$ rpki-client -vvf rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft File: F328EAEFA60AA0B57B040C04D541138249BE47A3.mft (raw, json) Hash identifier: mLWCeXxBhRFQlTtOWwmxYhM60p59PBM+R9swjBTXVpE= Subject key identifier: 3B:4E:24:A6:B5:F1:BF:A9:56:0D:C6:9F:F2:6B:3D:80:E5:B5:AB:1B Authority key identifier: F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 Certificate issuer: /CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Certificate serial: 262120A7CBEDA827F740DD27B172A35F3365C33F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:54:31 +0000 Manifest this update: Tue 12 May 2026 18:49:31 +0000 Manifest next update: Wed 13 May 2026 21:32:31 +0000 Files and hashes: 1: F328EAEFA60AA0B57B040C04D541138249BE47A3.crl (hash: vYLuNm9NH56YE1pYc1D/FM4QlFu3Hm9hrxZPcB8XhjI=) 2: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: /FAsg1d5HOXN4IRL/RMI5oxHPMjWm4jYt7UGojb2reQ=) 3: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: 6HPQtYJFdlYFmn46WjveSZCOXYCIp+a2PMZ4d4GJwfY=) 4: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: D90T03o6j8g6AIOKzGOLBAM7pUvAQ3WBKqv9zbNkYu4=) 5: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: 7Po7ALrAR6J4a8bNfBNoSUzyyO7xwSetD9n1ziA4ooo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:21:20:a7:cb:ed:a8:27:f7:40:dd:27:b1:72:a3:5f:33:65:c3:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F328EAEFA60AA0B57B040C04D541138249BE47A3 Validity Not Before: May 12 18:49:31 2026 GMT Not After : May 13 21:32:31 2026 GMT Subject: CN=3B4E24A6B5F1BFA9560DC69FF26B3D80E5B5AB1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:29:99:fb:97:ff:c3:ac:46:79:68:e0:6b: c5:a2:93:42:95:37:9f:77:62:6c:48:6a:d3:48:4a: f3:80:7f:ca:3f:99:57:fc:aa:b4:be:7e:37:c9:60: 4a:a8:2d:7c:97:2f:eb:13:88:16:c5:ca:66:ea:f3: ea:25:31:12:e7:4e:29:10:73:3b:7d:4f:33:21:a7: 78:46:03:04:72:57:f2:88:da:70:f2:ec:fb:69:96: f5:8f:0f:5e:6c:90:7d:9b:54:3a:6b:95:84:1f:00: 7f:e0:da:2f:92:c0:42:f9:2d:af:8a:8c:2b:4f:e1: 59:20:a9:4f:21:63:b1:4b:43:df:04:43:0c:7c:a4: 4e:4b:dc:1f:5a:4f:e8:63:51:f0:d3:e6:68:d8:b3: 63:87:ab:c7:93:57:65:96:01:3e:73:fe:f0:79:e7: 8a:22:06:43:05:91:cb:f0:46:e6:83:e0:32:79:dc: 06:3e:4d:f7:fb:f6:3e:49:68:86:17:df:c5:c7:11: 3a:56:69:23:a2:78:ae:a6:a0:2d:56:c8:cf:a6:10: af:2e:ca:72:a9:9c:b0:ff:c6:9d:a6:58:5e:42:f3: 5f:4b:28:77:70:38:10:26:15:c2:13:26:ba:a9:45: 52:11:92:74:1d:16:99:7a:49:8c:5c:68:88:d1:b7: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4E:24:A6:B5:F1:BF:A9:56:0D:C6:9F:F2:6B:3D:80:E5:B5:AB:1B X509v3 Authority Key Identifier: keyid:F3:28:EA:EF:A6:0A:A0:B5:7B:04:0C:04:D5:41:13:82:49:BE:47:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F328EAEFA60AA0B57B040C04D541138249BE47A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/F328EAEFA60AA0B57B040C04D541138249BE47A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4f:dc:fc:29:fa:9a:ac:ae:c6:95:0e:9f:61:0f:dd:3f:53: 45:c8:a0:75:93:29:e5:1a:a1:3d:af:c5:4e:32:ea:c8:30:83: 00:b7:a1:8d:be:fc:07:d9:9f:2e:5d:fd:42:ae:bb:de:01:7c: 40:33:25:64:f3:45:8c:97:8a:7f:3b:14:3d:3e:ff:fc:a4:23: a9:b3:b3:2e:1b:94:33:98:08:22:e4:72:7a:49:09:46:d7:7c: e2:a0:55:fe:3b:e1:d0:0e:cc:b6:8d:91:41:18:7c:19:d4:bf: 34:7a:cb:b2:a6:d2:b7:c0:2e:44:e2:58:7a:1f:d8:f4:0e:84: cb:31:0e:d0:7b:0f:aa:72:ac:57:c6:b4:cd:3a:62:86:34:1c: d5:d1:1d:b7:b6:3e:51:e6:c6:24:95:c8:5a:79:40:16:b3:83: 28:1c:49:d8:34:88:4c:b2:e7:3a:bd:20:d0:a7:36:bc:61:e6: 60:4d:a0:3a:b4:c2:60:9e:40:10:20:0d:a6:96:30:df:f8:fe: 8f:ea:e3:db:de:e9:ab:90:45:9a:94:38:54:79:71:f4:16:0f: cd:a6:65:7d:f6:b5:b7:e8:d4:c8:a1:da:c2:52:e9:e0:21:40: 20:0b:24:92:f9:77:50:29:e0:5b:f0:b1:43:52:9a:05:ef:af: fc:e6:43:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJiEgp8vtqCf3QN0nsXKjXzNlwz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0 OUJFNDdBMzAeFw0yNjA1MTIxODQ5MzFaFw0yNjA1MTMyMTMyMzFaMDMxMTAvBgNV BAMTKDNCNEUyNEE2QjVGMUJGQTk1NjBEQzY5RkYyNkIzRDgwRTVCNUFCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xymZ+5f/w6xGeWjga8Wik0KV N593YmxIatNISvOAf8o/mVf8qrS+fjfJYEqoLXyXL+sTiBbFymbq8+olMRLnTikQ czt9TzMhp3hGAwRyV/KI2nDy7PtplvWPD15skH2bVDprlYQfAH/g2i+SwEL5La+K jCtP4VkgqU8hY7FLQ98EQwx8pE5L3B9aT+hjUfDT5mjYs2OHq8eTV2WWAT5z/vB5 54oiBkMFkcvwRuaD4DJ53AY+Tff79j5JaIYX38XHETpWaSOieK6moC1WyM+mEK8u ynKpnLD/xp2mWF5C819LKHdwOBAmFcITJrqpRVIRknQdFpl6SYxcaIjRtxmtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO04kprXxv6lWDcaf8ms9gOW1qxswHwYDVR0j BBgwFoAU8yjq76YKoLV7BAwE1UETgkm+R6MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEwN2ZkOGEtMTUwZi00NTNmLWEwZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZB NjBBQTBCNTdCMDQwQzA0RDU0MTEzODI0OUJFNDdBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzI4RUFFRkE2MEFBMEI1N0IwNDBDMDRENTQxMTM4MjQ5QkU0 N0EzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvRjMyOEVBRUZBNjBBQTBCNTdCMDQwQzA0RDU0MTEz ODI0OUJFNDdBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClP3Pwp+pqsrsaVDp9hD90/U0XIoHWTKeUa oT2vxU4y6sgwgwC3oY2+/AfZny5d/UKuu94BfEAzJWTzRYyXin87FD0+//ykI6mz sy4blDOYCCLkcnpJCUbXfOKgVf474dAOzLaNkUEYfBnUvzR6y7Km0rfALkTiWHof 2PQOhMsxDtB7D6pyrFfGtM06YoY0HNXRHbe2PlHmxiSVyFp5QBazgygcSdg0iEyy 5zq9INCnNrxh5mBNoDq0wmCeQBAgDaaWMN/4/o/q49ve6auQRZqUOFR5cfQWD82m ZX32tbfo1Mih2sJS6eAhQCALJJL5d1Ap4FvwsUNSmgXvr/zmQ8Y= -----END CERTIFICATE-----Generated at Wed May 13 02:49:31 2026 by rpki-client