$ rpki-client -vvf rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft File: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft (raw, json) Hash identifier: QHgVNuaA2/TCW76eTazrfNLD0qOeHcvikHzC1YCvjkQ= Subject key identifier: 93:9F:EE:9C:4E:23:1E:F1:70:A7:6C:CF:93:92:D4:A0:37:6F:79:EB Authority key identifier: FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C Certificate issuer: /CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C Certificate serial: 3378079B0CB846BCBFA9F03BBD104DD6694FF937 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:18:27 +0000 Manifest this update: Tue 12 May 2026 18:13:27 +0000 Manifest next update: Wed 13 May 2026 20:58:27 +0000 Files and hashes: 1: FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl (hash: RFHZue8HRhANJcZCYB8T13YNOBb7BSWeraFdT0Uux/I=) 2: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (hash: ZSthn7Cgu8F7ezrRvGxx4MN4tqZJy9/SKBqVKux9q54=) 3: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (hash: 9UBNZ+h1G8mek9LcljhEKysiSZO7TUe9p8xzWKxJS+I=) 4: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: d1I2cfM8y0iXKHnaVDBSnW1smn5NlaaQccmGLXMsCLs=) 5: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: uPo1yAFRG167KzCEv0QB1XB7rNNCLMc7y8D/msKrVH0=) 6: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: QdzKQdoMzvUeRiXyCgHODUDOAjORN+LQ7bEkztl/lEQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:78:07:9b:0c:b8:46:bc:bf:a9:f0:3b:bd:10:4d:d6:69:4f:f9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C Validity Not Before: May 12 18:13:27 2026 GMT Not After : May 13 20:58:27 2026 GMT Subject: CN=939FEE9C4E231EF170A76CCF9392D4A0376F79EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:db:55:70:7e:7e:b0:29:09:9a:10:cd:e3: 25:0d:aa:5e:e0:50:f5:e5:ed:2c:a0:93:2d:db:04: 14:5a:d7:5f:9f:85:51:e9:ed:82:aa:8c:2d:d2:50: c3:3b:00:64:f6:74:3a:6c:2a:bc:f9:28:81:de:f9: 4b:aa:c0:48:9a:34:68:87:b2:5b:67:8d:6c:b3:d4: f9:2b:60:03:1c:3f:7d:ca:48:ec:0c:a3:de:d4:9c: 2c:37:65:97:46:77:51:9b:8c:15:1b:59:cf:c5:0b: 27:57:b8:19:9e:86:23:39:6f:e3:83:24:1b:ca:dd: d1:46:6f:57:26:e7:f9:62:57:09:11:9d:eb:c6:7a: 2a:44:64:2b:35:e0:2e:6a:98:ad:5c:3f:94:f9:81: 4f:ba:06:55:4b:88:95:48:21:de:f0:d8:6a:61:71: 76:c3:c8:1f:3e:cd:c8:c5:21:fc:7b:a0:e6:52:61: b2:15:d2:65:26:0e:c5:8a:d4:58:13:eb:d3:f9:17: d2:63:c1:ff:c9:ec:bc:a2:aa:e7:e3:bf:55:33:54: c4:1e:0d:51:a0:d7:1e:6c:31:3e:59:b0:b9:ac:69: b5:68:5e:d3:d5:73:7a:1c:91:e7:c0:17:51:89:a7: 58:65:4c:f1:98:10:9c:e6:a1:98:4a:5a:3d:3d:e2: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9F:EE:9C:4E:23:1E:F1:70:A7:6C:CF:93:92:D4:A0:37:6F:79:EB X509v3 Authority Key Identifier: keyid:FE:E5:70:A3:FC:78:F1:F1:8E:85:8A:ED:A8:53:3D:A2:DB:A8:12:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/FEE570A3FC78F1F18E858AEDA8533DA2DBA8125C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:df:15:6e:60:be:8f:35:62:6c:97:92:68:dd:3c:1b:49:d2: 3a:d7:08:7e:4f:7d:05:de:5d:52:41:c7:d2:11:64:bb:8b:a3: 0e:e9:a8:5f:d3:4d:48:ac:fc:d7:42:e5:b8:74:13:a1:c6:96: 02:60:73:48:e2:59:37:50:da:5a:e0:a7:de:43:f5:82:e5:d7: 3e:5c:64:6f:bc:3b:96:46:f7:55:d6:4b:42:c2:ef:e6:1c:14: 78:1e:10:b6:fe:8a:63:72:6d:9b:ce:e6:ea:e7:a1:77:1c:aa: 19:59:c4:3e:c6:53:36:76:dd:d1:9f:8e:96:b3:20:bf:5b:75: 9c:d1:c9:f9:9c:24:30:85:17:2d:22:94:54:e8:e5:d1:8e:52: 92:a1:eb:d4:35:74:74:44:e8:2f:db:be:55:81:f2:44:db:26: 8e:26:63:2c:14:90:6c:e3:17:cc:ee:9e:fd:04:f7:60:13:31: b6:f8:3d:9d:fd:52:35:7b:9b:3f:62:25:4c:48:86:38:f0:db: ee:cd:07:14:da:e0:9a:12:43:4a:83:b3:44:29:88:c8:f5:86: 10:34:86:d6:1a:62:8b:4d:04:96:17:c7:00:8c:0a:fe:70:4e: cc:29:7d:18:72:e2:8f:ee:80:a2:e6:fe:33:bf:aa:d5:71:50: 0a:86:9c:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3gHmwy4Rry/qfA7vRBN1mlP+TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVFNTcwQTNGQzc4RjFGMThFODU4QUVEQTg1MzNEQTJE QkE4MTI1QzAeFw0yNjA1MTIxODEzMjdaFw0yNjA1MTMyMDU4MjdaMDMxMTAvBgNV BAMTKDkzOUZFRTlDNEUyMzFFRjE3MEE3NkNDRjkzOTJENEEwMzc2Rjc5RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgvttVcH5+sCkJmhDN4yUNql7g UPXl7Sygky3bBBRa11+fhVHp7YKqjC3SUMM7AGT2dDpsKrz5KIHe+UuqwEiaNGiH sltnjWyz1PkrYAMcP33KSOwMo97UnCw3ZZdGd1GbjBUbWc/FCydXuBmehiM5b+OD JBvK3dFGb1cm5/liVwkRnevGeipEZCs14C5qmK1cP5T5gU+6BlVLiJVIId7w2Gph cXbDyB8+zcjFIfx7oOZSYbIV0mUmDsWK1FgT69P5F9Jjwf/J7Lyiqufjv1UzVMQe DVGg1x5sMT5ZsLmsabVoXtPVc3ockefAF1GJp1hlTPGYEJzmoZhKWj094iJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk5/unE4jHvFwp2zPk5LUoDdveeswHwYDVR0j BBgwFoAU/uVwo/x48fGOhYrtqFM9otuoElwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjJhZjgzNTItY2Q2NS00ZGI3LWIwY2ItMDQ4YjQ1ZTdhNGJmLzAvRkVFNTcwQTNG Qzc4RjFGMThFODU4QUVEQTg1MzNEQTJEQkE4MTI1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRUU1NzBBM0ZDNzhGMUYxOEU4NThBRURBODUzM0RBMkRCQTgx MjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJhZjgzNTItY2Q2NS00ZGI3LWIw Y2ItMDQ4YjQ1ZTdhNGJmLzAvRkVFNTcwQTNGQzc4RjFGMThFODU4QUVEQTg1MzNE QTJEQkE4MTI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPfFW5gvo81YmyXkmjdPBtJ0jrXCH5PfQXe XVJBx9IRZLuLow7pqF/TTUis/NdC5bh0E6HGlgJgc0jiWTdQ2lrgp95D9YLl1z5c ZG+8O5ZG91XWS0LC7+YcFHgeELb+imNybZvO5urnoXccqhlZxD7GUzZ23dGfjpaz IL9bdZzRyfmcJDCFFy0ilFTo5dGOUpKh69Q1dHRE6C/bvlWB8kTbJo4mYywUkGzj F8zunv0E92ATMbb4PZ39UjV7mz9iJUxIhjjw2+7NBxTa4JoSQ0qDs0QpiMj1hhA0 htYaYotNBJYXxwCMCv5wTswpfRhy4o/ugKLm/jO/qtVxUAqGnDU= -----END CERTIFICATE-----Generated at Tue May 12 22:45:26 2026 by rpki-client