$ rpki-client -vvf rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft File: F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft (raw, json) Hash identifier: k+WDTeT3I5sde2T7M23y34IfxnG3G/KogYQmGMocqSM= Subject key identifier: 29:67:4D:FB:18:FF:F2:20:80:AA:B3:DE:6F:D6:CE:28:5B:04:BD:EB Authority key identifier: F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A Certificate issuer: /CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A Certificate serial: 2F1C23AB85C193B37D8DC59B6A283B572579C6B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft Manifest number: 0F Signing time: Tue 12 May 2026 12:37:54 +0000 Manifest this update: Tue 12 May 2026 12:32:54 +0000 Manifest next update: Wed 13 May 2026 15:04:54 +0000 Files and hashes: 1: F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl (hash: Q/DQ0FfvbsyWz2zxUv/OcGnvAC4HmgM94Ak3shlGlGA=) 2: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: 5uk1HERYDmQXBZLbJ/kJf/ZrrSlNSnryrEUcrC7gRb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1c:23:ab:85:c1:93:b3:7d:8d:c5:9b:6a:28:3b:57:25:79:c6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F94811DCC5101F1CC6264D691A7E2FEE8D88678A Validity Not Before: May 12 12:32:54 2026 GMT Not After : May 13 15:04:54 2026 GMT Subject: CN=29674DFB18FFF22080AAB3DE6FD6CE285B04BDEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:b9:b7:0b:99:f2:1a:4d:49:de:dd:0d:2e: 59:58:cf:97:c2:29:9f:db:5c:b3:fb:17:7d:3d:b0: d3:8d:3d:f2:90:4d:08:38:3b:6f:31:13:1a:7c:cb: c9:fd:84:37:3d:e3:41:20:bc:83:0c:5f:f1:05:ca: ac:1a:f5:77:35:26:c9:d0:5a:20:49:c1:a9:7a:ab: 45:d4:d4:de:07:d5:a2:d5:b6:31:ab:78:af:3d:dd: 5e:3e:c8:fc:2d:46:0f:8d:a7:da:bf:d2:11:79:c6: 64:57:b7:8b:c5:2c:07:8b:b1:59:d5:9a:ab:4f:3f: 87:31:17:4f:a6:34:31:6c:ec:25:56:57:dc:6e:0e: 89:6e:6a:46:52:16:5e:38:b9:5e:16:dc:f1:3e:b1: a0:cc:f1:79:00:53:35:f5:e7:88:f9:ba:29:5f:73: ce:bf:65:6d:96:1d:a9:a8:27:76:ba:3e:33:5d:db: 87:f2:af:ed:25:18:ab:7f:28:3b:54:25:e3:65:14: 4a:a7:79:a6:94:71:4f:69:3c:c8:7b:f1:4f:48:fa: 64:a1:d2:2b:41:fa:b2:7f:04:9c:c3:50:c9:c8:d9: 37:59:22:3d:23:1a:10:08:d5:1d:6e:b7:42:07:8b: 0b:f4:17:fe:c0:e4:17:e9:b8:fe:fd:b4:7e:af:b3: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:67:4D:FB:18:FF:F2:20:80:AA:B3:DE:6F:D6:CE:28:5B:04:BD:EB X509v3 Authority Key Identifier: keyid:F9:48:11:DC:C5:10:1F:1C:C6:26:4D:69:1A:7E:2F:EE:8D:88:67:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/F94811DCC5101F1CC6264D691A7E2FEE8D88678A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8b:59:20:2a:13:f8:f4:a7:d3:b0:9f:5d:f1:d4:fa:4e:d4: 8a:26:e0:8e:2e:d3:65:a2:bf:94:8d:e9:a5:c3:15:b7:aa:9e: b4:08:b2:b5:81:0c:a4:b5:e8:52:46:db:fc:c9:0d:2f:dc:fc: 72:26:dd:63:e7:40:65:2d:87:32:be:ac:1f:34:d4:63:4c:9b: d8:d4:ad:e7:87:9f:8d:11:ae:fa:1f:26:ad:03:ab:20:e8:ed: 76:4d:a1:43:13:69:a0:69:00:80:a2:5e:2d:40:c0:78:e4:d9: f7:9c:14:86:8b:0a:91:3e:53:a6:0c:6f:ae:36:d2:cf:b9:c7: 8f:61:a8:49:9f:a5:5f:92:71:ae:8f:0c:3b:c7:7b:c7:11:f8: cd:cb:18:93:50:f5:4c:d7:e2:04:97:6a:c2:3d:9e:ea:a3:9b: 14:10:e3:23:77:b4:c6:d6:c0:22:4f:e6:24:a1:8c:e3:fc:95: a8:9c:8d:d7:f6:b2:b7:5d:91:89:e8:b8:ff:1b:a4:9d:c8:d0: 02:dd:fd:1f:34:3a:b1:57:eb:d0:64:d3:f2:4e:5b:72:2d:c6: 5a:22:d9:eb:04:82:e2:74:c6:07:23:e9:15:81:51:8e:f8:ed: f3:98:9a:21:63:4a:52:22:08:f3:29:83:61:0a:c7:b8:44:52: eb:be:3d:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxwjq4XBk7N9jcWbaig7VyV5xrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk0ODExRENDNTEwMUYxQ0M2MjY0RDY5MUE3RTJGRUU4 RDg4Njc4QTAeFw0yNjA1MTIxMjMyNTRaFw0yNjA1MTMxNTA0NTRaMDMxMTAvBgNV BAMTKDI5Njc0REZCMThGRkYyMjA4MEFBQjNERTZGRDZDRTI4NUIwNEJERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkLm3C5nyGk1J3t0NLllYz5fC KZ/bXLP7F309sNONPfKQTQg4O28xExp8y8n9hDc940EgvIMMX/EFyqwa9Xc1JsnQ WiBJwal6q0XU1N4H1aLVtjGreK893V4+yPwtRg+Np9q/0hF5xmRXt4vFLAeLsVnV mqtPP4cxF0+mNDFs7CVWV9xuDoluakZSFl44uV4W3PE+saDM8XkAUzX154j5uilf c86/ZW2WHamoJ3a6PjNd24fyr+0lGKt/KDtUJeNlFEqneaaUcU9pPMh78U9I+mSh 0itB+rJ/BJzDUMnI2TdZIj0jGhAI1R1ut0IHiwv0F/7A5BfpuP79tH6vs2fHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKWdN+xj/8iCAqrPeb9bOKFsEveswHwYDVR0j BBgwFoAU+UgR3MUQHxzGJk1pGn4v7o2IZ4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc1MGE2NTEtMWExYS00NTAxLWE4YmMtOTU5MWUxMTA5YTI3LzAvRjk0ODExREND NTEwMUYxQ0M2MjY0RDY5MUE3RTJGRUU4RDg4Njc4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTQ4MTFEQ0M1MTAxRjFDQzYyNjRENjkxQTdFMkZFRThEODg2 NzhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvRjk0ODExRENDNTEwMUYxQ0M2MjY0RDY5MUE3RTJG RUU4RDg4Njc4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyLWSAqE/j0p9Own13x1PpO1Iom4I4u02Wi v5SN6aXDFbeqnrQIsrWBDKS16FJG2/zJDS/c/HIm3WPnQGUthzK+rB801GNMm9jU reeHn40RrvofJq0DqyDo7XZNoUMTaaBpAICiXi1AwHjk2fecFIaLCpE+U6YMb642 0s+5x49hqEmfpV+Sca6PDDvHe8cR+M3LGJNQ9UzX4gSXasI9nuqjmxQQ4yN3tMbW wCJP5iShjOP8laicjdf2srddkYnouP8bpJ3I0ALd/R80OrFX69Bk0/JOW3Itxloi 2esEguJ0xgcj6RWBUY747fOYmiFjSlIiCPMpg2EKx7hEUuu+PfM= -----END CERTIFICATE-----Generated at Wed May 13 05:38:23 2026 by rpki-client