$ rpki-client -vvf rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft File: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft (raw, json) Hash identifier: TRdfcfL5d4pKKcFDb/QFTw2ceCe9yb5xA2zJ7FufyO4= Subject key identifier: 7D:2F:84:FB:33:48:76:B4:63:27:9B:4E:16:CE:ED:6D:DE:BA:7D:DE Authority key identifier: F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE Certificate issuer: /CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Certificate serial: 4C34DA839AF0372DA3D0A286399520A3F7C48C9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:39:01 +0000 Manifest this update: Tue 12 May 2026 07:34:01 +0000 Manifest next update: Wed 13 May 2026 10:08:01 +0000 Files and hashes: 1: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: Mq8DWbeqyF5RASCP8QKF1wsfTOXfn4M5I7xbRWlSkvI=) 2: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: +8ziEowYwDOL6fJKnsKsHl4XsowErxzBKUzz7/GWBlo=) 3: F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl (hash: XYCMCHHkYGbBpOXsU1xpuyoDv57sOfr486diQ92WoCY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:34:da:83:9a:f0:37:2d:a3:d0:a2:86:39:95:20:a3:f7:c4:8c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE Validity Not Before: May 12 07:34:01 2026 GMT Not After : May 13 10:08:01 2026 GMT Subject: CN=7D2F84FB334876B463279B4E16CEED6DDEBA7DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:df:13:41:c7:49:77:3b:96:7c:cc:24:19:46: b8:84:5e:2f:a9:5d:9b:2e:90:cd:33:ab:3f:76:39: 23:52:71:8a:2f:5b:01:70:fc:1f:0c:66:99:9d:fc: 64:80:c3:33:f3:84:80:5f:ca:7e:ee:a8:76:16:34: d5:9c:72:a6:37:61:2b:9d:9b:7a:ef:f0:d0:14:3a: e3:95:29:55:8c:fe:7e:be:37:4e:e8:ce:03:2e:1f: a8:f0:9a:44:2d:79:1d:2f:c2:f3:23:c5:61:fa:b2: 10:c3:9d:58:a7:3e:06:7c:b2:46:fc:e0:9c:03:ac: cf:b2:f4:0c:c6:c4:4d:a1:e9:f5:78:2d:25:ca:0e: 00:fd:25:a4:a8:bd:00:84:71:85:e1:36:a8:6d:53: 87:c4:a8:52:08:de:11:07:89:e2:ed:0b:4d:ee:81: c5:10:c4:f1:22:94:25:9f:59:6d:10:40:f3:98:f0: 62:f7:49:43:e3:9e:01:0e:66:6c:13:b6:25:60:c4: 71:28:d1:32:6f:60:61:64:8a:ad:4c:48:87:ec:0d: 1c:f3:d5:db:8a:b9:23:b3:79:a5:5d:54:3c:43:8e: c9:2c:1d:a3:6e:9b:80:5d:1f:67:74:87:e2:a5:fc: 3e:c7:6e:2a:31:5b:10:9c:fd:bf:a2:71:2a:bb:17: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2F:84:FB:33:48:76:B4:63:27:9B:4E:16:CE:ED:6D:DE:BA:7D:DE X509v3 Authority Key Identifier: keyid:F2:83:60:78:1F:A2:DA:6B:A2:F9:82:CB:9E:34:C0:DB:10:D2:F4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/F28360781FA2DA6BA2F982CB9E34C0DB10D2F4DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d5:d4:8a:f0:be:16:b0:1f:58:30:62:50:d2:93:4e:70:a5: 54:a3:3f:1a:05:c0:54:8e:c3:08:70:e8:b8:11:cc:60:91:37: 3f:9a:b4:22:e0:3d:eb:1f:83:d9:da:de:fa:d3:2c:b7:e1:2e: 19:c5:79:7d:f6:6f:c5:6d:91:ae:31:cb:5e:b2:f5:cc:07:b0: 86:dd:1a:f9:9b:75:1c:23:ef:10:e1:e2:53:76:9c:5d:42:31: 8a:ad:01:45:e3:a0:83:57:64:8d:1a:bf:6a:6c:eb:1a:7d:4b: 8c:a8:56:4e:6d:6b:8f:ce:39:c4:4a:18:e7:2f:c9:91:08:74: fb:f1:42:a9:29:e0:76:c7:00:32:7b:21:8c:48:8f:36:0b:1b: 28:d6:85:9b:20:2e:28:57:ad:79:de:4f:50:4a:ac:04:f6:c2: d1:57:6c:d0:1c:01:48:4c:c0:d4:51:36:56:98:d0:3b:83:57: 15:a4:40:f6:3e:f3:ef:a3:5b:f0:70:e8:00:30:1b:81:6a:46: 93:87:0c:04:e4:a5:09:c1:fe:43:1e:b0:3f:2b:9d:51:c4:ce: ae:d6:ae:73:02:26:fa:a6:c0:0b:71:87:12:5e:0b:60:3c:d4: 32:87:65:7d:ff:8c:b8:7e:42:76:d4:b3:21:64:49:5b:2b:51: 9f:b9:cf:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTDTag5rwNy2j0KKGOZUgo/fEjJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMwREIx MEQyRjRERTAeFw0yNjA1MTIwNzM0MDFaFw0yNjA1MTMxMDA4MDFaMDMxMTAvBgNV BAMTKDdEMkY4NEZCMzM0ODc2QjQ2MzI3OUI0RTE2Q0VFRDZEREVCQTdEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ3xNBx0l3O5Z8zCQZRriEXi+p XZsukM0zqz92OSNScYovWwFw/B8MZpmd/GSAwzPzhIBfyn7uqHYWNNWccqY3YSud m3rv8NAUOuOVKVWM/n6+N07ozgMuH6jwmkQteR0vwvMjxWH6shDDnVinPgZ8skb8 4JwDrM+y9AzGxE2h6fV4LSXKDgD9JaSovQCEcYXhNqhtU4fEqFII3hEHieLtC03u gcUQxPEilCWfWW0QQPOY8GL3SUPjngEOZmwTtiVgxHEo0TJvYGFkiq1MSIfsDRzz 1duKuSOzeaVdVDxDjsksHaNum4BdH2d0h+Kl/D7HbioxWxCc/b+icSq7F8WxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfS+E+zNIdrRjJ5tOFs7tbd66fd4wHwYDVR0j BBgwFoAU8oNgeB+i2mui+YLLnjTA2xDS9N4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGY5YmY3OTctOTEzZC00OGRkLTgzMmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgx RkEyREE2QkEyRjk4MkNCOUUzNEMwREIxMEQyRjRERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjgzNjA3ODFGQTJEQTZCQTJGOTgyQ0I5RTM0QzBEQjEwRDJG NERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvRjI4MzYwNzgxRkEyREE2QkEyRjk4MkNCOUUzNEMw REIxMEQyRjRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLV1IrwvhawH1gwYlDSk05wpVSjPxoFwFSO wwhw6LgRzGCRNz+atCLgPesfg9na3vrTLLfhLhnFeX32b8Vtka4xy16y9cwHsIbd GvmbdRwj7xDh4lN2nF1CMYqtAUXjoINXZI0av2ps6xp9S4yoVk5ta4/OOcRKGOcv yZEIdPvxQqkp4HbHADJ7IYxIjzYLGyjWhZsgLihXrXneT1BKrAT2wtFXbNAcAUhM wNRRNlaY0DuDVxWkQPY+8++jW/Bw6AAwG4FqRpOHDATkpQnB/kMesD8rnVHEzq7W rnMCJvqmwAtxhxJeC2A81DKHZX3/jLh+QnbUsyFkSVsrUZ+5zyU= -----END CERTIFICATE-----Generated at Tue May 12 22:47:16 2026 by rpki-client