$ rpki-client -vvf rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft File: F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft (raw, json) Hash identifier: Bs5xlfzGDDxTqHL4Nug9ZDcFIvwfoVtXSnOIoDi1tf0= Subject key identifier: 3C:25:96:F8:A4:85:F1:85:41:73:E7:7E:76:FF:35:55:81:9F:6F:C7 Authority key identifier: F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A Certificate issuer: /CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Certificate serial: 3E96317F201DE99B248280FF5F8CD6E3127B2B98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:45:12 +0000 Manifest this update: Tue 12 May 2026 08:40:12 +0000 Manifest next update: Wed 13 May 2026 11:54:12 +0000 Files and hashes: 1: F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl (hash: R43UznvY6X93ZcszsEa+S7JOsemub7nn1a68S61P0ng=) 2: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: flDV5K/ive1Rwnl32LWTGzTgFkO/6NW2VyWJuvq91wM=) 3: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 7OSCFLUdX4lh+HkqQPpzAOQL/79FpKE5+vtT3xavcbw=) 4: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: fo8MmYgXBnl7zH/vNSXcllZSUFn1f4iPYfENu7NLLp8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:96:31:7f:20:1d:e9:9b:24:82:80:ff:5f:8c:d6:e3:12:7b:2b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2958561973CA692FEFCE665E5EAE67C627CDA6A Validity Not Before: May 12 08:40:12 2026 GMT Not After : May 13 11:54:12 2026 GMT Subject: CN=3C2596F8A485F1854173E77E76FF3555819F6FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:28:48:a7:29:47:fb:96:dc:cc:7f:00:f4: 58:28:8b:49:c1:1f:75:37:de:0a:81:a3:c4:7a:b8: bd:4a:6c:02:0c:08:69:88:4a:b3:18:59:c3:f0:38: d2:6e:7f:6e:77:20:92:28:f5:1a:be:c9:4f:c5:07: b8:7f:e1:ff:c1:ef:5a:76:07:0e:ac:68:bc:49:b6: 80:25:e0:41:f4:59:42:16:1c:39:c6:a5:a5:9b:c9: de:24:73:78:06:92:53:ea:a2:a7:68:2d:94:75:6f: c7:d8:db:6d:6a:42:8d:f5:46:64:20:5b:0f:1f:89: 02:af:db:56:44:ae:78:48:76:96:55:4f:8a:11:68: 8f:76:56:1b:cc:18:7c:a6:dc:e2:99:c0:c7:2e:e4: dd:01:2d:33:62:55:f1:7e:14:b5:30:a2:a7:5f:09: fd:db:c8:ee:b6:3f:12:9e:c3:14:f8:af:58:31:f6: d2:ac:e4:3b:e5:46:90:9b:18:ca:d3:b5:a4:34:1c: de:65:8d:12:6e:7b:66:6b:ae:cf:c9:67:b1:0f:12: 32:93:4a:a5:d9:f7:ed:e6:9e:75:b0:a8:f9:44:fb: 03:6d:6c:1d:8e:cb:d7:e7:c0:e8:dd:38:95:7d:e8: 0b:b5:61:0a:ab:ff:34:67:07:21:b1:81:33:6a:a9: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:25:96:F8:A4:85:F1:85:41:73:E7:7E:76:FF:35:55:81:9F:6F:C7 X509v3 Authority Key Identifier: keyid:F2:95:85:61:97:3C:A6:92:FE:FC:E6:65:E5:EA:E6:7C:62:7C:DA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2958561973CA692FEFCE665E5EAE67C627CDA6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/F2958561973CA692FEFCE665E5EAE67C627CDA6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6f:14:ed:0e:c8:d4:df:6d:ef:3a:b1:04:5e:4f:36:64:68: d3:26:29:68:91:13:39:54:94:b5:ab:34:89:ed:63:5a:a4:df: 67:7d:8e:05:f5:61:42:06:92:44:67:a7:8f:28:e0:d3:98:e0: c3:2d:c2:0c:5d:4c:eb:d0:45:d0:ee:fa:ad:a1:00:6d:62:ee: 14:9c:ae:8e:9e:79:34:0b:46:03:b5:8a:ab:e2:4a:c5:d5:af: 23:48:f1:b0:37:94:7a:a9:d9:39:2e:f1:e7:5a:e3:ba:98:10: af:c3:92:5d:e8:d3:e9:9e:b9:30:1c:dc:0f:8f:65:1a:e6:8f: e4:ab:99:29:38:d3:9d:ac:b6:93:af:1e:be:ed:84:6b:fc:ad: 83:0d:72:d2:cf:fc:a6:92:3b:da:c9:74:d6:46:3b:ad:34:e6: 36:84:39:24:53:92:83:b2:15:35:25:9a:30:7b:52:f7:d6:e0: b1:f1:e8:26:60:29:50:e9:0f:15:97:de:60:c6:b6:65:18:7c: 20:28:7b:ed:90:fe:0e:b0:35:f0:b5:61:d8:96:34:97:9a:18: a9:98:f7:9c:e9:42:5f:b1:31:fd:26:5b:4e:08:29:8a:a2:e9: 5e:dd:af:ac:49:8d:a2:98:2e:16:ee:78:f8:30:9d:3e:e3:21: 87:5f:f0:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPpYxfyAd6ZskgoD/X4zW4xJ7K5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2 MjdDREE2QTAeFw0yNjA1MTIwODQwMTJaFw0yNjA1MTMxMTU0MTJaMDMxMTAvBgNV BAMTKDNDMjU5NkY4QTQ4NUYxODU0MTczRTc3RTc2RkYzNTU1ODE5RjZGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94yhIpylH+5bczH8A9Fgoi0nB H3U33gqBo8R6uL1KbAIMCGmISrMYWcPwONJuf253IJIo9Rq+yU/FB7h/4f/B71p2 Bw6saLxJtoAl4EH0WUIWHDnGpaWbyd4kc3gGklPqoqdoLZR1b8fY221qQo31RmQg Ww8fiQKv21ZErnhIdpZVT4oRaI92VhvMGHym3OKZwMcu5N0BLTNiVfF+FLUwoqdf Cf3byO62PxKewxT4r1gx9tKs5DvlRpCbGMrTtaQ0HN5ljRJue2Zrrs/JZ7EPEjKT SqXZ9+3mnnWwqPlE+wNtbB2Oy9fnwOjdOJV96Au1YQqr/zRnByGxgTNqqbf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPCWW+KSF8YVBc+d+dv81VYGfb8cwHwYDVR0j BBgwFoAU8pWFYZc8ppL+/OZl5ermfGJ82mowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmE1YjRmYTQtMzI4Yy00Y2YyLWFkZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5 NzNDQTY5MkZFRkNFNjY1RTVFQUU2N0M2MjdDREE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjk1ODU2MTk3M0NBNjkyRkVGQ0U2NjVFNUVBRTY3QzYyN0NE QTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvRjI5NTg1NjE5NzNDQTY5MkZFRkNFNjY1RTVFQUU2 N0M2MjdDREE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpvFO0OyNTfbe86sQReTzZkaNMmKWiREzlU lLWrNIntY1qk32d9jgX1YUIGkkRnp48o4NOY4MMtwgxdTOvQRdDu+q2hAG1i7hSc ro6eeTQLRgO1iqviSsXVryNI8bA3lHqp2Tku8eda47qYEK/Dkl3o0+meuTAc3A+P ZRrmj+SrmSk4052stpOvHr7thGv8rYMNctLP/KaSO9rJdNZGO6005jaEOSRTkoOy FTUlmjB7UvfW4LHx6CZgKVDpDxWX3mDGtmUYfCAoe+2Q/g6wNfC1YdiWNJeaGKmY 95zpQl+xMf0mW04IKYqi6V7dr6xJjaKYLhbuePgwnT7jIYdf8HA= -----END CERTIFICATE-----Generated at Tue May 12 22:13:39 2026 by rpki-client