$ rpki-client -vvf rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft File: F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft (raw, json) Hash identifier: x8D2n7L0zrpqdsZZ1GF4s8/mpUdYs69Qy77yUj8oijw= Subject key identifier: 39:43:FD:F8:90:B4:0B:C6:B0:9D:A4:60:9E:D5:35:C7:48:BE:7A:CA Authority key identifier: F9:FC:6C:E8:45:88:F6:1C:D7:DD:05:52:DE:A3:2E:1E:56:56:36:BA Certificate issuer: /CN=F9FC6CE84588F61CD7DD0552DEA32E1E565636BA Certificate serial: 0FCBF33C12BD9EA0829D564F7AC6A0B5E830E7D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:56:59 +0000 Manifest this update: Tue 16 Jun 2026 22:51:59 +0000 Manifest next update: Thu 18 Jun 2026 02:07:59 +0000 Files and hashes: 1: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: itZ+8oqZQEHdOx3DPzPsElXFujBFH/zjw2oYoQ+F7xc=) 2: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: P6O2GRvb5cY6yS3BwOz9xCf5V2VK8SPqxHthNi6b0ow=) 3: F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.crl (hash: idGDmTfnwJnxmnySBP7MdMaAmbBe4DSs7SH4ioLQzPg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.crl rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:cb:f3:3c:12:bd:9e:a0:82:9d:56:4f:7a:c6:a0:b5:e8:30:e7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9FC6CE84588F61CD7DD0552DEA32E1E565636BA Validity Not Before: Jun 16 22:51:59 2026 GMT Not After : Jun 18 02:07:59 2026 GMT Subject: CN=3943FDF890B40BC6B09DA4609ED535C748BE7ACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:e0:fa:1a:3f:6e:15:1f:47:8c:59:9c:9b: 3e:b6:f8:f8:0a:a9:26:a9:28:9d:0e:a3:e3:3b:89: 17:60:cc:3c:26:42:12:af:4b:14:f4:60:59:6f:08: 2b:a0:18:9e:b2:82:e2:9a:fb:05:f2:d7:ec:55:ab: ca:eb:32:61:56:67:08:2a:f3:04:31:24:95:8c:03: a2:98:22:42:b0:e6:fe:7a:77:14:0f:d5:29:b5:35: e2:8e:f8:a7:7e:95:91:6a:9a:0d:c2:36:76:6b:a8: 01:c3:51:31:22:16:3d:58:33:3f:66:aa:44:43:2b: e0:b5:97:05:d8:84:a5:c6:66:f2:a8:5f:86:17:2b: 2f:c3:f5:df:bb:6f:c7:3e:58:f2:ac:b2:ee:6a:36: 49:47:a4:ee:0c:65:0a:10:63:2f:54:1e:c0:fd:29: 6b:27:a7:6d:59:0c:ce:29:df:c6:4c:88:ca:51:7c: b5:38:68:a8:29:eb:5d:88:30:a7:4c:18:39:e2:fd: 54:97:e5:3e:fd:96:bf:f0:7e:48:f9:e1:06:56:1a: 94:f8:37:20:b0:5a:d7:72:54:64:54:20:b0:1d:cc: 8c:44:2f:36:43:0c:23:ce:12:5d:52:8d:c0:d7:7f: ec:a6:fe:b4:3c:f7:51:cc:80:77:fc:90:97:9b:5a: 3f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:43:FD:F8:90:B4:0B:C6:B0:9D:A4:60:9E:D5:35:C7:48:BE:7A:CA X509v3 Authority Key Identifier: keyid:F9:FC:6C:E8:45:88:F6:1C:D7:DD:05:52:DE:A3:2E:1E:56:56:36:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/F9FC6CE84588F61CD7DD0552DEA32E1E565636BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8a:09:13:da:39:62:d8:2e:28:68:07:69:d9:3f:c0:96:f7: 8a:0f:5c:79:0d:5a:82:25:ea:41:60:51:ac:e1:f2:db:8f:6c: 76:bd:62:f8:ea:11:7a:a1:3a:f9:b1:bb:95:b3:46:1d:02:ad: 63:21:c3:77:58:fa:47:cd:0c:b1:3d:0d:97:55:4c:ac:87:81: 37:a1:7b:c2:57:62:ff:67:58:09:d5:92:77:0d:02:00:8c:7b: f9:bf:bf:08:5b:01:bb:7c:41:6d:84:7c:f3:71:45:c7:2a:22: b0:8e:82:16:fb:a8:71:09:3f:d7:2c:66:e0:ab:dd:8f:79:3d: 8d:54:30:99:86:88:4f:8e:3e:f0:14:78:98:1a:5a:df:13:77: be:60:48:36:51:d3:1d:3d:bd:85:c6:9e:5a:26:37:97:88:b1: 2b:86:bf:12:bb:15:e1:b0:e5:31:ae:55:b2:1d:27:0c:49:d0: c1:48:c6:4f:58:a6:3c:cd:9c:2d:82:87:1e:1d:e0:f4:02:33: 09:6d:b3:eb:a5:0a:64:37:bb:c6:86:00:4e:1e:ce:09:5b:eb: f9:00:78:03:11:fb:76:92:18:b6:da:e5:db:51:5b:83:41:23: f0:8d:ac:8e:85:1d:77:d9:1a:81:1e:ee:ca:13:3b:6d:22:a8: f6:65:be:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD8vzPBK9nqCCnVZPesagtegw59kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGQzZDRTg0NTg4RjYxQ0Q3REQwNTUyREVBMzJFMUU1 NjU2MzZCQTAeFw0yNjA2MTYyMjUxNTlaFw0yNjA2MTgwMjA3NTlaMDMxMTAvBgNV BAMTKDM5NDNGREY4OTBCNDBCQzZCMDlEQTQ2MDlFRDUzNUM3NDhCRTdBQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClf+D6Gj9uFR9HjFmcmz62+PgK qSapKJ0Oo+M7iRdgzDwmQhKvSxT0YFlvCCugGJ6yguKa+wXy1+xVq8rrMmFWZwgq 8wQxJJWMA6KYIkKw5v56dxQP1Sm1NeKO+Kd+lZFqmg3CNnZrqAHDUTEiFj1YMz9m qkRDK+C1lwXYhKXGZvKoX4YXKy/D9d+7b8c+WPKssu5qNklHpO4MZQoQYy9UHsD9 KWsnp21ZDM4p38ZMiMpRfLU4aKgp612IMKdMGDni/VSX5T79lr/wfkj54QZWGpT4 NyCwWtdyVGRUILAdzIxELzZDDCPOEl1SjcDXf+ym/rQ891HMgHf8kJebWj+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOUP9+JC0C8awnaRgntU1x0i+esowHwYDVR0j BBgwFoAU+fxs6EWI9hzX3QVS3qMuHlZWNrowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE2MmQxNWItMTAyYi00MzFmLWE1MzktMGE5MzJiMzEzNjZjLzAvRjlGQzZDRTg0 NTg4RjYxQ0Q3REQwNTUyREVBMzJFMUU1NjU2MzZCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOUZDNkNFODQ1ODhGNjFDRDdERDA1NTJERUEzMkUxRTU2NTYz NkJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE2MmQxNWItMTAyYi00MzFmLWE1 MzktMGE5MzJiMzEzNjZjLzAvRjlGQzZDRTg0NTg4RjYxQ0Q3REQwNTUyREVBMzJF MUU1NjU2MzZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeKCRPaOWLYLihoB2nZP8CW94oPXHkNWoIl 6kFgUazh8tuPbHa9YvjqEXqhOvmxu5WzRh0CrWMhw3dY+kfNDLE9DZdVTKyHgTeh e8JXYv9nWAnVkncNAgCMe/m/vwhbAbt8QW2EfPNxRccqIrCOghb7qHEJP9csZuCr 3Y95PY1UMJmGiE+OPvAUeJgaWt8Td75gSDZR0x09vYXGnlomN5eIsSuGvxK7FeGw 5TGuVbIdJwxJ0MFIxk9YpjzNnC2Chx4d4PQCMwlts+ulCmQ3u8aGAE4ezglb6/kA eAMR+3aSGLba5dtRW4NBI/CNrI6FHXfZGoEe7soTO20iqPZlvuI= -----END CERTIFICATE-----Generated at Wed Jun 17 09:44:27 2026 by rpki-client