$ rpki-client -vvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft File: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft (raw, json) Hash identifier: vifjQkA+sxr073jugmjZ44HRrPbKHEUmMqTCKjr6qTQ= Subject key identifier: 6F:6D:C0:6A:55:7C:02:AB:22:17:C0:14:AE:B4:99:FB:01:8F:CF:18 Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Certificate serial: 5DC02ABC1AB12C04262C5FCFC3438B13EF9B7642 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 14:16:53 +0000 Manifest this update: Sat 13 Jun 2026 14:11:53 +0000 Manifest next update: Sun 14 Jun 2026 18:04:53 +0000 Files and hashes: 1: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: k9hB5TmUACjkJxeE951FHmSf1SEQX33K8sTdpuXO8BI=) 2: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl (hash: RFhEJtBjL3FnNJ4W0I8HPkjf8XX6eFgsC1JB3dDcMgM=) 3: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c0:2a:bc:1a:b1:2c:04:26:2c:5f:cf:c3:43:8b:13:ef:9b:76:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Validity Not Before: Jun 13 14:11:53 2026 GMT Not After : Jun 14 18:04:53 2026 GMT Subject: CN=6F6DC06A557C02AB2217C014AEB499FB018FCF18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:51:e9:8c:67:84:11:72:24:4b:c3:ca:68: 60:b0:ca:64:c8:e7:b7:51:51:ad:86:e3:2a:dc:6b: 36:5b:46:5c:9e:8e:09:6e:34:39:fc:66:77:43:47: fd:d0:e9:9f:4a:57:8a:cb:e8:da:7e:37:d9:a4:9a: 28:76:5c:f8:12:0a:2f:4c:ab:be:2a:05:5a:4d:a7: b1:36:71:81:77:76:42:dd:1b:55:72:55:38:d9:70: 96:82:f4:2c:14:7a:38:44:fb:37:1e:b2:20:5f:f4: 1f:b9:db:85:f7:05:72:fd:4f:d3:02:93:48:74:01: bf:d4:eb:81:7d:76:2f:28:c9:41:d9:d5:ce:13:0c: aa:3c:f6:b2:91:f8:b7:3e:e5:3e:b9:55:ff:1f:14: 2c:eb:85:1b:5b:f4:0d:8b:52:e9:49:16:81:e2:56: 75:0b:a0:33:cf:ca:32:83:be:c4:aa:aa:aa:f2:e6: 44:2f:25:c0:26:58:5f:b5:b5:f9:13:ed:aa:ae:7e: 45:6d:4a:44:16:c6:ac:41:5f:06:fe:86:60:08:c0: 24:08:21:0a:d4:3c:73:37:aa:06:50:a7:65:d9:87: 3b:d4:9d:7e:dc:5b:cc:0c:57:66:7d:1a:70:31:07: 1d:83:48:62:ff:05:0e:9a:87:ac:44:b5:67:6a:b2: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6D:C0:6A:55:7C:02:AB:22:17:C0:14:AE:B4:99:FB:01:8F:CF:18 X509v3 Authority Key Identifier: keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7c:c3:a7:ce:bd:fe:87:b8:ba:cd:55:2c:7b:ec:92:6c:a8: 51:11:17:45:85:23:09:bf:ef:c6:70:5c:6c:07:5d:a1:eb:64: 2e:42:f8:5d:0d:89:84:cb:6a:74:24:16:ed:5d:c1:28:33:7c: 03:25:1b:55:39:aa:92:59:8f:6b:64:1f:e5:68:83:a0:92:cc: a3:ad:1b:2a:15:69:e8:c4:b1:7a:b9:a8:35:ed:42:1c:5e:99: 98:8d:7f:a4:ca:c9:77:0d:78:15:95:32:a5:32:97:26:3b:57: b4:96:5e:be:68:39:4b:3b:e7:c6:d3:a7:99:4d:a1:0d:5c:19: b5:a0:45:21:67:c6:aa:8c:50:bd:e1:5f:04:da:65:fd:6c:4f: 82:1d:71:81:0f:ff:d6:8f:0b:88:e5:41:dc:4e:2f:4e:4a:82: 53:5d:70:e8:0c:e3:0b:87:3f:35:8b:9f:8c:6f:ae:61:7f:30: f9:32:c5:41:cf:2b:ca:0e:17:9d:67:73:ef:83:86:54:7c:a2: e3:46:65:88:9a:7a:17:4f:5e:33:ea:d8:4d:62:b7:de:93:6c: 77:0d:19:22:08:f5:78:da:58:21:58:5f:c3:d5:e5:4e:0b:55: 8f:f2:44:28:56:50:8c:44:b0:c1:45:d7:cb:a1:df:aa:49:82: 14:cf:ac:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXcAqvBqxLAQmLF/Pw0OLE++bdkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RF RkU5QjVBMzAeFw0yNjA2MTMxNDExNTNaFw0yNjA2MTQxODA0NTNaMDMxMTAvBgNV BAMTKDZGNkRDMDZBNTU3QzAyQUIyMjE3QzAxNEFFQjQ5OUZCMDE4RkNGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbaFHpjGeEEXIkS8PKaGCwymTI 57dRUa2G4yrcazZbRlyejgluNDn8ZndDR/3Q6Z9KV4rL6Np+N9mkmih2XPgSCi9M q74qBVpNp7E2cYF3dkLdG1VyVTjZcJaC9CwUejhE+zcesiBf9B+524X3BXL9T9MC k0h0Ab/U64F9di8oyUHZ1c4TDKo89rKR+Lc+5T65Vf8fFCzrhRtb9A2LUulJFoHi VnULoDPPyjKDvsSqqqry5kQvJcAmWF+1tfkT7aqufkVtSkQWxqxBXwb+hmAIwCQI IQrUPHM3qgZQp2XZhzvUnX7cW8wMV2Z9GnAxBx2DSGL/BQ6ah6xEtWdqssDdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb23AalV8AqsiF8AUrrSZ+wGPzxgwHwYDVR0j BBgwFoAUDyCwYBSdvzFoG0MhuoXWfe/ptaMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4MmJjYTMtZTg1OC00ZDUyLWIxYTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAx NDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RFRkU5QjVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjIwQjA2MDE0OURCRjMxNjgxQjQzMjFCQTg1RDY3REVGRTlC NUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2 N0RFRkU5QjVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA18w6fOvf6HuLrNVSx77JJsqFERF0WFIwm/ 78ZwXGwHXaHrZC5C+F0NiYTLanQkFu1dwSgzfAMlG1U5qpJZj2tkH+Vog6CSzKOt GyoVaejEsXq5qDXtQhxemZiNf6TKyXcNeBWVMqUylyY7V7SWXr5oOUs758bTp5lN oQ1cGbWgRSFnxqqMUL3hXwTaZf1sT4IdcYEP/9aPC4jlQdxOL05KglNdcOgM4wuH PzWLn4xvrmF/MPkyxUHPK8oOF51nc++DhlR8ouNGZYiaehdPXjPq2E1it96TbHcN GSII9XjaWCFYX8PV5U4LVY/yRChWUIxEsMFF18uh36pJghTPrGM= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:41 2026 by rpki-client