$ rpki-client -vvf rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft File: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft (raw, json) Hash identifier: Ovj/B13SuoYsNIri8x8KL+GFlIWq5dVuly1JsDwgecU= Subject key identifier: 80:26:4C:E9:01:A2:1C:DD:7C:D0:AF:C9:28:C1:CE:0E:82:09:42:49 Authority key identifier: F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 Certificate issuer: /CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Certificate serial: 79C42517C561F0C2CD948E61410732F0192EFD2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:37:34 +0000 Manifest this update: Tue 12 May 2026 17:32:34 +0000 Manifest next update: Wed 13 May 2026 21:20:34 +0000 Files and hashes: 1: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: vFYZUwPOZFg6qgBQGFtuePgvWZXO4yFUVyM6qrVOlT0=) 2: F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl (hash: tzF14Tz3k2p3u9XDn7ZnUYg+Cy2P0KF6zgLXQl3HRNw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c4:25:17:c5:61:f0:c2:cd:94:8e:61:41:07:32:f0:19:2e:fd:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2885A21E2158558AE8643A8FFD4838C2FF6F1E3 Validity Not Before: May 12 17:32:34 2026 GMT Not After : May 13 21:20:34 2026 GMT Subject: CN=80264CE901A21CDD7CD0AFC928C1CE0E82094249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:98:9d:da:66:84:67:4c:2a:03:3c:fe:43: be:a7:51:66:84:27:dd:a7:87:55:36:6f:cf:38:e1: 18:95:eb:a1:4f:ce:1b:43:87:1f:88:76:60:5d:f5: ce:20:a0:4a:7f:9f:ae:17:77:ce:3a:30:4c:ad:e1: 7f:62:61:9d:e7:3a:70:78:45:8a:38:8e:d0:b3:69: 0a:8b:44:59:15:de:58:af:a5:f1:71:a1:a7:c0:be: 34:bd:37:a2:e1:2e:71:21:a1:44:c7:8a:8c:d0:20: e7:05:f5:65:81:41:fd:38:73:50:28:ef:e2:b1:8d: 6b:ab:0b:c2:f8:13:53:6c:c2:29:8d:a5:7e:4d:ef: c9:ef:c9:17:bb:0a:58:cf:1e:04:c0:2a:95:03:2b: 80:9a:5b:6d:2f:ca:f8:0b:9d:40:b7:9d:5c:f7:76: 8a:a8:da:c7:54:4b:bd:50:d4:50:f4:ca:6b:af:64: 36:97:21:ce:13:30:be:9a:b6:12:b4:0d:b2:15:35: 50:81:44:45:3b:23:46:97:d4:1a:d8:22:1c:e1:62: d1:3b:9f:58:74:e1:d3:ce:26:e5:b1:3c:f6:7c:a6: 5b:1c:9b:75:92:20:fc:92:bf:37:43:d5:f8:28:12: c7:ad:f2:06:9c:3f:12:5a:c8:db:11:b3:70:ff:8c: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:26:4C:E9:01:A2:1C:DD:7C:D0:AF:C9:28:C1:CE:0E:82:09:42:49 X509v3 Authority Key Identifier: keyid:F2:88:5A:21:E2:15:85:58:AE:86:43:A8:FF:D4:83:8C:2F:F6:F1:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/F2885A21E2158558AE8643A8FFD4838C2FF6F1E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:4c:be:a5:e7:bb:4a:2b:5b:90:d3:d7:4f:da:64:ba:74:0c: 7a:39:0d:b4:4b:29:3c:7c:cc:28:63:cc:2f:20:9f:4c:c3:53: ec:a5:e0:56:e7:f8:2d:cb:36:fd:68:17:9a:de:62:d9:62:0d: e1:cf:d2:37:cb:1c:ec:54:d0:e6:8e:4b:1e:fc:d9:73:89:17: 65:ef:77:c8:30:01:15:0d:5a:51:b6:d4:eb:7d:79:4a:ef:95: dd:1f:7b:44:f5:a8:5e:5f:b6:d0:5d:9c:c2:22:ba:ed:f7:ab: 9c:6b:7d:a9:0c:7a:96:9e:de:82:ec:c1:f3:12:f1:1c:69:75: 1f:fd:5c:40:95:8f:ce:bf:6d:a2:54:e3:4e:6f:5f:88:d4:ff: 8f:11:26:9e:c5:a8:bf:3b:0d:f7:83:6f:d7:02:74:1c:4c:53: fd:4d:b1:a2:68:65:6c:5f:17:79:30:51:d3:9b:b0:3e:35:8d: cd:f0:11:69:77:03:ca:c4:a3:98:bf:ac:0d:9e:1f:ae:07:4f: 54:80:eb:c8:12:27:8f:f2:86:01:4a:9c:97:3e:80:cd:5a:ad: 90:6b:26:72:0a:79:0c:ec:b6:14:17:2d:98:ac:9e:c6:6a:b5: a2:dc:75:08:99:45:b3:36:bb:8c:54:40:69:0e:06:0f:b8:c4: b4:40:b9:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecQlF8Vh8MLNlI5hQQcy8Bku/S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgzOEMy RkY2RjFFMzAeFw0yNjA1MTIxNzMyMzRaFw0yNjA1MTMyMTIwMzRaMDMxMTAvBgNV BAMTKDgwMjY0Q0U5MDFBMjFDREQ3Q0QwQUZDOTI4QzFDRTBFODIwOTQyNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDecpid2maEZ0wqAzz+Q76nUWaE J92nh1U2b8844RiV66FPzhtDhx+IdmBd9c4goEp/n64Xd846MEyt4X9iYZ3nOnB4 RYo4jtCzaQqLRFkV3livpfFxoafAvjS9N6LhLnEhoUTHiozQIOcF9WWBQf04c1Ao 7+KxjWurC8L4E1NswimNpX5N78nvyRe7CljPHgTAKpUDK4CaW20vyvgLnUC3nVz3 doqo2sdUS71Q1FD0ymuvZDaXIc4TML6athK0DbIVNVCBREU7I0aX1BrYIhzhYtE7 n1h04dPOJuWxPPZ8plscm3WSIPySvzdD1fgoEset8gacPxJayNsRs3D/jIMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgCZM6QGiHN180K/JKMHODoIJQkkwHwYDVR0j BBgwFoAU8ohaIeIVhViuhkOo/9SDjC/28eMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFmMjU2MzQtZjU4My00NmJjLTllOGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFF MjE1ODU1OEFFODY0M0E4RkZENDgzOEMyRkY2RjFFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjg4NUEyMUUyMTU4NTU4QUU4NjQzQThGRkQ0ODM4QzJGRjZG MUUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvRjI4ODVBMjFFMjE1ODU1OEFFODY0M0E4RkZENDgz OEMyRkY2RjFFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFMvqXnu0orW5DT10/aZLp0DHo5DbRLKTx8 zChjzC8gn0zDU+yl4Fbn+C3LNv1oF5reYtliDeHP0jfLHOxU0OaOSx782XOJF2Xv d8gwARUNWlG21Ot9eUrvld0fe0T1qF5fttBdnMIiuu33q5xrfakMepae3oLswfMS 8RxpdR/9XECVj86/baJU405vX4jU/48RJp7FqL87DfeDb9cCdBxMU/1NsaJoZWxf F3kwUdObsD41jc3wEWl3A8rEo5i/rA2eH64HT1SA68gSJ4/yhgFKnJc+gM1arZBr JnIKeQzsthQXLZisnsZqtaLcdQiZRbM2u4xUQGkOBg+4xLRAuQk= -----END CERTIFICATE-----Generated at Wed May 13 08:28:45 2026 by rpki-client