$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft File: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft (raw, json) Hash identifier: cL3szQ4/x4JsiyiuMIWRBJGM2Gr6TmDyk+N7zNFHBXc= Subject key identifier: C0:40:22:19:97:10:BF:44:33:7E:B0:DF:00:74:35:42:F7:E3:86:C9 Authority key identifier: 0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 Certificate issuer: /CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Certificate serial: 2F7ABFC56B96DF64B6406152315129AA485AC721 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:48:23 +0000 Manifest this update: Tue 16 Jun 2026 15:43:23 +0000 Manifest next update: Wed 17 Jun 2026 18:56:23 +0000 Files and hashes: 1: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: Si+I+kPmeWkzvO8zwLh244+U9aO/cSZUp2EBTlhcW1Q=) 2: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: EdEGFXLSGBP0MFU7fBfQCb+Ije/hW5JPZPkjvdhCXtQ=) 3: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: Pp4p1IAwL6T/SUuRHLsPL1o2X/hw7FiM+dsJ0iekdE8=) 4: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: OsAoJbYittbq+gZll27kuO9hviTpRYTbYAhazIaxU6I=) 5: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl (hash: FnSd0HExGTofGkTOGnX3r5otaNuZCrc44i7Mrh3/QdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7a:bf:c5:6b:96:df:64:b6:40:61:52:31:51:29:aa:48:5a:c7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Validity Not Before: Jun 16 15:43:23 2026 GMT Not After : Jun 17 18:56:23 2026 GMT Subject: CN=C04022199710BF44337EB0DF00743542F7E386C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:8f:8a:40:ac:fb:80:4e:74:e2:c0:5f:08: 5b:27:67:40:e7:d5:50:03:18:85:a6:f7:53:17:c2: 0f:64:93:56:8c:4f:0b:47:4d:bb:9c:bd:1d:93:42: d5:61:50:fd:94:c0:b0:b5:89:0e:61:44:7f:d9:39: 63:01:85:73:e7:5c:ce:06:03:c6:14:d3:84:5b:c6: 09:ec:bc:62:39:4b:20:27:b0:21:2b:3d:c1:53:d6: b1:44:ef:80:e8:86:4f:85:73:e9:19:b9:70:c4:64: 8a:cc:6a:4e:19:ac:5a:75:21:57:f7:3f:d3:f9:7f: 90:5b:49:84:ce:74:06:e1:bf:5e:c9:44:77:0b:bb: dd:c6:5c:87:bf:55:66:ea:e4:9f:63:f8:b7:2e:ee: e5:ca:70:d0:4e:05:4d:27:48:cc:15:4f:c5:3b:ee: d7:27:c0:3c:f6:cf:fe:ed:4b:e4:a6:3b:20:96:b8: ad:b9:4e:1a:e4:11:8b:18:06:18:38:c2:e1:83:79: 38:5b:bc:42:aa:e3:cd:e1:e6:aa:c5:b5:b9:a9:84: 9e:14:dd:99:39:bd:32:6e:c1:f5:c3:28:f3:3f:02: 60:50:52:be:ea:97:4f:08:ec:82:89:3e:15:50:2e: f6:9d:e0:08:20:6b:3b:be:c7:38:37:fd:52:53:68: 70:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:40:22:19:97:10:BF:44:33:7E:B0:DF:00:74:35:42:F7:E3:86:C9 X509v3 Authority Key Identifier: keyid:0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:47:d0:a1:98:9d:83:5a:b7:f3:d2:6f:5d:e9:2f:6b:92:a0: 17:04:16:c6:b4:11:4b:ce:a5:0a:4b:8a:47:a5:39:5a:4c:9c: 6a:10:de:c3:00:cb:f0:3b:68:a5:e4:7a:bd:c9:ed:d0:a3:cc: 16:cc:1a:ef:24:b3:a4:b4:d6:a8:f5:02:e0:90:a6:89:d2:a7: 8c:0b:79:aa:ba:63:ee:85:42:26:96:f1:ee:e2:41:f8:14:b0: 26:86:98:ab:3b:97:46:52:29:d4:5f:10:b1:5f:cb:e6:8d:2c: b0:22:51:ed:1c:c1:d6:41:18:74:52:a1:80:a6:a0:07:a8:e6: 07:b3:f6:42:31:09:f9:06:fd:a1:f9:67:78:3f:4e:c9:da:b1: 26:22:f8:31:8e:68:95:8a:65:38:0a:d8:cf:ef:80:71:4e:86: 36:83:6d:00:e6:31:27:d3:f9:69:c7:cb:7e:3d:ae:55:ee:fe: 4a:8d:19:38:f1:77:1e:5d:4e:61:8a:c7:b4:07:79:ea:46:a4: 4a:84:67:db:64:d2:51:70:9a:e1:9b:21:88:24:e5:cd:83:8f: ed:40:0c:81:47:b4:52:f6:fe:90:01:b6:6d:72:ca:ff:13:3c: ba:8d:2d:c5:7e:b2:7d:04:97:ae:44:e8:eb:cf:3d:2b:91:5b: bb:a3:b5:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL3q/xWuW32S2QGFSMVEpqkhaxyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUExMDhE OUE2NDBGNjAeFw0yNjA2MTYxNTQzMjNaFw0yNjA2MTcxODU2MjNaMDMxMTAvBgNV BAMTKEMwNDAyMjE5OTcxMEJGNDQzMzdFQjBERjAwNzQzNTQyRjdFMzg2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSo+KQKz7gE504sBfCFsnZ0Dn 1VADGIWm91MXwg9kk1aMTwtHTbucvR2TQtVhUP2UwLC1iQ5hRH/ZOWMBhXPnXM4G A8YU04RbxgnsvGI5SyAnsCErPcFT1rFE74Dohk+Fc+kZuXDEZIrMak4ZrFp1IVf3 P9P5f5BbSYTOdAbhv17JRHcLu93GXIe/VWbq5J9j+Lcu7uXKcNBOBU0nSMwVT8U7 7tcnwDz2z/7tS+SmOyCWuK25ThrkEYsYBhg4wuGDeThbvEKq483h5qrFtbmphJ4U 3Zk5vTJuwfXDKPM/AmBQUr7ql08I7IKJPhVQLvad4Aggazu+xzg3/VJTaHBhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwEAiGZcQv0QzfrDfAHQ1QvfjhskwHwYDVR0j BBgwFoAUDpJ86c+uAZWXAdi6oxqhCNmmQPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE0OTNiZTEtZjA2NC00OWU2LTk0OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlD RkFFMDE5NTk3MDFEOEJBQTMxQUExMDhEOUE2NDBGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTkyN0NFOUNGQUUwMTk1OTcwMUQ4QkFBMzFBQTEwOEQ5QTY0 MEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUEx MDhEOUE2NDBGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJH0KGYnYNat/PSb13pL2uSoBcEFsa0EUvO pQpLikelOVpMnGoQ3sMAy/A7aKXker3J7dCjzBbMGu8ks6S01qj1AuCQponSp4wL eaq6Y+6FQiaW8e7iQfgUsCaGmKs7l0ZSKdRfELFfy+aNLLAiUe0cwdZBGHRSoYCm oAeo5gez9kIxCfkG/aH5Z3g/TsnasSYi+DGOaJWKZTgK2M/vgHFOhjaDbQDmMSfT +WnHy349rlXu/kqNGTjxdx5dTmGKx7QHeepGpEqEZ9tk0lFwmuGbIYgk5c2Dj+1A DIFHtFL2/pABtm1yyv8TPLqNLcV+sn0El65E6OvPPSuRW7ujtek= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:30 2026 by rpki-client