$ rpki-client -vvf rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft File: 0F839E8933417407BE7F5816D8EA6AF790E1362D.mft (raw, json) Hash identifier: otAXF4GDONWpXn+pPvOm7UcebDOfdYPCqxl4w2T/r/0= Subject key identifier: 7F:84:49:2B:84:1E:EF:50:3F:AB:77:A7:4A:97:1A:CF:C9:71:C1:9D Authority key identifier: 0F:83:9E:89:33:41:74:07:BE:7F:58:16:D8:EA:6A:F7:90:E1:36:2D Certificate issuer: /CN=0F839E8933417407BE7F5816D8EA6AF790E1362D Certificate serial: 7BFAEF56BA9541EF25417F94EE8722D4230748CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 02:05:16 +0000 Manifest this update: Wed 17 Jun 2026 02:00:16 +0000 Manifest next update: Thu 18 Jun 2026 02:11:16 +0000 Files and hashes: 1: 0F839E8933417407BE7F5816D8EA6AF790E1362D.crl (hash: t3LnlslL0iMn8ZgN22n7DN8df28jxbAUXU4ZhgzJS3s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.crl rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:fa:ef:56:ba:95:41:ef:25:41:7f:94:ee:87:22:d4:23:07:48:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F839E8933417407BE7F5816D8EA6AF790E1362D Validity Not Before: Jun 17 02:00:16 2026 GMT Not After : Jun 18 02:11:16 2026 GMT Subject: CN=7F84492B841EEF503FAB77A74A971ACFC971C19D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:29:8a:55:d8:3d:b7:f1:68:5c:cd:0e:61:17: 78:fc:d0:71:be:89:1d:c4:c7:30:cc:15:9a:7f:44: b7:da:7f:a2:b2:f6:fa:b4:7c:37:0a:71:e7:3c:23: 91:e1:1a:54:50:84:b2:e6:43:97:76:b9:bd:26:60: 67:41:b7:f7:89:21:03:06:22:67:72:a1:12:fa:c7: 0d:a9:fb:ea:ba:33:11:13:32:18:c5:30:f0:47:2a: 8b:be:19:e2:88:e6:a5:ae:a9:5c:19:34:72:69:43: 0e:eb:e4:5c:3c:e7:ab:e9:56:94:d5:4a:f0:60:aa: 4f:ce:dd:44:d1:30:e7:c9:3f:4c:b5:a8:29:95:7b: 5b:31:bb:c9:68:c7:aa:60:28:bd:7b:0b:be:5f:a9: b3:cb:94:6a:23:ae:ff:d7:1c:53:da:79:08:60:01: 55:e0:5f:07:22:6f:13:27:a4:b4:b8:b5:19:95:c1: 50:f9:db:19:10:b8:a8:84:93:25:54:ea:cf:37:e3: a0:2d:e5:61:4b:54:be:b6:c7:60:d4:0d:49:d4:db: bf:fe:d4:c0:bd:c9:78:99:78:5b:2c:96:f4:83:6b: 68:b0:ab:63:9b:df:71:f7:bd:86:eb:85:8c:ed:00: 3f:2c:f7:a8:44:3d:d7:af:2a:c7:e7:cb:d8:48:5d: b4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:84:49:2B:84:1E:EF:50:3F:AB:77:A7:4A:97:1A:CF:C9:71:C1:9D X509v3 Authority Key Identifier: keyid:0F:83:9E:89:33:41:74:07:BE:7F:58:16:D8:EA:6A:F7:90:E1:36:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:8a:30:4a:c6:e0:71:a6:b0:7b:f4:6f:be:a9:e2:11:ed:dc: e0:63:64:1f:62:b0:5d:8c:38:67:62:f0:ce:10:fc:f9:f3:4e: 9d:9d:d1:aa:29:e2:bf:68:b9:e7:bb:b8:51:ba:bd:d6:9b:40: 8b:35:6a:63:19:fc:ef:71:d3:c9:7f:e5:56:74:b6:a9:5b:1c: 44:b1:46:c5:37:ef:94:af:79:95:ed:12:28:2c:51:ae:7f:c2: 09:b1:08:e2:73:32:9a:bf:fa:c3:37:76:7a:78:4a:bd:7b:44: c0:35:86:05:54:ab:de:ee:3a:33:54:4a:0e:b9:6b:b8:f5:85: b1:27:39:83:b3:53:10:99:68:ce:00:db:f3:ba:83:19:b4:22: 2c:bc:fa:63:ef:b6:d2:a6:bf:7e:ff:b0:68:66:2c:89:17:48: 69:74:17:08:3c:39:e3:05:7f:50:ba:cc:df:50:4a:83:9f:7c: d8:df:70:fc:44:c4:28:77:d9:b4:54:a9:97:4a:b8:55:f5:66: 67:5e:4a:91:2f:79:63:38:b6:31:05:06:92:86:50:7c:aa:d3: c8:fd:68:75:c5:23:5a:de:0e:70:16:76:fe:a9:fc:46:8c:c8: 5f:49:92:c8:08:9e:1e:fa:b4:e6:01:fe:8e:88:2f:6b:03:83: 5f:a0:85:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/rvVrqVQe8lQX+U7oci1CMHSMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY4MzlFODkzMzQxNzQwN0JFN0Y1ODE2RDhFQTZBRjc5 MEUxMzYyRDAeFw0yNjA2MTcwMjAwMTZaFw0yNjA2MTgwMjExMTZaMDMxMTAvBgNV BAMTKDdGODQ0OTJCODQxRUVGNTAzRkFCNzdBNzRBOTcxQUNGQzk3MUMxOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKYpV2D238WhczQ5hF3j80HG+ iR3ExzDMFZp/RLfaf6Ky9vq0fDcKcec8I5HhGlRQhLLmQ5d2ub0mYGdBt/eJIQMG ImdyoRL6xw2p++q6MxETMhjFMPBHKou+GeKI5qWuqVwZNHJpQw7r5Fw856vpVpTV SvBgqk/O3UTRMOfJP0y1qCmVe1sxu8lox6pgKL17C75fqbPLlGojrv/XHFPaeQhg AVXgXwcibxMnpLS4tRmVwVD52xkQuKiEkyVU6s8346At5WFLVL62x2DUDUnU27/+ 1MC9yXiZeFsslvSDa2iwq2Ob33H3vYbrhYztAD8s96hEPdevKsfny9hIXbSHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf4RJK4Qe71A/q3enSpcaz8lxwZ0wHwYDVR0j BBgwFoAUD4OeiTNBdAe+f1gW2Opq95DhNi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc0ZDIwYTMtM2Q4My00YzRmLTkxMzgtNzZiYzdjNTEwZWI5LzAvMEY4MzlFODkz MzQxNzQwN0JFN0Y1ODE2RDhFQTZBRjc5MEUxMzYyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjgzOUU4OTMzNDE3NDA3QkU3RjU4MTZEOEVBNkFGNzkwRTEz NjJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvMEY4MzlFODkzMzQxNzQwN0JFN0Y1ODE2RDhFQTZB Rjc5MEUxMzYyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeKMErG4HGmsHv0b76p4hHt3OBjZB9isF2M OGdi8M4Q/PnzTp2d0aop4r9ouee7uFG6vdabQIs1amMZ/O9x08l/5VZ0tqlbHESx RsU375SveZXtEigsUa5/wgmxCOJzMpq/+sM3dnp4Sr17RMA1hgVUq97uOjNUSg65 a7j1hbEnOYOzUxCZaM4A2/O6gxm0Iiy8+mPvttKmv37/sGhmLIkXSGl0Fwg8OeMF f1C6zN9QSoOffNjfcPxExCh32bRUqZdKuFX1ZmdeSpEveWM4tjEFBpKGUHyq08j9 aHXFI1reDnAWdv6p/EaMyF9JksgInh76tOYB/o6IL2sDg1+ghck= -----END CERTIFICATE-----Generated at Wed Jun 17 12:53:07 2026 by rpki-client