$ rpki-client -vvf rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.mft File: 0ED92E96DB5C94077B124D34469AD1D3208E3189.mft (raw, json) Hash identifier: C9Tg7b090fLimLiqDEKFSRnU+aTcS3CUsSUwJl/VOjA= Subject key identifier: 53:9B:0E:FE:65:AD:50:14:59:89:7D:B5:1B:EF:E0:65:63:DD:F8:C0 Authority key identifier: 0E:D9:2E:96:DB:5C:94:07:7B:12:4D:34:46:9A:D1:D3:20:8E:31:89 Certificate issuer: /CN=0ED92E96DB5C94077B124D34469AD1D3208E3189 Certificate serial: 329587C1906B4723BE0E66B19D606084E2D516BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0ED92E96DB5C94077B124D34469AD1D3208E3189.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:12:08 +0000 Manifest this update: Tue 16 Jun 2026 23:07:08 +0000 Manifest next update: Thu 18 Jun 2026 02:51:08 +0000 Files and hashes: 1: 0ED92E96DB5C94077B124D34469AD1D3208E3189.crl (hash: weEFg/stHxaLcFL2OB/KtfUBLUQEAWW5CU/i9UCm+pc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.crl rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0ED92E96DB5C94077B124D34469AD1D3208E3189.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:95:87:c1:90:6b:47:23:be:0e:66:b1:9d:60:60:84:e2:d5:16:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ED92E96DB5C94077B124D34469AD1D3208E3189 Validity Not Before: Jun 16 23:07:08 2026 GMT Not After : Jun 18 02:51:08 2026 GMT Subject: CN=539B0EFE65AD501459897DB51BEFE06563DDF8C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:04:69:71:25:d2:40:3e:f3:5a:fa:e7:69:92: 1c:2c:90:0e:fc:51:50:08:f9:ff:92:c1:f5:7f:4a: 1a:f3:b5:f6:38:f1:da:7a:2a:dc:e8:5b:36:97:11: d5:c5:a5:fa:58:e4:f6:3e:49:97:ad:a2:10:8a:05: 89:9f:a6:45:37:6e:b7:67:90:16:d4:e7:d1:f7:a2: b6:5d:92:c7:8c:55:ee:b7:9b:19:46:46:64:d9:2f: b1:da:5b:06:8b:68:98:aa:68:32:ba:58:69:5b:f7: ee:f6:14:94:b8:92:2e:d0:a3:af:76:86:0f:47:c3: 81:16:d3:63:54:7f:7d:e7:ed:46:c5:1d:46:6d:d6: bf:17:d9:40:f9:59:e0:39:cc:7e:bc:6e:76:65:60: b5:2f:f2:7e:f5:5a:73:89:00:04:c9:a9:a2:19:da: b4:ba:8b:ae:fe:69:43:97:4a:c6:98:95:a4:a5:6e: ac:89:93:bf:79:74:b6:cb:21:92:2a:6c:a3:eb:bc: bf:0c:93:9e:ab:bb:c3:2e:90:7e:9e:f1:7f:6b:af: 48:fc:52:d5:ec:e1:7b:ae:38:d7:c5:c0:18:7e:66: 1e:60:93:9c:a2:f1:80:95:f9:ca:1d:80:3f:de:19: a0:ef:fa:05:7e:bc:9b:52:8e:5a:69:60:83:6a:33: d5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9B:0E:FE:65:AD:50:14:59:89:7D:B5:1B:EF:E0:65:63:DD:F8:C0 X509v3 Authority Key Identifier: keyid:0E:D9:2E:96:DB:5C:94:07:7B:12:4D:34:46:9A:D1:D3:20:8E:31:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0ED92E96DB5C94077B124D34469AD1D3208E3189.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ff:4e:62:94:c9:87:01:1b:1e:94:85:93:50:3e:1a:a9:0a: 1f:21:b4:8f:b6:c4:b2:c7:93:7b:d8:5e:39:4f:bd:aa:08:e2: b5:ec:f5:78:78:02:7a:f0:5e:0b:d8:b0:82:f7:10:95:db:b6: c3:60:68:e6:61:cf:97:53:6b:20:74:89:a4:ab:62:3d:17:f1: c4:6f:79:5b:33:a9:f6:ab:32:de:f0:65:ab:94:34:29:8b:6d: 34:40:2e:12:92:43:96:a9:ce:22:0e:34:76:1a:44:da:cb:60: 44:4f:2d:90:97:31:c5:f5:12:44:a5:55:a9:3a:14:53:10:52: c4:ce:d8:14:f5:e7:b5:31:8d:fe:9f:ef:eb:a5:1b:c4:ab:8b: 98:28:ea:f7:5e:bb:9b:6e:97:8f:d6:f5:5a:c4:ef:e9:f2:e9: 5d:75:29:e9:a1:57:35:c2:19:e3:5c:cf:1b:a6:6e:16:d9:e2: f4:be:95:6e:3d:cf:5d:9a:08:c7:6e:c7:e6:4c:f1:6f:c2:9b: ec:9b:4d:8f:41:e0:43:e3:80:cc:77:cf:2e:98:3f:fb:b1:5a: 0f:e8:8f:03:0a:c4:75:33:3d:26:83:78:77:0d:0e:ca:cf:67: 12:bd:22:1f:45:15:81:bc:af:27:3b:21:60:49:35:b0:d8:12: 9c:3d:f6:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMpWHwZBrRyO+DmaxnWBghOLVFrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVEOTJFOTZEQjVDOTQwNzdCMTI0RDM0NDY5QUQxRDMy MDhFMzE4OTAeFw0yNjA2MTYyMzA3MDhaFw0yNjA2MTgwMjUxMDhaMDMxMTAvBgNV BAMTKDUzOUIwRUZFNjVBRDUwMTQ1OTg5N0RCNTFCRUZFMDY1NjNEREY4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqBGlxJdJAPvNa+udpkhwskA78 UVAI+f+SwfV/ShrztfY48dp6KtzoWzaXEdXFpfpY5PY+SZetohCKBYmfpkU3brdn kBbU59H3orZdkseMVe63mxlGRmTZL7HaWwaLaJiqaDK6WGlb9+72FJS4ki7Qo692 hg9Hw4EW02NUf33n7UbFHUZt1r8X2UD5WeA5zH68bnZlYLUv8n71WnOJAATJqaIZ 2rS6i67+aUOXSsaYlaSlbqyJk795dLbLIZIqbKPrvL8Mk56ru8MukH6e8X9rr0j8 UtXs4XuuONfFwBh+Zh5gk5yi8YCV+codgD/eGaDv+gV+vJtSjlppYINqM9XfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU5sO/mWtUBRZiX21G+/gZWPd+MAwHwYDVR0j BBgwFoAUDtkulttclAd7Ek00RprR0yCOMYkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgwYThkZmQtYTY3OS00NDRhLWI5YTgtNmUzY2I0ODFhMDc5LzAvMEVEOTJFOTZE QjVDOTQwNzdCMTI0RDM0NDY5QUQxRDMyMDhFMzE4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRUQ5MkU5NkRCNUM5NDA3N0IxMjREMzQ0NjlBRDFEMzIwOEUz MTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvMEVEOTJFOTZEQjVDOTQwNzdCMTI0RDM0NDY5QUQx RDMyMDhFMzE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJT/TmKUyYcBGx6UhZNQPhqpCh8htI+2xLLH k3vYXjlPvaoI4rXs9Xh4AnrwXgvYsIL3EJXbtsNgaOZhz5dTayB0iaSrYj0X8cRv eVszqfarMt7wZauUNCmLbTRALhKSQ5apziIONHYaRNrLYERPLZCXMcX1EkSlVak6 FFMQUsTO2BT157Uxjf6f7+ulG8Sri5go6vdeu5tul4/W9VrE7+ny6V11KemhVzXC GeNczxumbhbZ4vS+lW49z12aCMdux+ZM8W/Cm+ybTY9B4EPjgMx3zy6YP/uxWg/o jwMKxHUzPSaDeHcNDsrPZxK9Ih9FFYG8ryc7IWBJNbDYEpw99is= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:09 2026 by rpki-client