$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft File: 12099D13750CE0704F5D87C255E4B056E703B28D.mft (raw, json) Hash identifier: lT6JqCvOQVDRBT2qD7s3/QSb5d6mVKM0q14EHycoodA= Subject key identifier: DE:F3:48:68:58:BE:FD:CF:FD:0F:1F:95:2D:C7:57:1C:05:21:ED:D0 Authority key identifier: 12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D Certificate issuer: /CN=12099D13750CE0704F5D87C255E4B056E703B28D Certificate serial: 5BA1A83050E378A09ED4E23309D8A46BC4A58577 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:58:38 +0000 Manifest this update: Tue 02 Jun 2026 10:53:38 +0000 Manifest next update: Wed 03 Jun 2026 12:52:38 +0000 Files and hashes: 1: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: guj2wYIy2OeBYkQ4ioJGOVZvTeDH758uPYwCniNJbeE=) 2: 12099D13750CE0704F5D87C255E4B056E703B28D.crl (hash: sDZu0CxeA2MpMl5hHBudTjFOCJYg4OhDPUmCUJV3TGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a1:a8:30:50:e3:78:a0:9e:d4:e2:33:09:d8:a4:6b:c4:a5:85:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12099D13750CE0704F5D87C255E4B056E703B28D Validity Not Before: Jun 2 10:53:38 2026 GMT Not After : Jun 3 12:52:38 2026 GMT Subject: CN=DEF3486858BEFDCFFD0F1F952DC7571C0521EDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:2b:8a:9a:e1:b8:99:f6:10:25:b8:d2:a1: 08:b0:0c:fb:48:6e:0f:8b:d3:be:bb:60:97:50:cd: c4:19:75:96:48:a0:f7:54:bd:8d:d2:a5:c7:50:8f: e2:a4:aa:df:70:79:8b:7b:53:7e:85:b6:c7:a6:68: 15:19:b8:c3:ef:a4:22:0a:c7:a8:40:a2:f1:f0:b6: 9f:6f:5c:43:5e:aa:b4:18:ac:1b:6a:8f:79:e4:a4: f4:ee:1c:0c:1e:0b:80:9a:05:70:92:1f:5b:11:c5: 49:96:fa:e5:bf:44:43:c8:6a:6e:df:f6:f0:f3:67: 3f:9f:15:32:03:8f:6d:50:cc:1a:2c:01:9b:e1:ef: a8:e3:cf:56:af:9f:8e:b3:ef:04:3c:96:97:5a:59: db:cd:f4:15:b2:0a:c7:92:74:c7:6f:cc:de:79:da: e7:68:ef:69:36:48:47:de:0e:8b:cd:ad:ab:9a:9f: 8d:84:c5:17:d8:27:25:f8:97:a6:87:a1:55:05:6b: 96:36:37:1c:d9:de:14:6a:ef:99:ad:ea:cf:cc:4c: 22:93:7e:0f:87:fe:5d:90:88:3a:e2:27:0e:0d:a4: 46:ed:ee:c0:5a:a0:a9:5e:09:2a:16:99:e7:fc:a8: 7d:51:fd:e5:6e:01:a0:ba:3e:af:cf:4f:63:7b:f6: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F3:48:68:58:BE:FD:CF:FD:0F:1F:95:2D:C7:57:1C:05:21:ED:D0 X509v3 Authority Key Identifier: keyid:12:09:9D:13:75:0C:E0:70:4F:5D:87:C2:55:E4:B0:56:E7:03:B2:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12099D13750CE0704F5D87C255E4B056E703B28D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/12099D13750CE0704F5D87C255E4B056E703B28D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f2:90:e7:81:8a:36:50:5e:21:22:00:79:11:c1:16:f1:e0: 5f:5c:6b:86:05:f8:35:7d:27:61:e6:59:f5:b3:c2:e1:83:a5: 68:4c:67:71:17:c4:52:8d:3a:71:75:99:e9:cd:28:24:d8:1e: ad:fc:09:f9:87:d0:1b:9d:01:d9:17:ef:46:01:8d:59:ec:7e: a3:83:82:20:19:44:16:e7:d7:89:a6:8f:17:ef:11:30:80:7f: aa:fd:03:7c:ef:11:d8:31:ca:b7:8e:15:a3:21:cb:6b:68:83: 03:c7:17:40:58:48:ca:89:20:72:6b:57:79:32:03:c5:b0:a9: 44:b1:34:19:21:02:20:68:b5:8e:66:09:8f:50:31:08:cb:f3: 08:9b:06:b5:0f:e5:08:00:08:43:1a:83:a4:87:73:b0:b3:f7: 60:01:b9:54:c4:48:2c:64:d5:97:df:f2:75:18:52:cc:60:9a: 3e:0f:19:91:07:1b:e0:97:fc:12:e9:e0:d0:2d:69:43:60:42: 79:41:a7:3a:c8:6e:e6:bf:b5:e9:e5:69:51:f1:d3:7d:d9:fc: 81:eb:b3:7a:6a:15:26:93:3d:1a:99:b3:6f:5c:b8:73:da:52: 49:2e:8f:0c:a4:a8:fe:47:6c:28:f4:54:55:56:a7:1f:49:51: e5:36:0e:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW6GoMFDjeKCe1OIzCdika8SlhXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIwOTlEMTM3NTBDRTA3MDRGNUQ4N0MyNTVFNEIwNTZF NzAzQjI4RDAeFw0yNjA2MDIxMDUzMzhaFw0yNjA2MDMxMjUyMzhaMDMxMTAvBgNV BAMTKERFRjM0ODY4NThCRUZEQ0ZGRDBGMUY5NTJEQzc1NzFDMDUyMUVERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/CuKmuG4mfYQJbjSoQiwDPtI bg+L0767YJdQzcQZdZZIoPdUvY3SpcdQj+Kkqt9weYt7U36FtsemaBUZuMPvpCIK x6hAovHwtp9vXENeqrQYrBtqj3nkpPTuHAweC4CaBXCSH1sRxUmW+uW/REPIam7f 9vDzZz+fFTIDj21QzBosAZvh76jjz1avn46z7wQ8lpdaWdvN9BWyCseSdMdvzN55 2udo72k2SEfeDovNrauan42ExRfYJyX4l6aHoVUFa5Y2NxzZ3hRq75mt6s/MTCKT fg+H/l2QiDriJw4NpEbt7sBaoKleCSoWmef8qH1R/eVuAaC6Pq/PT2N79uwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3vNIaFi+/c/9Dx+VLcdXHAUh7dAwHwYDVR0j BBgwFoAUEgmdE3UM4HBPXYfCVeSwVucDso0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjdlZjI4YWYtYTlhZS00YzMzLThjOTgtNTEyMDlmYjIzZGJhLzAvMTIwOTlEMTM3 NTBDRTA3MDRGNUQ4N0MyNTVFNEIwNTZFNzAzQjI4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjA5OUQxMzc1MENFMDcwNEY1RDg3QzI1NUU0QjA1NkU3MDNC MjhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjdlZjI4YWYtYTlhZS00YzMzLThj OTgtNTEyMDlmYjIzZGJhLzAvMTIwOTlEMTM3NTBDRTA3MDRGNUQ4N0MyNTVFNEIw NTZFNzAzQjI4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDykOeBijZQXiEiAHkRwRbx4F9ca4YF+DV9 J2HmWfWzwuGDpWhMZ3EXxFKNOnF1menNKCTYHq38CfmH0BudAdkX70YBjVnsfqOD giAZRBbn14mmjxfvETCAf6r9A3zvEdgxyreOFaMhy2togwPHF0BYSMqJIHJrV3ky A8WwqUSxNBkhAiBotY5mCY9QMQjL8wibBrUP5QgACEMag6SHc7Cz92ABuVTESCxk 1Zff8nUYUsxgmj4PGZEHG+CX/BLp4NAtaUNgQnlBpzrIbua/tenlaVHx033Z/IHr s3pqFSaTPRqZs29cuHPaUkkujwykqP5HbCj0VFVWpx9JUeU2DkI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:37:57 2026 by rpki-client