$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft File: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft (raw, json) Hash identifier: B8FdzAu7mr6Jf8i8MtsUBe/wRNMqbq4U46ImPxK+Fag= Subject key identifier: F0:FD:EB:A7:8D:C6:1A:88:EF:23:16:70:52:76:0C:19:6D:D8:22:46 Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE Certificate issuer: /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Certificate serial: 2DE3EF88737C44BEE1795B3A433F4D896E7FC0C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 04:57:05 +0000 Manifest this update: Wed 29 Jul 2026 04:52:05 +0000 Manifest next update: Thu 30 Jul 2026 06:36:05 +0000 Files and hashes: 1: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl (hash: l9QMzau8fqeMFJUY4iFzy8YxwOS/kunhdIw/hfRctv4=) 2: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: Q7IDKK7bd4+D1LbWjZoromCTyfDrru1LNqDTxcv/O1c=) 3: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: pcqtzLzNaNYPks2/OHv2K1hXp8EkBWXZ157lBF+eG6I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e3:ef:88:73:7c:44:be:e1:79:5b:3a:43:3f:4d:89:6e:7f:c0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Validity Not Before: Jul 29 04:52:05 2026 GMT Not After : Jul 30 06:36:05 2026 GMT Subject: CN=F0FDEBA78DC61A88EF23167052760C196DD82246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:25:49:a6:c4:da:73:21:84:d1:97:1c:01: 02:e0:9d:7e:30:18:50:ac:3a:4c:d5:3e:44:33:e9: b6:3f:9e:01:57:2a:74:b8:fe:f6:92:37:1f:a3:81: af:cf:36:3d:90:ff:bd:64:08:0f:63:8c:ff:21:7b: ba:74:cd:9e:25:07:72:91:9d:3d:e3:1e:32:f9:16: db:02:81:ba:f6:d7:2f:f0:a9:71:99:53:8c:aa:c2: 18:8e:24:cf:3c:f9:29:2a:a8:93:77:a6:16:ae:23: 94:45:b2:8f:fa:07:9c:ab:49:ac:d7:c0:a0:f4:a1: 41:75:df:1e:54:71:d0:75:72:fc:d2:3d:43:b1:04: 3a:74:93:1e:80:85:7f:56:33:5d:cf:bf:1c:1c:d4: 5a:ef:cf:72:54:2a:a6:fc:54:d4:62:f2:fe:c5:f6: d1:d6:a3:af:8d:90:b5:d7:7f:a7:01:21:9e:4c:e0: c6:ea:c8:cc:bc:1c:2d:15:ff:5e:3a:9c:a1:94:51: 50:de:77:db:e0:ec:b4:7d:c8:98:4e:f5:f0:dc:0f: 6c:24:a6:ac:c3:22:b3:b1:a0:75:a3:5c:5f:ab:f6: b5:e2:72:cd:84:a9:a9:4d:5f:5f:10:5a:2c:58:f5: 95:91:b0:49:db:05:ca:90:b7:64:ae:de:b0:a6:e9: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FD:EB:A7:8D:C6:1A:88:EF:23:16:70:52:76:0C:19:6D:D8:22:46 X509v3 Authority Key Identifier: keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c5:30:00:32:69:8a:65:f0:02:24:ff:61:11:fb:6f:ec:fa: d9:2d:d3:52:5c:99:87:db:5a:ec:99:1c:4c:e4:24:7f:f3:53: 52:6c:c5:27:65:85:9c:d6:4b:9c:61:0a:ba:a9:a6:39:7c:15: e1:c6:53:fb:be:cc:73:4a:46:3d:80:69:7d:40:82:e5:41:5a: 53:fd:8d:b1:ea:7a:3a:a6:e0:8e:7c:64:4a:ae:8d:fa:2f:48: 8d:6c:15:df:82:5b:af:97:5d:db:01:fc:05:88:15:b9:ed:11: f7:48:7c:9a:1a:52:ac:16:44:b2:41:66:0d:d0:82:08:bb:47: 98:11:2e:02:0c:be:8f:cc:ec:75:5e:c5:8e:21:25:05:16:f2: b6:c4:84:fd:ea:3d:c6:86:03:81:98:2e:0b:1e:c3:02:10:28: 23:c4:f5:16:69:56:0b:7a:d8:35:fe:2d:38:5f:e7:a8:56:d9: 42:64:47:26:b5:08:b7:13:a9:3a:ae:59:7c:f9:73:95:81:a3: b9:f5:b1:dc:3f:e8:0d:b5:72:88:41:7c:7e:9a:55:ff:af:38: 18:49:b4:1b:81:c4:c6:c9:21:a5:84:30:29:a2:49:97:02:26: 6b:36:09:4f:c0:b3:45:a1:c1:a7:89:ae:48:b7:2a:b2:dd:ac: 4a:7c:c0:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULePviHN8RL7heVs6Qz9NiW5/wMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThD NkNFQ0JCRTAeFw0yNjA3MjkwNDUyMDVaFw0yNjA3MzAwNjM2MDVaMDMxMTAvBgNV BAMTKEYwRkRFQkE3OERDNjFBODhFRjIzMTY3MDUyNzYwQzE5NkREODIyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpcSVJpsTacyGE0ZccAQLgnX4w GFCsOkzVPkQz6bY/ngFXKnS4/vaSNx+jga/PNj2Q/71kCA9jjP8he7p0zZ4lB3KR nT3jHjL5FtsCgbr21y/wqXGZU4yqwhiOJM88+SkqqJN3phauI5RFso/6B5yrSazX wKD0oUF13x5UcdB1cvzSPUOxBDp0kx6AhX9WM13Pvxwc1Frvz3JUKqb8VNRi8v7F 9tHWo6+NkLXXf6cBIZ5M4MbqyMy8HC0V/146nKGUUVDed9vg7LR9yJhO9fDcD2wk pqzDIrOxoHWjXF+r9rXics2EqalNX18QWixY9ZWRsEnbBcqQt2Su3rCm6XBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8P3rp43GGojvIxZwUnYMGW3YIkYwHwYDVR0j BBgwFoAUC/1q3Lz3RXwFx/qRppWHWMbOy74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmYyNTA2YjEtMzk2ZC00OTllLWI3ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENC Q0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThDNkNFQ0JCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkZENkFEQ0JDRjc0NTdDMDVDN0ZBOTFBNjk1ODc1OEM2Q0VD QkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3 NThDNkNFQ0JCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvFMAAyaYpl8AIk/2ER+2/s+tkt01JcmYfb WuyZHEzkJH/zU1JsxSdlhZzWS5xhCrqppjl8FeHGU/u+zHNKRj2AaX1AguVBWlP9 jbHqejqm4I58ZEqujfovSI1sFd+CW6+XXdsB/AWIFbntEfdIfJoaUqwWRLJBZg3Q ggi7R5gRLgIMvo/M7HVexY4hJQUW8rbEhP3qPcaGA4GYLgsewwIQKCPE9RZpVgt6 2DX+LThf56hW2UJkRya1CLcTqTquWXz5c5WBo7n1sdw/6A21cohBfH6aVf+vOBhJ tBuBxMbJIaWEMCmiSZcCJms2CU/As0WhwaeJrki3KrLdrEp8wPU= -----END CERTIFICATE-----Generated at Wed Jul 29 07:49:34 2026 by rpki-client