$ rpki-client -vvf rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft File: 0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft (raw, json) Hash identifier: qdj0eYXJsRbjzhOv/7sJvGlamFnrL6/0yhw8Mz5ffcs= Subject key identifier: 68:F4:08:BF:3B:EF:11:CC:C5:E5:C2:67:30:7B:59:7E:4E:61:75:AA Authority key identifier: 0C:1E:C4:D6:BE:1D:7A:19:2B:A6:D1:88:CA:0C:75:70:E5:D7:6C:EC Certificate issuer: /CN=0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC Certificate serial: 3375CCAB87EEE7826465B22E83637C89235BE5A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 07:31:58 +0000 Manifest this update: Wed 17 Jun 2026 07:26:58 +0000 Manifest next update: Thu 18 Jun 2026 07:53:58 +0000 Files and hashes: 1: 0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl (hash: o5jgO5P0eq7jUVtx/BCU76z9Hso2B54DYhDSnJ/eFk0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:75:cc:ab:87:ee:e7:82:64:65:b2:2e:83:63:7c:89:23:5b:e5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC Validity Not Before: Jun 17 07:26:58 2026 GMT Not After : Jun 18 07:53:58 2026 GMT Subject: CN=68F408BF3BEF11CCC5E5C267307B597E4E6175AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0f:fe:84:77:99:b5:61:64:46:e0:c4:dc:49: b8:f9:9b:46:31:69:f2:df:f1:6c:da:76:98:63:5d: 83:68:f7:e4:24:36:88:06:1b:21:0e:a1:11:48:1d: d5:14:63:3d:56:90:b2:af:99:d8:c2:59:ec:5f:23: 15:0e:2d:08:1c:3a:80:04:51:00:82:6a:f1:7b:6c: f8:b2:35:fa:64:b6:8e:4c:48:07:36:0f:c9:69:66: 13:08:2e:9d:8a:0b:7b:df:e3:04:29:be:cc:89:26: a6:37:79:f0:81:3c:93:8f:ee:96:d5:08:db:9b:6a: f8:bd:a9:9d:51:bd:54:1d:cc:0b:24:99:d2:86:2c: d0:6b:19:61:d5:d5:4d:1a:38:d3:1b:67:e6:36:16: 00:30:23:72:c5:01:6d:25:20:60:50:8e:56:2f:47: 01:d7:cb:00:16:db:f6:d5:5a:10:28:fe:7b:b8:0b: a1:0b:dc:55:48:a0:fa:6a:63:99:ad:b8:11:70:c6: c2:df:7d:5b:3e:33:f8:3a:81:d0:86:ab:c3:a8:e0: 31:e3:22:06:7b:9d:7a:66:3a:85:b0:d9:4f:2d:a2: ad:e5:72:bb:72:7d:17:ee:44:aa:91:31:f7:ce:11: a3:ac:2c:a6:db:38:06:48:fa:a8:a5:1d:3b:57:44: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F4:08:BF:3B:EF:11:CC:C5:E5:C2:67:30:7B:59:7E:4E:61:75:AA X509v3 Authority Key Identifier: keyid:0C:1E:C4:D6:BE:1D:7A:19:2B:A6:D1:88:CA:0C:75:70:E5:D7:6C:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1b:0b:dc:d7:f5:ee:ac:a4:34:62:8b:f8:90:45:6b:11:b8: 68:f9:8f:bd:a9:7a:de:18:89:96:95:f7:e7:a6:e0:23:00:c0: d8:5d:78:39:73:74:29:b2:12:eb:dc:3b:52:b5:9a:7a:f3:98: 02:ff:ff:04:6d:60:7b:89:9e:46:c5:e8:a5:ba:a8:bb:77:31: 77:ad:ad:18:23:e8:25:55:c0:8f:d7:74:55:22:1a:00:6e:00: a2:9d:64:0f:cc:cb:4f:59:74:01:0c:83:4f:f7:e5:73:07:39: 76:c6:01:7e:05:46:f3:6e:97:04:f6:e3:94:1e:37:33:ef:9a: c9:ce:ce:87:24:69:2f:bf:1f:13:4d:d1:eb:ba:d6:7d:52:fd: 6f:1a:3e:59:a0:95:83:95:6c:5b:2c:75:95:25:a2:ee:c2:ce: 44:27:b7:98:f2:d5:1a:bc:c0:75:cb:d0:10:f0:b4:af:f5:d6: 55:b6:3e:8a:6b:05:dc:33:5e:ea:35:62:c5:1f:a0:d4:19:78: c7:35:ce:cc:52:4d:f5:8d:66:ff:f1:20:36:74:01:eb:81:9d: 17:2b:77:f0:31:23:6a:45:9c:9b:80:96:01:dc:25:59:a5:dc: ac:d6:c2:6d:3d:bf:f3:11:e4:3c:99:ed:2e:c7:50:71:78:ab: c6:f2:e6:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3XMq4fu54JkZbIug2N8iSNb5akwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRUM0RDZCRTFEN0ExOTJCQTZEMTg4Q0EwQzc1NzBF NUQ3NkNFQzAeFw0yNjA2MTcwNzI2NThaFw0yNjA2MTgwNzUzNThaMDMxMTAvBgNV BAMTKDY4RjQwOEJGM0JFRjExQ0NDNUU1QzI2NzMwN0I1OTdFNEU2MTc1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgD/6Ed5m1YWRG4MTcSbj5m0Yx afLf8WzadphjXYNo9+QkNogGGyEOoRFIHdUUYz1WkLKvmdjCWexfIxUOLQgcOoAE UQCCavF7bPiyNfpkto5MSAc2D8lpZhMILp2KC3vf4wQpvsyJJqY3efCBPJOP7pbV CNubavi9qZ1RvVQdzAskmdKGLNBrGWHV1U0aONMbZ+Y2FgAwI3LFAW0lIGBQjlYv RwHXywAW2/bVWhAo/nu4C6EL3FVIoPpqY5mtuBFwxsLffVs+M/g6gdCGq8Oo4DHj IgZ7nXpmOoWw2U8toq3lcrtyfRfuRKqRMffOEaOsLKbbOAZI+qilHTtXRKG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaPQIvzvvEczF5cJnMHtZfk5hdaowHwYDVR0j BBgwFoAUDB7E1r4dehkrptGIygx1cOXXbOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDE4MGY3NTUtNWMyNy00MGY4LTgwYWYtMmZhOGRmMTE1MjgyLzAvMEMxRUM0RDZC RTFEN0ExOTJCQTZEMTg4Q0EwQzc1NzBFNUQ3NkNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQzFFQzRENkJFMUQ3QTE5MkJBNkQxODhDQTBDNzU3MEU1RDc2 Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMEMxRUM0RDZCRTFEN0ExOTJCQTZEMTg4Q0EwQzc1 NzBFNUQ3NkNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMbC9zX9e6spDRii/iQRWsRuGj5j72pet4Y iZaV9+em4CMAwNhdeDlzdCmyEuvcO1K1mnrzmAL//wRtYHuJnkbF6KW6qLt3MXet rRgj6CVVwI/XdFUiGgBuAKKdZA/My09ZdAEMg0/35XMHOXbGAX4FRvNulwT245Qe NzPvmsnOzockaS+/HxNN0eu61n1S/W8aPlmglYOVbFssdZUlou7CzkQnt5jy1Rq8 wHXL0BDwtK/11lW2PoprBdwzXuo1YsUfoNQZeMc1zsxSTfWNZv/xIDZ0AeuBnRcr d/AxI2pFnJuAlgHcJVml3KzWwm09v/MR5DyZ7S7HUHF4q8by5jg= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:17 2026 by rpki-client