$ rpki-client -vvf rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft File: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft (raw, json) Hash identifier: Bfm8+OgNAbkSGDox1+8eDaBMywmNp6D5F5TlHRM9mrc= Subject key identifier: 39:89:E3:08:91:3E:D1:67:6E:88:5D:4F:F3:C1:B6:8E:FB:EC:C5:0A Authority key identifier: 0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 Certificate issuer: /CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Certificate serial: 6D9D2EFDF0E73670EBDED8E3ECF7CBAE812D5EE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 08:58:52 +0000 Manifest this update: Wed 17 Jun 2026 08:53:52 +0000 Manifest next update: Thu 18 Jun 2026 09:17:52 +0000 Files and hashes: 1: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: ioAK8PuVzBK8o1vLJamanAVbMzvKPhJnFFlStnHERk0=) 2: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl (hash: sd3U3LKJNWsGQNAQtri2pjXpSHabtOEU9wlo1lPFd74=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:9d:2e:fd:f0:e7:36:70:eb:de:d8:e3:ec:f7:cb:ae:81:2d:5e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Validity Not Before: Jun 17 08:53:52 2026 GMT Not After : Jun 18 09:17:52 2026 GMT Subject: CN=3989E308913ED1676E885D4FF3C1B68EFBECC50A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:14:7e:6a:27:2c:29:53:b8:9e:a4:8a:d0: fe:69:d6:76:6f:43:54:31:ae:37:8f:84:29:4e:66: ad:53:27:e7:ef:1b:a3:dd:4f:20:99:cf:93:22:fd: 29:84:82:a0:89:aa:ef:91:56:f8:c9:6c:64:9c:dd: 46:8a:6c:51:0f:a7:67:9a:bf:b8:36:e0:2c:8d:a0: 0b:7e:71:65:0b:6c:68:06:32:5a:76:7c:1c:15:74: 64:8c:2e:3c:69:fb:2e:1d:8a:9b:f0:fe:75:be:7c: 9b:7d:56:cd:c4:c9:e0:30:6d:b8:95:6b:d0:c1:b8: 26:99:47:0d:27:b4:70:41:9d:45:29:58:71:5e:73: 9b:82:ac:91:7d:f8:6f:fb:b4:48:fe:ec:13:81:cd: 35:1b:c6:d1:f6:9d:c1:cd:fb:c0:1b:87:09:aa:19: 72:95:24:7f:90:01:28:62:97:4a:b9:e1:b9:09:71: e9:d2:67:63:0e:cc:d7:93:ca:72:66:bb:e2:da:da: f3:67:b9:54:4a:03:37:bb:f7:e2:22:6c:f1:b4:16: 72:80:75:ad:ab:f6:35:3c:a4:79:ad:a3:dd:f1:b7: 70:c8:b2:a0:f0:80:70:09:3d:19:60:cf:57:51:42: 1b:ce:d4:34:15:fe:5a:fe:20:7c:59:48:0b:70:4c: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:89:E3:08:91:3E:D1:67:6E:88:5D:4F:F3:C1:B6:8E:FB:EC:C5:0A X509v3 Authority Key Identifier: keyid:0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:27:9b:c9:a1:dd:6a:9d:d1:05:06:b6:9e:39:a6:eb:bf:df: 85:d9:fb:3f:c3:a1:78:0c:7a:50:37:cb:3a:4e:cc:e6:4d:de: 11:41:35:90:46:5a:d7:11:f8:32:3d:f6:a7:f3:4b:2a:38:cd: 21:eb:ea:d2:db:13:2e:c3:52:5d:d9:d0:72:6a:ef:97:63:3c: 12:d5:33:1c:dc:96:17:fe:f1:6a:ed:be:d9:b3:dc:dd:f9:a1: b9:10:5c:51:ef:94:4f:95:36:1f:d0:85:25:15:25:c6:e5:11: c0:cd:42:23:7b:6f:53:87:25:25:b2:27:77:b4:31:8a:2e:25: dc:ad:03:e3:1d:07:cf:52:65:7e:14:cb:33:82:eb:e9:93:ec: bd:b3:28:6f:6a:66:17:e6:e9:54:2e:1f:d8:61:ca:f8:e8:ec: 81:69:a1:bb:13:10:a1:bd:21:05:77:f2:db:98:07:40:2e:46: f3:a9:b6:a3:17:4d:a8:72:28:de:51:d5:2d:63:d1:f2:04:b5: d4:41:e3:4c:18:52:12:b7:00:d3:4d:e5:61:e0:fe:95:7a:07: 30:0c:7e:85:b0:b6:83:ef:5d:49:3c:b8:e7:df:81:8c:7a:b1: e5:8c:36:64:17:66:a3:7c:f7:70:82:50:83:11:0c:bb:8a:45: a3:40:11:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbZ0u/fDnNnDr3tjj7PfLroEtXucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYw OEU2N0JCOTAeFw0yNjA2MTcwODUzNTJaFw0yNjA2MTgwOTE3NTJaMDMxMTAvBgNV BAMTKDM5ODlFMzA4OTEzRUQxNjc2RTg4NUQ0RkYzQzFCNjhFRkJFQ0M1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmRR+aicsKVO4nqSK0P5p1nZv Q1QxrjePhClOZq1TJ+fvG6PdTyCZz5Mi/SmEgqCJqu+RVvjJbGSc3UaKbFEPp2ea v7g24CyNoAt+cWULbGgGMlp2fBwVdGSMLjxp+y4dipvw/nW+fJt9Vs3EyeAwbbiV a9DBuCaZRw0ntHBBnUUpWHFec5uCrJF9+G/7tEj+7BOBzTUbxtH2ncHN+8Abhwmq GXKVJH+QAShil0q54bkJcenSZ2MOzNeTynJmu+La2vNnuVRKAze79+IibPG0FnKA da2r9jU8pHmto93xt3DIsqDwgHAJPRlgz1dRQhvO1DQV/lr+IHxZSAtwTAo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOYnjCJE+0WduiF1P88G2jvvsxQowHwYDVR0j BBgwFoAUC7ofy42XbaLxwpNX/nfeHwjme7kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM5N2NmYzUtZTBiMC00ODIwLWI4NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4 RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYwOEU2N0JCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkJBMUZDQjhEOTc2REEyRjFDMjkzNTdGRTc3REUxRjA4RTY3 QkI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RF MUYwOEU2N0JCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADknm8mh3Wqd0QUGtp45puu/34XZ+z/DoXgM elA3yzpOzOZN3hFBNZBGWtcR+DI99qfzSyo4zSHr6tLbEy7DUl3Z0HJq75djPBLV Mxzclhf+8Wrtvtmz3N35obkQXFHvlE+VNh/QhSUVJcblEcDNQiN7b1OHJSWyJ3e0 MYouJdytA+MdB89SZX4UyzOC6+mT7L2zKG9qZhfm6VQuH9hhyvjo7IFpobsTEKG9 IQV38tuYB0AuRvOptqMXTahyKN5R1S1j0fIEtdRB40wYUhK3ANNN5WHg/pV6BzAM foWwtoPvXUk8uOffgYx6seWMNmQXZqN893CCUIMRDLuKRaNAEYs= -----END CERTIFICATE-----Generated at Wed Jun 17 10:40:17 2026 by rpki-client