$ rpki-client -vvf rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft File: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft (raw, json) Hash identifier: J0mnmR9R33h5pwb4twKsJgpHkcM4MRYcbR30gVYsfl4= Subject key identifier: 0A:1B:2B:DC:BB:A5:EA:2B:D4:74:FB:29:9F:61:91:D5:7B:FC:E7:B6 Authority key identifier: 0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA Certificate issuer: /CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Certificate serial: 230324F961CD92FD322355513D854E05799369DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:02:28 +0000 Manifest this update: Tue 02 Jun 2026 21:57:28 +0000 Manifest next update: Thu 04 Jun 2026 00:44:28 +0000 Files and hashes: 1: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: dKm4h4htb+xuOuzBD2j/P3WbreIMIoqa9hQCTFJdoG0=) 2: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl (hash: bteFjLXJaGMUEu0xOS4AaGCpBesBUcYpoWsex3fxoyE=) 3: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: AfqLgmWvcp/HfbbhsOhmQtK0n/maxUMDksVbAZ7tmAM=) 4: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: wGWAkljELKeAaAd3PWlxElTnzVBFIyJlkgaeJs8LIbg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 00:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:03:24:f9:61:cd:92:fd:32:23:55:51:3d:85:4e:05:79:93:69:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Validity Not Before: Jun 2 21:57:28 2026 GMT Not After : Jun 4 00:44:28 2026 GMT Subject: CN=0A1B2BDCBBA5EA2BD474FB299F6191D57BFCE7B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:88:58:10:f8:ba:7f:69:93:b4:c6:e2:f4: 0f:75:b7:ad:61:8d:a2:4f:c0:1e:b0:0a:47:08:04: 51:ae:54:36:30:d9:cd:d2:4d:bb:47:5a:03:03:94: a7:eb:e4:98:71:39:5d:0b:fa:fe:08:65:2f:22:7b: 11:09:59:f9:9e:35:ed:9c:34:0b:78:8f:7f:3d:24: eb:87:1c:7d:d8:03:af:ae:9f:0a:67:89:68:f7:85: 15:45:d6:8a:6e:42:f2:c4:ef:bf:2c:46:83:86:3a: 7e:8e:9d:ec:95:10:a9:02:b3:01:5d:e6:c2:54:af: a0:7a:24:ec:66:11:3f:9a:6d:10:a9:79:14:9a:00: c9:d8:fe:f2:72:8a:91:00:43:31:17:e3:e3:08:02: d0:2d:17:31:fc:56:bf:cb:82:3e:c4:e4:98:71:20: 9a:0d:55:fb:4a:36:80:c6:82:29:6c:3f:11:d1:fb: b4:23:46:ee:48:df:5b:46:84:fb:71:34:4b:e6:b9: 3b:a7:00:ac:2c:28:5e:c9:c5:bf:15:a5:b8:2b:aa: f1:38:75:c2:8e:e2:7f:1f:9d:de:e7:86:dd:61:9c: 1a:67:5d:6a:42:0e:f0:c0:d4:8f:11:c9:70:69:22: 7d:07:14:c5:01:fb:a3:bd:2a:f1:05:11:cd:26:72: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1B:2B:DC:BB:A5:EA:2B:D4:74:FB:29:9F:61:91:D5:7B:FC:E7:B6 X509v3 Authority Key Identifier: keyid:0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:07:1f:5a:87:0c:01:bd:a2:d7:2b:cd:23:26:9a:4d:22:80: ae:99:af:05:f4:ba:8f:03:40:5d:7c:dc:a4:e2:e3:ed:e9:21: e6:bb:7f:c8:f2:96:e6:89:12:8f:0f:26:67:4f:df:23:fb:45: 36:d7:d6:48:a5:83:a1:2d:18:b2:81:34:a5:0a:22:3e:ab:e1: 41:b0:e0:e9:6f:a2:aa:71:02:54:04:f9:37:71:21:7c:e9:00: b0:f9:78:13:a1:f6:7e:de:f5:94:01:0a:67:fe:3a:a7:27:74: f5:5d:d9:fb:dc:c5:b7:07:af:b4:5c:81:5e:d8:b2:2b:96:f3: eb:4a:c9:46:45:24:89:9f:c4:33:94:c9:09:63:18:37:04:b4: 1d:6c:f9:26:6f:04:ba:2e:44:ae:3c:e6:f1:15:77:dc:d2:bf: b5:3e:08:c9:df:1b:64:77:99:c9:4c:f5:d0:c9:18:de:c3:55: 60:12:19:ae:2c:24:f2:36:a9:c9:bd:b2:62:c0:3e:6e:32:54: d4:38:67:41:3b:7b:7e:4a:8e:41:36:f5:ba:8a:7b:eb:40:61: 93:b9:38:47:67:ae:59:d2:f9:39:83:2c:6f:77:24:e7:ea:64: 0a:d2:43:77:ae:14:5c:91:c0:ac:01:09:a3:e0:cf:78:85:15: 19:d6:69:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwMk+WHNkv0yI1VRPYVOBXmTad0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlC NzU1RTRGQTAeFw0yNjA2MDIyMTU3MjhaFw0yNjA2MDQwMDQ0MjhaMDMxMTAvBgNV BAMTKDBBMUIyQkRDQkJBNUVBMkJENDc0RkIyOTlGNjE5MUQ1N0JGQ0U3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2RohYEPi6f2mTtMbi9A91t61h jaJPwB6wCkcIBFGuVDYw2c3STbtHWgMDlKfr5JhxOV0L+v4IZS8iexEJWfmeNe2c NAt4j389JOuHHH3YA6+unwpniWj3hRVF1opuQvLE778sRoOGOn6OneyVEKkCswFd 5sJUr6B6JOxmET+abRCpeRSaAMnY/vJyipEAQzEX4+MIAtAtFzH8Vr/Lgj7E5Jhx IJoNVftKNoDGgilsPxHR+7QjRu5I31tGhPtxNEvmuTunAKwsKF7Jxb8VpbgrqvE4 dcKO4n8fnd7nht1hnBpnXWpCDvDA1I8RyXBpIn0HFMUB+6O9KvEFEc0mcpdjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUChsr3Lul6ivUdPspn2GR1Xv857YwHwYDVR0j BBgwFoAUDfaEGkXn9MPozJCvNrv72bdV5PowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGRhZjlmMGYtNGZiMS00MGMwLWIzODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0 NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlCNzU1RTRGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wREY2ODQxQTQ1RTdGNEMzRThDQzkwQUYzNkJCRkJEOUI3NTVF NEZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZC RDlCNzU1RTRGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwHH1qHDAG9otcrzSMmmk0igK6ZrwX0uo8D QF183KTi4+3pIea7f8jyluaJEo8PJmdP3yP7RTbX1kilg6EtGLKBNKUKIj6r4UGw 4OlvoqpxAlQE+TdxIXzpALD5eBOh9n7e9ZQBCmf+OqcndPVd2fvcxbcHr7RcgV7Y siuW8+tKyUZFJImfxDOUyQljGDcEtB1s+SZvBLouRK485vEVd9zSv7U+CMnfG2R3 mclM9dDJGN7DVWASGa4sJPI2qcm9smLAPm4yVNQ4Z0E7e35KjkE29bqKe+tAYZO5 OEdnrlnS+TmDLG93JOfqZArSQ3euFFyRwKwBCaPgz3iFFRnWacE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:00 2026 by rpki-client