$ rpki-client -vvf rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft File: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft (raw, json) Hash identifier: Bn+ELjEA7RAeHggtDLt7OoqUoHQie653KFr/4caRyrw= Subject key identifier: A4:1E:46:84:33:F7:97:22:A1:E2:89:83:A2:B5:65:AF:9A:39:1C:F8 Authority key identifier: F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 Certificate issuer: /CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Certificate serial: 0B8E6F2B3C31D54B942AC699429849EDA40480E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:03:29 +0000 Manifest this update: Tue 16 Jun 2026 19:58:29 +0000 Manifest next update: Wed 17 Jun 2026 23:17:29 +0000 Files and hashes: 1: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl (hash: 8bpGNdw4UUo2s6DN/QFlQl/6/we3fgfmIJDbZLolmRg=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: vFYZUwPOZFg6qgBQGFtuePgvWZXO4yFUVyM6qrVOlT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8e:6f:2b:3c:31:d5:4b:94:2a:c6:99:42:98:49:ed:a4:04:80:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Validity Not Before: Jun 16 19:58:29 2026 GMT Not After : Jun 17 23:17:29 2026 GMT Subject: CN=A41E468433F79722A1E28983A2B565AF9A391CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:17:87:f6:e0:96:0e:f9:91:34:06:46:f3:5d: c4:cd:01:fc:83:12:ff:24:86:11:9a:4c:76:b4:50: 65:62:9f:52:75:15:a8:dd:58:ae:36:b3:f4:88:e3: 2f:b6:8f:e1:9e:48:f1:0e:0c:d0:c0:fb:73:37:cf: 6d:9c:be:36:13:bf:d2:ba:7c:4a:2c:a6:8e:c7:79: 96:b2:b6:3a:05:1b:09:ce:cd:1e:5d:6d:36:dc:b0: 84:8c:20:1e:c0:4d:bd:23:6b:b9:2c:7f:fd:f5:41: cc:31:cf:c7:66:a9:a9:5e:2f:0f:07:91:2a:39:d0: ff:77:a6:01:9d:f5:8f:95:43:f6:e8:9e:c9:ad:41: a8:9d:85:68:fb:8c:f4:15:67:3d:be:9e:b8:dd:b6: 3b:a6:74:85:91:a3:b2:01:cb:88:a0:29:45:49:eb: ce:2e:0f:b3:5c:16:a7:7e:ac:05:8e:d0:85:fe:ba: cc:23:91:0f:ca:35:c3:95:9c:48:8d:5e:e3:fa:2a: 88:10:98:72:3c:b3:55:dc:f9:de:f0:71:f7:76:49: a9:d8:2d:3f:d4:ae:0d:f0:2c:13:4e:be:9d:55:28: 8a:56:c5:21:99:e8:a6:d5:51:22:ff:9c:b4:3b:60: 1e:19:40:65:b9:ff:cc:ba:fb:1f:66:ab:05:d3:17: 19:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1E:46:84:33:F7:97:22:A1:E2:89:83:A2:B5:65:AF:9A:39:1C:F8 X509v3 Authority Key Identifier: keyid:F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2b:ed:7b:bb:22:27:dc:96:3f:f6:6c:d0:18:7f:af:a1:2b: 81:06:8c:4d:0c:72:a1:ea:8c:aa:0c:7b:bc:f0:9b:e6:d5:d0: 14:34:29:c2:6f:bf:38:12:5d:90:30:e7:f5:6c:5f:40:98:e4: 3d:91:97:95:6e:c8:63:e0:3d:38:fd:f8:b8:06:6e:55:e2:2b: c1:40:8b:cd:22:72:61:f8:e8:48:26:ed:35:a4:22:12:dd:e6: c7:eb:b6:c3:42:d2:7d:56:39:d6:f7:8c:ca:c6:c1:9a:12:13: 76:1d:33:06:f8:7e:1a:cd:59:28:7e:9f:10:d6:b0:16:3c:ef: 86:92:94:61:90:09:75:f1:95:4b:2c:7c:6e:67:ac:d9:f0:de: f6:5f:46:4c:d1:1c:1c:c2:56:2d:2f:05:60:0c:c0:13:9b:13: a5:32:2f:02:27:3e:cb:0b:a5:ef:76:5c:a5:ef:ac:fb:ea:b6: 6d:74:ff:03:44:00:1a:e6:1f:1e:88:97:6c:14:80:11:b3:e7: 05:61:d6:ac:72:37:f3:b4:50:fb:87:d6:d7:0e:64:8b:a0:36: 71:6c:80:65:20:06:a1:08:1c:fe:41:c1:f6:f1:e9:be:12:17: 54:c9:06:ee:bc:41:f9:66:6a:49:17:da:91:50:5f:e9:43:91: 06:93:91:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC45vKzwx1UuUKsaZQphJ7aQEgOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgzOEMy RkY2RjFFMzAeFw0yNjA2MTYxOTU4MjlaFw0yNjA2MTcyMzE3MjlaMDMxMTAvBgNV BAMTKEE0MUU0Njg0MzNGNzk3MjJBMUUyODk4M0EyQjU2NUFGOUEzOTFDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsF4f24JYO+ZE0BkbzXcTNAfyD Ev8khhGaTHa0UGVin1J1FajdWK42s/SI4y+2j+GeSPEODNDA+3M3z22cvjYTv9K6 fEospo7HeZaytjoFGwnOzR5dbTbcsISMIB7ATb0ja7ksf/31Qcwxz8dmqaleLw8H kSo50P93pgGd9Y+VQ/bonsmtQaidhWj7jPQVZz2+nrjdtjumdIWRo7IBy4igKUVJ 684uD7NcFqd+rAWO0IX+uswjkQ/KNcOVnEiNXuP6KogQmHI8s1Xc+d7wcfd2SanY LT/Urg3wLBNOvp1VKIpWxSGZ6KbVUSL/nLQ7YB4ZQGW5/8y6+x9mqwXTFxnTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpB5GhDP3lyKh4omDorVlr5o5HPgwHwYDVR0j BBgwFoAU8ohaIeIVhViuhkOo/9SDjC/28eMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFmMjU2MzQtZjU4My00NmJjLTllOGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFF MjE1ODU1OEFFODY0M0E4RkZENDgzOEMyRkY2RjFFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjg4NUEyMUUyMTU4NTU4QUU4NjQzQThGRkQ0ODM4QzJGRjZG MUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgz OEMyRkY2RjFFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYr7Xu7Iifclj/2bNAYf6+hK4EGjE0McqHq jKoMe7zwm+bV0BQ0KcJvvzgSXZAw5/VsX0CY5D2Rl5VuyGPgPTj9+LgGblXiK8FA i80icmH46Egm7TWkIhLd5sfrtsNC0n1WOdb3jMrGwZoSE3YdMwb4fhrNWSh+nxDW sBY874aSlGGQCXXxlUssfG5nrNnw3vZfRkzRHBzCVi0vBWAMwBObE6UyLwInPssL pe92XKXvrPvqtm10/wNEABrmHx6Il2wUgBGz5wVh1qxyN/O0UPuH1tcOZIugNnFs gGUgBqEIHP5Bwfbx6b4SF1TJBu68QflmakkX2pFQX+lDkQaTkQc= -----END CERTIFICATE-----Generated at Wed Jun 17 11:14:46 2026 by rpki-client