$ rpki-client -vvf rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft File: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft (raw, json) Hash identifier: gBJ7bPUPV1bRbpHjKiJK3QN4KbthJOCu7V9pv+3cS9k= Subject key identifier: 0E:EB:9A:C6:E7:76:58:05:48:9F:67:50:1F:8E:DD:8C:7E:5F:BA:B1 Authority key identifier: 0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 Certificate issuer: /CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Certificate serial: 332295861B5E7FEB16C62E2CA862324AD53E0B94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 07:17:54 +0000 Manifest this update: Sat 13 Jun 2026 07:12:54 +0000 Manifest next update: Sun 14 Jun 2026 08:32:54 +0000 Files and hashes: 1: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl (hash: ZxTHuNo4sB735Wx3Dv2U4JrZXR0eWjgjF6CM8olQ0Mc=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: jRxu5an33fAHIDK703BGcnxxr2+K2imQoOMYIzAUMUk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 08:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:22:95:86:1b:5e:7f:eb:16:c6:2e:2c:a8:62:32:4a:d5:3e:0b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Validity Not Before: Jun 13 07:12:54 2026 GMT Not After : Jun 14 08:32:54 2026 GMT Subject: CN=0EEB9AC6E7765805489F67501F8EDD8C7E5FBAB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fd:a8:45:5e:93:ae:a5:5c:c0:ec:f0:65:72: 2d:fc:5a:21:70:33:e1:b4:92:6c:6d:e7:ca:0e:e3: ce:28:36:08:fc:79:99:9f:db:ae:51:e5:76:81:1c: 67:4e:1c:01:86:8a:9f:25:61:58:c9:3e:a0:37:18: 22:5e:85:cc:48:a9:a1:0d:bc:4e:23:06:60:24:39: 01:bc:0e:bf:04:4f:91:93:31:13:29:b6:88:d4:00: a1:c3:06:02:5b:26:d1:6d:32:7b:95:0f:98:17:41: 5f:5f:26:e7:fa:e5:49:ec:62:a9:48:fa:1c:27:8f: 68:e7:02:fb:f4:48:9b:f7:c8:04:e3:1a:5e:ec:8f: dc:54:22:45:ba:b4:ff:bf:76:c2:c1:06:d4:a8:8f: c2:be:2f:53:d9:9e:f5:60:2e:a2:04:a3:88:71:35: 0e:81:1b:17:27:7c:9f:95:df:3d:58:98:6f:1a:de: a5:70:a2:ae:89:66:c0:bf:5e:cd:5b:69:b3:50:29: 16:a1:c7:b6:c3:77:07:9b:1a:2d:61:a8:9d:48:de: db:f6:b6:a6:05:26:53:f8:e7:93:49:d4:ce:5a:84: 32:19:22:e5:9e:cd:d4:50:14:ef:b9:fc:50:b4:d4: f6:80:1d:ab:9c:2e:f1:9c:8a:79:fa:ae:99:82:3a: 6b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EB:9A:C6:E7:76:58:05:48:9F:67:50:1F:8E:DD:8C:7E:5F:BA:B1 X509v3 Authority Key Identifier: keyid:0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f9:51:04:02:cb:f9:04:eb:fd:20:ac:49:bb:ac:de:6f:83: 74:19:b9:38:b4:d1:26:c2:84:25:9f:a1:9e:b5:04:0c:b3:12: bb:76:4f:bf:c5:2a:09:e3:35:95:86:88:00:4f:f3:ec:1b:43: 79:77:45:e5:c3:63:64:04:a2:15:15:28:78:a0:b1:d3:28:7b: 68:00:a9:c7:28:5a:61:3b:dc:65:1c:6d:58:a8:5d:1d:f1:02: 05:44:35:6a:42:9f:df:f3:cb:c8:07:36:cc:60:38:d8:a5:e5: 91:21:88:ea:3a:66:03:67:35:69:0b:50:df:54:30:4b:40:9d: 61:2e:dc:8f:dc:9a:09:29:d3:cc:b0:c3:86:f3:c9:58:fb:df: fe:b5:12:51:7b:48:ef:2f:7d:2d:21:7d:8c:02:56:c9:79:bc: 2f:bb:06:9a:2f:fb:46:9f:dd:be:85:6d:25:1b:b7:65:f8:da: ff:1e:c2:d4:c6:1e:74:e5:4d:55:7a:71:e7:42:cb:f8:f7:63: af:42:90:92:4b:e8:44:cc:1c:b2:f6:72:4b:57:df:93:7c:56: 35:77:e6:ce:0d:b0:68:49:ff:45:98:98:a7:a4:93:9e:15:76: 40:03:62:7e:2d:ff:c8:7e:86:1f:da:0b:fa:e9:7e:7d:42:83: 8a:ac:24:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyKVhhtef+sWxi4sqGIyStU+C5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0 NDc1MjNFNTAeFw0yNjA2MTMwNzEyNTRaFw0yNjA2MTQwODMyNTRaMDMxMTAvBgNV BAMTKDBFRUI5QUM2RTc3NjU4MDU0ODlGNjc1MDFGOEVERDhDN0U1RkJBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/ahFXpOupVzA7PBlci38WiFw M+G0kmxt58oO484oNgj8eZmf265R5XaBHGdOHAGGip8lYVjJPqA3GCJehcxIqaEN vE4jBmAkOQG8Dr8ET5GTMRMptojUAKHDBgJbJtFtMnuVD5gXQV9fJuf65UnsYqlI +hwnj2jnAvv0SJv3yATjGl7sj9xUIkW6tP+/dsLBBtSoj8K+L1PZnvVgLqIEo4hx NQ6BGxcnfJ+V3z1YmG8a3qVwoq6JZsC/Xs1babNQKRahx7bDdwebGi1hqJ1I3tv2 tqYFJlP455NJ1M5ahDIZIuWezdRQFO+5/FC01PaAHaucLvGcinn6rpmCOmsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDuuaxud2WAVIn2dQH47djH5furEwHwYDVR0j BBgwFoAUDz3Nlfw/xtfXs9FodquB4UR1I+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQ0ZGZiNWEtNmUyNC00YTRkLTg5NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVG QzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0NDc1MjNFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjNEQ0Q5NUZDM0ZDNkQ3RDdCM0QxNjg3NkFCODFFMTQ0NzUy M0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgx RTE0NDc1MjNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADz5UQQCy/kE6/0grEm7rN5vg3QZuTi00SbC hCWfoZ61BAyzErt2T7/FKgnjNZWGiABP8+wbQ3l3ReXDY2QEohUVKHigsdMoe2gA qccoWmE73GUcbVioXR3xAgVENWpCn9/zy8gHNsxgONil5ZEhiOo6ZgNnNWkLUN9U MEtAnWEu3I/cmgkp08yww4bzyVj73/61ElF7SO8vfS0hfYwCVsl5vC+7Bpov+0af 3b6FbSUbt2X42v8ewtTGHnTlTVV6cedCy/j3Y69CkJJL6ETMHLL2cktX35N8VjV3 5s4NsGhJ/0WYmKekk54VdkADYn4t/8h+hh/aC/rpfn1Cg4qsJFQ= -----END CERTIFICATE-----Generated at Sat Jun 13 17:16:12 2026 by rpki-client