$ rpki-client -vvf rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft File: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft (raw, json) Hash identifier: 4+lc0tesEt6QsF0DWO3eo2Z6/669cdZQKk1O3A6ESlY= Subject key identifier: 15:8F:5B:1F:62:85:26:53:FA:54:E6:93:E3:B2:07:F7:66:33:C5:19 Authority key identifier: F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 Certificate issuer: /CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Certificate serial: 161C41FD39AE8457A23C5EADF97574B46C65C876 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:32:28 +0000 Manifest this update: Tue 12 May 2026 06:27:28 +0000 Manifest next update: Wed 13 May 2026 06:44:28 +0000 Files and hashes: 1: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 44fFhWX4KLV5BZcGJB0E9Z9h7E7YxWEzvM4c3ibp+FI=) 2: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: s7j6V9XRLybSdB07wL0FpooAGZX0voKMcNhL/PIgeG4=) 3: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: IUK+vwB76Q4G08ehK2Gx52lgwmgXNziNTOU2tmOlHFI=) 4: F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl (hash: 6gnn/fMtJ491g9InsnqdASWjyPfovEgX2PFZJnMmQqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1c:41:fd:39:ae:84:57:a2:3c:5e:ad:f9:75:74:b4:6c:65:c8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1 Validity Not Before: May 12 06:27:28 2026 GMT Not After : May 13 06:44:28 2026 GMT Subject: CN=158F5B1F62852653FA54E693E3B207F76633C519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fb:2a:15:16:41:98:28:a5:ac:00:24:d6:ad: 41:3b:ec:8c:bf:2c:7e:3c:60:26:d3:39:23:de:6c: d1:47:08:85:20:c6:76:b9:dd:bd:1a:8c:b1:6d:61: 53:74:98:ac:f9:2b:8b:16:a6:e1:cc:f9:7e:fb:c3: 6c:67:4b:8c:ec:0d:74:fe:53:91:a6:6d:b8:b3:81: 4b:30:be:3f:ea:90:e4:84:41:79:b7:5b:78:87:0f: 9d:0e:8f:1b:b3:ab:1d:93:a9:c4:5d:d9:eb:f1:21: d8:b7:fa:ec:6b:5a:0c:32:02:9e:5b:ed:3f:0b:2b: c3:8b:eb:28:ac:18:45:24:fe:92:db:a6:48:3c:cd: b2:c5:a4:71:bf:14:82:68:4f:1b:43:46:4a:b8:82: 3a:28:9b:e1:cc:31:32:d2:88:c5:4d:eb:77:8a:b0: 5a:71:f1:80:4f:36:62:f0:c9:81:ef:92:f9:8d:88: f5:b9:cb:5b:c3:79:7f:b9:88:97:b2:f9:6f:16:78: 72:6a:f5:84:de:75:38:1b:41:22:0d:3d:3a:e0:43: dd:a8:8a:59:f3:ba:49:64:69:65:b2:9d:12:f2:d9: 16:31:3b:83:dc:10:c9:66:f5:d4:61:4e:a1:e4:4d: ee:7c:02:8b:94:f6:87:14:21:f1:0a:47:48:74:e2: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8F:5B:1F:62:85:26:53:FA:54:E6:93:E3:B2:07:F7:66:33:C5:19 X509v3 Authority Key Identifier: keyid:F2:DE:D7:D1:AF:52:5B:DA:D6:41:4B:3E:2B:AF:7B:50:53:99:A7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/F2DED7D1AF525BDAD6414B3E2BAF7B505399A7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b6:76:69:5c:84:82:d5:65:1a:e7:a9:4b:b3:a7:1b:d1:27: 36:71:de:b0:99:b4:83:78:6d:b5:93:5a:31:66:2f:6c:c9:d6: 29:9a:a8:ca:82:bf:29:fa:eb:6f:77:1b:e9:a5:99:2c:ab:f4: 99:43:57:71:58:e1:da:83:39:76:9c:c1:b2:46:0c:70:7d:94: 8b:f6:57:70:05:f1:2d:7e:84:49:f4:86:31:24:1f:cd:6d:e2: a3:73:54:9a:08:d3:58:07:9b:50:1a:47:61:85:35:42:ce:60: ee:ce:6d:1e:e4:43:38:9c:d2:b1:47:c0:d3:eb:49:e0:cf:de: c2:83:12:9b:cf:66:05:a1:0c:aa:c4:73:f8:44:40:d3:93:fd: 82:7b:a8:d8:a6:6c:7f:39:26:b9:02:0b:75:70:da:3d:1a:10: d3:47:ac:31:21:ad:3c:59:79:84:98:f7:18:0d:b6:63:c7:59: 79:23:64:93:db:73:2b:51:c9:f4:ef:51:96:dc:8a:85:06:c2: b5:4a:81:cd:ce:d8:04:ff:14:97:4b:6e:85:d3:4c:c9:24:ab: 9b:dd:21:63:96:00:fb:af:90:f8:99:bf:13:5b:b6:64:fa:1e: c1:64:d3:5f:51:f6:c1:5f:d7:d7:57:7c:50:e3:66:1a:96:02: ed:38:a7:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhxB/TmuhFeiPF6t+XV0tGxlyHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1 Mzk5QTdEMTAeFw0yNjA1MTIwNjI3MjhaFw0yNjA1MTMwNjQ0MjhaMDMxMTAvBgNV BAMTKDE1OEY1QjFGNjI4NTI2NTNGQTU0RTY5M0UzQjIwN0Y3NjYzM0M1MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+yoVFkGYKKWsACTWrUE77Iy/ LH48YCbTOSPebNFHCIUgxna53b0ajLFtYVN0mKz5K4sWpuHM+X77w2xnS4zsDXT+ U5GmbbizgUswvj/qkOSEQXm3W3iHD50Ojxuzqx2TqcRd2evxIdi3+uxrWgwyAp5b 7T8LK8OL6yisGEUk/pLbpkg8zbLFpHG/FIJoTxtDRkq4gjoom+HMMTLSiMVN63eK sFpx8YBPNmLwyYHvkvmNiPW5y1vDeX+5iJey+W8WeHJq9YTedTgbQSINPTrgQ92o ilnzuklkaWWynRLy2RYxO4PcEMlm9dRhTqHkTe58AouU9ocUIfEKR0h04rE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFY9bH2KFJlP6VOaT47IH92YzxRkwHwYDVR0j BBgwFoAU8t7X0a9SW9rWQUs+K697UFOZp9EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk3MmY5YTItYjBmZi00Mjk4LThkYTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFB RjUyNUJEQUQ2NDE0QjNFMkJBRjdCNTA1Mzk5QTdEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkRFRDdEMUFGNTI1QkRBRDY0MTRCM0UyQkFGN0I1MDUzOTlB N0QxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvRjJERUQ3RDFBRjUyNUJEQUQ2NDE0QjNFMkJBRjdC NTA1Mzk5QTdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALm2dmlchILVZRrnqUuzpxvRJzZx3rCZtIN4 bbWTWjFmL2zJ1imaqMqCvyn66293G+mlmSyr9JlDV3FY4dqDOXacwbJGDHB9lIv2 V3AF8S1+hEn0hjEkH81t4qNzVJoI01gHm1AaR2GFNULOYO7ObR7kQzic0rFHwNPr SeDP3sKDEpvPZgWhDKrEc/hEQNOT/YJ7qNimbH85JrkCC3Vw2j0aENNHrDEhrTxZ eYSY9xgNtmPHWXkjZJPbcytRyfTvUZbcioUGwrVKgc3O2AT/FJdLboXTTMkkq5vd IWOWAPuvkPiZvxNbtmT6HsFk019R9sFf19dXfFDjZhqWAu04p64= -----END CERTIFICATE-----Generated at Tue May 12 22:52:04 2026 by rpki-client