$ rpki-client -vvf rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft File: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft (raw, json) Hash identifier: pkyHGsjOClv/iAphwM961DO5zhILvYJofhDAcEEFJrM= Subject key identifier: F1:FB:90:92:FF:61:FB:90:5A:F2:63:DC:3C:76:14:E3:C9:79:6F:1E Authority key identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 Certificate issuer: /CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Certificate serial: 624B2075E848B525D5FC71422D3D9075FBAD6AA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 00:18:21 +0000 Manifest this update: Wed 17 Jun 2026 00:13:21 +0000 Manifest next update: Thu 18 Jun 2026 03:32:21 +0000 Files and hashes: 1: F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl (hash: fek33wC4mMr2zzBVSo6O/nvqXv9skeJBjlGOZawnDuk=) 2: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: AYoGa7j37L8hrtr5+H0Rn8sSOm5spOm3kBm4+aOmlpA=) 3: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: fL4L75ZfG95OnrYdBzJ8U8ScmLKPMhj+AxoVCGeag9U=) 4: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: Dt38mAxvAME6FBzgF8BBYH7xxdpz5knQ2OEkqmtxaaE=) 5: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: te19ceZ+0Is6+1+3K4x4WYPLY+2HU9qAD9W8DfxT5gI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4b:20:75:e8:48:b5:25:d5:fc:71:42:2d:3d:90:75:fb:ad:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883 Validity Not Before: Jun 17 00:13:21 2026 GMT Not After : Jun 18 03:32:21 2026 GMT Subject: CN=F1FB9092FF61FB905AF263DC3C7614E3C9796F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:6b:b1:29:20:50:97:81:b7:83:78:7b:50: ef:54:60:a5:ea:b7:e9:6e:0c:dc:ed:91:6d:fb:82: a6:dd:82:8e:69:56:d3:67:20:1e:a5:6c:a0:d6:e6: a7:d0:21:22:c6:7d:97:d8:36:af:d8:34:a7:fc:f2: 42:f8:dd:74:0e:99:35:0e:17:f0:10:9f:85:c0:67: ee:49:d8:3c:a9:7d:76:94:fe:99:2f:f4:b9:5e:6e: fd:e2:75:94:d8:c2:46:12:aa:cd:1f:6b:fc:d5:5e: e3:b9:69:93:be:37:2e:99:56:70:f6:63:63:a1:55: 89:dc:22:20:d2:36:bf:63:d2:4b:42:96:d6:8b:dd: d9:46:c6:22:c5:2e:c1:a5:07:75:9a:fd:7c:58:9d: 3b:2a:f5:97:94:02:77:43:d9:ea:d0:1a:d1:36:3e: 93:aa:3e:0d:80:ef:5c:1c:99:7d:cd:7c:93:9f:94: 81:7d:c7:a6:54:67:7c:84:d9:48:11:d4:82:3f:80: 2f:48:a0:ec:77:2e:36:56:b5:2a:d0:79:44:c1:99: 97:07:11:c0:c0:62:8e:6e:91:f6:a7:1f:38:1a:31: 72:3f:a0:04:20:f4:e5:90:a3:28:0c:4e:7c:3c:78: 6f:9c:c5:00:56:70:0a:58:3d:94:42:6e:e6:49:68: 7b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FB:90:92:FF:61:FB:90:5A:F2:63:DC:3C:76:14:E3:C9:79:6F:1E X509v3 Authority Key Identifier: keyid:F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:65:72:45:a6:b2:f1:3c:57:65:cb:01:b1:73:f3:f4:a5:e6: 77:21:8e:59:2c:88:30:fa:95:bf:d7:e7:48:de:a9:50:79:9d: 69:36:85:25:e2:f7:e2:57:e1:a2:16:99:4b:1d:04:ee:34:62: 1c:59:2d:22:2c:64:03:98:4b:a5:6b:9b:f8:a5:f9:b8:5d:47: e1:91:5e:4d:7e:f9:04:a1:cd:22:b1:11:a7:a3:76:a5:f7:5c: 54:2b:72:00:44:47:cf:3e:f5:25:d9:1b:2d:84:30:d4:46:9c: 9f:d6:9e:c9:64:77:f6:cc:9b:b3:1d:26:bd:d3:2d:1d:81:0e: db:83:24:46:68:08:53:a7:1a:0e:62:bc:8b:39:f3:88:e6:c9: 88:4e:3f:0e:4b:67:d9:da:91:4a:9e:e7:db:5f:15:40:8b:61: 1a:08:7f:b4:2c:e7:87:fd:b5:2d:23:49:ca:35:99:9e:c1:fa: 8c:6d:12:9c:a6:e7:66:6c:74:52:b2:53:8f:04:cc:53:c2:34: c9:bf:4b:e9:86:3f:0d:7b:52:c1:2f:1f:81:b3:23:b4:3e:0a: f6:41:0a:4d:fe:2e:6a:29:0a:17:96:29:fd:72:d7:48:4d:d8: f3:32:5f:94:af:cf:63:a2:3f:eb:82:4a:a2:f4:32:8c:73:61: 83:07:7f:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYksgdehItSXV/HFCLT2QdfutaqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2 QjlCMjg4MzAeFw0yNjA2MTcwMDEzMjFaFw0yNjA2MTgwMzMyMjFaMDMxMTAvBgNV BAMTKEYxRkI5MDkyRkY2MUZCOTA1QUYyNjNEQzNDNzYxNEUzQzk3OTZGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNDWuxKSBQl4G3g3h7UO9UYKXq t+luDNztkW37gqbdgo5pVtNnIB6lbKDW5qfQISLGfZfYNq/YNKf88kL43XQOmTUO F/AQn4XAZ+5J2DypfXaU/pkv9Llebv3idZTYwkYSqs0fa/zVXuO5aZO+Ny6ZVnD2 Y2OhVYncIiDSNr9j0ktCltaL3dlGxiLFLsGlB3Wa/XxYnTsq9ZeUAndD2erQGtE2 PpOqPg2A71wcmX3NfJOflIF9x6ZUZ3yE2UgR1II/gC9IoOx3LjZWtSrQeUTBmZcH EcDAYo5ukfanHzgaMXI/oAQg9OWQoygMTnw8eG+cxQBWcApYPZRCbuZJaHvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8fuQkv9h+5Ba8mPcPHYU48l5bx4wHwYDVR0j BBgwFoAU8jbHp3pjcdF/6HyF4sW2lmubKIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdmOGY2YTQtOGQ4Ny00ZWYzLWI0ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3 QTYzNzFEMTdGRTg3Qzg1RTJDNUI2OTY2QjlCMjg4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjM2QzdBNzdBNjM3MUQxN0ZFODdDODVFMkM1QjY5NjZCOUIy ODgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvRjIzNkM3QTc3QTYzNzFEMTdGRTg3Qzg1RTJDNUI2 OTY2QjlCMjg4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIplckWmsvE8V2XLAbFz8/Sl5nchjlksiDD6 lb/X50jeqVB5nWk2hSXi9+JX4aIWmUsdBO40YhxZLSIsZAOYS6Vrm/il+bhdR+GR Xk1++QShzSKxEaejdqX3XFQrcgBER88+9SXZGy2EMNRGnJ/Wnslkd/bMm7MdJr3T LR2BDtuDJEZoCFOnGg5ivIs584jmyYhOPw5LZ9nakUqe59tfFUCLYRoIf7Qs54f9 tS0jSco1mZ7B+oxtEpym52ZsdFKyU48EzFPCNMm/S+mGPw17UsEvH4GzI7Q+CvZB Ck3+LmopCheWKf1y10hN2PMyX5Svz2OiP+uCSqL0MoxzYYMHfxQ= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:21 2026 by rpki-client