$ rpki-client -vvf rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft File: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft (raw, json) Hash identifier: mtBrxnM7wTt3C2SHdUDvDY+rCMnjR7+U3qnI/yp6/w4= Subject key identifier: 7C:C2:FF:4A:62:54:D2:9C:3A:F5:5A:C8:2E:FE:41:E5:96:AF:AF:60 Authority key identifier: FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 Certificate issuer: /CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Certificate serial: 0A82F7B8AC1C72F3905062640574F5AEE5470D9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:36:37 +0000 Manifest this update: Tue 16 Jun 2026 18:31:37 +0000 Manifest next update: Wed 17 Jun 2026 21:01:37 +0000 Files and hashes: 1: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: tqhtPy0pDXrbRO+/m8ay5h7+qXG3yJPzUoTIyb8m2MU=) 2: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: DzuRo4UVpWSsuuvSZCPx+QPp1mXNSgbHMp2M3XRIA7s=) 3: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl (hash: v9W590UnxxGuckRtn2FJFtmwoOMdDhvAgU4LewpuecY=) 4: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: pv5zffL4ZCBhJD+aFjjZDdz/CPK6N+eA7QhskPfJHEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:82:f7:b8:ac:1c:72:f3:90:50:62:64:05:74:f5:ae:e5:47:0d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Validity Not Before: Jun 16 18:31:37 2026 GMT Not After : Jun 17 21:01:37 2026 GMT Subject: CN=7CC2FF4A6254D29C3AF55AC82EFE41E596AFAF60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:fa:b6:4a:d6:a1:2c:be:7b:09:6a:44:ca: b3:4c:bc:ef:2f:c0:8d:5f:ca:00:85:6c:c4:72:c4: 58:ee:8a:1d:ef:08:21:37:56:4b:28:08:b8:86:6f: 7f:b0:c0:4d:45:c9:e3:e2:1e:f6:a1:66:a1:b1:7a: db:07:d2:a9:2d:04:f4:b8:e0:eb:a5:b0:6b:1f:75: b1:c1:f1:49:88:2c:18:8e:b0:ea:cd:b3:21:2f:34: a7:36:27:68:11:bf:f4:52:e5:13:cb:03:50:f7:7e: 54:b3:0a:5c:71:7e:5b:c7:c1:a8:3f:b0:b0:bf:44: f2:77:9b:c9:44:a7:c6:f8:c5:d7:79:4f:5d:79:af: 66:e3:85:5c:db:6b:b8:26:24:23:0d:c0:eb:01:44: 6a:28:07:6d:4e:8d:f6:39:c3:68:3f:19:20:61:8e: 7f:68:7e:47:fa:12:9a:ae:88:8f:a4:50:cb:41:7f: bb:04:42:41:93:3f:50:d0:c7:83:58:1d:49:ff:d9: 02:8b:b7:83:45:23:cf:d3:6f:2a:ba:ee:cc:35:0e: 6a:b6:ec:38:e2:8c:78:e4:63:10:b7:2b:b4:46:96: f7:aa:5c:29:af:25:e5:65:6b:3b:72:39:88:b7:aa: c2:1e:be:d4:c8:9c:05:f6:2a:d5:2f:6e:bf:d8:2f: 0e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C2:FF:4A:62:54:D2:9C:3A:F5:5A:C8:2E:FE:41:E5:96:AF:AF:60 X509v3 Authority Key Identifier: keyid:FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:bb:51:c2:87:64:3d:e4:4d:0f:73:25:25:d3:60:b4:72:70: f3:6b:53:5e:62:84:e9:c4:e5:f8:fa:8b:3c:55:91:c6:da:65: 8f:81:67:da:c2:48:85:17:9a:34:f5:be:53:cd:05:05:9f:12: 0f:3b:53:bd:5e:bd:a2:0d:1e:19:04:9d:d0:6c:dd:fe:81:0c: ba:b6:2b:93:b2:88:de:e1:68:67:3c:ef:ed:d6:ad:ba:a9:8b: 22:a6:4c:6c:be:c7:6e:96:a4:8f:d3:03:c3:c0:8a:c0:f3:89: 5a:e8:88:08:4c:78:cc:4a:ec:4a:19:b0:26:c1:cc:6c:6b:d4: 06:f9:e9:40:9d:e3:6f:14:69:19:61:36:53:f1:8d:a4:db:98: f1:e9:8e:e2:77:c2:32:43:af:0d:30:76:52:98:cc:84:3c:ac: 3f:4f:5d:fc:f5:1f:2a:4c:8f:8e:86:22:a0:db:f8:07:8e:5f: 88:44:22:4f:94:a0:9c:93:31:27:33:49:ff:21:49:e3:28:ab: 6c:a6:98:4a:1c:50:d2:80:a7:6d:64:c0:4e:4e:9a:f1:46:ab: 66:c8:cb:e3:4c:d1:35:e4:33:36:c5:e4:8e:9d:3a:96:bb:ea: 65:fd:1e:5c:7c:bf:9f:6b:de:6a:a7:95:65:ac:64:94:87:ff: 7a:ca:7b:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCoL3uKwccvOQUGJkBXT1ruVHDZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5 QjgzNDExMzAeFw0yNjA2MTYxODMxMzdaFw0yNjA2MTcyMTAxMzdaMDMxMTAvBgNV BAMTKDdDQzJGRjRBNjI1NEQyOUMzQUY1NUFDODJFRkU0MUU1OTZBRkFGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDfq2StahLL57CWpEyrNMvO8v wI1fygCFbMRyxFjuih3vCCE3VksoCLiGb3+wwE1FyePiHvahZqGxetsH0qktBPS4 4OulsGsfdbHB8UmILBiOsOrNsyEvNKc2J2gRv/RS5RPLA1D3flSzClxxflvHwag/ sLC/RPJ3m8lEp8b4xdd5T115r2bjhVzba7gmJCMNwOsBRGooB21OjfY5w2g/GSBh jn9ofkf6EpquiI+kUMtBf7sEQkGTP1DQx4NYHUn/2QKLt4NFI8/Tbyq67sw1Dmq2 7DjijHjkYxC3K7RGlveqXCmvJeVlaztyOYi3qsIevtTInAX2KtUvbr/YLw7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfML/SmJU0pw69VrILv5B5Zavr2AwHwYDVR0j BBgwFoAU//RmKb3bTzocbXjyU+O2PJuDQRMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZlZGIyOGYtZjNmOS00MTk5LTg1YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlC RERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5QjgzNDExMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkY0NjYyOUJEREI0RjNBMUM2RDc4RjI1M0UzQjYzQzlCODM0 MTEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2 M0M5QjgzNDExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJi7UcKHZD3kTQ9zJSXTYLRycPNrU15ihOnE 5fj6izxVkcbaZY+BZ9rCSIUXmjT1vlPNBQWfEg87U71evaINHhkEndBs3f6BDLq2 K5OyiN7haGc87+3WrbqpiyKmTGy+x26WpI/TA8PAisDziVroiAhMeMxK7EoZsCbB zGxr1Ab56UCd428UaRlhNlPxjaTbmPHpjuJ3wjJDrw0wdlKYzIQ8rD9PXfz1HypM j46GIqDb+AeOX4hEIk+UoJyTMSczSf8hSeMoq2ymmEocUNKAp21kwE5OmvFGq2bI y+NM0TXkMzbF5I6dOpa76mX9Hlx8v59r3mqnlWWsZJSH/3rKe2A= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:08 2026 by rpki-client