$ rpki-client -vvf rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft File: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft (raw, json) Hash identifier: 65NKjGFMhtk/OVy0ZedgyzuhVe/i91bjUJ7k1rg/PJE= Subject key identifier: 00:61:DA:41:B3:25:25:BE:C7:9E:78:68:A1:63:50:89:72:AF:3D:9B Authority key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 Certificate issuer: /CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Certificate serial: 68265061063008E7364DF2B31BD658ED11495DB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:30:52 +0000 Manifest this update: Tue 12 May 2026 09:25:52 +0000 Manifest next update: Wed 13 May 2026 11:28:52 +0000 Files and hashes: 1: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: 7b9mH0AqpbaWOjZuhqAUMtLrNThijZIRNrCRnrYSzNM=) 2: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl (hash: KRLnvDGAuGR9Dc3DPqIc8jhVE/R02tk1gQE2VtZGy1Q=) 3: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: zPAHd45OpjoBbHs1U75wpIAsa5qEeUqNzEkLN1k94xM=) 4: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: SMrMHroRrnR9209rBvRZEueHMTUoBXgkpdWBsenWKng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:26:50:61:06:30:08:e7:36:4d:f2:b3:1b:d6:58:ed:11:49:5d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Validity Not Before: May 12 09:25:52 2026 GMT Not After : May 13 11:28:52 2026 GMT Subject: CN=0061DA41B32525BEC79E7868A163508972AF3D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5c:ab:b4:cd:99:ed:28:0e:3f:de:aa:bc:72: 4b:4e:91:14:5b:33:52:80:5b:06:17:e5:38:16:99: 9b:5c:1e:af:d6:dd:97:25:a6:a9:17:59:90:1c:af: 82:2d:91:e6:cb:3b:11:98:73:b8:cf:77:20:54:29: 09:d4:d3:b0:dd:ca:bc:cd:58:5b:b4:6b:3a:44:bf: 7c:1b:11:b4:92:c8:18:d4:61:ad:a6:58:6b:6b:b4: 35:51:c6:90:50:31:9d:a7:52:0a:db:4e:af:b1:43: 3c:69:bb:9f:74:95:a1:61:a5:52:c4:88:c9:4e:57: 8c:67:aa:da:12:3a:cb:94:ee:d0:07:80:c3:8b:7a: 5f:16:77:fe:fa:2b:9a:36:4e:9e:30:d0:1b:6a:e4: 31:34:34:2a:98:2c:e4:cf:0c:23:fe:26:b0:f7:00: 10:ff:07:b6:eb:30:a7:42:5e:28:9d:f8:58:8c:1f: 71:89:c8:21:67:14:74:eb:27:39:7a:55:85:bf:c8: 71:16:3d:b4:5a:3d:b1:2f:58:a5:8f:ef:1d:fb:65: 74:58:8a:f1:68:16:75:0c:d5:10:30:b5:90:c9:0d: d8:31:78:46:f5:e5:d6:10:93:11:59:a7:cf:11:81: 68:e3:fc:00:dd:88:dc:66:ea:13:97:86:a8:48:f6: 3d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:61:DA:41:B3:25:25:BE:C7:9E:78:68:A1:63:50:89:72:AF:3D:9B X509v3 Authority Key Identifier: keyid:F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2a:2f:52:d0:f8:81:b0:90:e5:40:52:1e:29:09:24:72:08: 87:10:e2:ef:4c:33:a4:61:af:74:fa:00:67:5d:72:d9:4b:20: 04:2d:8e:38:13:f9:40:f2:ad:db:3f:ba:31:83:9a:3d:a0:58: fe:a8:93:a4:d0:b3:b4:f3:ca:f2:9d:d2:69:5f:a8:0b:4f:05: 22:32:c5:1b:15:93:dc:2f:0d:ad:46:d1:37:64:59:31:f6:e7: 13:a7:5b:d1:c2:5f:a1:46:2b:cf:3d:ba:07:ff:53:b8:21:8e: ed:fe:1a:dd:1d:37:55:1b:90:6f:04:5e:06:c9:82:93:6c:98: 21:5c:9d:ee:2f:1b:93:7c:2a:1a:98:03:7b:c3:c9:36:56:1b: 02:35:ea:c2:29:57:75:94:cb:86:7d:27:90:ad:23:bb:13:dd: ea:0c:73:3d:78:09:88:37:2f:cc:b7:72:1a:63:da:37:4f:84: 54:89:6c:3d:16:1e:ab:e4:13:b9:39:cc:6a:a6:e2:d8:5c:ee: c6:a8:34:a5:7e:e1:a8:ce:b3:36:83:27:81:ed:6b:f7:88:8c: ff:50:ab:52:88:79:7d:11:6f:83:3c:32:8a:14:b7:e4:00:7b: f1:46:b1:09:db:cb:ff:7d:95:56:f0:77:a7:b0:9b:6c:67:96: d1:65:92:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaCZQYQYwCOc2TfKzG9ZY7RFJXbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIzM0RE MDYxRDlBNDAeFw0yNjA1MTIwOTI1NTJaFw0yNjA1MTMxMTI4NTJaMDMxMTAvBgNV BAMTKDAwNjFEQTQxQjMyNTI1QkVDNzlFNzg2OEExNjM1MDg5NzJBRjNEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcXKu0zZntKA4/3qq8cktOkRRb M1KAWwYX5TgWmZtcHq/W3ZclpqkXWZAcr4ItkebLOxGYc7jPdyBUKQnU07DdyrzN WFu0azpEv3wbEbSSyBjUYa2mWGtrtDVRxpBQMZ2nUgrbTq+xQzxpu590laFhpVLE iMlOV4xnqtoSOsuU7tAHgMOLel8Wd/76K5o2Tp4w0Btq5DE0NCqYLOTPDCP+JrD3 ABD/B7brMKdCXiid+FiMH3GJyCFnFHTrJzl6VYW/yHEWPbRaPbEvWKWP7x37ZXRY ivFoFnUM1RAwtZDJDdgxeEb15dYQkxFZp88RgWjj/ADdiNxm6hOXhqhI9j3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAGHaQbMlJb7HnnhooWNQiXKvPZswHwYDVR0j BBgwFoAU+PZoZTLnu3BOgCttO0izPdBh2aQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIyNmJlN2ItMmUyOC00OTUwLWFhNGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUz MkU3QkI3MDRFODAyQjZEM0I0OEIzM0REMDYxRDlBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEY2Njg2NTMyRTdCQjcwNEU4MDJCNkQzQjQ4QjMzREQwNjFE OUE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh NGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIz M0REMDYxRDlBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoqL1LQ+IGwkOVAUh4pCSRyCIcQ4u9MM6Rh r3T6AGddctlLIAQtjjgT+UDyrds/ujGDmj2gWP6ok6TQs7TzyvKd0mlfqAtPBSIy xRsVk9wvDa1G0TdkWTH25xOnW9HCX6FGK889ugf/U7ghju3+Gt0dN1UbkG8EXgbJ gpNsmCFcne4vG5N8KhqYA3vDyTZWGwI16sIpV3WUy4Z9J5CtI7sT3eoMcz14CYg3 L8y3chpj2jdPhFSJbD0WHqvkE7k5zGqm4thc7saoNKV+4ajOszaDJ4Hta/eIjP9Q q1KIeX0Rb4M8MooUt+QAe/FGsQnby/99lVbwd6ewm2xnltFlkrA= -----END CERTIFICATE-----Generated at Wed May 13 02:12:41 2026 by rpki-client