$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft File: F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft (raw, json) Hash identifier: OvcJE9Ad27dpT081CwxtclWDga2jvR+zE0TXBbfiDKk= Subject key identifier: 3F:33:65:5A:BB:BE:DF:AD:33:A7:8A:0B:B3:6D:30:5B:8A:35:F8:9F Authority key identifier: F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A Certificate issuer: /CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A Certificate serial: 60FF44906B055C90304F7A21B1F0DF38FFB1878D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:40:14 +0000 Manifest this update: Tue 12 May 2026 15:35:14 +0000 Manifest next update: Wed 13 May 2026 16:27:14 +0000 Files and hashes: 1: 3130332e3133352e32342e302f32332d3234203d3e20313331363939.roa (hash: 07viVR7x7xC+LRLwxX1MyeHpdtbWCRULeR9H9eZeyfE=) 2: F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl (hash: tDMtCiYYu1JWt4RG1XzWky3Yov7FWMr5QRDIxllzyiU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ff:44:90:6b:05:5c:90:30:4f:7a:21:b1:f0:df:38:ff:b1:87:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F99FBCC0D7C1AA4794D95D70641B9011ABA2979A Validity Not Before: May 12 15:35:14 2026 GMT Not After : May 13 16:27:14 2026 GMT Subject: CN=3F33655ABBBEDFAD33A78A0BB36D305B8A35F89F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:8e:42:7e:f5:f1:fa:4d:0a:a0:b5:83:73: 99:5f:c5:69:05:e3:d8:98:16:fc:fe:f4:78:fd:41: 89:9f:18:a8:d1:27:43:7b:fe:ed:ae:76:a4:3e:4e: 43:05:64:16:f1:4d:d5:04:3a:8a:86:e6:d8:f7:1f: 1b:d6:10:ac:bc:4a:28:cb:dd:7b:ec:9a:64:30:0b: b2:96:98:2f:0c:15:cb:8b:57:b6:ae:50:76:5f:cd: 53:83:f3:39:2e:b9:69:28:f9:69:61:65:55:53:9b: 51:b4:bd:36:fe:23:a4:33:a3:cf:ff:4a:65:6a:84: 50:3e:d1:18:44:f0:92:8e:6a:4b:3f:c9:29:88:cc: 2e:de:04:52:97:b0:01:aa:5f:69:d0:89:fc:00:ad: ec:46:1b:65:7e:a1:b8:1b:93:21:c4:42:6e:74:a1: ec:e3:08:37:1f:c8:56:aa:79:d3:a5:1a:27:24:a7: de:74:10:d5:dd:8f:aa:95:3a:49:a1:5c:b8:d1:c1: 81:4b:e6:f0:96:a6:93:b2:16:92:e0:62:8d:1a:bb: 56:6f:f0:2a:f9:73:ef:4b:75:b4:45:0d:45:41:ca: 8d:b8:cc:38:26:d2:15:dc:8f:a1:bd:3f:6d:9f:ec: 51:b0:22:bd:ea:69:45:66:48:e9:4b:1b:18:7c:27: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:33:65:5A:BB:BE:DF:AD:33:A7:8A:0B:B3:6D:30:5B:8A:35:F8:9F X509v3 Authority Key Identifier: keyid:F9:9F:BC:C0:D7:C1:AA:47:94:D9:5D:70:64:1B:90:11:AB:A2:97:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/F99FBCC0D7C1AA4794D95D70641B9011ABA2979A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c4:d5:1f:56:bf:ad:e8:05:40:bb:71:63:8d:29:b4:2b:76: 93:e5:fd:67:3d:f3:b8:46:f9:d6:9c:2d:d3:78:df:c2:be:ff: 64:16:d3:7a:b4:96:01:a1:62:c1:87:8d:af:17:6d:41:57:91: be:d3:7f:08:bf:46:5f:b2:96:1c:1a:91:2f:4e:46:13:21:e3: 80:0d:6a:ce:61:01:19:56:67:71:0f:69:3f:e1:a6:04:2d:76: 1c:8b:6a:99:c9:fd:2f:ad:dc:ba:ee:b0:c3:6b:e0:3a:df:fb: e2:68:6e:42:85:5f:60:08:76:10:ea:bb:4b:81:0b:0c:eb:52: ef:47:92:ed:b4:7f:4f:87:6b:04:d1:56:73:a6:5a:19:cc:40: 7c:51:25:5a:21:ec:ff:6d:21:27:8f:37:8c:d2:10:d0:cb:a1: e7:7c:1b:59:6f:20:c3:a3:6b:f2:44:0c:49:b9:f4:0e:ce:93: cb:b1:b7:3c:d7:91:14:8a:d1:4a:56:85:6a:24:ba:fd:36:35: fe:7c:04:6b:56:21:3a:f6:c7:ea:4c:f9:e0:cc:c1:57:28:c0: 61:47:b7:5f:c7:3f:d9:a6:61:61:ae:f7:a6:f7:58:db:03:1d: b8:b7:f7:52:99:18:39:bd:2d:3e:43:8b:2f:40:f7:64:12:81: 39:39:7b:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYP9EkGsFXJAwT3ohsfDfOP+xh40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5RkJDQzBEN0MxQUE0Nzk0RDk1RDcwNjQxQjkwMTFB QkEyOTc5QTAeFw0yNjA1MTIxNTM1MTRaFw0yNjA1MTMxNjI3MTRaMDMxMTAvBgNV BAMTKDNGMzM2NTVBQkJCRURGQUQzM0E3OEEwQkIzNkQzMDVCOEEzNUY4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2o5CfvXx+k0KoLWDc5lfxWkF 49iYFvz+9Hj9QYmfGKjRJ0N7/u2udqQ+TkMFZBbxTdUEOoqG5tj3HxvWEKy8SijL 3XvsmmQwC7KWmC8MFcuLV7auUHZfzVOD8zkuuWko+WlhZVVTm1G0vTb+I6Qzo8// SmVqhFA+0RhE8JKOaks/ySmIzC7eBFKXsAGqX2nQifwArexGG2V+obgbkyHEQm50 oezjCDcfyFaqedOlGickp950ENXdj6qVOkmhXLjRwYFL5vCWppOyFpLgYo0au1Zv 8Cr5c+9LdbRFDUVByo24zDgm0hXcj6G9P22f7FGwIr3qaUVmSOlLGxh8J1o3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPzNlWru+360zp4oLs20wW4o1+J8wHwYDVR0j BBgwFoAU+Z+8wNfBqkeU2V1wZBuQEauil5owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM5NDFmYmQtYWQ0MC00MzI3LTkzZDYtOGU3OTcyM2ZkYjQ0LzAvRjk5RkJDQzBE N0MxQUE0Nzk0RDk1RDcwNjQxQjkwMTFBQkEyOTc5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTlGQkNDMEQ3QzFBQTQ3OTREOTVENzA2NDFCOTAxMUFCQTI5 NzlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvRjk5RkJDQzBEN0MxQUE0Nzk0RDk1RDcwNjQxQjkw MTFBQkEyOTc5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALE1R9Wv63oBUC7cWONKbQrdpPl/Wc987hG +dacLdN438K+/2QW03q0lgGhYsGHja8XbUFXkb7Tfwi/Rl+ylhwakS9ORhMh44AN as5hARlWZ3EPaT/hpgQtdhyLapnJ/S+t3LrusMNr4Drf++JobkKFX2AIdhDqu0uB CwzrUu9Hku20f0+HawTRVnOmWhnMQHxRJVoh7P9tISePN4zSENDLoed8G1lvIMOj a/JEDEm59A7Ok8uxtzzXkRSK0UpWhWokuv02Nf58BGtWITr2x+pM+eDMwVcowGFH t1/HP9mmYWGu96b3WNsDHbi391KZGDm9LT5Diy9A92QSgTk5e4I= -----END CERTIFICATE-----Generated at Wed May 13 02:59:16 2026 by rpki-client