$ rpki-client -vvf rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft File: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft (raw, json) Hash identifier: tNSBo+X3MhjkdavANSYMMbAV5gasDCNSJ3PWfhF5S1k= Subject key identifier: 77:0B:32:93:AA:A5:E9:63:02:C1:8E:F0:25:F0:8A:73:0E:89:15:23 Authority key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 Certificate issuer: /CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Certificate serial: 26FBBD4A50A37E7B523FC52AA35508381EF22C12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:12:17 +0000 Manifest this update: Tue 16 Jun 2026 19:07:17 +0000 Manifest next update: Wed 17 Jun 2026 20:03:17 +0000 Files and hashes: 1: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: zPAHd45OpjoBbHs1U75wpIAsa5qEeUqNzEkLN1k94xM=) 2: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: 7b9mH0AqpbaWOjZuhqAUMtLrNThijZIRNrCRnrYSzNM=) 3: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl (hash: w7athJPRh2D55d/ps1rBW5/RE0llrGxbqpimD8ZdnLY=) 4: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: SMrMHroRrnR9209rBvRZEueHMTUoBXgkpdWBsenWKng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:fb:bd:4a:50:a3:7e:7b:52:3f:c5:2a:a3:55:08:38:1e:f2:2c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Validity Not Before: Jun 16 19:07:17 2026 GMT Not After : Jun 17 20:03:17 2026 GMT Subject: CN=770B3293AAA5E96302C18EF025F08A730E891523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:da:e4:9b:97:04:ad:f9:f9:38:b5:03:09:9b: 3e:ca:35:b9:50:6d:a4:95:35:52:3e:41:0f:b3:07: fe:26:27:4b:a3:10:cf:1d:1d:d1:d3:9f:27:16:2a: f6:47:30:e5:f9:4c:11:df:d9:c7:81:67:ee:ab:65: 6c:4d:79:54:09:bc:ee:c3:b3:4f:21:7b:13:47:3b: e9:78:75:f4:b7:0f:b8:6a:93:2e:9e:85:e6:0d:5b: ee:50:d7:38:da:82:19:20:8f:9e:de:23:86:83:d4: 7f:06:91:ba:72:29:9f:d0:13:ac:28:3d:19:8d:a2: 2d:c1:91:4e:4b:b2:2e:1f:b5:ba:d4:d4:3d:65:c3: 4c:53:8c:18:d0:5e:1f:59:72:fc:18:0b:88:40:0e: 32:03:5f:69:01:5d:4d:29:25:da:b6:52:23:da:83: a0:b6:4a:60:d0:a0:b5:20:ea:37:c3:67:aa:4d:c7: 67:3b:9a:07:c5:a9:37:00:14:c8:c2:55:5e:bb:85: e7:af:97:92:73:4e:c2:07:f5:4d:02:70:a8:7b:e5: 45:0c:ad:db:92:e4:0e:2e:4f:5f:fc:d1:20:d8:78: 62:cd:94:98:c6:c5:6b:86:e5:13:5a:33:4b:9e:c9: 7a:e6:52:16:90:f1:cf:36:b0:6e:f9:39:75:49:a8: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0B:32:93:AA:A5:E9:63:02:C1:8E:F0:25:F0:8A:73:0E:89:15:23 X509v3 Authority Key Identifier: keyid:F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d2:ad:a0:b9:29:4f:aa:e8:98:91:b8:c0:a9:82:30:8e:6d: 09:15:08:3b:57:2c:cf:a1:27:18:78:0d:3d:1f:1b:cd:2a:73: f3:a4:d9:cd:23:e8:9d:05:82:ac:e0:90:47:88:4a:81:71:2e: 4d:9a:82:01:6d:f5:56:89:ec:c5:c8:88:97:ca:f7:80:64:91: 31:fe:5a:22:00:0d:d2:95:34:6f:a3:f0:71:57:db:35:89:32: e9:d0:aa:c0:04:95:21:1f:35:b5:02:ce:23:54:ae:20:1f:4c: 8a:10:11:c5:73:e1:fc:07:2b:a7:52:be:e4:4f:50:76:c8:d5: 9b:b6:d9:b9:8c:8d:ce:bf:b1:89:26:68:e4:3d:cd:6d:95:49: 90:83:eb:0a:1a:27:ba:5b:e5:9f:54:7e:ed:76:2d:84:d9:79: c6:c7:23:ae:81:71:cd:2d:61:74:93:96:34:7b:27:a8:6d:27: 55:9a:a6:57:1a:d9:ab:4a:16:74:df:24:3b:98:1b:51:44:20: 1c:d5:32:ec:d9:c5:86:b2:d0:e1:60:12:66:c9:32:8a:08:e8: 0a:2e:44:3f:24:ca:a5:44:da:18:38:5b:09:fb:8a:4c:0a:a5: 32:ae:35:8f:63:56:51:52:64:96:ba:09:ef:d7:f4:71:7e:23: 67:60:3b:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJvu9SlCjfntSP8Uqo1UIOB7yLBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIzM0RE MDYxRDlBNDAeFw0yNjA2MTYxOTA3MTdaFw0yNjA2MTcyMDAzMTdaMDMxMTAvBgNV BAMTKDc3MEIzMjkzQUFBNUU5NjMwMkMxOEVGMDI1RjA4QTczMEU4OTE1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO2uSblwSt+fk4tQMJmz7KNblQ baSVNVI+QQ+zB/4mJ0ujEM8dHdHTnycWKvZHMOX5TBHf2ceBZ+6rZWxNeVQJvO7D s08hexNHO+l4dfS3D7hqky6eheYNW+5Q1zjaghkgj57eI4aD1H8GkbpyKZ/QE6wo PRmNoi3BkU5Lsi4ftbrU1D1lw0xTjBjQXh9ZcvwYC4hADjIDX2kBXU0pJdq2UiPa g6C2SmDQoLUg6jfDZ6pNx2c7mgfFqTcAFMjCVV67heevl5JzTsIH9U0CcKh75UUM rduS5A4uT1/80SDYeGLNlJjGxWuG5RNaM0ueyXrmUhaQ8c82sG75OXVJqIIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdwsyk6ql6WMCwY7wJfCKcw6JFSMwHwYDVR0j BBgwFoAU+PZoZTLnu3BOgCttO0izPdBh2aQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIyNmJlN2ItMmUyOC00OTUwLWFhNGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUz MkU3QkI3MDRFODAyQjZEM0I0OEIzM0REMDYxRDlBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEY2Njg2NTMyRTdCQjcwNEU4MDJCNkQzQjQ4QjMzREQwNjFE OUE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh NGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIz M0REMDYxRDlBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjSraC5KU+q6JiRuMCpgjCObQkVCDtXLM+h Jxh4DT0fG80qc/Ok2c0j6J0FgqzgkEeISoFxLk2aggFt9VaJ7MXIiJfK94BkkTH+ WiIADdKVNG+j8HFX2zWJMunQqsAElSEfNbUCziNUriAfTIoQEcVz4fwHK6dSvuRP UHbI1Zu22bmMjc6/sYkmaOQ9zW2VSZCD6woaJ7pb5Z9Ufu12LYTZecbHI66Bcc0t YXSTljR7J6htJ1Waplca2atKFnTfJDuYG1FEIBzVMuzZxYay0OFgEmbJMooI6Aou RD8kyqVE2hg4Wwn7ikwKpTKuNY9jVlFSZJa6Ce/X9HF+I2dgO9g= -----END CERTIFICATE-----Generated at Wed Jun 17 12:39:09 2026 by rpki-client