$ rpki-client -vvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft File: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft (raw, json) Hash identifier: KcCyo3OU/nV72DwuMjTImImKDYOZxgdmk+PllYftV0U= Subject key identifier: 74:4E:C8:CF:BA:45:12:A0:60:56:77:7C:32:6E:98:F9:4B:F9:A5:C9 Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Certificate serial: 2DF2FDE765FEB7F2D9F06E5C9128364A35C093A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft Manifest number: 05 Signing time: Tue 05 May 2026 05:27:57 +0000 Manifest this update: Tue 05 May 2026 05:22:57 +0000 Manifest next update: Wed 06 May 2026 05:50:57 +0000 Files and hashes: 1: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl (hash: jZ+NfIozpETVPVGrvon0CGx0+GBxGj2X97j5YfQdmso=) 2: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: qjiY24pQYGnpcIAUBz/9B2SI7lYJZJWbcLgxcQ8Bo/w=) 3: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: P0CKv28xTKde1GyGqA+PJu1GXD9kH++KhnXlGfNoMqo=) 4: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: LreF4U4QqN4qHzhmyfVVXaY/bnu6odrNWttsS80jRSQ=) 5: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: OiF+lqNfnntYlUTcLuL6XkD0ILHuGuhCZq5QG/i1DxA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 05:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f2:fd:e7:65:fe:b7:f2:d9:f0:6e:5c:91:28:36:4a:35:c0:93:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Validity Not Before: May 5 05:22:57 2026 GMT Not After : May 6 05:50:57 2026 GMT Subject: CN=744EC8CFBA4512A06056777C326E98F94BF9A5C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:57:48:e9:23:66:3f:0f:99:84:61:f4:4e: e6:3f:79:6c:93:59:24:e3:f2:5c:8a:5b:98:c4:b0: fe:9f:46:9f:7c:47:03:14:67:63:c1:c6:db:e1:dd: 9f:e9:31:15:8d:cc:ed:b1:dc:8e:ba:e8:90:e9:ed: e8:2e:36:74:f1:09:c6:b7:ab:4e:68:b0:c8:4e:00: fb:23:53:d1:87:1f:ac:5e:28:b3:aa:ee:8e:f6:ab: 66:d3:c6:55:83:68:db:17:c8:f1:fa:cb:fc:f4:24: 07:10:b0:3b:ef:67:b5:9b:3f:70:7f:ed:3b:b7:39: 10:a5:1c:23:07:af:8c:5b:ab:69:6d:e8:57:6f:d3: f7:e4:c4:83:28:ac:4e:c4:30:0f:8d:bf:0f:61:ce: 8c:24:18:8b:1c:82:6d:67:41:77:a7:72:6b:4c:e8: 72:5b:5f:b7:a1:42:6d:f5:1e:d6:e2:bb:da:20:6b: c9:9c:8c:53:b3:f6:31:14:fa:25:9a:51:37:6e:e9: 16:00:80:68:68:85:5c:a9:e0:f2:08:e4:9c:b5:cd: 1f:da:7a:b2:23:83:41:5d:34:18:23:b6:72:94:45: 5c:17:94:44:de:7b:cf:30:67:70:fa:04:fd:12:d9: d9:cb:40:a8:67:43:17:13:57:00:cf:a0:84:4d:16: 29:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4E:C8:CF:BA:45:12:A0:60:56:77:7C:32:6E:98:F9:4B:F9:A5:C9 X509v3 Authority Key Identifier: keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:66:4d:1b:f2:a5:e0:a9:dd:cc:b7:35:ff:a4:27:e4:db:eb: 91:b7:84:25:ed:a8:ab:d5:10:51:05:84:d1:92:e0:c0:f0:7f: c5:67:d9:c0:90:4a:7d:90:70:3b:0f:5d:b8:a7:48:80:6d:46: ef:49:2e:2f:1f:b7:ae:02:26:49:01:8e:18:ac:37:d1:1a:a4: f2:60:fb:34:89:24:56:3f:92:49:39:68:ef:db:eb:9c:7e:4a: a8:3b:a1:87:93:14:e5:42:17:32:11:a6:9d:6b:b3:0f:02:c8: 79:dd:c6:5d:72:71:f9:ec:3d:6f:74:d5:81:90:85:5e:cf:3d: d2:73:35:b7:58:4a:5a:20:40:be:59:03:84:0e:49:36:12:e0: ba:b0:8b:c5:75:51:1e:79:08:e0:00:e2:70:7c:1c:d9:9b:14: de:84:50:86:79:d9:bb:b0:05:0f:28:6a:e9:a9:fc:0b:93:85: dd:39:a0:46:b5:b9:7c:42:3b:7d:d8:84:b7:f6:ca:5e:23:41: 96:e5:91:a2:42:9b:0d:a2:5e:c2:44:28:61:e4:5e:87:23:6f: 6c:3d:98:3d:e9:fb:30:b3:cf:51:a2:20:79:56:48:0f:ac:87: 01:c9:04:e9:43:5b:17:e6:a5:85:d0:c1:5f:dc:60:5b:a3:5d: 22:8b:a0:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULfL952X+t/LZ8G5ckSg2SjXAk6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0 NUNGQTlFMDAeFw0yNjA1MDUwNTIyNTdaFw0yNjA1MDYwNTUwNTdaMDMxMTAvBgNV BAMTKDc0NEVDOENGQkE0NTEyQTA2MDU2Nzc3QzMyNkU5OEY5NEJGOUE1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdt1dI6SNmPw+ZhGH0TuY/eWyT WSTj8lyKW5jEsP6fRp98RwMUZ2PBxtvh3Z/pMRWNzO2x3I666JDp7eguNnTxCca3 q05osMhOAPsjU9GHH6xeKLOq7o72q2bTxlWDaNsXyPH6y/z0JAcQsDvvZ7WbP3B/ 7Tu3ORClHCMHr4xbq2lt6Fdv0/fkxIMorE7EMA+Nvw9hzowkGIscgm1nQXencmtM 6HJbX7ehQm31Htbiu9oga8mcjFOz9jEU+iWaUTdu6RYAgGhohVyp4PII5Jy1zR/a erIjg0FdNBgjtnKURVwXlETee88wZ3D6BP0S2dnLQKhnQxcTVwDPoIRNFinlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdE7Iz7pFEqBgVnd8Mm6Y+Uv5pckwHwYDVR0j BBgwFoAU8GOVVs1NS61p/uDX8imz90XPqeAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQ4MWFjMDEtZjMwMi00NmVkLTllMWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZD RDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0NUNGQTlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDYzOTU1NkNENEQ0QkFENjlGRUUwRDdGMjI5QjNGNzQ1Q0ZB OUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIz Rjc0NUNGQTlFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZmTRvypeCp3cy3Nf+kJ+Tb65G3hCXtqKvV EFEFhNGS4MDwf8Vn2cCQSn2QcDsPXbinSIBtRu9JLi8ft64CJkkBjhisN9EapPJg +zSJJFY/kkk5aO/b65x+Sqg7oYeTFOVCFzIRpp1rsw8CyHndxl1ycfnsPW901YGQ hV7PPdJzNbdYSlogQL5ZA4QOSTYS4Lqwi8V1UR55COAA4nB8HNmbFN6EUIZ52buw BQ8oaump/AuThd05oEa1uXxCO33YhLf2yl4jQZblkaJCmw2iXsJEKGHkXocjb2w9 mD3p+zCzz1GiIHlWSA+shwHJBOlDWxfmpYXQwV/cYFujXSKLoAY= -----END CERTIFICATE-----Generated at Tue May 5 17:52:36 2026 by rpki-client