$ rpki-client -vvf rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft File: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft (raw, json) Hash identifier: VAaAW1bu7eJ0N++wxVfYz35u0Gs1ZarhN/Opjmc+rCA= Subject key identifier: 5E:2C:65:09:FA:27:E0:14:49:49:1D:29:89:D0:25:3E:AA:48:FF:03 Authority key identifier: 02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E Certificate issuer: /CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Certificate serial: 753A1BDE9B130C8EC4F4C30C3729C29747FCD86C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:51:30 +0000 Manifest this update: Tue 12 May 2026 16:46:30 +0000 Manifest next update: Wed 13 May 2026 19:27:30 +0000 Files and hashes: 1: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl (hash: sxvqkdP2WfNSLNAzsXZ4Y3FPcz3MS/fSkwCnuQLEUtE=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: ZP3rmLF9cy6fjQhv3gmX6ZweiIwsNbdnkePWQCdw+7I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:3a:1b:de:9b:13:0c:8e:c4:f4:c3:0c:37:29:c2:97:47:fc:d8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E Validity Not Before: May 12 16:46:30 2026 GMT Not After : May 13 19:27:30 2026 GMT Subject: CN=5E2C6509FA27E01449491D2989D0253EAA48FF03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:89:53:2e:89:59:2a:ea:1d:9e:32:92:fa: 56:e8:2a:a2:a0:da:a0:08:1d:d5:ce:71:cf:7a:3b: ea:9c:1b:b8:84:4f:31:f0:92:2b:80:54:39:f2:fb: 47:ee:62:27:a5:dd:25:7b:5e:33:e1:6c:c0:49:fe: ab:8b:15:1a:b8:5e:30:1c:09:ee:b3:9b:2a:88:45: 5d:9f:bb:ff:05:dd:73:f3:ce:7f:5a:d3:6b:1f:3f: 76:ec:80:6b:1e:de:36:13:9e:13:b4:30:79:bb:50: db:ec:f1:73:49:9a:93:45:c0:dc:06:16:3f:3f:cb: 06:54:b5:b2:fb:43:36:3e:3a:1a:ea:3c:71:e0:bf: 05:ec:25:12:35:19:aa:65:42:59:69:48:88:47:93: 97:23:46:ad:d3:cd:4c:d2:3c:e9:25:df:b7:bc:33: 51:7c:c4:01:ae:d8:c5:12:48:ef:7d:51:d8:77:a4: ba:8f:e9:a8:b7:a5:5e:41:7c:b4:51:c5:3f:fc:11: ff:44:48:92:aa:28:5c:e8:21:9e:2b:c1:1f:e7:e9: d4:bd:3d:2a:32:e3:b2:d0:68:ac:8c:57:68:5b:5a: 3c:ae:be:96:6b:02:04:47:df:4b:4e:74:32:41:70: 86:10:7e:19:58:8f:2b:94:c6:1a:a3:06:56:3f:f5: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2C:65:09:FA:27:E0:14:49:49:1D:29:89:D0:25:3E:AA:48:FF:03 X509v3 Authority Key Identifier: keyid:02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:14:af:9f:13:cb:cb:a3:dc:db:24:3f:89:8e:f5:8a:0b:32: af:9e:16:24:e4:b8:a3:e0:95:ea:b1:0f:22:a3:d5:20:21:83: bf:2a:9b:01:bf:84:98:fb:d2:95:c2:71:6c:d0:2c:d0:b2:91: 7f:05:ff:98:53:45:42:a2:a0:4a:cd:14:21:74:6b:de:8b:da: f2:e2:31:56:b7:0d:76:1d:0c:eb:8c:8d:ff:4e:ef:de:52:84: 61:89:c9:71:b1:16:17:b5:a2:36:d8:fa:86:99:4c:27:22:06: e0:8e:dd:78:58:9e:20:cc:d3:d6:cb:a3:c6:c8:10:67:21:9c: ac:72:36:4a:e8:ce:46:21:43:89:c6:0f:3f:72:d9:6f:83:e0: 6b:ef:94:5f:79:de:24:fa:67:75:d5:4b:aa:10:5a:55:8c:64: 3c:95:fa:98:1e:8a:83:bb:ec:87:8a:d0:5d:cb:b6:bb:73:59: 34:4a:2b:40:a8:e2:ac:d3:d5:05:48:d8:80:48:16:21:19:16: 26:09:c3:9b:fe:57:69:5e:9b:a4:2e:83:0b:15:79:32:11:94: 85:a9:64:27:9a:38:f7:ce:9d:b6:63:6a:e3:6e:0f:1c:18:79: 1e:1d:cc:aa:d2:5f:c9:e7:4d:a1:73:a6:58:99:e5:db:e9:22: 09:1e:8a:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdTob3psTDI7E9MMMNynCl0f82GwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0QzFC ODFFOEIyRTAeFw0yNjA1MTIxNjQ2MzBaFw0yNjA1MTMxOTI3MzBaMDMxMTAvBgNV BAMTKDVFMkM2NTA5RkEyN0UwMTQ0OTQ5MUQyOTg5RDAyNTNFQUE0OEZGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XolTLolZKuodnjKS+lboKqKg 2qAIHdXOcc96O+qcG7iETzHwkiuAVDny+0fuYiel3SV7XjPhbMBJ/quLFRq4XjAc Ce6zmyqIRV2fu/8F3XPzzn9a02sfP3bsgGse3jYTnhO0MHm7UNvs8XNJmpNFwNwG Fj8/ywZUtbL7QzY+OhrqPHHgvwXsJRI1GaplQllpSIhHk5cjRq3TzUzSPOkl37e8 M1F8xAGu2MUSSO99Udh3pLqP6ai3pV5BfLRRxT/8Ef9ESJKqKFzoIZ4rwR/n6dS9 PSoy47LQaKyMV2hbWjyuvpZrAgRH30tOdDJBcIYQfhlYjyuUxhqjBlY/9T5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXixlCfon4BRJSR0pidAlPqpI/wMwHwYDVR0j BBgwFoAUAgQD9t1W8NXFLFk3tRekwbgeiy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmU5NTRmNDItOTQ1Mi00MjQ3LTk5YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZE RDU2RjBENUM1MkM1OTM3QjUxN0E0QzFCODFFOEIyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wMjA0MDNGNkRENTZGMEQ1QzUyQzU5MzdCNTE3QTRDMUI4MUU4 QjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvMDIwNDAzRjZERDU2RjBENUM1MkM1OTM3QjUxN0E0 QzFCODFFOEIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIUr58Ty8uj3NskP4mO9YoLMq+eFiTkuKPg leqxDyKj1SAhg78qmwG/hJj70pXCcWzQLNCykX8F/5hTRUKioErNFCF0a96L2vLi MVa3DXYdDOuMjf9O795ShGGJyXGxFhe1ojbY+oaZTCciBuCO3XhYniDM09bLo8bI EGchnKxyNkrozkYhQ4nGDz9y2W+D4GvvlF953iT6Z3XVS6oQWlWMZDyV+pgeioO7 7IeK0F3LtrtzWTRKK0Co4qzT1QVI2IBIFiEZFiYJw5v+V2lem6QugwsVeTIRlIWp ZCeaOPfOnbZjauNuDxwYeR4dzKrSX8nnTaFzpliZ5dvpIgkeijU= -----END CERTIFICATE-----Generated at Wed May 13 05:36:28 2026 by rpki-client