$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft File: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft (raw, json) Hash identifier: RVjivfoe4CV+/T4t+EXM/tPTbWjlbZAKkVNMGl50CJs= Subject key identifier: 24:DD:19:9B:C7:51:C5:CE:0D:B4:B5:AB:29:72:25:3F:EE:62:77:D0 Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE Certificate issuer: /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Certificate serial: 1BD9891EAE18D1D13427C247C91601426F31111A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 04:44:50 +0000 Manifest this update: Sat 13 Jun 2026 04:39:50 +0000 Manifest next update: Sun 14 Jun 2026 04:59:50 +0000 Files and hashes: 1: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl (hash: pHwEDzsWWpFxsBarVrYdaVxaHMep8MBjpf6hiwJGik4=) 2: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: pcqtzLzNaNYPks2/OHv2K1hXp8EkBWXZ157lBF+eG6I=) 3: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: Q7IDKK7bd4+D1LbWjZoromCTyfDrru1LNqDTxcv/O1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 04:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d9:89:1e:ae:18:d1:d1:34:27:c2:47:c9:16:01:42:6f:31:11:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Validity Not Before: Jun 13 04:39:50 2026 GMT Not After : Jun 14 04:59:50 2026 GMT Subject: CN=24DD199BC751C5CE0DB4B5AB2972253FEE6277D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:55:e9:42:aa:1a:61:66:80:e6:0a:e4:4f:b5: 71:b0:3b:ed:b1:9c:ec:f6:10:4b:01:f9:d1:c7:62: 48:de:07:83:7a:48:22:73:2f:47:89:03:2c:50:cf: 0f:7c:bc:18:7e:eb:df:de:3f:eb:cf:1c:b4:32:e0: d9:1b:70:c9:de:4c:32:60:30:12:ae:db:b4:25:3b: a0:eb:5f:4e:57:3e:80:b6:ef:0d:de:fa:ea:0e:e9: c9:6d:8e:62:bd:99:75:1c:0f:ee:9c:94:a6:04:a1: bf:7d:51:fd:b1:dc:28:61:e5:91:f5:62:21:32:0c: 94:3b:12:ee:1a:50:5c:58:7a:c6:31:ac:21:24:71: c6:02:29:31:92:d8:f4:ba:5e:fe:f5:df:7f:a4:cc: 11:84:03:cb:e9:e6:be:9a:24:5f:a0:3d:48:23:d6: c5:82:3f:c8:a7:a5:81:62:87:65:da:96:44:bc:b0: 09:43:aa:58:9d:d5:a7:ff:c6:14:83:7e:e3:c5:a3: 82:04:a3:fc:8c:52:96:76:14:32:7b:50:5d:a8:49: c6:a2:57:33:ba:46:e7:e5:a9:3f:43:7c:aa:b9:26: c3:4d:5d:d9:c6:7b:1b:35:76:8a:fa:3f:3e:75:dd: 90:9d:33:06:28:e8:4f:ad:72:28:22:3f:c3:c3:0f: bc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DD:19:9B:C7:51:C5:CE:0D:B4:B5:AB:29:72:25:3F:EE:62:77:D0 X509v3 Authority Key Identifier: keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ef:67:5a:6b:47:f2:27:0b:f4:bd:1a:6d:7a:f5:3d:38:7f: 52:90:98:ba:db:4e:d1:33:df:ec:05:fa:0a:63:29:2e:b0:95: 47:77:30:93:7b:16:59:8b:07:3d:47:10:6f:10:7c:c9:16:cf: eb:e5:1b:2d:d6:4b:64:0b:d8:0f:fd:b3:7a:10:8a:83:f2:63: bf:0a:42:df:19:9f:54:a5:84:f6:57:3d:f1:cb:75:68:89:55: ab:f4:e3:d5:04:05:1b:9c:38:ee:0b:28:c8:c5:34:a0:86:71: ae:53:c1:e0:09:54:88:5a:65:b3:3b:8d:22:bb:08:ef:98:6e: 44:db:bc:56:61:43:68:d6:45:6e:aa:29:09:b8:29:77:6d:c3: 73:41:a4:b9:34:b1:ae:46:16:90:61:5d:b0:c2:e8:58:d7:06: 82:db:7a:07:3a:06:89:c7:60:ff:69:ba:38:cc:0d:40:9f:88: 47:c7:51:97:e2:a3:4b:fe:da:ba:6e:99:97:6b:70:08:d0:58: 36:71:5f:eb:29:8a:a6:5b:b6:91:44:ae:f0:5e:59:48:ac:06: 25:b9:fc:a3:aa:8e:d0:bd:c2:e6:fb:0f:1f:3c:7f:5d:92:7f: 25:64:ed:6b:ed:58:70:8e:17:16:41:97:45:b5:8b:3e:fb:37: 12:de:01:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9mJHq4Y0dE0J8JHyRYBQm8xERowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThD NkNFQ0JCRTAeFw0yNjA2MTMwNDM5NTBaFw0yNjA2MTQwNDU5NTBaMDMxMTAvBgNV BAMTKDI0REQxOTlCQzc1MUM1Q0UwREI0QjVBQjI5NzIyNTNGRUU2Mjc3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqVelCqhphZoDmCuRPtXGwO+2x nOz2EEsB+dHHYkjeB4N6SCJzL0eJAyxQzw98vBh+69/eP+vPHLQy4NkbcMneTDJg MBKu27QlO6DrX05XPoC27w3e+uoO6cltjmK9mXUcD+6clKYEob99Uf2x3Chh5ZH1 YiEyDJQ7Eu4aUFxYesYxrCEkccYCKTGS2PS6Xv7133+kzBGEA8vp5r6aJF+gPUgj 1sWCP8inpYFih2XalkS8sAlDqlid1af/xhSDfuPFo4IEo/yMUpZ2FDJ7UF2oScai VzO6RuflqT9DfKq5JsNNXdnGexs1dor6Pz513ZCdMwYo6E+tcigiP8PDD7zLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJN0Zm8dRxc4NtLWrKXIlP+5id9AwHwYDVR0j BBgwFoAUC/1q3Lz3RXwFx/qRppWHWMbOy74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmYyNTA2YjEtMzk2ZC00OTllLWI3ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENC Q0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThDNkNFQ0JCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkZENkFEQ0JDRjc0NTdDMDVDN0ZBOTFBNjk1ODc1OEM2Q0VD QkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3 NThDNkNFQ0JCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHvZ1prR/InC/S9Gm169T04f1KQmLrbTtEz 3+wF+gpjKS6wlUd3MJN7FlmLBz1HEG8QfMkWz+vlGy3WS2QL2A/9s3oQioPyY78K Qt8Zn1SlhPZXPfHLdWiJVav049UEBRucOO4LKMjFNKCGca5TweAJVIhaZbM7jSK7 CO+YbkTbvFZhQ2jWRW6qKQm4KXdtw3NBpLk0sa5GFpBhXbDC6FjXBoLbegc6BonH YP9pujjMDUCfiEfHUZfio0v+2rpumZdrcAjQWDZxX+spiqZbtpFErvBeWUisBiW5 /KOqjtC9wub7Dx88f12SfyVk7WvtWHCOFxZBl0W1iz77NxLeAYA= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:56 2026 by rpki-client