$ rpki-client -vvf rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft File: 0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft (raw, json) Hash identifier: ZYWCEzdnUFmAWxAkNPdVmlpKkikONT702SzUFEnh/1M= Subject key identifier: EF:42:7A:50:A7:0A:3F:DE:BB:0A:00:0C:2B:BB:33:2F:EB:DA:15:86 Authority key identifier: 0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70 Certificate issuer: /CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870 Certificate serial: 6A824A9D8F9C14D5794D56E38BDCA17ADFC4C684 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 07:47:16 +0000 Manifest this update: Wed 17 Jun 2026 07:42:16 +0000 Manifest next update: Thu 18 Jun 2026 11:20:16 +0000 Files and hashes: 1: 0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl (hash: eBirrA0F+mf8U6TnkE9CDTX5otYGOwvQEjy/bYrNXRQ=) 2: 3136302e32322e36362e302f32332d3233203d3e20313534343130.roa (hash: x+Zmass52e0XiEEcxmz35DHW32ZXdCP/lp7OD4a3w4Y=) 3: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: DVbfArMTlg+UHrMZklDTYc3fTbYxFUjdyjuDCut72nE=) 4: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: 4TAm+Tq7VEmBP4/ZDSMoQRtNl/2F8B0387VCKH9srzE=) 5: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: ChO0wv9yKUM7ukCp9cBiuF/qy0Q/8i0Sz7WEvpLu0oo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:82:4a:9d:8f:9c:14:d5:79:4d:56:e3:8b:dc:a1:7a:df:c4:c6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870 Validity Not Before: Jun 17 07:42:16 2026 GMT Not After : Jun 18 11:20:16 2026 GMT Subject: CN=EF427A50A70A3FDEBB0A000C2BBB332FEBDA1586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f2:0d:be:3f:3d:82:ed:c6:8b:db:fc:3a:f0: 3d:e8:95:67:4a:46:ce:92:1f:1d:16:e5:e5:99:69: 44:2b:87:2b:e7:b7:32:37:f1:d3:de:d1:0c:37:f0: 35:b0:b5:34:26:5a:62:fe:a0:94:e4:a7:d2:e8:5c: 7a:f4:4e:c5:12:73:79:72:56:52:21:6f:09:22:36: 38:28:0f:29:2c:12:3c:22:b4:4d:69:3e:c5:db:06: da:17:db:ab:d8:7f:c1:42:ca:c5:f6:22:14:fa:10: c2:44:89:13:cb:27:01:db:51:a3:99:7f:d6:19:4a: b6:ca:d4:18:c7:a9:27:76:47:33:ab:1d:f0:9a:09: 8d:cf:85:b7:eb:8f:39:91:93:9a:4e:cc:14:6d:e2: b3:a3:a9:69:dd:c3:0e:56:cd:7c:d2:56:fb:84:00: 79:01:9c:f6:80:5a:b2:1c:b0:1a:ff:84:37:7a:10: 79:f0:4d:7c:19:ca:89:84:50:68:8b:7e:67:57:e2: 95:c7:7f:14:d3:0f:5a:e8:41:9b:0b:85:d5:ba:b1: a9:ec:ed:aa:e6:e9:e2:73:e0:5e:7e:6d:99:72:bc: af:24:63:ef:6e:6c:74:3a:a4:b0:96:8f:e3:d6:cf: 1a:91:06:66:2c:40:75:2b:39:55:24:21:7d:63:e6: d9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:42:7A:50:A7:0A:3F:DE:BB:0A:00:0C:2B:BB:33:2F:EB:DA:15:86 X509v3 Authority Key Identifier: keyid:0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d9:08:ad:10:1e:4f:04:db:ad:50:23:83:31:89:96:d2:a3: 97:f0:de:5b:bf:ce:9c:e4:7e:38:25:0d:f1:a7:6b:35:a6:f0: 46:67:12:8c:bd:04:91:a8:1c:cc:11:1f:e1:62:6a:ba:99:94: f9:0c:40:18:17:a1:22:7c:12:60:66:5f:89:11:1a:c9:6b:1a: 89:88:76:42:12:b0:8e:8f:3f:ed:dc:c9:4a:fb:73:11:03:58: 7f:0e:2c:66:1e:8c:2c:75:fd:ef:ca:f9:21:46:52:5d:6a:ac: 4d:06:c7:a6:ce:01:16:f7:4c:44:7b:58:e5:c7:5d:ec:87:56: de:16:99:99:6f:fa:14:0b:af:78:82:6c:65:24:a0:05:09:99: 28:d0:4f:aa:f3:9f:81:b2:fa:43:aa:df:5d:79:12:b6:3a:55: ee:35:ce:bf:36:e8:4c:e4:dc:a0:98:09:2a:65:db:57:08:17: a9:44:1f:71:c7:31:3a:ed:e2:a5:f8:ab:ee:26:28:2c:37:f1: 47:6c:7f:f1:6f:c1:41:de:b1:7b:d8:e2:9e:c1:76:6c:c4:b7: 1c:50:ca:35:e6:a7:11:4a:88:71:d1:94:5c:aa:36:ce:ac:19: 49:48:36:31:1c:db:c0:85:02:17:29:cb:00:5d:8e:c9:55:77: 58:32:13:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaoJKnY+cFNV5TVbji9yhet/ExoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjJGMUYwRDEwQzVFQzdENzI0MTBFNTYzNzUyNUI2 MjFDNDg3MDAeFw0yNjA2MTcwNzQyMTZaFw0yNjA2MTgxMTIwMTZaMDMxMTAvBgNV BAMTKEVGNDI3QTUwQTcwQTNGREVCQjBBMDAwQzJCQkIzMzJGRUJEQTE1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf8g2+Pz2C7caL2/w68D3olWdK Rs6SHx0W5eWZaUQrhyvntzI38dPe0Qw38DWwtTQmWmL+oJTkp9LoXHr0TsUSc3ly VlIhbwkiNjgoDyksEjwitE1pPsXbBtoX26vYf8FCysX2IhT6EMJEiRPLJwHbUaOZ f9YZSrbK1BjHqSd2RzOrHfCaCY3PhbfrjzmRk5pOzBRt4rOjqWndww5WzXzSVvuE AHkBnPaAWrIcsBr/hDd6EHnwTXwZyomEUGiLfmdX4pXHfxTTD1roQZsLhdW6sans 7arm6eJz4F5+bZlyvK8kY+9ubHQ6pLCWj+PWzxqRBmYsQHUrOVUkIX1j5tn1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU70J6UKcKP967CgAMK7szL+vaFYYwHwYDVR0j BBgwFoAUD7YvHw0Qxex9ckEOVjdSW2IcSHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRiOTI3ZGYtYmM5Yy00YmU2LWExZmEtMmUxMjVjNDY5ZjcxLzAvMEZCNjJGMUYw RDEwQzVFQzdENzI0MTBFNTYzNzUyNUI2MjFDNDg3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRkI2MkYxRjBEMTBDNUVDN0Q3MjQxMEU1NjM3NTI1QjYyMUM0 ODcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvMEZCNjJGMUYwRDEwQzVFQzdENzI0MTBFNTYzNzUy NUI2MjFDNDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLZCK0QHk8E261QI4MxiZbSo5fw3lu/zpzk fjglDfGnazWm8EZnEoy9BJGoHMwRH+FiarqZlPkMQBgXoSJ8EmBmX4kRGslrGomI dkISsI6PP+3cyUr7cxEDWH8OLGYejCx1/e/K+SFGUl1qrE0Gx6bOARb3TER7WOXH XeyHVt4WmZlv+hQLr3iCbGUkoAUJmSjQT6rzn4Gy+kOq3115ErY6Ve41zr826Ezk 3KCYCSpl21cIF6lEH3HHMTrt4qX4q+4mKCw38Udsf/FvwUHesXvY4p7BdmzEtxxQ yjXmpxFKiHHRlFyqNs6sGUlINjEc28CFAhcpywBdjslVd1gyE1I= -----END CERTIFICATE-----Generated at Wed Jun 17 10:37:32 2026 by rpki-client