$ rpki-client -vvf rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft File: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft (raw, json) Hash identifier: 6lzqW4Lq8CC92/4xHOw3zR7lCbnrWcejybn7xseB+PY= Subject key identifier: 59:3F:B9:DB:C9:D4:3A:82:BE:D7:7F:CB:30:BB:41:85:8E:B9:9B:F6 Authority key identifier: F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 Certificate issuer: /CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Certificate serial: 0BE7E027066228058A5BB7563D3467D097C1D406 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:17:24 +0000 Manifest this update: Tue 16 Jun 2026 19:12:24 +0000 Manifest next update: Wed 17 Jun 2026 21:13:24 +0000 Files and hashes: 1: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl (hash: gxFGxk0vZKRQ7i+mVdRXoSkXxqnM1gl0sVO/m1gQUEM=) 2: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: s7j6V9XRLybSdB07wL0FpooAGZX0voKMcNhL/PIgeG4=) 3: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: IUK+vwB76Q4G08ehK2Gx52lgwmgXNziNTOU2tmOlHFI=) 4: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 44fFhWX4KLV5BZcGJB0E9Z9h7E7YxWEzvM4c3ibp+FI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e7:e0:27:06:62:28:05:8a:5b:b7:56:3d:34:67:d0:97:c1:d4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Validity Not Before: Jun 16 19:12:24 2026 GMT Not After : Jun 17 21:13:24 2026 GMT Subject: CN=593FB9DBC9D43A82BED77FCB30BB41858EB99BF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:a8:1e:81:9d:67:92:0e:2c:1d:fb:62:e0: be:14:5e:8c:f1:21:e3:28:b9:e3:54:aa:fa:ad:b3: 4c:b4:64:18:69:22:91:fe:b7:1e:dc:04:6d:43:5c: 17:28:e4:48:a2:4e:9f:c5:5f:d0:9b:0f:95:fc:3d: 8c:aa:86:e7:33:45:08:21:e0:b5:48:45:1e:f9:c5: 91:51:b4:e3:e7:4f:b8:11:71:4b:43:ac:4c:e6:6f: f7:f9:9a:cc:66:4a:09:cc:6c:8e:7c:05:4d:7f:6b: fe:d9:56:ba:3f:e8:5f:40:ca:e4:52:63:f1:0b:6d: 9e:f6:78:06:26:2a:13:4e:71:44:29:04:3f:46:23: 04:fc:78:59:56:3a:d8:c8:a9:a5:99:83:e4:ef:36: 25:9f:d7:37:c6:54:a1:01:05:3e:59:c4:d1:63:60: 4b:72:59:29:e2:d9:f3:8b:62:fb:69:1a:20:45:d8: 7c:09:a8:93:1b:6f:7c:8c:10:76:ce:c4:5d:03:b8: 95:e7:a8:fa:08:f7:84:a9:9b:47:af:e3:e1:92:a8: d2:b3:81:8d:1e:95:22:3c:08:18:04:7f:fd:b8:c3: 5b:a2:fe:2d:51:69:8e:8c:d3:76:51:91:47:97:34: 4a:58:db:ad:3a:44:21:fc:1f:59:01:ae:42:17:d8: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3F:B9:DB:C9:D4:3A:82:BE:D7:7F:CB:30:BB:41:85:8E:B9:9B:F6 X509v3 Authority Key Identifier: keyid:F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:20:cc:64:84:1b:06:df:fa:88:9f:a3:fa:20:3b:b0:45:0a: 5e:7c:e8:d4:51:4d:a1:25:39:00:c4:5a:69:68:ab:e2:c1:b6: 1b:d5:6d:b7:1a:24:51:cb:50:e0:7f:a7:65:94:f4:59:10:01: 77:3a:17:8e:98:3c:2b:6a:57:0f:08:8d:47:71:fd:6b:6c:e4: d7:94:51:13:48:c0:bc:21:68:48:70:30:14:e7:2d:ed:92:81: 7b:b6:e7:bd:89:46:89:bd:58:ac:26:df:00:49:1e:cd:53:d5: 80:b2:a3:36:2c:1f:89:dc:2c:30:3e:bb:83:1f:10:1d:cc:23: 5b:d6:24:79:8e:ee:f4:70:6d:e9:8e:19:7d:cf:9c:c1:18:b6: bc:4d:f2:e0:31:0a:59:cf:3b:34:a5:ba:43:90:fe:dc:35:c4: ce:76:44:fe:a7:c0:ee:21:0c:d8:6e:f6:09:13:27:4b:9d:81: 9a:58:38:35:04:7c:bc:9d:92:28:3b:00:06:5d:72:64:7d:57: 4f:7e:41:40:37:5a:17:ed:cd:a9:1b:c5:a2:87:02:75:8f:1b: 01:4d:25:9b:9d:f9:97:1a:04:7a:3a:85:cf:98:35:20:9e:41: 44:b9:da:16:c9:3a:5e:d3:1d:7d:be:3a:47:6a:f4:f6:9e:45: d2:bd:9e:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+fgJwZiKAWKW7dWPTRn0JfB1AYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1 Mzk5QTdEMTAeFw0yNjA2MTYxOTEyMjRaFw0yNjA2MTcyMTEzMjRaMDMxMTAvBgNV BAMTKDU5M0ZCOURCQzlENDNBODJCRUQ3N0ZDQjMwQkI0MTg1OEVCOTlCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6qgegZ1nkg4sHfti4L4UXozx IeMoueNUqvqts0y0ZBhpIpH+tx7cBG1DXBco5EiiTp/FX9CbD5X8PYyqhuczRQgh 4LVIRR75xZFRtOPnT7gRcUtDrEzmb/f5msxmSgnMbI58BU1/a/7ZVro/6F9AyuRS Y/ELbZ72eAYmKhNOcUQpBD9GIwT8eFlWOtjIqaWZg+TvNiWf1zfGVKEBBT5ZxNFj YEtyWSni2fOLYvtpGiBF2HwJqJMbb3yMEHbOxF0DuJXnqPoI94Spm0ev4+GSqNKz gY0elSI8CBgEf/24w1ui/i1RaY6M03ZRkUeXNEpY2606RCH8H1kBrkIX2HH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWT+528nUOoK+13/LMLtBhY65m/YwHwYDVR0j BBgwFoAU8t7X0a9SW9rWQUs+K697UFOZp9EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk3MmY5YTItYjBmZi00Mjk4LThkYTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFB RjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1Mzk5QTdEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkRFRDdEMUFGNTI1QkRBRDY0MTRCM0UyQkFGN0I1MDUzOTlB N0QxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdC NTA1Mzk5QTdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsgzGSEGwbf+oifo/ogO7BFCl586NRRTaEl OQDEWmloq+LBthvVbbcaJFHLUOB/p2WU9FkQAXc6F46YPCtqVw8IjUdx/Wts5NeU URNIwLwhaEhwMBTnLe2SgXu2572JRom9WKwm3wBJHs1T1YCyozYsH4ncLDA+u4Mf EB3MI1vWJHmO7vRwbemOGX3PnMEYtrxN8uAxClnPOzSlukOQ/tw1xM52RP6nwO4h DNhu9gkTJ0udgZpYODUEfLydkig7AAZdcmR9V09+QUA3WhftzakbxaKHAnWPGwFN JZud+ZcaBHo6hc+YNSCeQUS52hbJOl7THX2+Okdq9PaeRdK9nuI= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:56 2026 by rpki-client