$ rpki-client -vvf rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft File: 1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft (raw, json) Hash identifier: ntCqo/CQfwtIPh5WyYZUMQ1et3jhIvihkrVtd2eOSks= Subject key identifier: A5:1D:A6:06:F3:E5:DE:DB:96:5A:9C:FB:61:D2:0D:4A:05:AA:89:E1 Authority key identifier: 1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F Certificate issuer: /CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F Certificate serial: 01D2B152BA2709E79704FD7F0961B87F67FEA151 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 08:34:19 +0000 Manifest this update: Sat 13 Jun 2026 08:29:19 +0000 Manifest next update: Sun 14 Jun 2026 10:47:19 +0000 Files and hashes: 1: 3136302e32302e37362e302f32332d3234203d3e20313532383133.roa (hash: WmfkE886z9xGlwBdZyGHayr+TJn3pXQ1PU74UP08FBw=) 2: 1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl (hash: 1k3gIpkZcxxtipb2GAYI87bFNpaUE+GxBKmh37yeRsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d2:b1:52:ba:27:09:e7:97:04:fd:7f:09:61:b8:7f:67:fe:a1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F Validity Not Before: Jun 13 08:29:19 2026 GMT Not After : Jun 14 10:47:19 2026 GMT Subject: CN=A51DA606F3E5DEDB965A9CFB61D20D4A05AA89E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:9c:fa:7d:b8:02:19:b5:64:5b:86:a3:a1: 57:da:8b:cf:2c:7c:a7:f8:98:f1:3e:e6:0c:56:7b: 3b:f4:48:e8:89:8b:9a:8a:1e:38:ae:06:0e:a5:9c: 1b:43:d9:be:ed:ed:46:07:cc:35:af:b1:64:d9:f9: 27:7d:6b:1d:a5:35:ae:18:de:97:a4:47:5e:92:26: 34:37:80:66:95:1b:ec:87:6f:ad:6f:ed:2a:ea:cc: 32:bd:6c:23:c0:a3:bf:f7:c1:19:b8:6b:ea:da:12: ee:24:5b:b4:35:56:d6:e3:46:b3:18:46:58:3c:f3: 0e:5e:4d:a9:7f:40:5f:ae:8d:aa:0f:78:15:71:eb: 50:0e:9d:4d:07:60:8e:1f:4e:96:51:a1:94:af:99: b2:20:a8:ee:c0:b1:79:88:0b:fd:bc:6a:60:b8:71: 69:ba:46:2e:04:3f:c9:77:c8:71:cb:34:80:7d:3f: 19:0b:dd:6d:f6:a0:4a:ad:69:be:c3:51:59:98:f8: ad:6d:26:b1:3b:46:a7:c8:c6:dc:4d:6e:dc:4f:72: e8:aa:be:d7:9b:bc:53:74:56:b2:b2:19:59:f2:e4: a6:ab:c2:b6:c2:46:98:80:02:24:fc:a4:81:b9:e6: 1d:e3:bc:0c:00:a6:f8:a5:95:ab:d3:c8:06:d2:80: a3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1D:A6:06:F3:E5:DE:DB:96:5A:9C:FB:61:D2:0D:4A:05:AA:89:E1 X509v3 Authority Key Identifier: keyid:1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:47:d1:34:f2:3d:b2:a7:f5:e4:95:1d:68:84:19:3b:2f:1c: 92:8e:12:81:c7:32:d7:8e:f8:c8:c9:5e:1f:43:a8:26:a5:57: 24:69:99:23:39:d8:cd:45:08:49:26:36:71:7c:c8:c8:c7:90: 2b:ee:16:25:14:1e:a9:74:84:b8:70:cf:39:ac:09:69:94:cf: cb:84:1a:77:fe:3a:4f:0d:07:8b:91:c2:a6:0f:a2:0e:5d:ee: b9:59:10:a5:44:89:9a:0b:64:69:f6:68:ea:7d:ca:cf:d0:44: 00:0f:c3:84:50:e6:25:9c:b0:9c:93:d0:dc:35:da:57:06:9f: 31:30:23:51:d8:f7:b6:38:c8:ca:c4:6d:ee:fb:b2:89:23:32: 7b:41:c2:28:59:1f:b8:28:ba:3f:ed:fa:70:e3:c3:c6:e6:ba: bf:d0:49:bf:52:5f:8f:73:9d:88:f1:30:9a:48:a7:08:30:99: 23:89:a9:7c:56:44:26:95:c0:40:72:ba:fe:f3:a2:6b:4d:b4: 20:6e:6f:4a:6a:ee:15:ca:92:51:92:f6:05:15:39:40:94:d7: f2:75:bc:ba:93:3d:e0:b4:88:30:d9:a2:6c:86:7f:2d:21:e9: 50:b4:17:fd:2b:93:bf:7e:de:e6:c3:e5:cb:a4:e9:78:c1:7d: 18:d2:90:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAdKxUronCeeXBP1/CWG4f2f+oVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEwQkIwRERDNTBBNDgyMjU5NUFFNzE4REY2NDZENjA3 MDBBRjYxRjAeFw0yNjA2MTMwODI5MTlaFw0yNjA2MTQxMDQ3MTlaMDMxMTAvBgNV BAMTKEE1MURBNjA2RjNFNURFREI5NjVBOUNGQjYxRDIwRDRBMDVBQTg5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgPJz6fbgCGbVkW4ajoVfai88s fKf4mPE+5gxWezv0SOiJi5qKHjiuBg6lnBtD2b7t7UYHzDWvsWTZ+Sd9ax2lNa4Y 3pekR16SJjQ3gGaVG+yHb61v7SrqzDK9bCPAo7/3wRm4a+raEu4kW7Q1VtbjRrMY Rlg88w5eTal/QF+ujaoPeBVx61AOnU0HYI4fTpZRoZSvmbIgqO7AsXmIC/28amC4 cWm6Ri4EP8l3yHHLNIB9PxkL3W32oEqtab7DUVmY+K1tJrE7RqfIxtxNbtxPcuiq vtebvFN0VrKyGVny5KarwrbCRpiAAiT8pIG55h3jvAwApvillavTyAbSgKO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpR2mBvPl3tuWWpz7YdINSgWqieEwHwYDVR0j BBgwFoAUGguw3cUKSCJZWucY32RtYHAK9h8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFjMDljOWUtZmU4YS00OTg5LWI1YmItYWU0MTkzMzhmODczLzAvMUEwQkIwRERD NTBBNDgyMjU5NUFFNzE4REY2NDZENjA3MDBBRjYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQTBCQjBEREM1MEE0ODIyNTk1QUU3MThERjY0NkQ2MDcwMEFG NjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFjMDljOWUtZmU4YS00OTg5LWI1 YmItYWU0MTkzMzhmODczLzAvMUEwQkIwRERDNTBBNDgyMjU5NUFFNzE4REY2NDZE NjA3MDBBRjYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFH0TTyPbKn9eSVHWiEGTsvHJKOEoHHMteO +MjJXh9DqCalVyRpmSM52M1FCEkmNnF8yMjHkCvuFiUUHql0hLhwzzmsCWmUz8uE Gnf+Ok8NB4uRwqYPog5d7rlZEKVEiZoLZGn2aOp9ys/QRAAPw4RQ5iWcsJyT0Nw1 2lcGnzEwI1HY97Y4yMrEbe77sokjMntBwihZH7gouj/t+nDjw8bmur/QSb9SX49z nYjxMJpIpwgwmSOJqXxWRCaVwEByuv7zomtNtCBub0pq7hXKklGS9gUVOUCU1/J1 vLqTPeC0iDDZomyGfy0h6VC0F/0rk79+3ubD5cuk6XjBfRjSkGg= -----END CERTIFICATE-----Generated at Sat Jun 13 13:38:47 2026 by rpki-client