$ rpki-client -vvf rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft File: 0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft (raw, json) Hash identifier: 7R87Gvao3AMip8laisy5f4Ow4UONoTRF3VVAqig2wXs= Subject key identifier: F9:06:AF:DE:45:4F:89:D0:93:5A:93:94:DD:CC:BF:C1:36:30:D7:26 Authority key identifier: 0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5 Certificate issuer: /CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5 Certificate serial: 506FE94CDB03A63915678F15519160B002C3CCD1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 07:39:33 +0000 Manifest this update: Tue 02 Jun 2026 07:34:33 +0000 Manifest next update: Wed 03 Jun 2026 11:19:33 +0000 Files and hashes: 1: 0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl (hash: 28RF0o1I29bVp1CUIch0GaBwbzQxhs0hoC11soqAzBU=) 2: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: /DP+cT1aguJf0hhV/U1Fj08oxHTiO4zVC+8+RLVJzSY=) 3: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: PLnaEPFMhQC7qrBdYJWogsB9/XputOFqVTt3eZyoCbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:6f:e9:4c:db:03:a6:39:15:67:8f:15:51:91:60:b0:02:c3:cc:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5 Validity Not Before: Jun 2 07:34:33 2026 GMT Not After : Jun 3 11:19:33 2026 GMT Subject: CN=F906AFDE454F89D0935A9394DDCCBFC13630D726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:c3:ef:9e:4a:48:a2:fc:90:b4:a8:89:7a: ff:f3:91:e0:cf:b1:64:39:0a:7f:67:51:4c:e1:92: e4:e4:18:94:cf:33:ca:4a:1f:0e:27:03:ef:f6:c3: 53:53:b4:09:b5:84:96:8d:04:76:16:3e:18:8f:85: 98:2c:c4:61:4e:bc:cb:5f:c2:d0:8c:ce:7c:15:d6: f7:e5:8c:ce:7e:45:d6:7a:c6:71:f0:0b:37:6d:07: d9:b3:74:2c:31:98:dc:c7:8f:71:79:cd:e7:c5:b1: 36:7f:f2:48:1f:17:00:f6:ab:77:5d:4b:b3:64:7c: e3:d9:51:5a:ef:e1:5c:51:a6:0c:38:0c:65:e8:0b: 6d:4e:0f:1a:c8:45:19:e5:5f:d2:0b:64:07:2b:78: a1:58:86:e9:7f:3d:03:e4:69:2c:42:76:1d:71:5a: 70:33:53:56:55:f0:09:8e:f4:b6:1b:b7:df:4f:c0: 2d:5c:88:f7:45:65:44:fa:6d:cb:ce:1d:de:cd:a4: 0e:d7:9b:56:c0:f8:8d:91:cc:62:85:b3:7a:0a:1f: 95:fa:2c:ee:f6:90:bf:89:df:5f:b7:c9:3d:73:e8: 15:63:fb:12:e1:c4:74:4d:f5:80:9e:5a:0e:c5:71: 5e:76:ba:2f:ba:5f:9b:41:27:6b:fe:66:f6:12:a5: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:06:AF:DE:45:4F:89:D0:93:5A:93:94:DD:CC:BF:C1:36:30:D7:26 X509v3 Authority Key Identifier: keyid:0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ee:e5:40:c8:f5:6d:fc:d3:f6:2a:11:6e:42:8a:2a:73:0e: 94:b1:de:bc:8f:6c:7a:34:c2:61:30:dd:47:8d:a3:2e:bb:ff: 4d:e6:d5:75:fe:86:2f:c7:08:b1:63:b0:0e:75:51:2d:cd:17: 4b:aa:99:e9:05:2e:a7:b7:c6:3b:12:26:b4:a1:13:a2:b4:3f: ea:06:80:3f:02:14:2c:72:24:1d:3f:8f:f4:37:d0:ec:74:93: 68:c9:07:df:14:77:ba:b4:9f:08:cf:c3:cc:8d:50:e6:12:2c: 00:13:fe:fe:15:70:2d:c6:03:29:e1:f9:68:50:a5:02:ce:05: d7:ff:00:f9:ef:f6:6f:fb:99:ac:f7:04:20:06:1f:0b:6c:99: 26:74:70:a7:c8:b0:1d:44:e6:03:a6:78:d7:22:4a:f7:05:18: 52:cf:13:a5:62:ce:dc:81:49:c7:d8:be:5e:27:59:79:fd:e8: 42:e3:66:5c:cf:80:0f:5a:1c:fe:bf:ec:ff:7d:85:c6:c9:2c: d9:55:37:12:60:2d:fd:76:8d:a1:1e:bf:38:ed:c7:4f:3d:82: ad:bd:64:5e:17:80:12:5d:4f:c8:60:37:d1:4e:b4:4e:11:89: a4:5e:9c:e0:97:b3:52:22:16:1a:f9:f2:36:73:7a:2e:46:7e: 26:ff:59:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUG/pTNsDpjkVZ48VUZFgsALDzNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3MzQ5RkFDRDE3MzMyRTE5M0E0QjZCMzQwRDlFNkEx MTQ4RDVENTAeFw0yNjA2MDIwNzM0MzNaFw0yNjA2MDMxMTE5MzNaMDMxMTAvBgNV BAMTKEY5MDZBRkRFNDU0Rjg5RDA5MzVBOTM5NEREQ0NCRkMxMzYzMEQ3MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHMPvnkpIovyQtKiJev/zkeDP sWQ5Cn9nUUzhkuTkGJTPM8pKHw4nA+/2w1NTtAm1hJaNBHYWPhiPhZgsxGFOvMtf wtCMznwV1vfljM5+RdZ6xnHwCzdtB9mzdCwxmNzHj3F5zefFsTZ/8kgfFwD2q3dd S7NkfOPZUVrv4VxRpgw4DGXoC21ODxrIRRnlX9ILZAcreKFYhul/PQPkaSxCdh1x WnAzU1ZV8AmO9LYbt99PwC1ciPdFZUT6bcvOHd7NpA7Xm1bA+I2RzGKFs3oKH5X6 LO72kL+J31+3yT1z6BVj+xLhxHRN9YCeWg7FcV52ui+6X5tBJ2v+ZvYSpT+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Qav3kVPidCTWpOU3cy/wTYw1yYwHwYDVR0j BBgwFoAUDnNJ+s0XMy4ZOktrNA2eahFI1dUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE2YThhZDQtMDZlNi00MGMzLTk4ZTQtZmE5M2FmYzRhNzcyLzAvMEU3MzQ5RkFD RDE3MzMyRTE5M0E0QjZCMzQwRDlFNkExMTQ4RDVENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTczNDlGQUNEMTczMzJFMTkzQTRCNkIzNDBEOUU2QTExNDhE NUQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvMEU3MzQ5RkFDRDE3MzMyRTE5M0E0QjZCMzQwRDlF NkExMTQ4RDVENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADu5UDI9W380/YqEW5CiipzDpSx3ryPbHo0 wmEw3UeNoy67/03m1XX+hi/HCLFjsA51US3NF0uqmekFLqe3xjsSJrShE6K0P+oG gD8CFCxyJB0/j/Q30Ox0k2jJB98Ud7q0nwjPw8yNUOYSLAAT/v4VcC3GAynh+WhQ pQLOBdf/APnv9m/7maz3BCAGHwtsmSZ0cKfIsB1E5gOmeNciSvcFGFLPE6ViztyB ScfYvl4nWXn96ELjZlzPgA9aHP6/7P99hcbJLNlVNxJgLf12jaEevzjtx089gq29 ZF4XgBJdT8hgN9FOtE4RiaRenOCXs1IiFhr58jZzei5Gfib/WXM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:03 2026 by rpki-client