$ rpki-client -vvf rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft File: FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft (raw, json) Hash identifier: vUeVY20LZVl2gWVu1mNy2G6lbT7KLOFK5vrkRC5H3HQ= Subject key identifier: 83:83:A9:C5:E5:6F:8F:7A:C3:B2:C9:86:12:D6:A2:40:28:C7:00:4B Authority key identifier: FF:75:FB:D7:DD:DE:14:F5:EF:E7:96:A5:B7:28:46:60:D4:6E:72:06 Certificate issuer: /CN=FF75FBD7DDDE14F5EFE796A5B7284660D46E7206 Certificate serial: 3F75D9E49750BC3AAC6F733ACB3F9B82B51A2AD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 03:10:44 +0000 Manifest this update: Thu 18 Jun 2026 03:05:44 +0000 Manifest next update: Fri 19 Jun 2026 06:19:44 +0000 Files and hashes: 1: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: 18eMz8teTkkcf9p+UfDdXZ6oyQLlhohSPsxmAeH1CuI=) 2: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: lYcIqG++R3KlJJ8gdHbn639yTY/SuMx9BoynL2RsVYg=) 3: FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl (hash: oUd4xak4uVeP1y/iY4TT7vLMPphmrS9G9y4vUYIRB50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 06:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:75:d9:e4:97:50:bc:3a:ac:6f:73:3a:cb:3f:9b:82:b5:1a:2a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75FBD7DDDE14F5EFE796A5B7284660D46E7206 Validity Not Before: Jun 18 03:05:44 2026 GMT Not After : Jun 19 06:19:44 2026 GMT Subject: CN=8383A9C5E56F8F7AC3B2C98612D6A24028C7004B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:fe:f2:15:cb:31:14:c9:07:21:35:a0:74: f7:d7:bc:56:9e:a5:69:ce:35:f1:dd:ce:77:b2:e0: c9:e5:ff:2e:27:16:eb:02:5c:50:ec:dc:12:d2:59: 48:94:14:52:cc:b1:3e:dd:f2:b3:77:e6:cc:2e:30: 3a:e1:8d:67:b7:81:8d:0b:c7:b6:f2:2a:9f:04:49: c5:43:04:40:35:7c:6e:28:c1:b7:40:6d:36:1f:b5: 08:38:d3:5f:ad:c2:ec:81:77:02:16:19:c9:75:02: 93:e0:df:16:a3:ef:78:f6:54:b9:16:64:f5:81:da: 1c:58:9a:5e:4f:52:ff:1d:82:3f:02:a9:24:e9:86: 97:6b:90:f4:d7:31:bf:0d:67:03:8c:21:1e:ee:3a: 3b:fb:e7:15:0d:d4:78:28:97:82:8b:4c:85:21:49: 7b:e1:27:b6:95:b4:3f:e1:11:f7:c2:34:b9:54:70: a1:88:64:45:86:20:1b:f5:9c:18:00:49:11:ae:55: 8d:e2:e1:74:fe:cd:ef:d7:1f:12:44:66:7a:47:15: 49:35:21:06:65:6d:af:64:6b:55:15:2b:58:3f:a1: 1b:10:8f:4f:b3:3f:40:c0:a6:ab:74:f9:54:69:20: 8f:ac:28:9d:07:7c:56:5f:04:ca:e6:04:6c:19:e7: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:83:A9:C5:E5:6F:8F:7A:C3:B2:C9:86:12:D6:A2:40:28:C7:00:4B X509v3 Authority Key Identifier: keyid:FF:75:FB:D7:DD:DE:14:F5:EF:E7:96:A5:B7:28:46:60:D4:6E:72:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/FF75FBD7DDDE14F5EFE796A5B7284660D46E7206.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ca:2b:6f:94:56:ee:72:7a:74:22:29:f3:78:f3:c4:8b:27: 20:eb:dc:39:76:fa:d7:36:78:04:80:e1:af:2a:ad:e6:4f:7f: 78:41:51:6d:3f:7d:9a:db:88:93:2c:b3:25:38:1c:57:d0:5b: 82:3b:a1:c6:d0:ed:55:1c:92:2b:b3:04:30:5f:92:51:ce:70: 96:0c:13:a9:da:84:db:86:03:19:24:66:6b:9e:15:a6:0b:de: 86:94:a5:71:6d:81:00:bc:b0:a8:08:17:42:96:db:c0:15:81: dc:41:7d:a1:1c:5f:a0:d2:fe:1e:5b:67:1f:3d:23:f1:67:ce: 33:07:9a:1c:8f:55:b3:9e:79:09:e7:83:74:30:ca:0e:e0:40: 59:db:b6:e5:41:a6:f0:5b:46:8d:00:5e:c0:18:10:eb:72:dd: 57:c3:14:7d:bf:20:b9:ca:24:fa:bc:58:b2:a1:6f:a1:7c:ca: 57:6c:e5:8b:f7:59:80:5c:68:6f:22:fe:28:f0:10:6a:94:b5: 6a:84:03:f0:b8:c1:8a:ea:01:d9:3a:0d:a7:ae:a8:33:9f:ef: 2f:74:0f:94:79:92:00:43:a1:38:f7:06:1c:94:fa:a9:a1:8f: 56:c0:d6:27:37:a7:01:9f:79:4d:e6:cf:e7:57:56:f6:65:f3: 90:eb:b9:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3XZ5JdQvDqsb3M6yz+bgrUaKtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUZCRDdERERFMTRGNUVGRTc5NkE1QjcyODQ2NjBE NDZFNzIwNjAeFw0yNjA2MTgwMzA1NDRaFw0yNjA2MTkwNjE5NDRaMDMxMTAvBgNV BAMTKDgzODNBOUM1RTU2RjhGN0FDM0IyQzk4NjEyRDZBMjQwMjhDNzAwNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflP7yFcsxFMkHITWgdPfXvFae pWnONfHdzney4Mnl/y4nFusCXFDs3BLSWUiUFFLMsT7d8rN35swuMDrhjWe3gY0L x7byKp8EScVDBEA1fG4owbdAbTYftQg401+twuyBdwIWGcl1ApPg3xaj73j2VLkW ZPWB2hxYml5PUv8dgj8CqSTphpdrkPTXMb8NZwOMIR7uOjv75xUN1Hgol4KLTIUh SXvhJ7aVtD/hEffCNLlUcKGIZEWGIBv1nBgASRGuVY3i4XT+ze/XHxJEZnpHFUk1 IQZlba9ka1UVK1g/oRsQj0+zP0DApqt0+VRpII+sKJ0HfFZfBMrmBGwZ5/BHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg4OpxeVvj3rDssmGEtaiQCjHAEswHwYDVR0j BBgwFoAU/3X7193eFPXv55altyhGYNRucgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDE0MDU1NDUtYzM1ZC00ZGUxLTk2MTgtNDRiNWY0MTdhMzAzLzEvRkY3NUZCRDdE RERFMTRGNUVGRTc5NkE1QjcyODQ2NjBENDZFNzIwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRjc1RkJEN0REREUxNEY1RUZFNzk2QTVCNzI4NDY2MEQ0NkU3 MjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzEvRkY3NUZCRDdERERFMTRGNUVGRTc5NkE1QjcyODQ2 NjBENDZFNzIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7KK2+UVu5yenQiKfN488SLJyDr3Dl2+tc2 eASA4a8qreZPf3hBUW0/fZrbiJMssyU4HFfQW4I7ocbQ7VUckiuzBDBfklHOcJYM E6nahNuGAxkkZmueFaYL3oaUpXFtgQC8sKgIF0KW28AVgdxBfaEcX6DS/h5bZx89 I/FnzjMHmhyPVbOeeQnng3Qwyg7gQFnbtuVBpvBbRo0AXsAYEOty3VfDFH2/ILnK JPq8WLKhb6F8ylds5Yv3WYBcaG8i/ijwEGqUtWqEA/C4wYrqAdk6DaeuqDOf7y90 D5R5kgBDoTj3BhyU+qmhj1bA1ic3pwGfeU3mz+dXVvZl85DruTg= -----END CERTIFICATE-----Generated at Thu Jun 18 21:13:10 2026 by rpki-client