$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft File: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft (raw, json) Hash identifier: qcIsK4iqHlT/z4X6+a94Po3rfikLIXst0m6OsJcr6tM= Subject key identifier: 40:F5:F8:30:4E:72:AB:D7:5F:B8:00:57:01:0B:1E:94:42:07:D4:93 Authority key identifier: 0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 Certificate issuer: /CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Certificate serial: 4714099761E643D4EBB4FED45B744A1AE097FBC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:46:03 +0000 Manifest this update: Wed 17 Jun 2026 06:41:03 +0000 Manifest next update: Thu 18 Jun 2026 08:05:03 +0000 Files and hashes: 1: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: ccmy2LH8bOvIWU+GPrMO4FL2775rB00lVz7jkl8O1gM=) 2: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl (hash: 0H/Xqeb+8uYz7uPK9UOnnvom9ha1P/q6Dc+ptbDiq3k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:14:09:97:61:e6:43:d4:eb:b4:fe:d4:5b:74:4a:1a:e0:97:fb:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Validity Not Before: Jun 17 06:41:03 2026 GMT Not After : Jun 18 08:05:03 2026 GMT Subject: CN=40F5F8304E72ABD75FB80057010B1E944207D493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:5f:73:ce:1c:94:f5:0c:28:5f:e1:62:30: ff:4b:0e:25:d5:1b:68:15:74:d6:fd:48:fa:48:16: 9d:ad:0d:d5:b9:44:6f:62:f7:42:df:95:a4:59:bc: d8:88:63:c8:b9:05:42:2b:c9:93:41:62:ca:92:4f: 4b:ef:b3:62:25:51:01:b1:52:f3:61:9a:cc:d8:e6: 9e:e6:6f:ef:2f:61:b0:c2:85:2b:90:58:84:1b:b7: 9a:c4:40:8d:ad:3a:06:c8:7c:84:f7:0a:29:6a:2d: 7e:58:c6:b4:76:e8:3f:b5:68:b6:4b:22:0d:be:3d: 98:f9:58:cd:8a:58:8f:3b:58:91:ea:50:33:c0:82: 04:73:48:9d:e4:39:49:54:bc:b0:f7:d2:45:48:c3: a2:3c:2e:c0:84:f8:fb:78:d5:bf:18:5c:fa:0f:b8: b1:83:02:d0:82:4c:ff:a1:ae:a3:dd:3a:56:de:2b: bc:b8:60:a7:88:c7:0c:c1:af:ea:84:da:bf:4f:11: a1:94:93:02:ee:62:7b:6f:4a:3e:58:2b:eb:08:45: 79:c3:41:64:d3:67:39:c1:65:5a:3a:b0:e4:8a:02: 32:ca:9f:22:2d:46:bc:1b:99:11:3c:89:6f:d6:e7: 05:77:2a:3d:4f:b6:36:82:2d:66:a9:37:a5:e2:8d: da:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F5:F8:30:4E:72:AB:D7:5F:B8:00:57:01:0B:1E:94:42:07:D4:93 X509v3 Authority Key Identifier: keyid:0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:eb:e4:5b:f0:81:35:4b:6d:04:03:d2:a0:a2:2c:0c:f0:c1: 81:af:b7:94:4b:96:7c:df:21:6f:d0:be:f9:e4:b5:cd:c8:81: 01:40:c6:51:13:f1:7b:a6:7d:6d:66:e5:73:f6:5b:bf:11:77: 55:90:ab:5c:09:f3:b7:e4:7d:18:f8:3c:78:15:b4:1f:4b:98: db:ae:a1:ad:28:65:ea:5c:d4:a6:8a:ca:01:ae:c0:66:33:a7: 25:f4:30:bc:de:98:ba:5d:67:2f:63:f4:c7:f6:7c:7f:92:ce: 2b:f0:75:51:3f:d3:c4:d7:9e:ac:33:3a:8b:58:8d:72:e8:ca: d6:a7:19:de:9e:db:bb:87:c6:8a:f2:7c:91:f2:bc:eb:8b:f6: 9b:c8:fb:d3:79:eb:54:9b:48:d6:7a:76:53:d5:e8:ad:a9:c1: 5c:81:a2:14:b9:0e:55:db:7b:d1:bf:bd:f3:16:73:52:99:5a: ac:29:fa:48:d2:d0:58:86:e4:d4:4a:e4:72:f2:b1:fd:bf:f7: d7:2a:40:6c:c5:2a:3e:4c:17:cc:da:57:29:e7:50:44:2a:96: 37:4c:a6:2d:ec:9c:00:02:a8:2f:dd:02:69:16:e7:8b:6c:21: 57:0d:36:66:b8:07:11:23:ab:73:cd:6e:a4:fc:09:c3:fc:29: 73:fd:f6:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURxQJl2HmQ9TrtP7UW3RKGuCX+8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcw QUFDRThGNjAeFw0yNjA2MTcwNjQxMDNaFw0yNjA2MTgwODA1MDNaMDMxMTAvBgNV BAMTKDQwRjVGODMwNEU3MkFCRDc1RkI4MDA1NzAxMEIxRTk0NDIwN0Q0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgu19zzhyU9QwoX+FiMP9LDiXV G2gVdNb9SPpIFp2tDdW5RG9i90LflaRZvNiIY8i5BUIryZNBYsqST0vvs2IlUQGx UvNhmszY5p7mb+8vYbDChSuQWIQbt5rEQI2tOgbIfIT3CilqLX5YxrR26D+1aLZL Ig2+PZj5WM2KWI87WJHqUDPAggRzSJ3kOUlUvLD30kVIw6I8LsCE+Pt41b8YXPoP uLGDAtCCTP+hrqPdOlbeK7y4YKeIxwzBr+qE2r9PEaGUkwLuYntvSj5YK+sIRXnD QWTTZznBZVo6sOSKAjLKnyItRrwbmRE8iW/W5wV3Kj1PtjaCLWapN6XijdohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQPX4ME5yq9dfuABXAQselEIH1JMwHwYDVR0j BBgwFoAUCp5g9Kx6xx4kaJNbyl0Nlwqs6PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRB QzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcwQUFDRThGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQTlFNjBGNEFDN0FDNzFFMjQ2ODkzNUJDQTVEMEQ5NzBBQUNF OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBE OTcwQUFDRThGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnr5FvwgTVLbQQD0qCiLAzwwYGvt5RLlnzf IW/Qvvnktc3IgQFAxlET8XumfW1m5XP2W78Rd1WQq1wJ87fkfRj4PHgVtB9LmNuu oa0oZepc1KaKygGuwGYzpyX0MLzemLpdZy9j9Mf2fH+SzivwdVE/08TXnqwzOotY jXLoytanGd6e27uHxoryfJHyvOuL9pvI+9N561SbSNZ6dlPV6K2pwVyBohS5DlXb e9G/vfMWc1KZWqwp+kjS0FiG5NRK5HLysf2/99cqQGzFKj5MF8zaVynnUEQqljdM pi3snAACqC/dAmkW54tsIVcNNma4BxEjq3PNbqT8CcP8KXP99vc= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:01 2026 by rpki-client