$ rpki-client -vvf rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft File: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft (raw, json) Hash identifier: YiPMYFgppqe8IgkVlgSZvS+3e2gAOy6X4MDIS0MtGmk= Subject key identifier: F3:C6:4B:49:CD:63:9A:D8:C8:5E:7C:EE:68:AF:1C:57:50:97:5F:74 Authority key identifier: F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66 Certificate issuer: /CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66 Certificate serial: 21E73B64F37C98CE4966D54F47CD0709C29D8BB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:30:54 +0000 Manifest this update: Tue 12 May 2026 05:25:54 +0000 Manifest next update: Wed 13 May 2026 06:01:54 +0000 Files and hashes: 1: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: DqAUm2wLHLNRnDbxFq/jWHGUwe2MyEl+bvqGOAsq72E=) 2: F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl (hash: 13kABDqFUBYMMVK0OVCRFmHb+ZJNtY/kv4+Wi8aRJ20=) 3: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: 8Sm96rQ6aSwCPk5mVNqfQrN2fu8Vfn3gi0Ga1Q4lxng=) 4: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: AHVlvng9Z0LDTNFIvpzOk+vavuEbGESP0OquAHkXQg4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e7:3b:64:f3:7c:98:ce:49:66:d5:4f:47:cd:07:09:c2:9d:8b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66 Validity Not Before: May 12 05:25:54 2026 GMT Not After : May 13 06:01:54 2026 GMT Subject: CN=F3C64B49CD639AD8C85E7CEE68AF1C5750975F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bf:aa:a6:13:96:17:3d:5d:bb:a2:05:a1:3b: 90:87:e2:41:a2:08:16:8f:e2:3d:47:0d:40:f5:94: 7f:2f:49:ae:a6:48:51:68:ba:62:09:ec:1e:91:8a: 0e:60:e8:6f:2c:76:ab:88:a2:a7:2a:84:81:28:40: 02:39:05:66:8b:1f:c3:17:e5:f8:7e:1d:06:0c:c4: c6:d5:06:32:4c:99:b4:60:7b:e3:dd:81:a1:f4:27: d4:49:37:d3:c7:04:56:02:82:4e:cb:f8:0f:34:39: 81:5e:06:f1:46:7a:21:0d:90:ba:e2:9a:e4:79:46: 26:5a:35:08:ee:97:22:12:bb:bf:87:d7:0f:67:47: 8e:81:a0:8e:ca:33:9f:be:3a:0a:e0:e9:d4:86:9f: dc:4a:bb:c1:84:32:2f:d0:51:c1:c7:8c:75:cb:a3: 00:53:23:38:2c:0c:88:9b:58:31:c6:df:67:7f:38: e1:04:66:36:fd:7a:1b:19:c6:97:47:60:87:07:14: 74:b8:d6:ff:1c:8d:7e:57:c7:10:fb:68:0f:7a:f0: 3d:0d:9c:92:1b:21:3d:13:09:2b:b6:33:a8:50:f1: 0d:3b:b0:74:3f:5b:69:43:0d:5e:7f:50:46:53:72: 6f:6a:a9:0e:62:31:88:9a:34:48:5a:6c:5e:b4:06: 32:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C6:4B:49:CD:63:9A:D8:C8:5E:7C:EE:68:AF:1C:57:50:97:5F:74 X509v3 Authority Key Identifier: keyid:F2:E1:9D:B4:C9:E2:49:1D:3C:DE:40:63:FE:F6:6E:3F:7A:3C:1D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/F2E19DB4C9E2491D3CDE4063FEF66E3F7A3C1D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:35:a6:5d:82:aa:b4:42:85:be:85:ba:60:94:fb:56:fc:2d: 10:84:cc:c9:a1:e8:d2:f2:ea:68:68:00:06:f9:46:fd:f5:41: 34:6a:4b:7c:c9:68:f0:fa:1b:bf:ac:35:ca:c9:8c:f4:6a:39: 9d:fd:d3:50:3a:16:4b:c3:0c:57:0a:e9:d2:ee:bf:88:d4:88: 65:dd:da:75:97:ab:89:a7:82:25:4e:14:37:f7:01:6d:21:f5: 58:e8:50:4a:26:14:67:f8:96:29:02:a8:fb:77:ca:cd:66:06: 9e:6e:18:43:1f:66:e3:d6:2b:7d:f7:0e:66:7c:45:7a:c6:4c: 01:7e:ed:94:1a:3b:22:75:38:d2:86:ea:a4:c4:78:9d:51:5a: 91:d4:58:d3:29:83:26:09:a7:75:cd:4e:73:5e:bd:19:d0:dc: 94:af:b0:c6:51:21:eb:01:05:0e:ee:f7:5c:c7:f2:e8:34:d9: 61:97:db:3d:cf:95:a2:c7:ed:4c:39:91:64:42:e8:dc:20:90: ea:13:e8:31:5e:15:d1:1d:c7:98:7c:69:fc:a4:0b:38:ba:35: 61:ff:1f:c1:7b:f1:93:8b:31:a4:fc:62:78:31:33:6a:ce:64: a7:dd:f1:46:f7:7b:a1:76:56:03:df:d6:88:e8:0b:ad:ab:bf: 0a:3d:e5:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIec7ZPN8mM5JZtVPR80HCcKdi7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFMTlEQjRDOUUyNDkxRDNDREU0MDYzRkVGNjZFM0Y3 QTNDMUQ2NjAeFw0yNjA1MTIwNTI1NTRaFw0yNjA1MTMwNjAxNTRaMDMxMTAvBgNV BAMTKEYzQzY0QjQ5Q0Q2MzlBRDhDODVFN0NFRTY4QUYxQzU3NTA5NzVGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdv6qmE5YXPV27ogWhO5CH4kGi CBaP4j1HDUD1lH8vSa6mSFFoumIJ7B6Rig5g6G8sdquIoqcqhIEoQAI5BWaLH8MX 5fh+HQYMxMbVBjJMmbRge+PdgaH0J9RJN9PHBFYCgk7L+A80OYFeBvFGeiENkLri muR5RiZaNQjulyISu7+H1w9nR46BoI7KM5++Ogrg6dSGn9xKu8GEMi/QUcHHjHXL owBTIzgsDIibWDHG32d/OOEEZjb9ehsZxpdHYIcHFHS41v8cjX5XxxD7aA968D0N nJIbIT0TCSu2M6hQ8Q07sHQ/W2lDDV5/UEZTcm9qqQ5iMYiaNEhabF60BjKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU88ZLSc1jmtjIXnzuaK8cV1CXX3QwHwYDVR0j BBgwFoAU8uGdtMniSR083kBj/vZuP3o8HWYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmFhNmE2N2QtY2JhMy00MjdiLTkwNTUtNWY1MjhmMmQyMzJmLzAvRjJFMTlEQjRD OUUyNDkxRDNDREU0MDYzRkVGNjZFM0Y3QTNDMUQ2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMkUxOURCNEM5RTI0OTFEM0NERTQwNjNGRUY2NkUzRjdBM0Mx RDY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvRjJFMTlEQjRDOUUyNDkxRDNDREU0MDYzRkVGNjZF M0Y3QTNDMUQ2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABw1pl2CqrRChb6FumCU+1b8LRCEzMmh6NLy 6mhoAAb5Rv31QTRqS3zJaPD6G7+sNcrJjPRqOZ3901A6FkvDDFcK6dLuv4jUiGXd 2nWXq4mngiVOFDf3AW0h9VjoUEomFGf4likCqPt3ys1mBp5uGEMfZuPWK333DmZ8 RXrGTAF+7ZQaOyJ1ONKG6qTEeJ1RWpHUWNMpgyYJp3XNTnNevRnQ3JSvsMZRIesB BQ7u91zH8ug02WGX2z3PlaLH7Uw5kWRC6NwgkOoT6DFeFdEdx5h8afykCzi6NWH/ H8F78ZOLMaT8YngxM2rOZKfd8Ub3e6F2VgPf1ojoC62rvwo95cA= -----END CERTIFICATE-----Generated at Tue May 12 22:13:20 2026 by rpki-client