$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft File: F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft (raw, json) Hash identifier: te0pRw9Llik9J/bbFMYVhev0QuevCW6V4eVzXCgBSmM= Subject key identifier: AA:06:32:DF:C3:12:1C:48:98:12:76:92:85:EE:58:68:63:D5:6B:E8 Authority key identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A Certificate issuer: /CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Certificate serial: 588964687F4D976D8BB1FD8EBCE15012822BEAF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:21:21 +0000 Manifest this update: Wed 03 Jun 2026 01:16:21 +0000 Manifest next update: Thu 04 Jun 2026 02:42:21 +0000 Files and hashes: 1: F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl (hash: uuZsu+qjFKyaCsaMTQ0eFKZppH7JPh9UAhJV9ICQUIY=) 2: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: flDV5K/ive1Rwnl32LWTGzTgFkO/6NW2VyWJuvq91wM=) 3: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: fo8MmYgXBnl7zH/vNSXcllZSUFn1f4iPYfENu7NLLp8=) 4: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 7OSCFLUdX4lh+HkqQPpzAOQL/79FpKE5+vtT3xavcbw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:89:64:68:7f:4d:97:6d:8b:b1:fd:8e:bc:e1:50:12:82:2b:ea:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Validity Not Before: Jun 3 01:16:21 2026 GMT Not After : Jun 4 02:42:21 2026 GMT Subject: CN=AA0632DFC3121C489812769285EE586863D56BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:0f:f1:86:62:e6:a2:b3:e0:8d:09:84:bb: 13:ed:f5:dd:2c:ca:54:69:04:67:dd:8a:dd:31:8b: 3d:46:fa:83:b2:e9:ce:01:1e:eb:52:9e:f7:a7:a7: 6a:3b:be:74:2e:c9:3b:08:d9:17:a3:1f:72:1f:2c: b9:72:65:15:4f:1b:7a:08:bb:5d:2c:00:aa:2c:ca: 40:29:18:80:c4:d1:ac:52:75:1e:bc:33:af:ad:51: cd:4a:f1:54:6c:4f:68:6e:a3:ab:fd:8f:0f:cf:5c: 6b:3a:cf:7d:1a:34:7c:a5:ea:2b:eb:a5:89:0e:9e: a8:0f:72:3f:ec:37:1b:6f:29:12:f9:2f:d4:5c:9e: 02:40:54:7b:1c:51:11:55:c2:88:21:c9:30:bc:2f: 9e:06:26:a0:61:3c:72:55:7f:37:23:ef:df:be:7f: 8e:82:c9:21:ac:8e:ce:2c:7b:61:bc:8c:15:58:74: 89:55:59:5b:e9:a6:b9:31:c5:2b:f5:90:68:41:b3: 44:a9:87:8c:49:08:24:6f:95:d8:a8:b5:45:1d:e3: 98:81:cd:dc:a6:f9:58:01:fb:50:d0:12:66:63:ea: 70:4e:3a:11:8f:6d:27:f4:f7:11:69:66:f3:69:98: 27:da:8f:5a:fa:2c:e9:fc:a9:f5:e1:8d:28:eb:57: 02:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:06:32:DF:C3:12:1C:48:98:12:76:92:85:EE:58:68:63:D5:6B:E8 X509v3 Authority Key Identifier: keyid:F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:dd:40:b6:1a:27:f4:de:6e:9e:40:33:39:6d:a2:37:9c:b5: 30:15:7e:a4:d2:f1:4b:2c:f5:99:73:b4:ff:ab:b9:b9:6e:05: 43:e7:39:1c:2e:32:0e:62:01:c0:09:16:74:43:63:24:ec:16: 09:63:d4:95:bd:7a:4b:8e:87:57:88:b3:85:10:eb:28:10:20: 03:ec:e3:f3:1d:88:c7:62:c1:4a:92:7d:ff:af:57:ec:09:3c: 2e:46:73:19:8c:1e:eb:5a:bf:bf:1c:f7:85:0d:64:bc:35:e6: bc:6f:6a:6e:99:e1:74:a5:be:f7:f0:64:b4:9f:15:e7:9f:5a: 4d:28:8d:0a:c8:c8:56:18:d6:15:df:70:e4:12:91:57:7c:4d: f0:72:fb:2d:c1:c7:5b:50:35:93:eb:c0:06:b3:f2:d0:eb:89: 18:29:eb:2d:7d:02:06:b3:c8:a6:02:84:0a:b9:ac:3d:a0:8b: d7:34:4a:92:d6:b7:9a:98:9b:b3:5c:8a:f3:16:dc:3a:9c:c6: 4e:1b:06:29:e0:9a:20:03:2a:05:c8:25:cb:a4:43:2a:9e:75: 86:cf:c1:eb:b4:7e:c7:53:da:39:b8:7d:9d:05:c0:a3:ed:6d: 74:ac:02:c0:06:93:05:e1:b0:3c:21:67:eb:48:60:c9:5a:a2: bc:58:51:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWIlkaH9Nl22Lsf2OvOFQEoIr6vcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2 MjdDREE2QTAeFw0yNjA2MDMwMTE2MjFaFw0yNjA2MDQwMjQyMjFaMDMxMTAvBgNV BAMTKEFBMDYzMkRGQzMxMjFDNDg5ODEyNzY5Mjg1RUU1ODY4NjNENTZCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWQ/xhmLmorPgjQmEuxPt9d0s ylRpBGfdit0xiz1G+oOy6c4BHutSnvenp2o7vnQuyTsI2RejH3IfLLlyZRVPG3oI u10sAKosykApGIDE0axSdR68M6+tUc1K8VRsT2huo6v9jw/PXGs6z30aNHyl6ivr pYkOnqgPcj/sNxtvKRL5L9RcngJAVHscURFVwoghyTC8L54GJqBhPHJVfzcj79++ f46CySGsjs4se2G8jBVYdIlVWVvpprkxxSv1kGhBs0Sph4xJCCRvldiotUUd45iB zdym+VgB+1DQEmZj6nBOOhGPbSf09xFpZvNpmCfaj1r6LOn8qfXhjSjrVwLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqgYy38MSHEiYEnaShe5YaGPVa+gwHwYDVR0j BBgwFoAU8pWFYZc8ppL+/OZl5ermfGJ82mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE1YjRmYTQtMzI4Yy00Y2YyLWFkZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5 NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2MjdDREE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjk1ODU2MTk3M0NBNjkyRkVGQ0U2NjVFNUVBRTY3QzYyN0NE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2 N0M2MjdDREE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbdQLYaJ/Tebp5AMzltojectTAVfqTS8Uss 9ZlztP+rubluBUPnORwuMg5iAcAJFnRDYyTsFglj1JW9ekuOh1eIs4UQ6ygQIAPs 4/MdiMdiwUqSff+vV+wJPC5GcxmMHutav78c94UNZLw15rxvam6Z4XSlvvfwZLSf FeefWk0ojQrIyFYY1hXfcOQSkVd8TfBy+y3Bx1tQNZPrwAaz8tDriRgp6y19Agaz yKYChAq5rD2gi9c0SpLWt5qYm7NcivMW3Dqcxk4bBingmiADKgXIJcukQyqedYbP weu0fsdT2jm4fZ0FwKPtbXSsAsAGkwXhsDwhZ+tIYMlaorxYUZ4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:00 2026 by rpki-client