$ rpki-client -vvf rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft File: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft (raw, json) Hash identifier: VX9z7LOSA2a7S4MeuZ5ZWJP80DVBM0qUflrDyqHuwR4= Subject key identifier: A0:3E:47:2E:39:F5:D3:99:82:66:7B:4B:13:04:02:BB:E3:F3:D0:2D Authority key identifier: FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 Certificate issuer: /CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Certificate serial: 7E73189585E6178088C36FA4C7EEA6DA60A9D3B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:09:58 +0000 Manifest this update: Tue 12 May 2026 19:04:58 +0000 Manifest next update: Wed 13 May 2026 23:01:58 +0000 Files and hashes: 1: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: DzuRo4UVpWSsuuvSZCPx+QPp1mXNSgbHMp2M3XRIA7s=) 2: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: tqhtPy0pDXrbRO+/m8ay5h7+qXG3yJPzUoTIyb8m2MU=) 3: FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl (hash: vEmdisIzjhNObVpdpzCuVn81WhqlxdRao++QpHz/Jxk=) 4: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: pv5zffL4ZCBhJD+aFjjZDdz/CPK6N+eA7QhskPfJHEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:73:18:95:85:e6:17:80:88:c3:6f:a4:c7:ee:a6:da:60:a9:d3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF46629BDDB4F3A1C6D78F253E3B63C9B834113 Validity Not Before: May 12 19:04:58 2026 GMT Not After : May 13 23:01:58 2026 GMT Subject: CN=A03E472E39F5D39982667B4B130402BBE3F3D02D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:61:18:06:22:9b:2a:0d:62:d1:92:37:5c:d3: fc:29:84:e3:e4:7c:d8:e6:8e:b6:8c:4d:8b:de:ae: 11:e1:54:99:a9:74:88:95:3f:58:57:a5:16:b5:6b: cd:21:d7:c6:3a:6a:c8:18:05:9a:18:26:af:5f:dd: 37:11:82:bc:46:1f:84:b1:8c:80:71:67:3c:3f:14: 6a:2e:22:b3:83:df:2d:8a:41:17:2e:f1:4a:d7:61: ff:f2:3c:56:e8:31:10:15:e0:84:88:0d:f9:5e:bf: cb:de:0c:ec:64:01:3a:55:82:d2:10:d3:05:07:0d: 17:10:bf:09:37:89:49:2f:5f:ac:d8:72:75:82:24: be:94:ff:1f:8d:ce:76:bc:23:29:75:00:a5:7d:d8: db:06:f1:3a:fd:e8:b5:84:74:fa:ed:52:ce:15:5a: b0:a9:1f:54:6b:0c:59:0c:fe:bb:9b:11:58:0d:7c: 36:ae:a1:92:77:f5:fb:52:1c:ea:73:4b:a5:05:b8: 30:1e:74:a9:e0:03:48:87:35:6f:2f:c2:29:6b:5a: 68:59:fc:fb:87:1e:d4:7b:75:30:d8:f5:c7:27:6b: 68:c6:05:b7:b2:b3:44:ba:f5:33:b8:4c:1d:d5:56: 0e:74:47:1d:8e:d5:63:0a:0f:95:4d:51:b6:9c:ae: fb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3E:47:2E:39:F5:D3:99:82:66:7B:4B:13:04:02:BB:E3:F3:D0:2D X509v3 Authority Key Identifier: keyid:FF:F4:66:29:BD:DB:4F:3A:1C:6D:78:F2:53:E3:B6:3C:9B:83:41:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/FFF46629BDDB4F3A1C6D78F253E3B63C9B834113.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:dc:bb:e0:16:a9:cf:15:d5:5e:ca:60:86:59:14:bc:19:b8: 45:8d:1f:03:b2:a5:18:2c:7b:74:06:9e:6f:15:a6:2d:b9:4c: db:6c:fb:b0:bc:e4:c3:b7:15:fd:fd:c1:fe:a3:9f:ce:8e:8e: 19:dc:00:fb:9f:ed:c2:83:42:c7:0c:3c:b3:2c:fa:6d:e9:29: 3c:74:7f:2a:1f:fa:d7:de:b8:7c:4b:6e:d7:10:e3:bc:47:f1: 82:e2:ae:c6:1f:3b:84:ab:2d:fd:b9:b9:fd:a7:ed:b4:7d:cb: ee:6a:66:09:25:b3:97:01:e5:d0:ba:42:6b:f9:87:58:c6:57: a2:10:6b:01:bf:b8:3a:4b:3f:63:83:83:b4:be:82:bc:aa:b5: f1:75:1d:a3:24:2e:cc:28:b5:76:06:fe:5f:fa:67:06:95:c1: 0e:6e:4a:9c:bb:53:12:60:75:4d:c1:d6:01:8f:af:3b:04:92: 03:42:47:70:65:3b:dc:1a:53:22:a9:48:23:fa:2f:e8:a6:f3: b2:69:49:ca:66:e7:c6:66:e0:b8:cd:51:b2:b0:2c:80:58:78: 85:6f:fa:c4:39:c0:aa:04:2d:ea:00:11:41:82:a0:f4:b9:8a: 78:d6:3d:c0:31:f3:27:f6:b3:7d:1a:0e:05:61:83:d9:bc:50: f3:7c:04:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnMYlYXmF4CIw2+kx+6m2mCp07cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5 QjgzNDExMzAeFw0yNjA1MTIxOTA0NThaFw0yNjA1MTMyMzAxNThaMDMxMTAvBgNV BAMTKEEwM0U0NzJFMzlGNUQzOTk4MjY2N0I0QjEzMDQwMkJCRTNGM0QwMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYRgGIpsqDWLRkjdc0/wphOPk fNjmjraMTYverhHhVJmpdIiVP1hXpRa1a80h18Y6asgYBZoYJq9f3TcRgrxGH4Sx jIBxZzw/FGouIrOD3y2KQRcu8UrXYf/yPFboMRAV4ISIDflev8veDOxkATpVgtIQ 0wUHDRcQvwk3iUkvX6zYcnWCJL6U/x+Nzna8Iyl1AKV92NsG8Tr96LWEdPrtUs4V WrCpH1RrDFkM/rubEVgNfDauoZJ39ftSHOpzS6UFuDAedKngA0iHNW8vwilrWmhZ /PuHHtR7dTDY9ccna2jGBbeys0S69TO4TB3VVg50Rx2O1WMKD5VNUbacrvt7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoD5HLjn105mCZntLEwQCu+Pz0C0wHwYDVR0j BBgwFoAU//RmKb3bTzocbXjyU+O2PJuDQRMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZlZGIyOGYtZjNmOS00MTk5LTg1YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlC RERCNEYzQTFDNkQ3OEYyNTNFM0I2M0M5QjgzNDExMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRkY0NjYyOUJEREI0RjNBMUM2RDc4RjI1M0UzQjYzQzlCODM0 MTEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvRkZGNDY2MjlCRERCNEYzQTFDNkQ3OEYyNTNFM0I2 M0M5QjgzNDExMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/cu+AWqc8V1V7KYIZZFLwZuEWNHwOypRgs e3QGnm8Vpi25TNts+7C85MO3Ff39wf6jn86OjhncAPuf7cKDQscMPLMs+m3pKTx0 fyof+tfeuHxLbtcQ47xH8YLirsYfO4SrLf25uf2n7bR9y+5qZgkls5cB5dC6Qmv5 h1jGV6IQawG/uDpLP2ODg7S+gryqtfF1HaMkLswotXYG/l/6ZwaVwQ5uSpy7UxJg dU3B1gGPrzsEkgNCR3BlO9waUyKpSCP6L+im87JpScpm58Zm4LjNUbKwLIBYeIVv +sQ5wKoELeoAEUGCoPS5injWPcAx8yf2s30aDgVhg9m8UPN8BII= -----END CERTIFICATE-----Generated at Wed May 13 03:16:52 2026 by rpki-client