$ rpki-client -vvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft File: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft (raw, json) Hash identifier: OoYYFPC5VWY3ZY1bkDHcWoPqLeBxIxvwmkGEvxqEOUQ= Subject key identifier: 44:29:E0:BC:D3:1C:DF:B0:83:C5:A1:F0:3F:70:28:28:B1:AA:15:75 Authority key identifier: 0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 Certificate issuer: /CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Certificate serial: 352808E75F126DA5CC27237CFB616A03BF721CE0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 04:48:45 +0000 Manifest this update: Wed 17 Jun 2026 04:43:45 +0000 Manifest next update: Thu 18 Jun 2026 05:35:45 +0000 Files and hashes: 1: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl (hash: 5UdpsqSl4aTX56W8Ptdw5cLzd+pioWlyT6OedhNt8NU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:28:08:e7:5f:12:6d:a5:cc:27:23:7c:fb:61:6a:03:bf:72:1c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Validity Not Before: Jun 17 04:43:45 2026 GMT Not After : Jun 18 05:35:45 2026 GMT Subject: CN=4429E0BCD31CDFB083C5A1F03F702828B1AA1575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2f:98:3f:23:3d:d5:e3:24:3e:d3:29:65:c5: 2b:82:94:1a:83:49:44:a2:be:dc:5f:19:54:1c:1a: 4c:51:d9:5e:04:1f:52:e9:bb:d8:54:41:e2:f8:ec: a7:a8:ad:dc:4b:06:c6:7f:1c:84:97:bd:69:d0:ac: c4:0f:ee:67:ee:a8:6c:6d:59:cc:d9:80:2e:a9:a8: 1c:b6:8f:65:eb:81:40:ff:60:79:82:ec:79:09:61: e8:51:12:3d:12:91:32:96:c4:c2:3b:6b:88:4e:b8: 07:f8:36:67:7d:7f:0a:ec:04:fb:9c:02:16:cb:41: c6:69:bb:cb:bf:4c:a6:64:07:20:0a:de:de:3c:d1: 4b:28:3b:84:e2:70:8f:ef:19:58:79:69:63:76:58: d7:23:9f:6c:b3:90:5f:d0:7e:10:a9:de:3f:44:9c: 80:02:bf:32:65:26:95:de:14:1c:2e:2f:9e:a3:fe: d9:fc:b3:f6:3e:2f:01:46:af:48:df:e7:39:c2:4c: fb:34:8a:21:93:2e:15:c1:fb:4d:13:65:9a:18:0a: 38:b1:a5:fa:ba:97:19:eb:1a:f8:11:5f:54:d7:d9: b2:fe:02:ec:11:28:90:9b:e5:d2:6c:05:bf:7b:bb: 32:49:9d:0f:3b:ac:df:64:3c:b6:7c:7a:ea:3c:46: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:29:E0:BC:D3:1C:DF:B0:83:C5:A1:F0:3F:70:28:28:B1:AA:15:75 X509v3 Authority Key Identifier: keyid:0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fc:07:2d:a5:75:54:1b:07:28:9d:50:3e:0e:99:f6:d2:1e: 41:fc:17:c9:d2:7d:f6:d1:71:f7:e6:8b:ba:e2:58:eb:79:ad: c1:7e:8b:ab:bd:c8:47:64:45:da:09:26:0e:42:08:06:0e:2e: 95:72:fc:91:32:7a:65:5d:2a:b3:35:dd:5e:0b:b2:35:ec:fb: 02:af:e6:ae:91:21:05:da:f0:30:50:ab:7a:8a:b6:15:3f:b1: 2a:5f:0c:7e:e5:4c:e7:76:ee:f1:77:7d:bb:f8:f4:bd:a0:67: d7:ef:ad:8b:c6:a3:22:13:b3:e3:be:3e:72:f6:06:d6:bd:e0: 08:31:93:f8:a3:35:24:75:c0:b5:ed:0a:36:74:3f:eb:f5:e7: 16:a0:0f:95:ce:26:13:30:e5:6a:a9:c2:3e:4a:f9:1d:da:ec: 8e:5e:d1:aa:f2:fc:e6:12:09:5a:b9:e3:47:01:80:f3:1c:2f: 93:5e:f2:70:9f:d7:92:ca:68:9e:2c:28:1a:60:fd:73:2b:27: 3d:ac:7d:3b:49:27:68:43:9e:9c:eb:8d:da:64:a4:15:54:f7: 90:c7:8f:ad:01:c8:a0:59:61:aa:3c:28:00:3a:03:97:e8:23: 65:09:cc:f6:43:af:3a:50:f9:a6:22:e1:35:cc:00:b7:74:68: 92:35:b1:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNSgI518SbaXMJyN8+2FqA79yHOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZBMDND NjBBRUNEMzAeFw0yNjA2MTcwNDQzNDVaFw0yNjA2MTgwNTM1NDVaMDMxMTAvBgNV BAMTKDQ0MjlFMEJDRDMxQ0RGQjA4M0M1QTFGMDNGNzAyODI4QjFBQTE1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCML5g/Iz3V4yQ+0yllxSuClBqD SUSivtxfGVQcGkxR2V4EH1Lpu9hUQeL47KeordxLBsZ/HISXvWnQrMQP7mfuqGxt WczZgC6pqBy2j2XrgUD/YHmC7HkJYehREj0SkTKWxMI7a4hOuAf4Nmd9fwrsBPuc AhbLQcZpu8u/TKZkByAK3t480UsoO4TicI/vGVh5aWN2WNcjn2yzkF/QfhCp3j9E nIACvzJlJpXeFBwuL56j/tn8s/Y+LwFGr0jf5znCTPs0iiGTLhXB+00TZZoYCjix pfq6lxnrGvgRX1TX2bL+AuwRKJCb5dJsBb97uzJJnQ87rN9kPLZ8euo8RrGZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURCngvNMc37CDxaHwP3AoKLGqFXUwHwYDVR0j BBgwFoAUDn8cOkEYl0mOGc5kxcJqA8YK7NMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEzZGUzZWMtNGQzYy00NDAyLWE3YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0 MTE4OTc0OThFMTlDRTY0QzVDMjZBMDNDNjBBRUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRTdGMUMzQTQxMTg5NzQ5OEUxOUNFNjRDNUMyNkEwM0M2MEFF Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZB MDNDNjBBRUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADv8By2ldVQbByidUD4OmfbSHkH8F8nSffbR cffmi7riWOt5rcF+i6u9yEdkRdoJJg5CCAYOLpVy/JEyemVdKrM13V4LsjXs+wKv 5q6RIQXa8DBQq3qKthU/sSpfDH7lTOd27vF3fbv49L2gZ9fvrYvGoyITs+O+PnL2 Bta94Agxk/ijNSR1wLXtCjZ0P+v15xagD5XOJhMw5Wqpwj5K+R3a7I5e0ary/OYS CVq540cBgPMcL5Ne8nCf15LKaJ4sKBpg/XMrJz2sfTtJJ2hDnpzrjdpkpBVU95DH j60ByKBZYao8KAA6A5foI2UJzPZDrzpQ+aYi4TXMALd0aJI1sWc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:59 2026 by rpki-client