$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft File: 0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft (raw, json) Hash identifier: GTfzdiZxUbcsC/mhOejKNbjY58f7j54wBKl21PV+IEc= Subject key identifier: F4:D0:65:54:B2:7A:BE:B0:20:D7:E6:32:6C:AC:96:F4:4A:3B:0F:34 Authority key identifier: 0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E Certificate issuer: /CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E Certificate serial: 5A784E65B4DCFB52A0A3FA633027A30F12819A7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 17:09:54 +0000 Manifest this update: Tue 16 Jun 2026 17:04:54 +0000 Manifest next update: Wed 17 Jun 2026 20:31:54 +0000 Files and hashes: 1: 0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl (hash: 4ECdfIW8LeTlB01T9JWf79xt3E8XijbjJdsSPp+tptg=) 2: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: /5dNawMylgFAUVXMnACcE1jgMAFNneCBr14eai7kMCU=) 3: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: FBsWEYtMf7mRaTuEZ/0PxyglRDybKAQxH+CcBw6tqDM=) 4: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: yzj0R3It9R2jU9wBDpqzfiEHW+8PEhf6218rNQIPbSs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:78:4e:65:b4:dc:fb:52:a0:a3:fa:63:30:27:a3:0f:12:81:9a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E Validity Not Before: Jun 16 17:04:54 2026 GMT Not After : Jun 17 20:31:54 2026 GMT Subject: CN=F4D06554B27ABEB020D7E6326CAC96F44A3B0F34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:65:4a:28:ab:ac:6d:9c:28:5e:2c:c3:ee: 6f:86:ec:33:45:a1:ba:e1:1e:c4:d9:a1:78:d9:5d: 20:3b:4a:20:da:00:24:fe:4f:78:d6:13:29:ef:3c: ec:82:c2:31:db:b8:f8:7b:66:90:2e:01:4f:34:72: 17:77:b0:ee:68:93:2d:70:49:52:a9:86:6f:5e:cd: 9b:f0:8f:47:7a:cf:95:3c:71:5a:1d:14:e5:16:5e: 60:3d:a8:9a:d0:1e:fe:39:09:70:c3:b3:dc:08:8f: 7e:41:f5:e0:0c:58:a3:b8:64:8f:47:33:95:c8:c6: 18:ca:ad:ab:22:4a:37:11:b0:27:65:0c:99:17:3f: 2e:0a:65:8b:52:55:23:c2:f1:e6:a4:b2:09:b8:f8: 3f:1b:24:ea:14:d4:5e:cf:e4:a7:14:41:8e:3a:27: 98:1b:e6:db:00:05:d5:6f:33:97:a1:13:fd:33:0d: 7d:17:ed:3c:30:fe:d8:16:87:27:c6:93:c2:00:74: 9e:81:4f:d3:7a:5a:7c:25:77:f5:95:81:5f:57:e0: 79:09:09:b6:0d:ae:33:60:c3:01:8c:03:fc:62:1a: a3:bf:1b:16:a2:c5:3a:71:87:72:af:06:07:b6:43: 10:d1:3a:4b:84:4f:93:70:c4:e8:50:e2:32:d0:6a: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D0:65:54:B2:7A:BE:B0:20:D7:E6:32:6C:AC:96:F4:4A:3B:0F:34 X509v3 Authority Key Identifier: keyid:0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0c:7d:9a:1a:30:05:6e:7a:df:fe:21:71:40:40:53:d9:e4: ae:b8:5b:6d:b6:b3:c0:2f:3e:64:d0:4e:a4:09:9c:4a:0d:80: f3:59:48:4d:08:18:c9:25:bc:25:f2:8b:f0:9b:eb:b4:eb:33: 8b:04:da:7c:e4:98:01:e3:ba:d6:20:02:bd:e9:33:59:81:43: 85:1f:51:51:30:07:c2:64:4c:dc:14:9e:8c:3a:7a:58:79:8e: a4:9f:91:e0:96:21:9d:7a:ce:6f:3e:91:9a:85:fd:43:87:7f: 01:bf:dc:ca:2a:5b:7e:00:a6:82:61:23:a6:6f:19:6f:7e:e8: e7:c3:af:d5:ea:62:a7:11:1a:57:9e:ce:3a:99:65:b2:00:4b: a2:b7:fd:37:9a:38:4e:66:97:4b:07:ce:d9:f8:f6:e6:95:ee: 3e:5b:ab:f2:e4:28:c3:ef:60:2d:eb:37:a4:1e:ea:eb:da:c5: 96:83:03:fc:1d:6c:af:cf:f0:31:c3:4e:e4:7d:04:02:cb:e6: d0:a1:55:37:88:a6:74:cd:8c:b0:9d:f7:93:6f:5f:f9:ec:7c: f5:c3:2b:81:4d:78:60:f8:2f:b2:ef:84:50:e7:82:12:2c:da: ee:c5:42:af:69:ba:1e:1b:d9:ff:2b:95:f4:ba:51:ce:8d:7b: 71:b4:e9:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWnhOZbTc+1Kgo/pjMCejDxKBmn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIxQTc1NkQ2RjFCMTg4RURFRkE1REQ1Q0MzNDI1RDMz QTIzQUM5RTAeFw0yNjA2MTYxNzA0NTRaFw0yNjA2MTcyMDMxNTRaMDMxMTAvBgNV BAMTKEY0RDA2NTU0QjI3QUJFQjAyMEQ3RTYzMjZDQUM5NkY0NEEzQjBGMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwWVKKKusbZwoXizD7m+G7DNF obrhHsTZoXjZXSA7SiDaACT+T3jWEynvPOyCwjHbuPh7ZpAuAU80chd3sO5oky1w SVKphm9ezZvwj0d6z5U8cVodFOUWXmA9qJrQHv45CXDDs9wIj35B9eAMWKO4ZI9H M5XIxhjKrasiSjcRsCdlDJkXPy4KZYtSVSPC8eaksgm4+D8bJOoU1F7P5KcUQY46 J5gb5tsABdVvM5ehE/0zDX0X7Tww/tgWhyfGk8IAdJ6BT9N6Wnwld/WVgV9X4HkJ CbYNrjNgwwGMA/xiGqO/GxaixTpxh3KvBge2QxDROkuET5NwxOhQ4jLQaqwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9NBlVLJ6vrAg1+YybKyW9Eo7DzQwHwYDVR0j BBgwFoAUCxp1bW8bGI7e+l3VzDQl0zojrJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2QyNjY1MTEtNjM5ZS00YzJiLTk2MzQtOWNjMWUyMmZhNzA4LzAvMEIxQTc1NkQ2 RjFCMTg4RURFRkE1REQ1Q0MzNDI1RDMzQTIzQUM5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjFBNzU2RDZGMUIxODhFREVGQTVERDVDQzM0MjVEMzNBMjNB QzlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvMEIxQTc1NkQ2RjFCMTg4RURFRkE1REQ1Q0MzNDI1 RDMzQTIzQUM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwMfZoaMAVuet/+IXFAQFPZ5K64W222s8Av PmTQTqQJnEoNgPNZSE0IGMklvCXyi/Cb67TrM4sE2nzkmAHjutYgAr3pM1mBQ4Uf UVEwB8JkTNwUnow6elh5jqSfkeCWIZ16zm8+kZqF/UOHfwG/3MoqW34ApoJhI6Zv GW9+6OfDr9XqYqcRGleezjqZZbIAS6K3/TeaOE5ml0sHztn49uaV7j5bq/LkKMPv YC3rN6Qe6uvaxZaDA/wdbK/P8DHDTuR9BALL5tChVTeIpnTNjLCd95NvX/nsfPXD K4FNeGD4L7LvhFDnghIs2u7FQq9puh4b2f8rlfS6Uc6Ne3G06U8= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:24 2026 by rpki-client