$ rpki-client -vvf rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft File: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft (raw, json) Hash identifier: ZpAsIvmtl40b3C/7wsLarXn+/0m/fysa9fafyLqFxHY= Subject key identifier: 6A:11:BB:06:DD:93:6C:A3:6C:C8:EF:FC:E2:31:04:22:EA:C1:A6:AF Authority key identifier: F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC Certificate issuer: /CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Certificate serial: 2559082C8F124310325E119F410077AE3BC400B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 14:06:24 +0000 Manifest this update: Tue 16 Jun 2026 14:01:24 +0000 Manifest next update: Wed 17 Jun 2026 17:16:24 +0000 Files and hashes: 1: F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl (hash: oEbYcb+bCYYlkeUZUWOAKocOBsItcpOpdtyZrRCVFwk=) 2: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: 9YTg5pUgG1yWPgrR170uu8850b7NAdZ62v5ToMnLz5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:59:08:2c:8f:12:43:10:32:5e:11:9f:41:00:77:ae:3b:c4:00:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC Validity Not Before: Jun 16 14:01:24 2026 GMT Not After : Jun 17 17:16:24 2026 GMT Subject: CN=6A11BB06DD936CA36CC8EFFCE2310422EAC1A6AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ca:05:10:e8:21:56:a3:1d:69:dc:7b:29:1d: e6:d8:cc:22:b8:2c:70:7e:20:a8:be:a6:e0:5f:df: d5:cd:b2:62:18:d5:72:5f:67:06:92:8e:f8:14:14: c0:47:21:96:f7:87:1c:96:16:29:9c:8a:b4:76:58: f9:05:2c:b0:93:5b:08:51:48:11:9c:d0:a6:bd:2a: a7:ae:d9:ac:6f:f1:c0:c9:95:35:7a:de:18:bb:b7: b3:12:76:7a:14:0a:fa:09:90:9c:35:3a:56:0a:b2: 5c:09:e3:ea:c3:77:ab:49:4a:5c:c4:a8:fa:de:f2: 49:1e:b8:3d:94:2d:44:d5:22:57:07:46:0a:30:80: 06:20:4f:12:df:3c:e3:ca:51:0a:a7:f9:dc:7c:95: 7f:14:58:a5:0c:e0:4f:b6:17:f3:3d:b8:0a:b3:c3: 27:4b:64:c1:c9:d8:cf:bd:f4:1f:a7:68:87:6e:96: b0:4c:1c:2f:a9:86:da:c4:91:8f:e0:93:e9:c8:01: 30:cf:36:36:ca:99:bb:35:78:ce:26:fc:4b:2c:e4: 1c:38:66:9f:cc:7e:86:d7:fd:59:0e:5c:80:0f:69: 82:95:06:b3:0e:b7:d3:d5:25:3f:99:b8:89:66:cf: 09:d2:3e:fa:51:89:53:53:ef:65:3e:0b:f6:47:34: cb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:11:BB:06:DD:93:6C:A3:6C:C8:EF:FC:E2:31:04:22:EA:C1:A6:AF X509v3 Authority Key Identifier: keyid:F4:BC:09:AF:A8:A6:E3:A9:7D:00:C6:10:04:D6:5E:9F:AC:D4:D8:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/F4BC09AFA8A6E3A97D00C61004D65E9FACD4D8DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:23:8c:31:6c:2a:ac:0f:75:a4:88:2a:11:5f:76:94:09:84: c9:b7:b4:af:d1:f0:be:64:bc:85:f9:30:69:34:b6:dc:b6:f0: 2b:a3:71:47:cd:47:6a:c4:47:25:49:67:5e:a1:24:ca:ba:fd: b5:96:e9:de:ef:cc:f3:bb:31:b0:f8:d1:91:85:e6:e0:d5:bd: da:9b:1d:ba:1f:3a:94:d0:df:25:fb:df:69:20:54:36:5a:b9: de:92:7a:10:a7:5c:34:27:24:c3:5e:be:46:92:09:c4:81:7e: 2e:2e:57:aa:03:d1:69:92:8b:5a:22:9c:df:b4:a4:41:59:bf: 37:eb:aa:58:5d:a2:8b:bd:1a:e2:79:86:f3:e5:47:e6:55:a3: 77:4a:5f:f6:80:be:af:5d:c1:49:87:22:79:b4:2e:8a:29:4a: 44:40:10:7c:33:67:4d:6e:1e:6e:08:1c:74:16:80:39:d6:6b: 52:3c:9d:4d:c7:24:10:2d:3e:c8:ea:fc:67:69:31:d7:e4:85: 86:c0:94:c6:25:b3:82:6e:ee:44:10:20:72:6e:81:08:72:7d: e1:df:5a:65:ed:20:77:af:4d:89:1a:34:7f:82:35:33:a0:10: ff:57:20:33:92:12:b0:1d:a3:3c:02:38:97:66:3d:f7:c0:ef: 52:06:79:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVkILI8SQxAyXhGfQQB3rjvEALQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjRCQzA5QUZBOEE2RTNBOTdEMDBDNjEwMDRENjVFOUZB Q0Q0RDhEQzAeFw0yNjA2MTYxNDAxMjRaFw0yNjA2MTcxNzE2MjRaMDMxMTAvBgNV BAMTKDZBMTFCQjA2REQ5MzZDQTM2Q0M4RUZGQ0UyMzEwNDIyRUFDMUE2QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlygUQ6CFWox1p3HspHebYzCK4 LHB+IKi+puBf39XNsmIY1XJfZwaSjvgUFMBHIZb3hxyWFimcirR2WPkFLLCTWwhR SBGc0Ka9Kqeu2axv8cDJlTV63hi7t7MSdnoUCvoJkJw1OlYKslwJ4+rDd6tJSlzE qPre8kkeuD2ULUTVIlcHRgowgAYgTxLfPOPKUQqn+dx8lX8UWKUM4E+2F/M9uAqz wydLZMHJ2M+99B+naIdulrBMHC+phtrEkY/gk+nIATDPNjbKmbs1eM4m/Ess5Bw4 Zp/MfobX/VkOXIAPaYKVBrMOt9PVJT+ZuIlmzwnSPvpRiVNT72U+C/ZHNMtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUahG7Bt2TbKNsyO/84jEEIurBpq8wHwYDVR0j BBgwFoAU9LwJr6im46l9AMYQBNZen6zU2NwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQ5N2Q4MjgtOTg0YS00M2YxLTliNmUtYTAxYmEyMWJiNTE4LzAvRjRCQzA5QUZB OEE2RTNBOTdEMDBDNjEwMDRENjVFOUZBQ0Q0RDhEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNEJDMDlBRkE4QTZFM0E5N0QwMEM2MTAwNEQ2NUU5RkFDRDRE OERDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvRjRCQzA5QUZBOEE2RTNBOTdEMDBDNjEwMDRENjVF OUZBQ0Q0RDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8jjDFsKqwPdaSIKhFfdpQJhMm3tK/R8L5k vIX5MGk0tty28CujcUfNR2rERyVJZ16hJMq6/bWW6d7vzPO7MbD40ZGF5uDVvdqb HbofOpTQ3yX732kgVDZaud6SehCnXDQnJMNevkaSCcSBfi4uV6oD0WmSi1oinN+0 pEFZvzfrqlhdoou9GuJ5hvPlR+ZVo3dKX/aAvq9dwUmHInm0LoopSkRAEHwzZ01u Hm4IHHQWgDnWa1I8nU3HJBAtPsjq/GdpMdfkhYbAlMYls4Ju7kQQIHJugQhyfeHf WmXtIHevTYkaNH+CNTOgEP9XIDOSErAdozwCOJdmPffA71IGecs= -----END CERTIFICATE-----Generated at Wed Jun 17 10:47:28 2026 by rpki-client