$ rpki-client -vvf rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft File: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft (raw, json) Hash identifier: tBYAH/mro9Pl7gcM73xuurr0qEfsqxMdjuOrBrU3Nlw= Subject key identifier: BA:6D:D1:60:3A:B7:6D:99:0E:58:19:61:FB:2B:5A:EC:86:F9:19:F4 Authority key identifier: 0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA Certificate issuer: /CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Certificate serial: 1322F8BD80DF9725ED63A9ECB6647AD879C26F25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:37:53 +0000 Manifest this update: Tue 16 Jun 2026 19:32:53 +0000 Manifest next update: Wed 17 Jun 2026 20:20:53 +0000 Files and hashes: 1: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl (hash: qiZpGnhj1ELJjhNLeZs7fyLinKqYnG1bTDjm0bSXfzw=) 2: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: AfqLgmWvcp/HfbbhsOhmQtK0n/maxUMDksVbAZ7tmAM=) 3: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: dKm4h4htb+xuOuzBD2j/P3WbreIMIoqa9hQCTFJdoG0=) 4: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: wGWAkljELKeAaAd3PWlxElTnzVBFIyJlkgaeJs8LIbg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:22:f8:bd:80:df:97:25:ed:63:a9:ec:b6:64:7a:d8:79:c2:6f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Validity Not Before: Jun 16 19:32:53 2026 GMT Not After : Jun 17 20:20:53 2026 GMT Subject: CN=BA6DD1603AB76D990E581961FB2B5AEC86F919F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:41:ac:e3:bc:b9:0b:43:a9:b7:cf:9f:50: 02:fb:7a:53:18:da:21:44:78:84:41:35:f0:fc:a1: 2c:0e:78:6a:2a:af:2b:ce:7b:94:ef:ec:4e:3e:df: 48:4f:1e:41:15:80:7c:b3:b0:62:46:66:f7:26:82: 0c:fe:a2:44:bd:8a:6b:69:c7:34:ed:a3:5f:91:be: 42:67:89:d9:30:94:b1:03:f1:8c:fe:1e:bb:ac:94: 90:a9:10:c5:b0:63:32:4a:e7:30:76:fd:49:6b:6c: b7:aa:53:56:d8:03:21:af:f8:16:42:28:74:16:d8: 9a:2e:ae:81:4e:52:c4:2f:1d:8c:9a:49:8f:f5:c9: c0:99:3d:bd:12:fc:58:b2:cd:91:27:a4:cf:99:a8: 88:be:ad:49:0a:5d:13:ac:95:72:4e:2e:fc:a4:0d: aa:a8:bc:92:43:93:f9:d3:35:f5:05:60:fd:c8:2a: 38:08:81:f1:44:4a:3d:46:4c:cd:ac:5f:b7:2d:7f: e1:62:bb:d7:8c:70:02:e6:95:6b:60:13:17:fa:d3: 45:57:7a:3e:ba:67:4e:71:d9:9f:85:26:00:8b:4c: 44:32:34:e0:aa:d5:2d:25:71:c9:58:cf:e1:1a:8d: e8:1c:be:9d:c3:63:87:3e:59:a7:ae:14:54:c1:12: 0d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6D:D1:60:3A:B7:6D:99:0E:58:19:61:FB:2B:5A:EC:86:F9:19:F4 X509v3 Authority Key Identifier: keyid:0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:dc:43:d4:91:56:52:c6:08:c8:05:14:99:5f:1b:72:f5:a5: 11:0f:94:c9:90:19:ee:6c:b3:f3:c5:7b:3e:b0:dd:f7:bb:ce: f4:3d:2f:9e:5b:ff:ce:71:dd:cd:c6:04:59:cf:9d:96:62:aa: ef:93:73:fc:93:21:70:1b:30:55:f0:c0:6b:9c:ab:48:b8:85: 3c:16:c0:82:a1:4d:b5:a3:1a:c5:b7:f5:3f:08:f0:31:f1:58: 5f:b9:28:a8:22:74:03:c3:87:13:f5:5b:23:ed:5b:6d:e4:74: 2b:2b:ae:9e:69:f0:b4:0c:2b:4d:fa:a5:a8:20:11:c7:31:6b: 4f:db:04:f7:1f:8a:2e:8a:cb:c5:02:7b:c2:95:04:44:d8:1e: ec:e6:90:df:a7:13:04:38:b2:a6:9a:8a:bf:2e:6f:f5:99:1d: 89:8e:e6:cd:b2:9b:ea:65:85:52:67:44:fb:9b:c3:76:6b:b1: 0f:2c:80:91:5e:be:85:14:41:20:26:e0:5d:c0:41:30:e2:55: d6:68:87:99:e8:c7:e9:9f:bd:6b:87:a2:00:5a:d5:87:d6:ca: 98:0e:e1:d6:f2:b4:50:0e:b9:4c:e8:51:90:b2:e1:a4:2f:db: ff:cf:42:6a:8f:aa:6d:31:e2:cc:09:65:2f:8a:88:05:19:43: b7:dc:85:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEyL4vYDflyXtY6nstmR62HnCbyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlC NzU1RTRGQTAeFw0yNjA2MTYxOTMyNTNaFw0yNjA2MTcyMDIwNTNaMDMxMTAvBgNV BAMTKEJBNkREMTYwM0FCNzZEOTkwRTU4MTk2MUZCMkI1QUVDODZGOTE5RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInUGs47y5C0Opt8+fUAL7elMY 2iFEeIRBNfD8oSwOeGoqryvOe5Tv7E4+30hPHkEVgHyzsGJGZvcmggz+okS9imtp xzTto1+RvkJnidkwlLED8Yz+HruslJCpEMWwYzJK5zB2/UlrbLeqU1bYAyGv+BZC KHQW2JouroFOUsQvHYyaSY/1ycCZPb0S/FiyzZEnpM+ZqIi+rUkKXROslXJOLvyk DaqovJJDk/nTNfUFYP3IKjgIgfFESj1GTM2sX7ctf+Fiu9eMcALmlWtgExf600VX ej66Z05x2Z+FJgCLTEQyNOCq1S0lcclYz+Eajegcvp3DY4c+WaeuFFTBEg3zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUum3RYDq3bZkOWBlh+yta7Ib5GfQwHwYDVR0j BBgwFoAUDfaEGkXn9MPozJCvNrv72bdV5PowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGRhZjlmMGYtNGZiMS00MGMwLWIzODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0 NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlCNzU1RTRGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wREY2ODQxQTQ1RTdGNEMzRThDQzkwQUYzNkJCRkJEOUI3NTVF NEZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZC RDlCNzU1RTRGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3cQ9SRVlLGCMgFFJlfG3L1pREPlMmQGe5s s/PFez6w3fe7zvQ9L55b/85x3c3GBFnPnZZiqu+Tc/yTIXAbMFXwwGucq0i4hTwW wIKhTbWjGsW39T8I8DHxWF+5KKgidAPDhxP1WyPtW23kdCsrrp5p8LQMK036pagg Eccxa0/bBPcfii6Ky8UCe8KVBETYHuzmkN+nEwQ4sqaair8ub/WZHYmO5s2ym+pl hVJnRPubw3ZrsQ8sgJFevoUUQSAm4F3AQTDiVdZoh5nox+mfvWuHogBa1YfWypgO 4dbytFAOuUzoUZCy4aQv2//PQmqPqm0x4swJZS+KiAUZQ7fchYQ= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:04 2026 by rpki-client