$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft File: 0D2802EC43905EEA387602B994B8B579041C8507.mft (raw, json) Hash identifier: mQhITo9rl2zN9G4/SzwkHbqJgJaOwwn+1LydgtCjO1A= Subject key identifier: BF:23:5C:7E:69:DB:49:75:61:91:31:8A:AE:C8:A1:11:A5:1A:EE:BF Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 Certificate issuer: /CN=0D2802EC43905EEA387602B994B8B579041C8507 Certificate serial: 0A09804E590D436060AAFA72EAEE4035ED38D6A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 06:21:45 +0000 Manifest this update: Sat 13 Jun 2026 06:16:45 +0000 Manifest next update: Sun 14 Jun 2026 07:28:45 +0000 Files and hashes: 1: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: reeIiuxuHqr4MgHpxEsClw20lXN/gmt1yXdlXdiGltI=) 2: 0D2802EC43905EEA387602B994B8B579041C8507.crl (hash: sfY0SXQgFjPuRZSLP3LDouXfKCdvg7hM27yxncpfE9g=) 3: 3130332e3133372e33382e302f32332d3233203d3e20313534343130.roa (hash: vSt0O12iEjIfejoamLvxd1FSHE5umSqpwwku+iFtKN4=) 4: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: qd7L3Ietl/ythiF1v/evymxuReB0q3gMulxwNnwRr60=) 5: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: cszw5piIkmysL+SZS8lElBtByo5QIz3Wp1PoZt/A7vY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:09:80:4e:59:0d:43:60:60:aa:fa:72:ea:ee:40:35:ed:38:d6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507 Validity Not Before: Jun 13 06:16:45 2026 GMT Not After : Jun 14 07:28:45 2026 GMT Subject: CN=BF235C7E69DB49756191318AAEC8A111A51AEEBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:91:a5:16:22:64:5b:a4:38:c7:85:d8:63: 01:97:7e:86:7f:74:20:55:a5:04:13:6e:a9:ab:38: 59:90:9e:22:30:d7:0b:72:35:54:cd:37:58:d2:21: d1:9b:1d:2c:31:e2:87:9c:fe:d3:5b:2e:08:3c:33: 65:d7:64:b0:16:83:f6:78:6c:ea:51:ef:59:a2:74: a9:56:db:e5:ef:8f:30:52:76:ec:ec:ea:0e:8d:79: 2f:65:45:35:79:72:8b:61:da:2d:bc:02:11:35:e2: 9a:c7:54:81:02:83:d1:18:20:1a:1e:71:9c:f5:67: a1:3f:b2:cc:cb:f8:21:99:d5:03:18:45:7c:ea:9a: 2c:6e:6a:36:25:7d:34:82:66:a0:27:c5:e9:0d:81: c3:39:7e:00:8f:51:b4:f5:41:0f:cf:a7:6a:d8:0f: ca:05:b4:d4:12:5d:94:d5:31:24:58:c4:10:65:84: 48:2a:e1:c2:33:25:3d:76:0d:c9:79:2d:82:9b:2c: 77:5e:af:44:17:23:c2:e4:cb:be:20:5a:ec:7d:b1: 8b:4d:42:e9:b6:02:90:1d:96:83:1c:eb:86:44:a2: 23:f7:b5:a8:8a:cf:18:64:3a:3b:b6:ec:0e:36:3f: de:8b:27:2b:de:4c:ec:04:90:54:e1:15:21:b0:c7: 23:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:23:5C:7E:69:DB:49:75:61:91:31:8A:AE:C8:A1:11:A5:1A:EE:BF X509v3 Authority Key Identifier: keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4b:e8:85:48:cb:91:b4:ad:7e:25:dc:f4:78:23:f2:98:cc: 2a:1a:16:af:bd:a0:23:de:06:60:6f:df:77:99:b4:23:aa:c9: da:c6:95:cf:a3:71:41:48:64:5c:48:c9:b5:2d:d3:e2:06:1d: 57:d2:fb:60:13:98:bf:59:f9:48:3d:9d:a6:6f:06:bb:b7:da: fe:35:b1:7b:15:1c:40:d0:37:0c:b7:2a:55:ee:37:4d:6a:eb: 5d:cc:f2:3c:6c:66:ec:9c:20:5d:c9:43:01:c5:29:47:ed:ff: ba:44:1f:8c:f7:8e:87:66:97:d5:df:f4:ec:f4:ec:2b:4b:e4: 9c:f4:1f:d4:c3:64:ca:59:4b:6b:6d:51:e0:46:66:13:fa:58: 45:a9:b9:1c:a2:0a:2f:8c:d9:4b:71:06:39:eb:d3:9d:df:36: 00:75:33:58:63:11:29:fd:3f:6d:8e:dc:f4:91:d3:82:81:d1: 81:57:23:22:79:ed:35:48:07:04:1e:58:b8:2b:b7:c6:b9:51: ae:b3:85:8f:ed:e6:40:36:d7:38:a6:bb:c0:2b:72:3d:d0:f3: 9a:68:66:3a:f7:39:0d:88:82:16:9c:83:ed:26:49:8e:1c:54: 4f:15:f4:7c:b5:1a:7c:4c:a0:41:d6:97:6b:8e:ff:4e:c5:28: 54:8b:31:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgmATlkNQ2Bgqvpy6u5ANe041qMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1Nzkw NDFDODUwNzAeFw0yNjA2MTMwNjE2NDVaFw0yNjA2MTQwNzI4NDVaMDMxMTAvBgNV BAMTKEJGMjM1QzdFNjlEQjQ5NzU2MTkxMzE4QUFFQzhBMTExQTUxQUVFQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zZGlFiJkW6Q4x4XYYwGXfoZ/ dCBVpQQTbqmrOFmQniIw1wtyNVTNN1jSIdGbHSwx4oec/tNbLgg8M2XXZLAWg/Z4 bOpR71midKlW2+XvjzBSduzs6g6NeS9lRTV5coth2i28AhE14prHVIECg9EYIBoe cZz1Z6E/sszL+CGZ1QMYRXzqmixuajYlfTSCZqAnxekNgcM5fgCPUbT1QQ/Pp2rY D8oFtNQSXZTVMSRYxBBlhEgq4cIzJT12Dcl5LYKbLHder0QXI8Lky74gWux9sYtN Qum2ApAdloMc64ZEoiP3taiKzxhkOju27A42P96LJyveTOwEkFThFSGwxyMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvyNcfmnbSXVhkTGKrsihEaUa7r8wHwYDVR0j BBgwFoAUDSgC7EOQXuo4dgK5lLi1eQQchQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTNiYmYxZGEtZTMxNy00OGVmLWFkNmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0 MzkwNUVFQTM4NzYwMkI5OTRCOEI1NzkwNDFDODUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI4MDJFQzQzOTA1RUVBMzg3NjAyQjk5NEI4QjU3OTA0MUM4 NTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1 NzkwNDFDODUwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtL6IVIy5G0rX4l3PR4I/KYzCoaFq+9oCPe BmBv33eZtCOqydrGlc+jcUFIZFxIybUt0+IGHVfS+2ATmL9Z+Ug9naZvBru32v41 sXsVHEDQNwy3KlXuN01q613M8jxsZuycIF3JQwHFKUft/7pEH4z3jodml9Xf9Oz0 7CtL5Jz0H9TDZMpZS2ttUeBGZhP6WEWpuRyiCi+M2UtxBjnr053fNgB1M1hjESn9 P22O3PSR04KB0YFXIyJ57TVIBwQeWLgrt8a5Ua6zhY/t5kA21zimu8Arcj3Q85po Zjr3OQ2Ighacg+0mSY4cVE8V9Hy1GnxMoEHWl2uO/07FKFSLMTc= -----END CERTIFICATE-----Generated at Sat Jun 13 10:37:07 2026 by rpki-client