$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft File: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft (raw, json) Hash identifier: NCq4/aHARd08dSh1R1Zntwiy5pltirkHp1rPaK2ozo4= Subject key identifier: 1D:8D:0D:5A:C6:D6:F6:E9:0D:E8:0C:A9:AB:6D:70:EE:39:8C:5F:F8 Authority key identifier: 0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 Certificate issuer: /CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Certificate serial: 2264E299911F6088703434E0465B14E6562308FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:48:44 +0000 Manifest this update: Wed 17 Jun 2026 04:43:44 +0000 Manifest next update: Thu 18 Jun 2026 07:08:44 +0000 Files and hashes: 1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: RKQ6wa1x5VScJTj3fjdeSQ/eUi7ms4u121kFQZr9klo=) 2: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl (hash: ziIvN0iIIQ81f+LBMIXINpnjVnN/5KAwc84OfJ2VAdY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:64:e2:99:91:1f:60:88:70:34:34:e0:46:5b:14:e6:56:23:08:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Validity Not Before: Jun 17 04:43:44 2026 GMT Not After : Jun 18 07:08:44 2026 GMT Subject: CN=1D8D0D5AC6D6F6E90DE80CA9AB6D70EE398C5FF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:54:16:96:fd:ec:15:eb:89:4a:f4:47:84: 4f:75:12:53:db:bd:b9:fe:5e:c3:18:36:25:91:b7: cc:da:d2:ca:de:f2:d3:00:82:4f:f2:98:93:b2:66: eb:02:83:20:b9:cd:97:92:8c:c3:cd:44:28:89:8b: ca:88:8e:ef:e6:62:31:23:84:41:be:7c:70:24:9c: 0e:ef:54:b9:49:13:60:fd:06:96:98:26:b3:7c:6c: d9:2c:cd:b1:c5:e7:4d:be:00:18:15:d9:79:7c:87: 23:f1:8f:aa:13:d9:7a:7c:2b:69:38:22:39:98:fa: fd:66:bc:69:2c:00:0c:a8:4f:7f:f3:b8:3d:45:8a: 05:ae:31:bb:77:66:24:0d:3c:88:5e:98:09:56:a9: 00:69:ee:35:c1:5a:eb:3b:11:87:a6:73:14:12:d8: 80:10:e6:b3:23:d0:ed:90:4f:e4:11:32:f1:71:30: 89:f7:30:d0:03:7c:53:92:a5:75:f5:80:41:5d:a0: e9:aa:24:e0:f2:da:41:8f:73:10:12:19:49:25:31: f7:a2:3c:46:5c:6f:40:4d:62:76:c6:9a:a8:66:c5: 89:23:91:d1:4d:8e:a3:0a:9c:44:7b:85:40:7f:3e: 16:42:25:5f:2c:95:0e:e8:db:d8:eb:e2:72:e3:0d: 71:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8D:0D:5A:C6:D6:F6:E9:0D:E8:0C:A9:AB:6D:70:EE:39:8C:5F:F8 X509v3 Authority Key Identifier: keyid:0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8a:1b:ba:df:6e:b8:72:26:95:4d:90:b9:7d:59:73:0c:56: 04:ea:fc:a6:26:00:ab:58:35:f1:c4:01:95:93:31:c1:c1:56: 43:1a:ea:0a:47:de:b0:0c:3a:9e:da:a8:4e:dc:5d:2e:fc:aa: 1f:f0:ed:c0:b2:8b:8a:35:c9:e9:a5:2f:73:51:c3:b9:67:fd: f1:d0:7b:b2:bf:48:c7:4a:84:8f:86:1c:64:a6:e5:34:e3:2a: 22:fa:12:a6:35:09:82:bb:04:01:51:69:6e:71:00:64:9f:0a: 23:9e:8e:41:33:74:c8:18:87:ba:8d:bd:b5:3d:ad:3f:45:7d: ab:86:81:9c:0f:fa:59:67:b0:a3:bf:63:68:9b:7c:dd:84:20: dd:ef:ae:c0:d4:4e:6d:05:91:1b:8a:54:1b:69:e8:cf:65:fc: af:ca:56:ce:0a:17:87:3d:59:0f:03:8c:66:41:55:a1:2f:9b: a4:ec:bf:8b:c4:5b:a2:51:b7:b0:93:8c:ae:18:f7:e1:8d:36: 86:1e:8f:95:33:f6:56:68:0f:c6:ed:67:86:ad:83:7c:a5:31: 15:ec:92:a6:af:86:a1:c3:43:4b:22:f1:dc:85:16:fb:fb:2f: cf:63:27:10:67:89:9b:51:a3:20:6e:1d:d9:93:0f:11:17:9e: 65:f7:56:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImTimZEfYIhwNDTgRlsU5lYjCPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVFNEZC MUY5NTMzOTAeFw0yNjA2MTcwNDQzNDRaFw0yNjA2MTgwNzA4NDRaMDMxMTAvBgNV BAMTKDFEOEQwRDVBQzZENkY2RTkwREU4MENBOUFCNkQ3MEVFMzk4QzVGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+VQWlv3sFeuJSvRHhE91ElPb vbn+XsMYNiWRt8za0sre8tMAgk/ymJOyZusCgyC5zZeSjMPNRCiJi8qIju/mYjEj hEG+fHAknA7vVLlJE2D9BpaYJrN8bNkszbHF502+ABgV2Xl8hyPxj6oT2Xp8K2k4 IjmY+v1mvGksAAyoT3/zuD1FigWuMbt3ZiQNPIhemAlWqQBp7jXBWus7EYemcxQS 2IAQ5rMj0O2QT+QRMvFxMIn3MNADfFOSpXX1gEFdoOmqJODy2kGPcxASGUklMfei PEZcb0BNYnbGmqhmxYkjkdFNjqMKnER7hUB/PhZCJV8slQ7o29jr4nLjDXGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHY0NWsbW9ukN6Aypq21w7jmMX/gwHwYDVR0j BBgwFoAUC5FDzV0qg1fiAR54Q5leT7H5UzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ0OGJkMDQtZjc4Ny00MTRhLWE1MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1 RDJBODM1N0UyMDExRTc4NDM5OTVFNEZCMUY5NTMzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjkxNDNDRDVEMkE4MzU3RTIwMTFFNzg0Mzk5NUU0RkIxRjk1 MzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVF NEZCMUY5NTMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyKG7rfbrhyJpVNkLl9WXMMVgTq/KYmAKtY NfHEAZWTMcHBVkMa6gpH3rAMOp7aqE7cXS78qh/w7cCyi4o1yemlL3NRw7ln/fHQ e7K/SMdKhI+GHGSm5TTjKiL6EqY1CYK7BAFRaW5xAGSfCiOejkEzdMgYh7qNvbU9 rT9FfauGgZwP+llnsKO/Y2ibfN2EIN3vrsDUTm0FkRuKVBtp6M9l/K/KVs4KF4c9 WQ8DjGZBVaEvm6Tsv4vEW6JRt7CTjK4Y9+GNNoYej5Uz9lZoD8btZ4atg3ylMRXs kqavhqHDQ0si8dyFFvv7L89jJxBniZtRoyBuHdmTDxEXnmX3Voo= -----END CERTIFICATE-----Generated at Wed Jun 17 12:21:38 2026 by rpki-client