$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft File: F04BCF29E8A4983A7C61456338904B1D12249EF1.mft (raw, json) Hash identifier: A5ntirf0X1+YDIy2l5iwvJ79smeN+8w3EXkq9WM9lCk= Subject key identifier: DD:DB:47:A9:BF:FA:E5:90:F6:BB:83:71:F6:87:08:36:29:1D:69:81 Authority key identifier: F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 Certificate issuer: /CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Certificate serial: 72EB6BA843CDBF5DD09D1C624FBC3F357BC20D69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:01:32 +0000 Manifest this update: Tue 12 May 2026 19:56:32 +0000 Manifest next update: Wed 13 May 2026 21:19:32 +0000 Files and hashes: 1: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: dsheODTWGHgEtYMTRu3FdjV0KqJJ4H5IlLGKFzm1e00=) 2: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: LMBHCsJkYSf+3QotxJzINazyD8/H6U50nZHKQJfkTg8=) 3: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: 0cd+8qm0U1tfI3VsNlW2b6PTClHG9WiUWDTJUpKm65E=) 4: F04BCF29E8A4983A7C61456338904B1D12249EF1.crl (hash: E6Ic03lHG9sBrQ1M6LNfEGBBMsbUkRmm1fwTyMKiMrg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:eb:6b:a8:43:cd:bf:5d:d0:9d:1c:62:4f:bc:3f:35:7b:c2:0d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F04BCF29E8A4983A7C61456338904B1D12249EF1 Validity Not Before: May 12 19:56:32 2026 GMT Not After : May 13 21:19:32 2026 GMT Subject: CN=DDDB47A9BFFAE590F6BB8371F6870836291D6981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:b7:b9:63:61:6e:59:d1:8d:fb:9d:a5:00: 97:e8:fd:6a:35:6c:6b:da:b2:d4:3c:0c:1c:98:0d: 86:58:09:fc:93:22:22:e9:96:e3:04:6f:64:77:89: 19:d5:ed:dc:bf:1a:f0:b3:89:5d:d6:dd:49:4f:b0: a8:fa:dc:4a:8e:b4:5a:a5:b9:b4:67:54:36:52:f2: c4:71:ac:d1:b0:68:d2:f8:3a:02:4a:42:b3:0a:0a: c1:9b:c6:bf:dc:5d:d1:c3:de:9e:c0:aa:67:8f:41: 40:44:96:68:c1:76:4d:2d:a9:9c:59:86:47:ef:c3: ce:82:90:c4:bf:5d:80:81:b5:cd:18:77:6d:17:35: e7:2b:6e:86:5f:e7:f4:99:86:0a:94:5c:29:a8:74: 7f:cb:bb:c7:ad:90:0d:3d:84:74:f0:bb:c6:c5:95: 9e:6b:2b:0c:ea:0a:f1:0d:4e:9f:f3:9a:99:f9:88: 84:ee:0d:7a:51:9f:c8:ce:fa:04:24:24:df:97:05: 90:5a:fd:c3:c0:95:36:8f:9f:3d:5d:5a:36:0d:a1: a6:5c:5c:41:d8:02:d6:5c:e0:b2:50:74:32:f6:81: 11:e4:1d:f3:7b:98:75:63:74:6d:8d:93:bb:84:ea: 69:8c:0e:e3:f9:8e:1e:98:60:27:57:b1:6b:b2:78: ac:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DB:47:A9:BF:FA:E5:90:F6:BB:83:71:F6:87:08:36:29:1D:69:81 X509v3 Authority Key Identifier: keyid:F0:4B:CF:29:E8:A4:98:3A:7C:61:45:63:38:90:4B:1D:12:24:9E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/F04BCF29E8A4983A7C61456338904B1D12249EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c8:3c:fe:e7:64:d0:f1:2d:ee:de:2b:f2:bc:c5:20:c6:52: a7:ed:39:61:68:c2:9a:01:bd:13:9f:f4:37:3f:fc:bd:ae:82: e9:7e:28:c3:21:50:87:f2:25:84:3a:1a:60:13:77:46:86:73: 91:29:3f:7b:fb:05:5d:f9:aa:04:fb:49:82:98:f5:62:2d:7c: 4a:f5:60:8a:ff:93:5a:e5:ef:2b:4a:ae:be:98:3b:06:c5:43: 87:ad:a1:9e:b1:7f:e1:c6:51:e5:0c:21:4c:a2:f8:41:00:8d: f2:10:04:90:7a:19:e7:e4:26:22:64:03:f1:91:e0:b7:01:76: 37:cb:cd:b5:11:84:41:e0:2c:96:25:38:7a:0e:ea:dc:60:c3: c5:28:ed:79:56:54:c5:b6:2f:ce:98:73:aa:b3:33:d4:8c:ce: 75:ef:2d:da:32:2e:4e:7e:f1:ea:7e:7f:ba:e8:8a:83:c9:a6: 01:f6:89:a1:75:ae:f9:c5:98:01:03:87:ff:05:7e:d5:14:cd: 41:b1:27:5f:2f:72:20:a1:3a:ab:a3:12:b7:44:03:2c:50:09: e2:71:ab:ee:fa:a7:c7:b8:22:47:71:eb:f9:38:38:b8:d8:c0: 24:77:c2:f5:89:e4:a4:aa:c9:fe:fd:52:50:f0:e5:55:94:51: 10:85:66:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcutrqEPNv13QnRxiT7w/NXvCDWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQx MjI0OUVGMTAeFw0yNjA1MTIxOTU2MzJaFw0yNjA1MTMyMTE5MzJaMDMxMTAvBgNV BAMTKEREREI0N0E5QkZGQUU1OTBGNkJCODM3MUY2ODcwODM2MjkxRDY5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy27e5Y2FuWdGN+52lAJfo/Wo1 bGvastQ8DByYDYZYCfyTIiLpluMEb2R3iRnV7dy/GvCziV3W3UlPsKj63EqOtFql ubRnVDZS8sRxrNGwaNL4OgJKQrMKCsGbxr/cXdHD3p7AqmePQUBElmjBdk0tqZxZ hkfvw86CkMS/XYCBtc0Yd20XNecrboZf5/SZhgqUXCmodH/Lu8etkA09hHTwu8bF lZ5rKwzqCvENTp/zmpn5iITuDXpRn8jO+gQkJN+XBZBa/cPAlTaPnz1dWjYNoaZc XEHYAtZc4LJQdDL2gRHkHfN7mHVjdG2Nk7uE6mmMDuP5jh6YYCdXsWuyeKyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3dtHqb/65ZD2u4Nx9ocINikdaYEwHwYDVR0j BBgwFoAU8EvPKeikmDp8YUVjOJBLHRIknvEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBiZDdkNmMtZWE1YS00YzQ1LTk1NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlF OEE0OTgzQTdDNjE0NTYzMzg5MDRCMUQxMjI0OUVGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GMDRCQ0YyOUU4QTQ5ODNBN0M2MTQ1NjMzODkwNEIxRDEyMjQ5 RUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvRjA0QkNGMjlFOEE0OTgzQTdDNjE0NTYzMzg5MDRC MUQxMjI0OUVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHIPP7nZNDxLe7eK/K8xSDGUqftOWFowpoB vROf9Dc//L2ugul+KMMhUIfyJYQ6GmATd0aGc5EpP3v7BV35qgT7SYKY9WItfEr1 YIr/k1rl7ytKrr6YOwbFQ4etoZ6xf+HGUeUMIUyi+EEAjfIQBJB6GefkJiJkA/GR 4LcBdjfLzbURhEHgLJYlOHoO6txgw8Uo7XlWVMW2L86Yc6qzM9SMznXvLdoyLk5+ 8ep+f7roioPJpgH2iaF1rvnFmAEDh/8FftUUzUGxJ18vciChOqujErdEAyxQCeJx q+76p8e4Ikdx6/k4OLjYwCR3wvWJ5KSqyf79UlDw5VWUURCFZnw= -----END CERTIFICATE-----Generated at Wed May 13 01:36:05 2026 by rpki-client