$ rpki-client -vvf rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft File: F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft (raw, json) Hash identifier: /4hHdj7+Kh3qbKGLSx2ZCSVOjZ1ODj/ppiOjQtmdhlk= Subject key identifier: 8B:25:27:B8:3A:D3:C6:8F:77:FC:23:E4:7D:61:CF:0A:FC:F1:52:EC Authority key identifier: F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D Certificate issuer: /CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D Certificate serial: 1A2AADB0B584A9331C2EFFC4E7C5DB75EA52A505 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 23:57:58 +0000 Manifest this update: Tue 16 Jun 2026 23:52:58 +0000 Manifest next update: Thu 18 Jun 2026 00:23:58 +0000 Files and hashes: 1: 3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa (hash: XONanozPD8at5BU77v08+BcvjpWg0G96Hwi2FNBJOcs=) 2: 3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa (hash: f47a49V3YxCF+Lv56KFQm6oHGHVoS/JPApI1aBIRXJE=) 3: 3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa (hash: exG4AdJRVuQMX1UGtjkLTqWmxcQunulo0tEKmdw4iDY=) 4: F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl (hash: hsRDn7McFbugP3x0kb1LYcKzqKEYrcgA7/+YX9zVkvs=) 5: 323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa (hash: +fmCqGE1N+8rTm5OExPB+Qrmtcx74bskEpH/ZHGnYVA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2a:ad:b0:b5:84:a9:33:1c:2e:ff:c4:e7:c5:db:75:ea:52:a5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D Validity Not Before: Jun 16 23:52:58 2026 GMT Not After : Jun 18 00:23:58 2026 GMT Subject: CN=8B2527B83AD3C68F77FC23E47D61CF0AFCF152EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:30:07:4a:5d:1f:ab:9d:3b:a6:87:96:af: 7f:63:04:5a:99:9f:e5:e1:b0:2f:0f:78:e8:f6:15: e1:04:5c:e3:49:e6:fd:09:16:2c:64:d2:a2:84:66: 10:c2:85:17:1f:c5:2f:4e:83:a4:f6:8f:09:db:01: 52:81:e8:0e:4d:70:50:38:c0:f2:c5:c9:89:3b:16: db:d4:59:ff:2b:f5:f7:14:5c:b5:53:52:1c:6e:a8: 5e:f1:8a:8f:65:73:6f:64:5d:3d:95:3a:a7:d5:fb: d3:5b:ea:27:77:cd:34:9f:c2:aa:a6:e8:fb:39:75: 31:b1:b3:ae:4d:16:e6:fd:43:29:fd:55:90:a8:06: 34:24:ae:64:6f:f0:4f:fc:a0:93:db:bc:26:fd:54: 59:0d:07:0f:a4:f5:dc:f6:9d:09:ee:e1:24:a2:77: 09:fe:e5:22:a3:cd:4b:89:71:61:48:64:8a:ad:a0: 1f:ac:64:fe:49:62:3a:f0:b5:09:a0:25:bf:60:bc: a3:44:85:f0:04:4f:4a:83:48:97:fb:c3:9c:82:65: bd:ed:a8:f0:9c:f3:12:31:b0:6a:0a:f8:5e:ee:31: 3b:02:db:f6:a4:fb:cf:a4:6c:00:d6:1e:41:12:ca: 4d:b7:a0:8d:2c:03:40:ea:7c:5f:74:a1:bd:65:a0: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:25:27:B8:3A:D3:C6:8F:77:FC:23:E4:7D:61:CF:0A:FC:F1:52:EC X509v3 Authority Key Identifier: keyid:F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:55:05:19:92:ed:66:bf:4e:9c:25:af:b1:77:2f:56:7a:3c: cb:80:7f:05:94:5f:c7:fb:e1:ff:6a:dd:45:69:85:1c:36:42: 4b:7c:6e:d2:15:cc:b5:d2:21:f3:b4:28:6d:b9:9a:41:3a:b2: 52:a0:ff:8a:01:a5:ab:52:82:fd:e7:6c:eb:8e:8a:3d:74:99: f9:ee:20:07:4b:d9:f0:15:90:a7:44:d4:4f:9e:61:65:3c:92: bc:0b:e0:f5:ed:57:52:49:54:0a:dd:77:ea:a0:0f:e3:23:56: 2c:2f:e9:f3:36:f9:c3:b6:27:4e:08:af:2a:85:33:4e:95:f7: 66:03:cb:12:46:ef:ac:91:08:d9:04:eb:86:a7:72:cb:35:2f: 44:6e:fb:b8:b9:40:11:64:30:10:cf:ba:81:3a:7c:60:81:38: 96:36:3e:af:8a:d2:cf:0b:0f:7f:1d:dc:a5:d1:16:35:0e:9a: e6:0f:aa:2e:fc:63:50:0f:12:32:0b:d5:f8:e1:7a:6c:c0:15: 6d:b1:0b:63:1a:f6:30:74:20:7c:fa:04:54:99:13:a0:b4:8c: 53:8a:57:0c:24:1f:2d:90:f6:43:e9:b2:3c:70:b9:6b:45:1b: d3:eb:7a:30:cb:31:af:a0:73:f3:88:9d:5b:ba:05:86:fa:6d: 0d:c7:6f:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGiqtsLWEqTMcLv/E58XbdepSpQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0QTQzQUYyNUI3MzZCRUYxMDc0Mzc1QzVGQkZGNTYy RTJCQjkxRDAeFw0yNjA2MTYyMzUyNThaFw0yNjA2MTgwMDIzNThaMDMxMTAvBgNV BAMTKDhCMjUyN0I4M0FEM0M2OEY3N0ZDMjNFNDdENjFDRjBBRkNGMTUyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChizAHSl0fq507poeWr39jBFqZ n+XhsC8PeOj2FeEEXONJ5v0JFixk0qKEZhDChRcfxS9Og6T2jwnbAVKB6A5NcFA4 wPLFyYk7FtvUWf8r9fcUXLVTUhxuqF7xio9lc29kXT2VOqfV+9Nb6id3zTSfwqqm 6Ps5dTGxs65NFub9Qyn9VZCoBjQkrmRv8E/8oJPbvCb9VFkNBw+k9dz2nQnu4SSi dwn+5SKjzUuJcWFIZIqtoB+sZP5JYjrwtQmgJb9gvKNEhfAET0qDSJf7w5yCZb3t qPCc8xIxsGoK+F7uMTsC2/ak+8+kbADWHkESyk23oI0sA0DqfF90ob1loO/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiyUnuDrTxo93/CPkfWHPCvzxUuwwHwYDVR0j BBgwFoAU80pDryW3Nr7xB0N1xfv/Vi4ruR0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg0NjMyODUtN2MyOC00MzVhLTgyYmItZmNjMzJkNTgwMjBlLzAvRjM0QTQzQUYy NUI3MzZCRUYxMDc0Mzc1QzVGQkZGNTYyRTJCQjkxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzRBNDNBRjI1QjczNkJFRjEwNzQzNzVDNUZCRkY1NjJFMkJC OTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg0NjMyODUtN2MyOC00MzVhLTgy YmItZmNjMzJkNTgwMjBlLzAvRjM0QTQzQUYyNUI3MzZCRUYxMDc0Mzc1QzVGQkZG NTYyRTJCQjkxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVVBRmS7Wa/Tpwlr7F3L1Z6PMuAfwWUX8f7 4f9q3UVphRw2Qkt8btIVzLXSIfO0KG25mkE6slKg/4oBpatSgv3nbOuOij10mfnu IAdL2fAVkKdE1E+eYWU8krwL4PXtV1JJVArdd+qgD+MjViwv6fM2+cO2J04IryqF M06V92YDyxJG76yRCNkE64ancss1L0Ru+7i5QBFkMBDPuoE6fGCBOJY2Pq+K0s8L D38d3KXRFjUOmuYPqi78Y1APEjIL1fjhemzAFW2xC2Ma9jB0IHz6BFSZE6C0jFOK VwwkHy2Q9kPpsjxwuWtFG9PrejDLMa+gc/OInVu6BYb6bQ3Hb68= -----END CERTIFICATE-----Generated at Wed Jun 17 10:54:17 2026 by rpki-client