$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft File: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft (raw, json) Hash identifier: fe1OMbrvsVnEk5BB18bLg3PlQCpINwsWb8cqKBxe9X0= Subject key identifier: 47:00:3C:15:A0:E0:05:15:52:B0:2E:3A:58:7C:46:52:F5:BC:FB:7B Authority key identifier: F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 Certificate issuer: /CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Certificate serial: 58EBE92C2D9D5E840BD282F6EF29E10BDB76C27C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 05:23:38 +0000 Manifest this update: Thu 18 Jun 2026 05:18:38 +0000 Manifest next update: Fri 19 Jun 2026 07:51:38 +0000 Files and hashes: 1: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl (hash: 9jPjmI9THcTHfcnDC98dpAGWpnp9Hm9oqb++o6brdUc=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: shXgjYK0NRlHgehnbq1wzNndxumpi8gg30laew1y7t0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 07:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:eb:e9:2c:2d:9d:5e:84:0b:d2:82:f6:ef:29:e1:0b:db:76:c2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Validity Not Before: Jun 18 05:18:38 2026 GMT Not After : Jun 19 07:51:38 2026 GMT Subject: CN=47003C15A0E0051552B02E3A587C4652F5BCFB7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:54:bc:cd:6e:55:14:45:06:ea:06:55:f1: ec:9e:78:0c:df:f8:65:61:23:50:41:c2:5b:5f:17: 60:0f:8c:0c:1c:61:f7:14:71:a2:80:03:54:40:3a: 39:66:a6:e9:a1:df:ac:43:60:6c:55:f2:a5:18:f3: 6b:3d:e4:29:4e:cc:e0:9b:e7:52:5a:b4:6f:14:8f: fa:0a:7f:89:ac:55:bb:31:ce:2e:fe:38:dc:9d:1f: 49:d9:14:ca:49:32:cf:6e:34:c2:8c:04:0b:c7:89: 23:25:a9:6b:16:43:58:97:6e:72:cd:03:41:f0:ad: 78:0d:9b:cd:85:36:3d:51:fd:e3:db:f4:16:8f:2b: 71:b8:ac:8e:6d:14:36:7b:85:d5:6e:2b:8f:4a:8c: 1b:1d:16:a4:c7:8b:8c:b9:a1:20:95:f4:f4:98:ff: 35:95:52:12:84:4b:f4:c5:1c:00:14:92:21:80:a3: 1d:eb:5d:cf:22:70:b6:65:28:3e:44:c9:f0:a5:75: b3:4e:81:0d:2a:37:0b:72:36:29:7d:f2:99:f7:1c: cf:c2:51:4a:be:a6:5f:71:67:28:b6:34:d0:d8:5e: b8:7b:f4:0b:b8:77:4b:01:46:38:92:9c:23:29:04: f5:38:82:2b:c2:61:82:19:c9:41:07:54:95:93:1b: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:00:3C:15:A0:E0:05:15:52:B0:2E:3A:58:7C:46:52:F5:BC:FB:7B X509v3 Authority Key Identifier: keyid:F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c7:8d:13:46:98:17:7f:37:80:75:f9:a2:db:fb:9a:24:b0: 3c:51:2d:36:b5:df:24:90:d1:3f:90:45:b1:bf:f3:42:f0:52: 59:f4:1f:53:29:a2:e7:35:65:52:2c:ec:75:64:5e:0e:b3:57: c0:78:49:55:52:b8:bd:0e:3a:02:3b:52:4e:ea:8c:8d:70:a2: 06:a4:8f:12:29:36:2f:34:f4:e3:c0:dc:0d:6a:6a:42:a2:c9: fc:b4:d6:db:14:0d:12:3f:8f:2b:32:6f:15:b5:84:36:0f:df: 4b:c8:71:25:b3:4e:1e:8c:86:88:5c:37:d0:ae:33:2a:7a:74: 0c:f8:a6:a6:9c:c3:0c:92:b8:a7:80:1c:fb:11:38:14:00:01: ff:d2:43:fc:63:b3:a2:98:6c:2d:31:e4:63:ed:33:db:06:49: d1:f6:6b:02:a4:e0:0d:10:ba:db:c6:56:9e:7b:83:6d:e2:c8: 8a:4f:96:e1:6d:c6:a2:72:a3:72:d6:52:3a:4b:0b:d4:b6:e9: 2d:72:33:54:38:0b:61:a3:f8:3c:2e:b1:8d:68:6b:32:af:e7: 23:1a:2f:0d:0e:79:a3:3b:97:34:25:8d:11:b9:a6:9e:b9:9f: b9:cc:28:ce:a4:c4:31:51:bd:36:93:f8:a4:e9:c1:d0:cb:2b: 7b:02:f7:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWOvpLC2dXoQL0oL27ynhC9t2wnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1RkUx QzUzNUJFMzAeFw0yNjA2MTgwNTE4MzhaFw0yNjA2MTkwNzUxMzhaMDMxMTAvBgNV BAMTKDQ3MDAzQzE1QTBFMDA1MTU1MkIwMkUzQTU4N0M0NjUyRjVCQ0ZCN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYVS8zW5VFEUG6gZV8eyeeAzf +GVhI1BBwltfF2APjAwcYfcUcaKAA1RAOjlmpumh36xDYGxV8qUY82s95ClOzOCb 51JatG8Uj/oKf4msVbsxzi7+ONydH0nZFMpJMs9uNMKMBAvHiSMlqWsWQ1iXbnLN A0HwrXgNm82FNj1R/ePb9BaPK3G4rI5tFDZ7hdVuK49KjBsdFqTHi4y5oSCV9PSY /zWVUhKES/TFHAAUkiGAox3rXc8icLZlKD5EyfCldbNOgQ0qNwtyNil98pn3HM/C UUq+pl9xZyi2NNDYXrh79Au4d0sBRjiSnCMpBPU4givCYYIZyUEHVJWTG2B5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURwA8FaDgBRVSsC46WHxGUvW8+3swHwYDVR0j BBgwFoAU+OJKtL6rPv7d3U4f0ukF/hxTW+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MzNkY2YtOWY1ZS00Nzc1LTljZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRC RUFCM0VGRUREREQ0RTFGRDJFOTA1RkUxQzUzNUJFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEUyNEFCNEJFQUIzRUZFRERERDRFMUZEMkU5MDVGRTFDNTM1 QkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1 RkUxQzUzNUJFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELHjRNGmBd/N4B1+aLb+5oksDxRLTa13ySQ 0T+QRbG/80LwUln0H1Mpouc1ZVIs7HVkXg6zV8B4SVVSuL0OOgI7Uk7qjI1wogak jxIpNi809OPA3A1qakKiyfy01tsUDRI/jysybxW1hDYP30vIcSWzTh6MhohcN9Cu Myp6dAz4pqacwwySuKeAHPsROBQAAf/SQ/xjs6KYbC0x5GPtM9sGSdH2awKk4A0Q utvGVp57g23iyIpPluFtxqJyo3LWUjpLC9S26S1yM1Q4C2Gj+DwusY1oazKv5yMa Lw0OeaM7lzQljRG5pp65n7nMKM6kxDFRvTaT+KTpwdDLK3sC98k= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:26 2026 by rpki-client