$ rpki-client -vvf rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft File: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft (raw, json) Hash identifier: TBC9ZFJHVZtmPInxBboup5Yi+WhRDECKqF0vjOZ6f6o= Subject key identifier: FA:1C:5E:35:26:2A:46:2F:5F:76:3C:AC:F4:94:A0:48:F7:25:74:BA Authority key identifier: 0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 Certificate issuer: /CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Certificate serial: 058809D0994C6091D850E9CE121E8CC865E2F699 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:00:06 +0000 Manifest this update: Wed 17 Jun 2026 05:55:06 +0000 Manifest next update: Thu 18 Jun 2026 08:19:06 +0000 Files and hashes: 1: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl (hash: rEeybLTsoXL6aiuxEgicjFkGCUJEMUc81GF65zXJz7U=) 2: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: Gc3lbfky0bPOcbJ53df4bfJv1IIZalpAJC7Z0mwM6C8=) 3: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: Kwk5pernXmim9KIGTT8s13y4BcSyxFt8vOqda3e394A=) 4: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: mwSnVoqEhlM2lDBuSkv9Lk0pH8PdVGL8EzeI43YHgNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:88:09:d0:99:4c:60:91:d8:50:e9:ce:12:1e:8c:c8:65:e2:f6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Validity Not Before: Jun 17 05:55:06 2026 GMT Not After : Jun 18 08:19:06 2026 GMT Subject: CN=FA1C5E35262A462F5F763CACF494A048F72574BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:3a:31:dd:c9:16:47:3e:d8:25:4a:ea:ca: 04:6d:db:b1:2a:9b:f2:22:68:07:82:63:90:fd:1c: 66:6e:95:d1:61:f6:14:23:de:90:9b:8b:94:ab:96: e1:51:27:dc:56:c8:c0:f8:5c:1c:2b:2c:3f:fb:fa: 6c:7e:27:91:69:46:e9:02:3b:26:f0:51:89:16:8c: bf:5f:9f:8d:12:b9:48:95:0c:d7:0b:89:1e:9a:c3: 6d:aa:dc:70:91:4c:d7:1c:88:ff:50:06:68:89:c1: 84:ac:4f:a7:92:18:5c:c8:23:ab:ea:c6:5c:bd:6a: 51:3a:14:eb:58:78:7b:9b:b1:81:8a:6d:e1:86:23: dc:03:a8:ed:3d:dd:38:80:1c:a3:9c:7d:2a:cf:e2: f0:da:44:2a:b1:00:ea:a2:6d:0a:df:7b:a8:b1:fa: 16:de:ce:a2:5b:7c:f5:8e:09:92:b8:8d:c9:18:b9: 24:25:16:84:56:de:12:c2:97:38:90:cf:56:34:f4: c4:09:1c:9d:c1:f5:2f:4a:f3:16:04:d4:2d:ec:77: 78:10:a6:c7:eb:de:02:60:8d:ae:15:34:d9:f6:0e: a5:39:19:52:3f:a4:a4:58:f8:3b:15:57:2f:29:8c: a8:93:a4:cd:55:01:63:40:ef:2a:a3:ae:0c:76:0b: ab:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1C:5E:35:26:2A:46:2F:5F:76:3C:AC:F4:94:A0:48:F7:25:74:BA X509v3 Authority Key Identifier: keyid:0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2c:3b:1d:20:6a:96:30:33:29:6f:c8:58:d9:9d:0c:b2:7c: a3:19:ed:f4:e1:a3:7c:a0:f0:4a:9e:3f:b1:4f:3d:83:ce:8b: 7e:1e:73:69:8a:ea:c5:5d:ef:38:5d:a6:7d:25:3f:f1:c5:09: 36:8e:ed:d2:38:2c:28:43:76:5f:cd:a6:1c:e0:56:fc:4a:be: 9a:ed:46:97:37:e0:75:be:ac:43:d9:2d:97:26:30:1e:f1:fb: 09:15:fb:b7:1d:be:05:14:39:e1:45:78:24:4e:04:2f:cc:f6: 63:57:f3:fe:71:1a:cc:32:45:ed:70:1e:71:8d:70:7f:72:b9: 25:77:4a:da:c4:b6:65:8b:bb:ca:89:20:19:51:1f:d2:2c:ed: 4a:28:52:f9:5c:98:a3:4c:b4:0b:3e:cc:c0:6a:8e:03:3d:de: 03:3e:53:a8:14:0d:d3:f0:14:84:a1:e7:be:75:f6:41:0c:58: f8:45:0b:84:82:4e:b5:c8:7f:2a:9e:d6:5e:9b:66:44:ef:ca: 39:f2:a2:31:31:32:7c:a2:2d:e0:b3:c2:64:87:9e:0f:08:3b: 9d:1e:b5:d6:0d:51:49:88:09:11:3a:27:ef:de:82:54:d3:2d: 8b:b6:1a:e4:b7:fb:4e:61:75:20:78:df:e1:e9:59:9a:b2:6e: 18:e0:ff:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBYgJ0JlMYJHYUOnOEh6MyGXi9pkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4 MjZBREY3MTAeFw0yNjA2MTcwNTU1MDZaFw0yNjA2MTgwODE5MDZaMDMxMTAvBgNV BAMTKEZBMUM1RTM1MjYyQTQ2MkY1Rjc2M0NBQ0Y0OTRBMDQ4RjcyNTc0QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/zox3ckWRz7YJUrqygRt27Eq m/IiaAeCY5D9HGZuldFh9hQj3pCbi5SrluFRJ9xWyMD4XBwrLD/7+mx+J5FpRukC OybwUYkWjL9fn40SuUiVDNcLiR6aw22q3HCRTNcciP9QBmiJwYSsT6eSGFzII6vq xly9alE6FOtYeHubsYGKbeGGI9wDqO093TiAHKOcfSrP4vDaRCqxAOqibQrfe6ix +hbezqJbfPWOCZK4jckYuSQlFoRW3hLClziQz1Y09MQJHJ3B9S9K8xYE1C3sd3gQ psfr3gJgja4VNNn2DqU5GVI/pKRY+DsVVy8pjKiTpM1VAWNA7yqjrgx2C6uDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+hxeNSYqRi9fdjys9JSgSPcldLowHwYDVR0j BBgwFoAUDqGuL8wxlYEISWb85yDguYJq33EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdjOGEwYzMtMzdmNS00NjY3LWE0MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZD QzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4MjZBREY3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRUExQUUyRkNDMzE5NTgxMDg0OTY2RkNFNzIwRTBCOTgyNkFE RjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUw Qjk4MjZBREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJssOx0gapYwMylvyFjZnQyyfKMZ7fTho3yg 8EqeP7FPPYPOi34ec2mK6sVd7zhdpn0lP/HFCTaO7dI4LChDdl/NphzgVvxKvprt Rpc34HW+rEPZLZcmMB7x+wkV+7cdvgUUOeFFeCROBC/M9mNX8/5xGswyRe1wHnGN cH9yuSV3StrEtmWLu8qJIBlRH9Is7UooUvlcmKNMtAs+zMBqjgM93gM+U6gUDdPw FISh57519kEMWPhFC4SCTrXIfyqe1l6bZkTvyjnyojExMnyiLeCzwmSHng8IO50e tdYNUUmICRE6J+/eglTTLYu2GuS3+05hdSB43+HpWZqybhjg/2c= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:02 2026 by rpki-client