$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft File: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft (raw, json) Hash identifier: BNOBrZ1ilFdh4hoi/kwAK86TsxVWCvEv3MEN64/+Tqw= Subject key identifier: 60:12:F5:79:53:A8:A3:83:9D:83:C2:C7:3E:59:64:83:76:6C:21:21 Authority key identifier: 0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F Certificate issuer: /CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Certificate serial: 31027CAE4278B9B5D7B2BB2EFCB2053732C030B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:45:33 +0000 Manifest this update: Tue 16 Jun 2026 21:40:33 +0000 Manifest next update: Thu 18 Jun 2026 00:33:33 +0000 Files and hashes: 1: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl (hash: y9pisQ0D8dKHq06qJnibZS/GNpqX6n535ikhaw85koY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:02:7c:ae:42:78:b9:b5:d7:b2:bb:2e:fc:b2:05:37:32:c0:30:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Validity Not Before: Jun 16 21:40:33 2026 GMT Not After : Jun 18 00:33:33 2026 GMT Subject: CN=6012F57953A8A3839D83C2C73E596483766C2121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:6d:c4:7e:4c:eb:4d:78:e6:e7:9c:d8:2c: dc:b6:d0:d7:10:37:4c:7a:ec:82:49:d2:9f:b5:bd: 9b:e9:b5:e5:d3:fc:0d:5a:50:f3:36:75:8c:4e:33: 2b:4f:d2:f1:81:61:77:6b:55:53:b4:18:b7:2c:2b: 79:33:8e:f5:82:92:ad:e9:91:c5:b6:37:73:dd:11: 0f:2d:9e:0c:7d:a8:b0:fb:d7:39:00:1a:f7:b8:85: be:60:b0:d3:c6:6b:b3:f9:d9:74:7c:37:6c:c5:c2: 7a:00:f4:5d:69:c5:f4:91:4f:cc:cb:7f:a6:61:ac: de:b5:d2:fe:60:05:71:d3:a1:8c:1f:6f:f7:3a:0c: 61:a1:d5:34:2a:c0:28:9e:e1:24:32:16:2b:7b:32: b8:01:5d:0e:9c:3e:65:f4:f8:d5:28:7f:b8:e5:8a: 2b:da:3c:e5:eb:74:3c:d0:b3:68:22:e7:89:89:da: 92:b3:71:aa:39:8b:a8:ad:fe:ec:27:85:2d:31:15: e3:7c:d1:56:10:56:a6:d0:62:a7:6e:08:27:aa:d8: eb:f9:da:72:39:b9:d2:21:b6:94:17:b5:8b:b7:4f: 7c:46:5c:15:22:66:63:62:cf:e0:3c:be:3b:35:ac: a0:05:fb:4e:a6:12:0e:c0:a2:82:c9:28:d3:99:7e: 6a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:12:F5:79:53:A8:A3:83:9D:83:C2:C7:3E:59:64:83:76:6C:21:21 X509v3 Authority Key Identifier: keyid:0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:aa:71:36:33:a0:41:c9:96:7c:5a:6b:7b:fd:55:4b:ce:2c: d8:3e:f1:cf:01:28:18:f8:2b:12:29:ee:1e:33:f2:e6:8a:50: b5:7e:61:3b:b9:53:97:f1:cc:ea:cb:d4:4a:c2:a7:3d:cd:42: ee:4c:e0:bd:31:15:e7:56:0b:f9:fd:4d:a6:34:b0:aa:2a:b6: 05:60:e8:6b:b6:51:e3:87:a8:6b:27:c1:c4:90:e2:fd:6f:0a: cd:06:2e:dd:c2:4a:96:4d:94:e5:51:c4:15:51:41:4a:26:b4: 94:e4:c6:9e:c0:1e:44:58:86:37:64:f6:c7:ee:79:3b:d1:88: 3e:91:55:59:a7:e8:7c:69:9c:be:1e:56:a6:b7:38:34:47:cb: 4d:01:11:8a:21:e6:53:4e:d0:fe:53:f3:a5:fd:27:f4:a5:89: 56:86:ab:3e:62:68:1c:f4:84:c3:6c:8c:18:60:bf:6d:52:e2: 80:dc:8f:79:84:21:61:e9:2c:28:19:55:eb:51:eb:a7:ec:45: 09:c6:34:86:8f:66:0d:f8:a4:d7:68:d2:ab:ab:8d:25:d3:2e: 99:94:79:40:8d:95:9b:5e:25:24:5e:e5:76:ce:c1:f2:91:83: 45:e2:73:01:6f:29:2a:db:74:1e:65:b8:0b:61:14:46:45:65: ef:a1:6c:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQJ8rkJ4ubXXsrsu/LIFNzLAMLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFG MjQ4OTIwRjAeFw0yNjA2MTYyMTQwMzNaFw0yNjA2MTgwMDMzMzNaMDMxMTAvBgNV BAMTKDYwMTJGNTc5NTNBOEEzODM5RDgzQzJDNzNFNTk2NDgzNzY2QzIxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OG3EfkzrTXjm55zYLNy20NcQ N0x67IJJ0p+1vZvpteXT/A1aUPM2dYxOMytP0vGBYXdrVVO0GLcsK3kzjvWCkq3p kcW2N3PdEQ8tngx9qLD71zkAGve4hb5gsNPGa7P52XR8N2zFwnoA9F1pxfSRT8zL f6ZhrN610v5gBXHToYwfb/c6DGGh1TQqwCie4SQyFit7MrgBXQ6cPmX0+NUof7jl iivaPOXrdDzQs2gi54mJ2pKzcao5i6it/uwnhS0xFeN80VYQVqbQYqduCCeq2Ov5 2nI5udIhtpQXtYu3T3xGXBUiZmNiz+A8vjs1rKAF+06mEg7AooLJKNOZfmqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYBL1eVOoo4Odg8LHPllkg3ZsISEwHwYDVR0j BBgwFoAUD7YeF9tcOnxr6ggOJH4jcfJIkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdE QjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFGMjQ4OTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI2MUUxN0RCNUMzQTdDNkJFQTA4MEUyNDdFMjM3MUYyNDg5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIz NzFGMjQ4OTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuqcTYzoEHJlnxaa3v9VUvOLNg+8c8BKBj4 KxIp7h4z8uaKULV+YTu5U5fxzOrL1ErCpz3NQu5M4L0xFedWC/n9TaY0sKoqtgVg 6Gu2UeOHqGsnwcSQ4v1vCs0GLt3CSpZNlOVRxBVRQUomtJTkxp7AHkRYhjdk9sfu eTvRiD6RVVmn6HxpnL4eVqa3ODRHy00BEYoh5lNO0P5T86X9J/SliVaGqz5iaBz0 hMNsjBhgv21S4oDcj3mEIWHpLCgZVetR66fsRQnGNIaPZg34pNdo0qurjSXTLpmU eUCNlZteJSRe5XbOwfKRg0XicwFvKSrbdB5luAthFEZFZe+hbI8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:19 2026 by rpki-client