$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft File: 0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft (raw, json) Hash identifier: 6Sou803FeeD4LkXLC+qprD9GVKhjCO7612vBixbwBHI= Subject key identifier: 44:F0:98:1E:D7:A7:A0:5F:9F:98:BB:80:21:DF:34:F3:F8:89:3B:91 Authority key identifier: 0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE Certificate issuer: /CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE Certificate serial: 642C83C3FBF3C0F2DE016FEE616D7BCBA664CB27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 21:25:07 +0000 Manifest this update: Tue 16 Jun 2026 21:20:07 +0000 Manifest next update: Wed 17 Jun 2026 21:45:07 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: 8ZFSRd4IMl+7UA1+qh6mSwLg2Ure6CZXxSWgxu+4aBo=) 2: 0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl (hash: Ppapn4Wi6vZRaOX5Fr1sybBb6LScB57HuUYhMnuc8hs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:2c:83:c3:fb:f3:c0:f2:de:01:6f:ee:61:6d:7b:cb:a6:64:cb:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE Validity Not Before: Jun 16 21:20:07 2026 GMT Not After : Jun 17 21:45:07 2026 GMT Subject: CN=44F0981ED7A7A05F9F98BB8021DF34F3F8893B91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:ef:08:b5:6a:2a:f3:02:76:b9:9b:52:55: a9:dc:a1:9d:f1:b3:95:ec:3e:44:ad:bb:11:b1:94: 4c:c0:52:2f:24:8f:90:52:0c:75:c6:17:7b:d4:cd: 70:70:40:ba:d3:93:fb:37:7f:42:9c:1a:36:6e:82: 75:37:8f:89:d1:f0:ea:b4:3e:ba:24:9d:dd:a1:b1: cb:a4:e4:b7:be:1b:43:ce:05:70:57:88:51:79:5d: e2:62:5c:64:83:4d:45:01:64:49:9b:4d:51:4b:2d: 68:2c:fa:d5:e8:2a:87:3d:14:c2:15:9e:91:f4:3f: a5:61:b2:9b:89:5c:5b:fd:cf:ca:70:ea:11:f9:eb: 3c:e3:83:bc:de:72:12:70:6a:35:22:1e:75:f2:61: 9f:c4:23:2f:3b:36:f6:e3:df:6c:c8:af:af:b3:33: 19:fd:3a:39:6f:6d:40:34:4b:17:2c:b4:99:7f:db: a2:7d:c6:d6:f2:53:18:42:9c:27:2b:a4:a3:25:b7: 27:7e:98:a0:a2:78:2d:9a:a1:a6:c0:9d:43:71:6f: 83:57:37:a5:07:0e:b4:e5:ab:51:f6:06:e3:56:51: f9:54:84:60:4a:f9:16:11:89:cb:40:a2:ac:37:34: 95:1d:ce:fc:01:65:b8:0c:01:2d:81:25:e5:09:64: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F0:98:1E:D7:A7:A0:5F:9F:98:BB:80:21:DF:34:F3:F8:89:3B:91 X509v3 Authority Key Identifier: keyid:0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1b:a4:ef:11:c9:75:23:59:27:8f:4a:71:71:46:c0:b0:92: 26:0d:bb:eb:08:1f:67:71:75:66:ff:c2:b1:1b:60:ae:c4:81: 9c:39:a0:a6:45:d3:88:33:63:f0:5e:21:c2:68:f0:72:0a:b3: a3:39:bb:11:5a:08:69:5e:c4:fd:5b:66:9c:03:ca:7a:26:ee: d4:2c:6c:ff:6d:b2:6d:54:65:85:ee:bd:8f:8a:43:d5:83:f0: 00:78:d1:7f:b8:62:f5:5f:67:6e:78:bb:f6:fe:b5:b0:42:8f: cd:f4:73:12:aa:33:31:6c:b5:70:e2:c4:f9:ae:45:5c:7a:b6: fa:d9:e0:9c:83:e6:1a:b2:cd:5a:37:71:d3:80:18:b3:8c:0e: d3:e9:14:6d:8a:29:25:a7:c6:eb:85:c2:b1:1f:34:51:81:c0: bb:73:1f:0d:54:0d:3f:a8:65:c4:2c:f7:3e:a5:5c:d6:5c:d4: af:6b:ef:8b:1c:68:5b:65:08:54:64:a3:dc:a4:25:dd:52:27: 6f:b0:23:b3:2e:ba:ca:40:4d:b1:00:47:90:ba:7f:26:ef:e8: d4:60:52:b3:d8:3a:49:9e:f7:d3:7b:4a:6f:b0:03:88:61:62: df:c6:39:1f:15:e0:b3:87:3c:e3:ba:71:f8:7e:8f:94:48:6c: 2e:ac:5f:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCyDw/vzwPLeAW/uYW17y6ZkyycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJFRkMxRUM1OTNCMTZDNzlCQzU2MDBFRjU4MTNCMEND NkUyNDhCRTAeFw0yNjA2MTYyMTIwMDdaFw0yNjA2MTcyMTQ1MDdaMDMxMTAvBgNV BAMTKDQ0RjA5ODFFRDdBN0EwNUY5Rjk4QkI4MDIxREYzNEYzRjg4OTNCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lO8ItWoq8wJ2uZtSVancoZ3x s5XsPkStuxGxlEzAUi8kj5BSDHXGF3vUzXBwQLrTk/s3f0KcGjZugnU3j4nR8Oq0 Proknd2hscuk5Le+G0POBXBXiFF5XeJiXGSDTUUBZEmbTVFLLWgs+tXoKoc9FMIV npH0P6VhspuJXFv9z8pw6hH56zzjg7zechJwajUiHnXyYZ/EIy87Nvbj32zIr6+z Mxn9OjlvbUA0SxcstJl/26J9xtbyUxhCnCcrpKMltyd+mKCieC2aoabAnUNxb4NX N6UHDrTlq1H2BuNWUflUhGBK+RYRictAoqw3NJUdzvwBZbgMAS2BJeUJZPaxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURPCYHtenoF+fmLuAId808/iJO5EwHwYDVR0j BBgwFoAUC+/B7Fk7FsebxWAO9YE7DMbiSL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ4NzEzMDMtMDIxYS00YTBiLTllZmItYWUyZGI2YzkwZDg0LzAvMEJFRkMxRUM1 OTNCMTZDNzlCQzU2MDBFRjU4MTNCMENDNkUyNDhCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkVGQzFFQzU5M0IxNkM3OUJDNTYwMEVGNTgxM0IwQ0M2RTI0 OEJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvMEJFRkMxRUM1OTNCMTZDNzlCQzU2MDBFRjU4MTNC MENDNkUyNDhCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsbpO8RyXUjWSePSnFxRsCwkiYNu+sIH2dx dWb/wrEbYK7EgZw5oKZF04gzY/BeIcJo8HIKs6M5uxFaCGlexP1bZpwDynom7tQs bP9tsm1UZYXuvY+KQ9WD8AB40X+4YvVfZ254u/b+tbBCj830cxKqMzFstXDixPmu RVx6tvrZ4JyD5hqyzVo3cdOAGLOMDtPpFG2KKSWnxuuFwrEfNFGBwLtzHw1UDT+o ZcQs9z6lXNZc1K9r74scaFtlCFRko9ykJd1SJ2+wI7MuuspATbEAR5C6fybv6NRg UrPYOkme99N7Sm+wA4hhYt/GOR8V4LOHPOO6cfh+j5RIbC6sXzc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:14:07 2026 by rpki-client