$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft File: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft (raw, json) Hash identifier: /fMmUH99Dl8rpWmYcJSSOZuIOOExpUzRDJxKRi+QF+s= Subject key identifier: 6C:B6:42:84:E4:52:F5:5C:0A:6E:56:E1:40:EA:2A:F1:BA:66:61:74 Authority key identifier: 0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B Certificate issuer: /CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Certificate serial: 0D74ABCA0DC534A617D867B6913BDA908CD264AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft Manifest number: 3B Signing time: Sun 14 Jun 2026 19:05:10 +0000 Manifest this update: Sun 14 Jun 2026 19:00:10 +0000 Manifest next update: Mon 15 Jun 2026 22:22:10 +0000 Files and hashes: 1: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl (hash: G1Fzm3Pbs+spQgwuA3T9yP5ZbZqZNN1MBfMijDcCS/0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 22:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:74:ab:ca:0d:c5:34:a6:17:d8:67:b6:91:3b:da:90:8c:d2:64:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Validity Not Before: Jun 14 19:00:10 2026 GMT Not After : Jun 15 22:22:10 2026 GMT Subject: CN=6CB64284E452F55C0A6E56E140EA2AF1BA666174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:5d:69:f3:00:97:10:36:6a:37:f3:38:3e: 37:a0:ea:fd:3d:03:77:15:7f:e0:91:cf:2e:5c:40: 54:ea:10:07:e0:c2:dd:0f:00:51:4c:b4:01:bd:17: ae:7a:5e:49:08:57:3b:ac:63:dc:01:33:07:cc:cb: 81:c4:55:9c:c6:7a:bc:1d:31:34:70:52:15:ed:e7: 06:6c:cc:3e:45:ac:aa:07:e1:ac:6c:42:c5:4d:cb: da:b8:87:39:d3:4f:da:81:48:5e:0b:f7:38:05:ed: 53:89:70:fc:62:fc:d8:0a:11:6e:4a:2b:4d:0c:99: fa:87:c0:18:6c:04:90:7f:e4:10:65:c0:b2:5c:de: 34:6a:fc:29:ed:8d:7f:e7:90:11:00:92:41:ab:fa: 15:c5:d4:66:39:10:cd:f1:11:85:0b:c2:89:80:b2: ff:e1:98:6d:75:33:9c:04:f1:9f:e8:07:df:00:06: a3:70:41:2f:74:f9:28:7a:ef:8e:bd:81:b5:13:7d: cd:28:02:e6:31:7e:5b:13:89:7f:38:5a:da:18:3e: 54:c1:b9:7d:a5:39:f6:d8:28:28:cc:e1:63:42:bf: 50:58:18:b3:f6:26:d5:19:44:2a:79:0d:d3:3f:e9: c4:68:09:6c:5a:d9:78:df:25:5f:49:60:6c:b4:c8: 31:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B6:42:84:E4:52:F5:5C:0A:6E:56:E1:40:EA:2A:F1:BA:66:61:74 X509v3 Authority Key Identifier: keyid:0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:57:4a:43:35:ad:44:09:e6:e4:3b:8b:c8:52:2b:ae:11:ff: 94:11:c3:75:61:1a:42:f5:20:ea:23:4e:5d:ea:97:96:c3:71: 96:62:48:cc:35:97:7f:19:79:46:be:3f:13:7d:06:6a:ca:40: 6d:5f:d3:03:e4:09:3c:2d:4e:19:cd:6b:74:70:5a:65:eb:0b: 6d:17:97:1c:3c:7e:f6:84:86:04:60:85:d3:0a:a7:4f:86:48: 08:37:3f:03:41:be:8a:24:db:e3:6b:46:dd:1f:c5:df:5e:a8: 2d:84:80:44:2b:45:81:90:6e:74:3c:39:b6:af:75:53:e3:4f: 64:4a:3f:f7:4e:2c:bc:7a:2f:50:1e:f3:f7:c4:05:36:74:fc: 86:b2:63:44:19:21:90:69:77:76:bc:c5:e9:3b:bb:1e:c9:56: f4:99:31:bc:94:a7:55:4d:04:f6:52:58:cb:91:fe:d7:ba:04: bc:ff:52:26:79:bc:82:ed:bf:61:a5:51:e8:c4:75:7b:b1:ce: 35:6f:49:99:7a:78:bc:e9:8e:70:07:34:eb:0f:f9:2f:c2:fa: 70:22:bd:eb:cb:3b:20:bc:e0:0c:48:22:2b:21:50:8a:9c:bd: 7f:7b:bb:27:04:2a:1e:73:d2:8a:96:b4:71:ff:e1:89:ff:ad: a5:8f:86:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXSryg3FNKYX2Ge2kTvakIzSZK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0UwOURD RDRDOEM2QjAeFw0yNjA2MTQxOTAwMTBaFw0yNjA2MTUyMjIyMTBaMDMxMTAvBgNV BAMTKDZDQjY0Mjg0RTQ1MkY1NUMwQTZFNTZFMTQwRUEyQUYxQkE2NjYxNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYV1p8wCXEDZqN/M4Pjeg6v09 A3cVf+CRzy5cQFTqEAfgwt0PAFFMtAG9F656XkkIVzusY9wBMwfMy4HEVZzGerwd MTRwUhXt5wZszD5FrKoH4axsQsVNy9q4hznTT9qBSF4L9zgF7VOJcPxi/NgKEW5K K00MmfqHwBhsBJB/5BBlwLJc3jRq/CntjX/nkBEAkkGr+hXF1GY5EM3xEYULwomA sv/hmG11M5wE8Z/oB98ABqNwQS90+Sh67469gbUTfc0oAuYxflsTiX84WtoYPlTB uX2lOfbYKCjM4WNCv1BYGLP2JtUZRCp5DdM/6cRoCWxa2XjfJV9JYGy0yDGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbLZChORS9VwKblbhQOoq8bpmYXQwHwYDVR0j BBgwFoAUCgU0FL6lscPDZ9X8D6Pgnc1MjGswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRC RUE1QjFDM0MzNjdENUZDMEZBM0UwOURDRDRDOEM2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTA1MzQxNEJFQTVCMUMzQzM2N0Q1RkMwRkEzRTA5RENENEM4 QzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0Uw OURDRDRDOEM2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxXSkM1rUQJ5uQ7i8hSK64R/5QRw3VhGkL1 IOojTl3ql5bDcZZiSMw1l38ZeUa+PxN9BmrKQG1f0wPkCTwtThnNa3RwWmXrC20X lxw8fvaEhgRghdMKp0+GSAg3PwNBvook2+NrRt0fxd9eqC2EgEQrRYGQbnQ8Obav dVPjT2RKP/dOLLx6L1Ae8/fEBTZ0/IayY0QZIZBpd3a8xek7ux7JVvSZMbyUp1VN BPZSWMuR/te6BLz/UiZ5vILtv2GlUejEdXuxzjVvSZl6eLzpjnAHNOsP+S/C+nAi vevLOyC84AxIIishUIqcvX97uycEKh5z0oqWtHH/4Yn/raWPhvs= -----END CERTIFICATE-----Generated at Mon Jun 15 14:10:42 2026 by rpki-client