjI2MDgzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc3nj/vC8SNm0+EjjSA4oVtnOIV92W18EW7 pSJCo4C1op5oGxLwc42fT75Dz6CfyF/qSHs2CVs2bLY16OOhUvCIBg434+e4EMJR oLMadzZ2ri6YAwVwCgyjU6PckEWzeqLMBbF5UsmjMycV++0tuDYyymzwMCzcnfmJ wezHbs2FGeRWvq1qDmLsjLjPaI/Sq0ivYDhgjKMQfwJeRYfu21xLXTpdevJWy07c bOqy9R90AwXAKdvwV4Qp0NazB2T8qpVap9xQnbaM6QvjYd8YtRXRYycdy7aoy7Nu DAFJkRjpIro0/FHMvnnR6yLl0sS1X2CcBla18WZpMpVsgIxtcAY= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:23 2026 by rpki-client