$ rpki-client -vvf rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft File: F576D7187FE092471757158DEF85D92023BB827A.mft (raw, json) Hash identifier: nck+iqb9+6uLtkvnEYYrzIF3Zlfys84Fk7o3h4+9Fh8= Subject key identifier: 28:43:AA:6D:8C:D4:5A:38:62:40:1E:57:C7:7C:B6:7C:A4:E8:85:F0 Authority key identifier: F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A Certificate issuer: /CN=F576D7187FE092471757158DEF85D92023BB827A Certificate serial: 33C422D7E09377EE0A45B735DB6C7D82FF3E4FC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:05:31 +0000 Manifest this update: Tue 02 Jun 2026 17:00:31 +0000 Manifest next update: Wed 03 Jun 2026 20:32:31 +0000 Files and hashes: 1: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: 6Qo8l/n/t0M13iYl+2beLLikwdIbh6DFG76tlW903nY=) 2: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: 4zXAf/L+AniN8j9yaENVjCZM42RaS1KRlWjNorgEXzk=) 3: 3136302e32352e3132362e302f32332d3233203d3e20313534343130.roa (hash: D7D7+eNACx2VPV6VDU/GlsPiDsYcZqOGcWBVAzfAkao=) 4: F576D7187FE092471757158DEF85D92023BB827A.crl (hash: waaKcPY6IrE/AAUX3BuovEeDJ33sHiN4DdOWtfvZGA4=) 5: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: rVdmDzQFD5XQKuWG8ocH4/yOjCGzvuLA3P7Uzu2MMmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 09:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c4:22:d7:e0:93:77:ee:0a:45:b7:35:db:6c:7d:82:ff:3e:4f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F576D7187FE092471757158DEF85D92023BB827A Validity Not Before: Jun 2 17:00:31 2026 GMT Not After : Jun 3 20:32:31 2026 GMT Subject: CN=2843AA6D8CD45A3862401E57C77CB67CA4E885F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:08:2a:b2:1c:fe:e7:f8:4f:7b:fe:77:10: a8:83:9a:14:7c:c8:67:35:bc:96:f8:73:bb:8f:12: 28:8c:43:85:a2:7b:d3:ac:99:7e:08:cd:17:0d:8e: 3e:b9:a4:51:e5:3c:2a:e7:41:b2:16:d2:e9:e1:15: a3:11:90:d0:5b:44:19:36:ae:8f:6f:8c:b7:e8:46: 95:19:da:b8:c3:ff:20:c6:96:8c:c8:4b:7c:3a:5f: 89:bd:41:3f:98:3d:e6:39:55:bc:fa:96:57:e9:3a: 5e:30:89:23:8b:1e:34:a7:eb:dc:c1:aa:9a:d1:8d: b9:0a:0d:50:c9:bb:91:1e:ed:15:98:21:de:e9:5c: 59:ce:e5:75:6e:6c:0c:28:d2:e7:61:fa:07:c9:2b: f0:c2:2a:45:1e:70:16:c9:88:ce:e8:a4:8d:f4:1a: 45:17:07:55:06:a3:de:36:67:27:61:93:c4:5a:6f: 44:7a:2f:6e:ee:09:41:2d:ad:e7:50:0a:32:7d:9c: d6:36:c5:e1:4d:27:82:ea:bc:30:84:dc:84:96:ec: c8:3f:21:3e:c9:85:c9:87:b2:24:fa:69:ac:5c:7d: c7:ce:8e:0b:82:be:e3:fe:a8:54:07:d7:a0:d3:ac: 8a:3b:14:f9:d2:e4:05:4e:02:e0:a1:f3:85:b8:06: 1a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:43:AA:6D:8C:D4:5A:38:62:40:1E:57:C7:7C:B6:7C:A4:E8:85:F0 X509v3 Authority Key Identifier: keyid:F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:18:d9:45:63:24:af:f2:2b:80:02:5a:15:1f:07:d0:5e:69: 3c:01:5c:8c:4d:91:22:a3:57:83:30:e0:86:06:0e:fd:21:cd: c2:fe:43:c0:71:73:5c:99:89:80:e4:89:54:a0:75:b5:e0:c4: 09:b4:c9:4f:ad:80:1e:ce:7c:1e:10:99:aa:c1:06:cd:0d:e9: 19:56:3b:8d:23:3f:01:c5:04:f8:04:e6:f9:6e:f8:b9:07:ec: 8b:ab:ef:6d:07:27:ef:58:fe:0c:c6:95:c5:35:a3:4d:06:1e: e6:b7:97:6b:18:57:2b:fa:0d:0f:99:51:2e:22:f8:22:66:19: 01:56:1c:d3:ab:e0:bf:5e:c1:19:5c:0a:2b:a7:1f:e9:96:ec: a4:bf:32:e2:4c:f5:a2:89:bb:c7:1c:c2:5b:9f:ee:a9:21:65: 86:54:57:22:72:4f:64:7d:38:77:91:0b:e0:bb:3c:29:ff:b9: d8:0a:df:b6:26:70:fa:3c:0f:22:b8:52:c8:58:71:b1:4e:6b: a7:22:36:c0:e1:36:35:ac:28:85:30:65:ff:a6:93:b2:a6:69: d4:16:ea:29:8b:41:ee:b6:6c:5d:11:a1:2d:23:9b:65:af:65: 09:75:d2:60:f0:bc:18:43:f9:36:6e:97:23:99:2a:fd:e0:b6: 6d:30:47:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8Qi1+CTd+4KRbc122x9gv8+T8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU3NkQ3MTg3RkUwOTI0NzE3NTcxNThERUY4NUQ5MjAy M0JCODI3QTAeFw0yNjA2MDIxNzAwMzFaFw0yNjA2MDMyMDMyMzFaMDMxMTAvBgNV BAMTKDI4NDNBQTZEOENENDVBMzg2MjQwMUU1N0M3N0NCNjdDQTRFODg1RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYAQgqshz+5/hPe/53EKiDmhR8 yGc1vJb4c7uPEiiMQ4Wie9OsmX4IzRcNjj65pFHlPCrnQbIW0unhFaMRkNBbRBk2 ro9vjLfoRpUZ2rjD/yDGlozIS3w6X4m9QT+YPeY5Vbz6llfpOl4wiSOLHjSn69zB qprRjbkKDVDJu5Ee7RWYId7pXFnO5XVubAwo0udh+gfJK/DCKkUecBbJiM7opI30 GkUXB1UGo942Zydhk8Rab0R6L27uCUEtredQCjJ9nNY2xeFNJ4LqvDCE3ISW7Mg/ IT7JhcmHsiT6aaxcfcfOjguCvuP+qFQH16DTrIo7FPnS5AVOAuCh84W4BhotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKEOqbYzUWjhiQB5Xx3y2fKTohfAwHwYDVR0j BBgwFoAU9XbXGH/gkkcXVxWN74XZICO7gnowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTIwNmRlZmEtZmE0My00ZjkzLTkzY2UtMzlmZGZmODFjMTlhLzAvRjU3NkQ3MTg3 RkUwOTI0NzE3NTcxNThERUY4NUQ5MjAyM0JCODI3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNTc2RDcxODdGRTA5MjQ3MTc1NzE1OERFRjg1RDkyMDIzQkI4 MjdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvRjU3NkQ3MTg3RkUwOTI0NzE3NTcxNThERUY4NUQ5 MjAyM0JCODI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEY2UVjJK/yK4ACWhUfB9BeaTwBXIxNkSKj V4Mw4IYGDv0hzcL+Q8Bxc1yZiYDkiVSgdbXgxAm0yU+tgB7OfB4QmarBBs0N6RlW O40jPwHFBPgE5vlu+LkH7Iur720HJ+9Y/gzGlcU1o00GHua3l2sYVyv6DQ+ZUS4i +CJmGQFWHNOr4L9ewRlcCiunH+mW7KS/MuJM9aKJu8ccwluf7qkhZYZUVyJyT2R9 OHeRC+C7PCn/udgK37YmcPo8DyK4UshYcbFOa6ciNsDhNjWsKIUwZf+mk7KmadQW 6imLQe62bF0RoS0jm2WvZQl10mDwvBhD+TZulyOZKv3gtm0wR9k= -----END CERTIFICATE-----Generated at Tue Jun 2 21:31:59 2026 by rpki-client