$ rpki-client -vvf rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft File: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft (raw, json) Hash identifier: ft1JvyBQmpfX5Ga95pudQWmX4SZEl6mXSrtls2o5/Eg= Subject key identifier: F1:7B:57:D4:C2:84:8E:31:E6:14:98:A9:60:6F:54:FF:2C:46:DE:45 Authority key identifier: F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 Certificate issuer: /CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Certificate serial: 0572F5886459FD22B43CCF2F8FF5C0E1CFBE567A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:42:53 +0000 Manifest this update: Tue 12 May 2026 20:37:53 +0000 Manifest next update: Wed 13 May 2026 21:29:53 +0000 Files and hashes: 1: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: LreF4U4QqN4qHzhmyfVVXaY/bnu6odrNWttsS80jRSQ=) 2: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: OiF+lqNfnntYlUTcLuL6XkD0ILHuGuhCZq5QG/i1DxA=) 3: F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl (hash: iDVOT0ptjNxxZi64dZLF/oQaqptJzzoicQruBVQXAN4=) 4: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: P0CKv28xTKde1GyGqA+PJu1GXD9kH++KhnXlGfNoMqo=) 5: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: qjiY24pQYGnpcIAUBz/9B2SI7lYJZJWbcLgxcQ8Bo/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:72:f5:88:64:59:fd:22:b4:3c:cf:2f:8f:f5:c0:e1:cf:be:56:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0 Validity Not Before: May 12 20:37:53 2026 GMT Not After : May 13 21:29:53 2026 GMT Subject: CN=F17B57D4C2848E31E61498A9606F54FF2C46DE45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:6f:7f:3e:37:49:73:fd:1e:f0:06:05:cc: dc:bf:9f:5d:ef:b1:d6:34:9e:e2:eb:df:cd:ff:c6: 92:97:20:43:1a:8e:0e:e9:86:89:56:27:91:5c:45: aa:a5:5b:fb:05:de:81:3e:9c:9e:e7:20:62:4d:80: bf:2e:33:37:d8:21:32:43:76:f3:13:c6:ad:48:a2: 5b:50:db:6f:ac:50:c0:90:1f:c3:e6:70:f9:aa:c3: 59:31:6e:43:7d:a1:d3:0c:ec:e2:7c:ee:e5:b0:b4: 40:12:3f:b8:31:ee:2f:9a:03:29:a9:95:ed:23:5b: 7a:c3:9d:63:e3:eb:78:c8:c7:5b:bc:2e:5a:6a:fd: 28:21:c9:77:cd:78:dd:f0:e9:e4:fd:7d:4c:41:12: c1:9b:80:12:1b:05:a9:71:e2:ed:73:93:73:e6:72: 48:34:e7:b1:d6:76:21:12:81:1c:67:10:20:1e:d4: 72:f4:42:00:21:68:2c:ba:a2:d7:f9:c9:56:d3:91: 7a:4e:e0:57:6a:20:6d:16:83:22:b6:ff:72:c7:54: 9d:3c:6c:a2:df:3c:46:ef:c7:46:db:61:57:ca:37: 04:a6:82:a0:45:8c:66:7f:0b:bb:1f:92:d8:24:9e: 76:1b:52:d3:2c:57:f4:de:8a:31:d1:38:8c:75:0e: 1d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7B:57:D4:C2:84:8E:31:E6:14:98:A9:60:6F:54:FF:2C:46:DE:45 X509v3 Authority Key Identifier: keyid:F0:63:95:56:CD:4D:4B:AD:69:FE:E0:D7:F2:29:B3:F7:45:CF:A9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/F0639556CD4D4BAD69FEE0D7F229B3F745CFA9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e4:65:b3:12:2a:a5:93:5c:97:33:1d:09:ad:d1:7c:e2:4f: 62:cd:e8:61:9f:3f:34:d6:f8:f5:ff:17:05:03:9d:f8:ef:50: 08:c8:6d:b5:75:20:31:d4:e2:64:38:91:d8:45:9b:65:d8:dd: d5:34:c6:81:76:1f:c7:21:3b:cc:70:41:5c:88:40:5a:60:0c: 7f:dd:76:9c:c1:5a:89:67:7a:93:54:46:9b:b2:48:58:3b:a8: 88:6b:59:0e:1b:dc:8c:40:32:81:e0:de:eb:f1:44:9c:76:ca: e9:40:58:a4:67:ad:ce:c0:f3:2f:f0:40:5b:e4:b1:9a:75:cf: 47:84:29:1e:92:80:00:bb:e7:a7:79:02:1a:9d:cc:db:c9:3d: 9d:67:ab:cb:52:96:0b:04:47:8a:31:75:4b:43:71:4d:b1:96: 11:87:4f:10:03:eb:ef:f9:a8:12:13:13:ca:f9:7d:57:f5:8c: a6:da:4f:4a:3e:5a:59:ed:a2:01:e2:86:9f:38:0a:18:4d:1f: 84:6d:fb:06:3a:a0:30:5d:50:40:4d:ca:a9:0a:42:69:64:6d: c4:ed:65:bf:24:44:fa:b7:15:d4:03:c8:e8:3a:a6:f4:8a:c8: 59:5a:64:bf:fc:aa:18:f0:c6:96:9c:1a:15:9b:3c:77:07:f7: 1d:59:ce:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBXL1iGRZ/SK0PM8vj/XA4c++VnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0 NUNGQTlFMDAeFw0yNjA1MTIyMDM3NTNaFw0yNjA1MTMyMTI5NTNaMDMxMTAvBgNV BAMTKEYxN0I1N0Q0QzI4NDhFMzFFNjE0OThBOTYwNkY1NEZGMkM0NkRFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/z29/PjdJc/0e8AYFzNy/n13v sdY0nuLr383/xpKXIEMajg7pholWJ5FcRaqlW/sF3oE+nJ7nIGJNgL8uMzfYITJD dvMTxq1IoltQ22+sUMCQH8PmcPmqw1kxbkN9odMM7OJ87uWwtEASP7gx7i+aAymp le0jW3rDnWPj63jIx1u8Llpq/SghyXfNeN3w6eT9fUxBEsGbgBIbBalx4u1zk3Pm ckg057HWdiESgRxnECAe1HL0QgAhaCy6otf5yVbTkXpO4FdqIG0WgyK2/3LHVJ08 bKLfPEbvx0bbYVfKNwSmgqBFjGZ/C7sfktgknnYbUtMsV/TeijHROIx1Dh1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8XtX1MKEjjHmFJipYG9U/yxG3kUwHwYDVR0j BBgwFoAU8GOVVs1NS61p/uDX8imz90XPqeAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQ4MWFjMDEtZjMwMi00NmVkLTllMWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZD RDRENEJBRDY5RkVFMEQ3RjIyOUIzRjc0NUNGQTlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDYzOTU1NkNENEQ0QkFENjlGRUUwRDdGMjI5QjNGNzQ1Q0ZB OUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvRjA2Mzk1NTZDRDRENEJBRDY5RkVFMEQ3RjIyOUIz Rjc0NUNGQTlFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHkZbMSKqWTXJczHQmt0XziT2LN6GGfPzTW +PX/FwUDnfjvUAjIbbV1IDHU4mQ4kdhFm2XY3dU0xoF2H8chO8xwQVyIQFpgDH/d dpzBWolnepNURpuySFg7qIhrWQ4b3IxAMoHg3uvxRJx2yulAWKRnrc7A8y/wQFvk sZp1z0eEKR6SgAC756d5AhqdzNvJPZ1nq8tSlgsER4oxdUtDcU2xlhGHTxAD6+/5 qBITE8r5fVf1jKbaT0o+WlntogHihp84ChhNH4Rt+wY6oDBdUEBNyqkKQmlkbcTt Zb8kRPq3FdQDyOg6pvSKyFlaZL/8qhjwxpacGhWbPHcH9x1ZzmE= -----END CERTIFICATE-----Generated at Wed May 13 03:15:40 2026 by rpki-client