$ rpki-client -vvf rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft File: F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft (raw, json) Hash identifier: FE9s58VLLFXyqyQWl6FQt9URpv+Moa/ojjUkIv/o6RI= Subject key identifier: 19:08:BE:23:D1:93:C1:4A:41:F8:19:C6:C2:8F:1B:07:06:59:EE:7A Authority key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 Certificate issuer: /CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Certificate serial: 6C2D9EE248B93CCD40D160186F3C1162C841EE25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft Manifest number: 05 Signing time: Tue 05 May 2026 05:33:04 +0000 Manifest this update: Tue 05 May 2026 05:28:04 +0000 Manifest next update: Wed 06 May 2026 07:32:04 +0000 Files and hashes: 1: F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl (hash: wCTTIewrjDNbRsJqwEKStUbTuADWL8GfzqVwxvISFH4=) 2: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: 42WVpxt8kPPzhN9E9uDvoLlTM1AZ+xhmNg0V+4liwbw=) 3: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: TvZUkrrCi0RH2KouESWHnYo6zKTg2B7NXoPHY3tduXU=) 4: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: kbVyFpYowQRxd/2pyb5bI0NF4XwTRcPV5F3s1QVQKnw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 07:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:2d:9e:e2:48:b9:3c:cd:40:d1:60:18:6f:3c:11:62:c8:41:ee:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Validity Not Before: May 5 05:28:04 2026 GMT Not After : May 6 07:32:04 2026 GMT Subject: CN=1908BE23D193C14A41F819C6C28F1B070659EE7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:b1:1b:4b:2c:8f:d9:da:02:ac:bd:5d:74: a3:58:e4:80:fe:a4:9a:00:4d:e7:fb:35:da:89:04: 48:62:9c:de:20:d8:86:3d:96:27:eb:4e:74:9c:86: fc:d2:a9:fd:83:2e:6c:e3:c9:36:95:32:82:83:21: 93:e4:e2:db:f8:1f:d3:af:ca:da:15:7d:cc:bf:c0: e7:ff:dc:08:5b:29:e2:18:ee:b1:cb:a2:59:7d:e6: e1:37:3b:8c:0d:88:d5:eb:e7:48:a1:a3:52:b4:49: 1f:d8:e4:cb:90:a4:84:28:db:da:56:5f:35:07:60: 6d:d4:83:f4:a9:f0:62:6b:39:e5:15:5a:e2:f9:43: d8:85:6d:48:87:b9:0c:fa:5b:92:84:10:b8:d4:23: 18:9a:d3:2d:80:28:80:f0:ce:84:51:12:1f:39:a9: 89:21:8c:ee:fb:90:46:f8:b5:44:c0:67:59:88:12: 11:d3:45:e7:91:92:58:6a:4b:ea:26:e5:de:f1:bb: f8:00:29:2e:e1:73:56:fe:b0:51:0b:b0:ab:23:69: ba:d2:cf:b3:7a:81:08:a6:06:73:07:ba:95:9d:59: fd:4f:23:bb:29:8b:4a:8e:f2:c5:9a:b1:70:bf:e8: c4:6e:a1:f7:93:8c:e4:74:cb:9b:fd:8e:5c:5b:88: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:08:BE:23:D1:93:C1:4A:41:F8:19:C6:C2:8F:1B:07:06:59:EE:7A X509v3 Authority Key Identifier: keyid:F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:8f:7e:c1:2a:11:0c:a5:66:98:d9:48:dc:df:85:6b:49:3b: 1e:6b:2d:55:34:90:e0:4f:17:49:fc:4b:1a:d9:bc:2a:63:f4: 0a:e4:ee:35:2c:33:9f:1f:d2:38:7d:cb:b1:58:47:52:bb:92: 44:7e:9b:76:fa:44:59:c2:33:13:9e:84:7f:9d:40:99:bf:b1: ec:5d:5f:a1:30:20:ef:bf:a2:07:e0:55:2b:05:85:ef:9a:10: 12:51:50:21:f5:34:4c:93:68:a1:c6:1a:08:9d:3e:21:cb:01: d3:2c:f8:f6:e4:cf:02:4d:5d:a5:0c:47:52:4f:b8:39:b9:6a: 65:66:ed:4e:e6:32:d3:bb:cf:8e:56:a6:00:e5:09:38:3b:6f: 9a:1f:7b:19:ac:14:09:68:2a:52:de:31:f2:18:d7:c3:ad:e0: ae:c3:d0:e1:2a:23:87:4f:ad:fd:17:67:10:b3:1a:2b:cb:07: 06:11:c3:11:a3:2b:82:5b:81:1b:e7:87:f2:64:d0:24:32:fc: 4b:06:bc:51:9d:af:71:5d:9f:64:17:5c:ac:ca:d7:a0:f7:11: b1:91:40:47:db:04:2c:55:07:d5:58:88:38:56:f3:e3:65:f8: cd:3a:0d:a3:95:bf:2e:1d:8a:57:a7:21:ad:35:c4:3d:40:a4: 24:28:e4:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbC2e4ki5PM1A0WAYbzwRYshB7iUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3 NjgxNjNGNzAeFw0yNjA1MDUwNTI4MDRaFw0yNjA1MDYwNzMyMDRaMDMxMTAvBgNV BAMTKDE5MDhCRTIzRDE5M0MxNEE0MUY4MTlDNkMyOEYxQjA3MDY1OUVFN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9N7EbSyyP2doCrL1ddKNY5ID+ pJoATef7NdqJBEhinN4g2IY9lifrTnSchvzSqf2DLmzjyTaVMoKDIZPk4tv4H9Ov ytoVfcy/wOf/3AhbKeIY7rHLoll95uE3O4wNiNXr50iho1K0SR/Y5MuQpIQo29pW XzUHYG3Ug/Sp8GJrOeUVWuL5Q9iFbUiHuQz6W5KEELjUIxia0y2AKIDwzoRREh85 qYkhjO77kEb4tUTAZ1mIEhHTReeRklhqS+om5d7xu/gAKS7hc1b+sFELsKsjabrS z7N6gQimBnMHupWdWf1PI7spi0qO8sWasXC/6MRuofeTjOR0y5v9jlxbiPyxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGQi+I9GTwUpB+BnGwo8bBwZZ7nowHwYDVR0j BBgwFoAU+Yj0qdAAjE2EySsP8ZoAc3aBY/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIxZjk5OWItYWJjZS00ZmE5LThlNzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlE MDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3NjgxNjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTg4RjRBOUQwMDA4QzREODRDOTJCMEZGMTlBMDA3Mzc2ODE2 M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAw NzM3NjgxNjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCPfsEqEQylZpjZSNzfhWtJOx5rLVU0kOBP F0n8SxrZvCpj9Ark7jUsM58f0jh9y7FYR1K7kkR+m3b6RFnCMxOehH+dQJm/sexd X6EwIO+/ogfgVSsFhe+aEBJRUCH1NEyTaKHGGgidPiHLAdMs+PbkzwJNXaUMR1JP uDm5amVm7U7mMtO7z45WpgDlCTg7b5ofexmsFAloKlLeMfIY18Ot4K7D0OEqI4dP rf0XZxCzGivLBwYRwxGjK4JbgRvnh/Jk0CQy/EsGvFGdr3Fdn2QXXKzK16D3EbGR QEfbBCxVB9VYiDhW8+Nl+M06DaOVvy4dilenIa01xD1ApCQo5A0= -----END CERTIFICATE-----Generated at Tue May 5 14:17:39 2026 by rpki-client