$ rpki-client -vvf rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft File: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft (raw, json) Hash identifier: jBiTY49oqMM5Xl3ep20XfZJLl+U4vCRUK47LPxYuoUY= Subject key identifier: F3:18:B2:A2:31:99:26:E7:75:A7:3B:C0:98:BB:5F:8C:04:6E:57:4A Authority key identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE Certificate issuer: /CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Certificate serial: 4913C2A18C2B345DBEDB28AD84E5052A05BBC9FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 04:48:44 +0000 Manifest this update: Sun 14 Jun 2026 04:43:44 +0000 Manifest next update: Mon 15 Jun 2026 05:23:44 +0000 Files and hashes: 1: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: +8ziEowYwDOL6fJKnsKsHl4XsowErxzBKUzz7/GWBlo=) 2: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl (hash: i4NH2l3qCUA/wryfnVF98cU9CVmdhctMxtigMxu/ti4=) 3: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: Mq8DWbeqyF5RASCP8QKF1wsfTOXfn4M5I7xbRWlSkvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 05:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:13:c2:a1:8c:2b:34:5d:be:db:28:ad:84:e5:05:2a:05:bb:c9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Validity Not Before: Jun 14 04:43:44 2026 GMT Not After : Jun 15 05:23:44 2026 GMT Subject: CN=F318B2A2319926E775A73BC098BB5F8C046E574A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d7:4b:df:bc:33:e3:6d:6a:f4:e4:97:6e:7b: e7:ed:cf:98:13:a2:14:2e:09:a3:f6:75:3d:bb:d7: 9c:5b:7d:7a:fd:0c:fb:69:a6:c5:24:6a:9d:a0:df: 71:56:44:b7:96:ca:1c:a1:c7:68:b9:51:92:34:27: 62:c1:29:18:b1:3d:48:43:89:52:c7:76:ab:ae:b4: f1:01:f8:22:4c:73:f9:33:64:03:81:c4:f2:8e:3e: e3:cc:69:a5:d2:17:30:1e:47:89:0f:1a:6e:c8:a1: e1:4e:98:90:a1:8c:2f:d8:53:82:1c:b4:e5:19:f5: 90:73:ff:07:07:f7:a6:e2:76:74:ba:8a:db:f4:66: 85:17:17:df:eb:f6:50:b9:71:18:74:11:4d:5f:44: d9:0c:8b:c6:7c:69:e9:d5:15:d0:8a:2c:12:3e:a4: 75:be:68:9e:c8:35:43:23:0c:56:94:04:6e:25:7d: 4c:79:44:ad:9f:82:82:2c:68:55:e4:04:be:50:42: 58:d6:b1:38:7a:9f:2b:f2:b9:f1:b3:ea:77:8f:03: a6:fb:fb:ed:34:cd:09:7e:35:e2:3e:ca:96:07:40: 70:b1:f2:cf:88:64:b3:7e:38:b2:2d:81:3c:a7:10: 21:82:3b:5d:c6:5b:98:1d:55:66:8d:e0:35:aa:f2: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:18:B2:A2:31:99:26:E7:75:A7:3B:C0:98:BB:5F:8C:04:6E:57:4A X509v3 Authority Key Identifier: keyid:F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c3:dd:c7:23:3e:51:61:f7:a2:c9:56:5f:f0:24:7a:82:90: c3:fb:87:ae:18:ab:93:21:68:c5:d9:e3:ea:04:7a:8d:00:2c: 9d:08:73:bf:2e:5e:7e:ca:0e:29:3d:3b:19:a5:20:be:3b:b2: 06:7d:54:a0:38:1f:90:bc:c7:97:bc:5e:ed:72:a0:da:98:42: 55:cb:77:79:1b:0d:8f:b6:eb:b3:9a:4b:de:92:ef:e0:8b:c6: 2b:1a:36:c7:41:5e:7f:1d:75:0b:bd:5d:ff:1c:fd:13:84:67: 90:ab:96:0f:25:a8:64:24:58:b1:a5:ad:f6:2d:52:d7:56:87: cd:12:f5:b3:78:f6:dc:e1:c1:25:d0:34:19:c9:db:e5:0a:3e: ef:11:94:fa:cf:f1:d7:9b:24:29:4d:7a:0f:c5:33:1a:92:66: 88:fb:9f:9e:6e:06:0a:ef:99:bd:b4:e0:fb:93:90:e6:5e:14: f2:de:46:0e:e5:16:3b:d7:cf:34:9e:80:59:37:87:84:ab:d4: c1:b8:14:13:83:0a:2f:64:c8:9c:48:e8:68:3a:f4:bd:a2:f8: 59:80:1f:98:e1:2a:75:3d:c6:4a:e9:ef:6a:99:d8:e8:87:fd: 68:ef:b1:5a:04:cb:ba:7a:5b:1e:52:31:d7:9a:12:4e:af:12: 93:13:9a:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSRPCoYwrNF2+2yithOUFKgW7yf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMwREIx MEQyRjRERTAeFw0yNjA2MTQwNDQzNDRaFw0yNjA2MTUwNTIzNDRaMDMxMTAvBgNV BAMTKEYzMThCMkEyMzE5OTI2RTc3NUE3M0JDMDk4QkI1RjhDMDQ2RTU3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj10vfvDPjbWr05Jdue+ftz5gT ohQuCaP2dT2715xbfXr9DPtppsUkap2g33FWRLeWyhyhx2i5UZI0J2LBKRixPUhD iVLHdquutPEB+CJMc/kzZAOBxPKOPuPMaaXSFzAeR4kPGm7IoeFOmJChjC/YU4Ic tOUZ9ZBz/wcH96bidnS6itv0ZoUXF9/r9lC5cRh0EU1fRNkMi8Z8aenVFdCKLBI+ pHW+aJ7INUMjDFaUBG4lfUx5RK2fgoIsaFXkBL5QQljWsTh6nyvyufGz6nePA6b7 ++00zQl+NeI+ypYHQHCx8s+IZLN+OLItgTynECGCO13GW5gdVWaN4DWq8pFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8xiyojGZJud1pzvAmLtfjARuV0owHwYDVR0j BBgwFoAU8oNgeB+i2mui+YLLnjTA2xDS9N4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY5YmY3OTctOTEzZC00OGRkLTgzMmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgx RkEyREE2QkEyRjk4MkNCOUUzNEMwREIxMEQyRjRERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjgzNjA3ODFGQTJEQTZCQTJGOTgyQ0I5RTM0QzBEQjEwRDJG NERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMw REIxMEQyRjRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXD3ccjPlFh96LJVl/wJHqCkMP7h64Yq5Mh aMXZ4+oEeo0ALJ0Ic78uXn7KDik9OxmlIL47sgZ9VKA4H5C8x5e8Xu1yoNqYQlXL d3kbDY+267OaS96S7+CLxisaNsdBXn8ddQu9Xf8c/ROEZ5Crlg8lqGQkWLGlrfYt UtdWh80S9bN49tzhwSXQNBnJ2+UKPu8RlPrP8debJClNeg/FMxqSZoj7n55uBgrv mb204PuTkOZeFPLeRg7lFjvXzzSegFk3h4Sr1MG4FBODCi9kyJxI6Gg69L2i+FmA H5jhKnU9xkrp72qZ2OiH/WjvsVoEy7p6Wx5SMdeaEk6vEpMTmso= -----END CERTIFICATE-----Generated at Sun Jun 14 07:30:19 2026 by rpki-client