$ rpki-client -vvf rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft File: F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft (raw, json) Hash identifier: DpK3tyNqxe36FlgacxYWWn1B7mbEMXbisfb1GNnoRso= Subject key identifier: 11:36:CF:57:09:7B:EE:49:E8:EE:16:62:54:98:72:EA:AA:6C:2F:D3 Authority key identifier: F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D Certificate issuer: /CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D Certificate serial: 73DADDC992E34BE870467702E34C9F0BAA6B3BDA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:54:56 +0000 Manifest this update: Tue 12 May 2026 21:49:56 +0000 Manifest next update: Wed 13 May 2026 22:58:56 +0000 Files and hashes: 1: 3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa (hash: exG4AdJRVuQMX1UGtjkLTqWmxcQunulo0tEKmdw4iDY=) 2: 3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa (hash: f47a49V3YxCF+Lv56KFQm6oHGHVoS/JPApI1aBIRXJE=) 3: 323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa (hash: +fmCqGE1N+8rTm5OExPB+Qrmtcx74bskEpH/ZHGnYVA=) 4: F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl (hash: wza3So36XfvWsc5TXHO8wJ5J4I2oOy9RCOALVPqLi2E=) 5: 3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa (hash: XONanozPD8at5BU77v08+BcvjpWg0G96Hwi2FNBJOcs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:da:dd:c9:92:e3:4b:e8:70:46:77:02:e3:4c:9f:0b:aa:6b:3b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F34A43AF25B736BEF1074375C5FBFF562E2BB91D Validity Not Before: May 12 21:49:56 2026 GMT Not After : May 13 22:58:56 2026 GMT Subject: CN=1136CF57097BEE49E8EE1662549872EAAA6C2FD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:a7:77:40:41:b2:30:1f:b5:51:fd:20:c8: 74:de:12:1a:77:db:37:91:2b:21:a6:6a:0d:40:3e: e9:46:92:7f:f8:db:14:53:27:78:e0:80:61:b2:4f: 8d:da:f2:3d:d5:77:19:05:31:55:c7:3e:82:3b:e4: 8a:84:84:e7:c3:28:ae:38:dd:cf:e2:61:18:d8:cb: aa:57:b3:79:4e:ee:b8:df:9e:07:22:f8:ef:56:68: db:bc:94:df:40:e6:a6:b3:a2:f6:25:a8:50:58:29: 5f:8e:54:cb:75:82:df:3e:e0:67:4b:67:d1:37:7a: c3:f1:0f:d8:35:61:46:84:57:3a:a4:48:99:ad:bb: 2c:87:47:24:b1:e4:d3:95:99:b8:44:c7:b5:f1:27: 7c:51:10:6a:99:32:b1:c1:a8:57:0a:2a:c0:df:21: b3:30:96:ec:dc:16:63:e9:e1:42:d5:b5:50:94:ca: e9:cb:fe:37:97:70:b7:d2:1b:6e:cc:0b:0d:fd:f2: a5:97:86:e1:a5:04:9f:d0:cd:2a:00:01:7c:bb:8d: 60:1f:cd:35:ae:cd:cf:52:3c:e9:b6:d3:3d:56:d9: 6f:a5:f7:c7:17:49:ca:13:be:0e:76:df:e3:de:d5: 6e:c6:89:15:34:bf:c3:1c:c7:13:c3:ff:3b:6a:dc: 28:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:36:CF:57:09:7B:EE:49:E8:EE:16:62:54:98:72:EA:AA:6C:2F:D3 X509v3 Authority Key Identifier: keyid:F3:4A:43:AF:25:B7:36:BE:F1:07:43:75:C5:FB:FF:56:2E:2B:B9:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/F34A43AF25B736BEF1074375C5FBFF562E2BB91D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:5d:7f:ac:ed:8d:26:29:f3:a6:13:9d:98:12:e9:fb:b7:44: ea:e1:8c:ea:11:ae:8e:9c:8a:fd:cc:d8:44:0f:68:03:7b:b4: c2:22:bd:ea:f0:ae:19:f6:df:aa:b4:14:0c:b6:80:99:2d:ec: 23:c7:d1:a5:b9:3d:d0:18:d9:52:96:8f:d3:5d:77:5e:c6:d2: fc:b9:a3:d3:28:ad:cf:2d:33:ed:6c:e3:3c:1c:38:4b:67:25: 59:32:84:d6:21:61:a6:ee:ec:69:4b:f1:24:b1:b4:b8:ad:cf: 4b:97:a0:2b:e6:39:09:79:10:bc:f3:bf:16:97:45:59:f2:18: a9:22:ef:52:8b:61:57:14:7c:51:2c:53:54:ee:16:c1:02:b4: 8e:6a:1e:ad:ac:44:a4:1a:97:82:0f:a7:40:d2:9e:3f:fa:5b: 82:47:67:a4:0f:93:39:4e:e2:98:7e:20:a6:50:23:57:a3:cb: fd:08:b2:82:83:89:05:28:d8:fd:4a:f3:ed:1b:de:b2:7b:74: 84:b4:d3:80:ef:14:af:f3:47:56:c2:5b:d9:7d:1e:1a:e7:28: 10:8d:6d:96:b8:0c:c4:3f:be:6b:35:47:bc:ca:6b:94:4d:cd: 45:b4:ab:c6:89:b3:ab:c0:00:4f:d6:33:46:ac:38:09:82:4b: 48:d4:13:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9rdyZLjS+hwRncC40yfC6prO9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM0QTQzQUYyNUI3MzZCRUYxMDc0Mzc1QzVGQkZGNTYy RTJCQjkxRDAeFw0yNjA1MTIyMTQ5NTZaFw0yNjA1MTMyMjU4NTZaMDMxMTAvBgNV BAMTKDExMzZDRjU3MDk3QkVFNDlFOEVFMTY2MjU0OTg3MkVBQUE2QzJGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC77Kd3QEGyMB+1Uf0gyHTeEhp3 2zeRKyGmag1APulGkn/42xRTJ3jggGGyT43a8j3VdxkFMVXHPoI75IqEhOfDKK44 3c/iYRjYy6pXs3lO7rjfngci+O9WaNu8lN9A5qazovYlqFBYKV+OVMt1gt8+4GdL Z9E3esPxD9g1YUaEVzqkSJmtuyyHRySx5NOVmbhEx7XxJ3xREGqZMrHBqFcKKsDf IbMwluzcFmPp4ULVtVCUyunL/jeXcLfSG27MCw398qWXhuGlBJ/QzSoAAXy7jWAf zTWuzc9SPOm20z1W2W+l98cXScoTvg523+Pe1W7GiRU0v8McxxPD/ztq3CgPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUETbPVwl77kno7hZiVJhy6qpsL9MwHwYDVR0j BBgwFoAU80pDryW3Nr7xB0N1xfv/Vi4ruR0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg0NjMyODUtN2MyOC00MzVhLTgyYmItZmNjMzJkNTgwMjBlLzAvRjM0QTQzQUYy NUI3MzZCRUYxMDc0Mzc1QzVGQkZGNTYyRTJCQjkxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzRBNDNBRjI1QjczNkJFRjEwNzQzNzVDNUZCRkY1NjJFMkJC OTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjg0NjMyODUtN2MyOC00MzVhLTgy YmItZmNjMzJkNTgwMjBlLzAvRjM0QTQzQUYyNUI3MzZCRUYxMDc0Mzc1QzVGQkZG NTYyRTJCQjkxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBdf6ztjSYp86YTnZgS6fu3ROrhjOoRro6c iv3M2EQPaAN7tMIiverwrhn236q0FAy2gJkt7CPH0aW5PdAY2VKWj9Ndd17G0vy5 o9Morc8tM+1s4zwcOEtnJVkyhNYhYabu7GlL8SSxtLitz0uXoCvmOQl5ELzzvxaX RVnyGKki71KLYVcUfFEsU1TuFsECtI5qHq2sRKQal4IPp0DSnj/6W4JHZ6QPkzlO 4ph+IKZQI1ejy/0IsoKDiQUo2P1K8+0b3rJ7dIS004DvFK/zR1bCW9l9HhrnKBCN bZa4DMQ/vms1R7zKa5RNzUW0q8aJs6vAAE/WM0asOAmCS0jUE4Q= -----END CERTIFICATE-----Generated at Wed May 13 04:51:31 2026 by rpki-client