$ rpki-client -vvf rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft File: F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft (raw, json) Hash identifier: ecmRhyKFhYWybonv0gJN7nLc62Q0peQ0yV2WZjfpJcc= Subject key identifier: 4C:AC:B7:F8:42:93:A5:E6:EE:67:43:F2:06:3C:98:35:39:D0:70:D7 Authority key identifier: F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 Certificate issuer: /CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Certificate serial: 601DD1507B160B5DE55415CBB97EC97CB4AA435C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:27:16 +0000 Manifest this update: Tue 12 May 2026 17:22:16 +0000 Manifest next update: Wed 13 May 2026 18:25:16 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: TvZUkrrCi0RH2KouESWHnYo6zKTg2B7NXoPHY3tduXU=) 2: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: kbVyFpYowQRxd/2pyb5bI0NF4XwTRcPV5F3s1QVQKnw=) 3: F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl (hash: 4tJEdTvmBVyj1qQkkoXk6PR634xPj0ZTtRwIXDQ/yJc=) 4: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: 42WVpxt8kPPzhN9E9uDvoLlTM1AZ+xhmNg0V+4liwbw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1d:d1:50:7b:16:0b:5d:e5:54:15:cb:b9:7e:c9:7c:b4:aa:43:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F988F4A9D0008C4D84C92B0FF19A0073768163F7 Validity Not Before: May 12 17:22:16 2026 GMT Not After : May 13 18:25:16 2026 GMT Subject: CN=4CACB7F84293A5E6EE6743F2063C983539D070D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:e1:5d:07:18:95:5d:ff:75:08:f7:3b:05: b5:98:bb:4c:d7:51:f5:5f:0e:ad:26:ab:1a:a5:d2: 33:ce:ae:3b:52:9a:9a:e3:89:27:af:38:45:ea:5d: 00:93:ff:bd:31:84:0d:91:89:a8:20:a7:29:2a:b0: b8:21:e1:65:db:c1:ea:10:bb:ae:f9:f8:bf:d9:8e: 72:37:d7:c0:7b:f9:96:ef:3a:a1:7c:c4:6f:3c:34: c3:75:31:49:38:50:f3:d4:0e:f6:8f:87:9a:d9:70: 77:58:c1:47:97:ec:37:9e:8c:f0:e7:71:64:3c:c6: 9c:f0:82:f0:6c:5a:e6:cb:49:1c:ca:5e:32:8a:45: 8f:e6:07:ea:1e:7e:5e:38:04:c3:1e:65:30:a1:bf: d0:e5:92:a5:cf:1c:a6:4b:d9:af:cf:76:da:0c:55: c0:dd:e4:27:46:53:1b:55:43:b6:85:b3:45:5e:19: 41:1b:4d:f9:bf:12:91:ff:25:03:b6:c8:d3:b2:dc: f4:38:3d:e4:c2:9b:63:54:6a:47:70:0f:73:ab:d1: 72:ef:ac:bf:8a:df:97:16:fe:c2:8c:b0:4d:b8:37: bc:19:46:f7:57:7f:0f:cd:49:68:f2:6f:b2:45:8e: cd:a9:95:69:28:07:38:76:8f:ac:00:21:2b:77:9f: 86:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AC:B7:F8:42:93:A5:E6:EE:67:43:F2:06:3C:98:35:39:D0:70:D7 X509v3 Authority Key Identifier: keyid:F9:88:F4:A9:D0:00:8C:4D:84:C9:2B:0F:F1:9A:00:73:76:81:63:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F988F4A9D0008C4D84C92B0FF19A0073768163F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/F988F4A9D0008C4D84C92B0FF19A0073768163F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:0f:58:17:4d:32:d7:59:b8:e4:29:82:bb:2b:12:4c:91:66: 7b:2d:8d:c6:52:60:0e:d7:9e:72:a2:ee:ab:1e:ee:e2:b5:63: 3b:84:7f:7f:4e:0d:8f:23:69:ff:17:8f:16:55:d4:ff:a1:9d: 8f:86:59:c5:17:86:80:02:a8:51:11:3d:2c:62:1a:3c:45:c4: a1:89:a1:18:2b:cf:01:06:c0:d7:5d:d5:b3:68:f4:77:99:83: 49:f6:e7:b7:47:69:9d:87:24:1f:67:fc:9f:89:aa:bd:c3:27: a1:e3:aa:f4:2b:ce:08:b6:2e:fa:7d:00:5b:d1:b8:22:ca:7c: 21:f3:01:2e:d7:51:00:98:89:ac:0d:d3:0b:a0:a6:29:4f:de: 8a:97:c5:19:70:e3:e8:ae:33:cf:68:57:1b:b6:b2:00:54:a8: 82:b1:13:89:a8:fb:94:3b:97:c7:fe:28:67:3a:99:38:29:d4: 53:4c:1d:34:23:09:c7:9e:b6:02:6a:e2:e1:40:73:36:c0:08: 16:6d:f8:6a:e3:72:3c:6b:b2:cf:06:1c:c4:d5:0b:28:ab:39: 25:a8:68:ed:94:42:b1:05:33:70:6c:cd:1f:97:ac:9d:20:51: ac:87:61:ec:ac:29:08:69:9d:e6:40:5d:dd:41:2a:4c:f8:80: e6:93:5f:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYB3RUHsWC13lVBXLuX7JfLSqQ1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3 NjgxNjNGNzAeFw0yNjA1MTIxNzIyMTZaFw0yNjA1MTMxODI1MTZaMDMxMTAvBgNV BAMTKDRDQUNCN0Y4NDI5M0E1RTZFRTY3NDNGMjA2M0M5ODM1MzlEMDcwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL7+FdBxiVXf91CPc7BbWYu0zX UfVfDq0mqxql0jPOrjtSmprjiSevOEXqXQCT/70xhA2RiaggpykqsLgh4WXbweoQ u675+L/ZjnI318B7+ZbvOqF8xG88NMN1MUk4UPPUDvaPh5rZcHdYwUeX7DeejPDn cWQ8xpzwgvBsWubLSRzKXjKKRY/mB+oefl44BMMeZTChv9DlkqXPHKZL2a/PdtoM VcDd5CdGUxtVQ7aFs0VeGUEbTfm/EpH/JQO2yNOy3PQ4PeTCm2NUakdwD3Or0XLv rL+K35cW/sKMsE24N7wZRvdXfw/NSWjyb7JFjs2plWkoBzh2j6wAISt3n4YJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTKy3+EKTpebuZ0PyBjyYNTnQcNcwHwYDVR0j BBgwFoAU+Yj0qdAAjE2EySsP8ZoAc3aBY/cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIxZjk5OWItYWJjZS00ZmE5LThlNzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlE MDAwOEM0RDg0QzkyQjBGRjE5QTAwNzM3NjgxNjNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTg4RjRBOUQwMDA4QzREODRDOTJCMEZGMTlBMDA3Mzc2ODE2 M0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvRjk4OEY0QTlEMDAwOEM0RDg0QzkyQjBGRjE5QTAw NzM3NjgxNjNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgPWBdNMtdZuOQpgrsrEkyRZnstjcZSYA7X nnKi7qse7uK1YzuEf39ODY8jaf8XjxZV1P+hnY+GWcUXhoACqFERPSxiGjxFxKGJ oRgrzwEGwNdd1bNo9HeZg0n257dHaZ2HJB9n/J+Jqr3DJ6HjqvQrzgi2Lvp9AFvR uCLKfCHzAS7XUQCYiawN0wugpilP3oqXxRlw4+iuM89oVxu2sgBUqIKxE4mo+5Q7 l8f+KGc6mTgp1FNMHTQjCceetgJq4uFAczbACBZt+Grjcjxrss8GHMTVCyirOSWo aO2UQrEFM3BszR+XrJ0gUayHYeysKQhpneZAXd1BKkz4gOaTX8w= -----END CERTIFICATE-----Generated at Wed May 13 02:13:06 2026 by rpki-client