$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft File: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft (raw, json) Hash identifier: sLwFL29rRhwkJ5ha+EP7PurUhJx9fiBkJKiYltr6zO0= Subject key identifier: 1E:63:46:4E:9E:7A:9D:A7:A0:CF:81:6C:90:25:5D:22:1E:0E:CC:E9 Authority key identifier: F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF Certificate issuer: /CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF Certificate serial: 6CC2D85F6F4FD63F517128715D375E8EA76E8A14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:35:04 +0000 Manifest this update: Tue 12 May 2026 08:30:04 +0000 Manifest next update: Wed 13 May 2026 10:06:04 +0000 Files and hashes: 1: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (hash: 25pMisvX0/Q8rpjasSNLO/3FyTnfpVPB5JoH3mYAK2Y=) 2: F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl (hash: rPTt35KQnT1DeIYbYiUUJFcPQ5ILB6EYB6ibxtX57Uk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c2:d8:5f:6f:4f:d6:3f:51:71:28:71:5d:37:5e:8e:a7:6e:8a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF Validity Not Before: May 12 08:30:04 2026 GMT Not After : May 13 10:06:04 2026 GMT Subject: CN=1E63464E9E7A9DA7A0CF816C90255D221E0ECCE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f2:01:70:aa:4d:6a:bc:4e:d4:07:53:d1:12: 15:84:0b:ed:3b:b2:17:d0:46:00:f6:4d:71:f0:9b: b3:d8:85:5e:00:d1:3a:f4:e1:05:6b:ab:67:31:5e: f2:eb:8d:e8:06:e3:9b:2c:10:95:28:ef:74:4d:d0: ca:91:18:e8:94:c6:b5:31:cb:d0:96:33:6e:24:bd: 8e:8b:40:45:22:e7:1d:d6:ea:2f:ab:6a:68:3a:a5: ce:d7:64:ed:c6:42:c4:5d:ef:b2:2c:d7:4a:a5:17: a0:d0:70:bc:eb:9d:62:de:96:22:a2:b5:1b:86:b8: cb:ae:cb:da:88:fd:f3:23:82:8c:90:27:3c:dd:29: 0c:82:b7:58:84:c5:61:9e:c5:15:d4:df:cb:89:98: 7d:f3:74:bb:a8:cb:b4:54:f9:ed:1b:d7:7c:e1:db: ce:0a:c3:c1:6c:4f:b4:c4:9e:21:a8:a4:34:30:ed: 18:04:88:40:20:bd:c4:be:22:8e:d0:64:3a:74:b4: 71:0e:00:f8:c0:d0:f3:c1:ac:8a:a2:79:05:36:7a: 1f:eb:87:32:53:6a:8e:97:2e:4d:3f:38:86:ab:3d: 40:9f:8b:9f:c8:6b:4f:61:d4:65:19:64:f5:b7:9b: 75:e0:9e:99:47:9c:da:56:da:07:1e:47:81:56:34: 39:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:63:46:4E:9E:7A:9D:A7:A0:CF:81:6C:90:25:5D:22:1E:0E:CC:E9 X509v3 Authority Key Identifier: keyid:F6:28:DD:DC:3F:36:B1:EE:4A:AF:B2:7A:52:A9:D3:5E:53:02:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/F628DDDC3F36B1EE4AAFB27A52A9D35E530287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e2:25:d1:cf:9c:68:6c:44:50:47:f3:4a:ec:cb:06:c0:98: 23:72:15:8e:76:c2:d6:0a:46:0c:56:4c:84:e1:65:65:c4:e3: ed:79:31:c6:90:52:41:07:4b:e1:99:cc:fc:f1:00:ba:b3:ce: cb:f1:32:89:36:0e:2a:54:0c:05:1e:a7:46:e1:1d:61:93:7a: 60:b6:5d:d5:77:fb:75:63:35:61:dd:82:bd:b8:db:8a:24:49: f8:76:f7:49:f1:93:90:63:6f:d1:18:4d:35:dc:88:f5:ba:e3: 2c:0c:93:0b:ed:93:9b:e1:62:67:4a:90:e7:32:fa:8e:73:54: 5f:0c:25:b6:32:f3:53:28:e3:b8:ea:cd:72:76:a5:c4:d0:c7: a7:8f:0a:26:77:cb:cf:98:e5:cc:4a:09:c4:fd:1e:db:35:e8: 00:3d:27:23:cf:aa:16:41:0b:fb:a6:f7:06:cd:cf:87:c7:8e: 8b:ba:71:db:9b:53:a1:d4:11:f6:c2:3c:66:7f:4f:87:5c:49: 40:e0:ab:72:ee:eb:0e:ec:65:45:b7:6a:56:ae:f0:90:7e:24: 0d:20:ad:af:f2:84:7b:18:8a:b4:76:66:df:e2:2a:0f:74:52: c6:70:5a:e9:aa:30:75:55:61:92:99:bf:c8:dc:01:74:4d:fc: ca:4d:e0:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMLYX29P1j9RcShxXTdejqduihQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1 MzAyODdERjAeFw0yNjA1MTIwODMwMDRaFw0yNjA1MTMxMDA2MDRaMDMxMTAvBgNV BAMTKDFFNjM0NjRFOUU3QTlEQTdBMENGODE2QzkwMjU1RDIyMUUwRUNDRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8gFwqk1qvE7UB1PREhWEC+07 shfQRgD2TXHwm7PYhV4A0Tr04QVrq2cxXvLrjegG45ssEJUo73RN0MqRGOiUxrUx y9CWM24kvY6LQEUi5x3W6i+ramg6pc7XZO3GQsRd77Is10qlF6DQcLzrnWLeliKi tRuGuMuuy9qI/fMjgoyQJzzdKQyCt1iExWGexRXU38uJmH3zdLuoy7RU+e0b13zh 284Kw8FsT7TEniGopDQw7RgEiEAgvcS+Io7QZDp0tHEOAPjA0PPBrIqieQU2eh/r hzJTao6XLk0/OIarPUCfi5/Ia09h1GUZZPW3m3XgnplHnNpW2gceR4FWNDkTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHmNGTp56naegz4FskCVdIh4OzOkwHwYDVR0j BBgwFoAU9ijd3D82se5Kr7J6UqnTXlMCh98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFkNzM4OTUtYzg0Yy00NjRmLTliNGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMz RjM2QjFFRTRBQUZCMjdBNTJBOUQzNUU1MzAyODdERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjI4REREQzNGMzZCMUVFNEFBRkIyN0E1MkE5RDM1RTUzMDI4 N0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFkNzM4OTUtYzg0Yy00NjRmLTli NGYtOGQzMDMwNmI5NzI3LzAvRjYyOEREREMzRjM2QjFFRTRBQUZCMjdBNTJBOUQz NUU1MzAyODdERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDiJdHPnGhsRFBH80rsywbAmCNyFY52wtYK RgxWTIThZWXE4+15McaQUkEHS+GZzPzxALqzzsvxMok2DipUDAUep0bhHWGTemC2 XdV3+3VjNWHdgr2424okSfh290nxk5Bjb9EYTTXciPW64ywMkwvtk5vhYmdKkOcy +o5zVF8MJbYy81Mo47jqzXJ2pcTQx6ePCiZ3y8+Y5cxKCcT9Hts16AA9JyPPqhZB C/um9wbNz4fHjou6cdubU6HUEfbCPGZ/T4dcSUDgq3Lu6w7sZUW3alau8JB+JA0g ra/yhHsYirR2Zt/iKg90UsZwWumqMHVVYZKZv8jcAXRN/MpN4DQ= -----END CERTIFICATE-----Generated at Tue May 12 23:27:51 2026 by rpki-client