$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft File: 0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft (raw, json) Hash identifier: sNXhPEfENgvHXIKF3ThF/KMdFCmVOWeCaXA8Pn+3Ew8= Subject key identifier: BB:DD:32:14:98:46:5B:38:1F:FD:79:18:A2:57:AB:53:73:0A:13:9F Authority key identifier: 0F:74:5B:0D:4D:2F:7E:AF:8F:AF:5D:92:00:EE:EC:8E:E1:03:69:58 Certificate issuer: /CN=0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958 Certificate serial: 37CECEEE9D6D89F87EFEAF523705108E0A039EA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:11:59 +0000 Manifest this update: Tue 02 Jun 2026 18:06:59 +0000 Manifest next update: Wed 03 Jun 2026 21:39:59 +0000 Files and hashes: 1: 0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl (hash: cOqxsUN+qUp4OV5rHsBxfiFCT4tJE11tK31pa2nSQKs=) 2: 3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (hash: qMA2mvuDFglgzD+HOLkg38KkeE2E7iG0DYOT5BZeHio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ce:ce:ee:9d:6d:89:f8:7e:fe:af:52:37:05:10:8e:0a:03:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958 Validity Not Before: Jun 2 18:06:59 2026 GMT Not After : Jun 3 21:39:59 2026 GMT Subject: CN=BBDD321498465B381FFD7918A257AB53730A139F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:bc:7e:73:6b:85:31:ab:17:6e:6e:34:23: 21:81:87:f1:28:e1:6f:41:45:fd:91:f8:26:cf:52: 04:99:67:ea:e1:18:de:75:d4:37:0c:70:b8:9a:67: c4:e0:21:8b:90:2e:19:59:27:d0:b9:30:3a:45:e2: 9d:9d:18:1f:e5:f9:8c:c1:1f:35:11:c0:67:27:7f: 05:d6:9e:7b:96:10:1f:be:4d:30:e6:a8:ba:69:67: 2b:27:6c:43:5b:a7:50:1e:8a:a7:bc:4e:78:4b:62: f6:fe:b5:94:17:a6:ed:70:96:a8:0e:4c:d6:5b:c1: 89:8c:a2:26:51:8a:79:0c:b1:f3:c2:27:dd:49:3c: b5:5b:6e:ba:05:7d:96:ed:77:f5:0c:b9:3c:1f:6c: 6d:87:73:9e:ea:2c:78:53:0e:c8:0e:9f:68:15:a3: d6:74:5c:d7:a0:b2:d9:f2:a2:1c:9b:47:a5:8f:cc: 70:53:87:35:89:08:60:4c:6e:24:a7:62:88:29:1d: bd:1f:05:1f:73:db:b3:b1:9b:f7:55:1d:dd:a7:0f: 29:55:6d:f9:b1:56:66:55:96:88:ec:79:e9:42:b1: 3c:45:cc:f9:e9:f2:d6:f7:d6:49:3d:a4:2c:25:c4: b3:76:28:23:8e:6c:03:74:c1:59:13:13:56:8d:6b: c2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DD:32:14:98:46:5B:38:1F:FD:79:18:A2:57:AB:53:73:0A:13:9F X509v3 Authority Key Identifier: keyid:0F:74:5B:0D:4D:2F:7E:AF:8F:AF:5D:92:00:EE:EC:8E:E1:03:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:cf:91:da:e8:04:f7:d4:21:5a:a6:83:06:8d:b6:45:36:13: 53:f3:5c:98:de:8c:b7:98:1c:fc:52:28:30:3a:3a:88:b1:0b: 38:2b:ac:a9:5c:8e:ed:67:44:6b:29:b3:5f:ba:c4:06:30:30: 05:01:09:e0:84:02:54:03:6c:fe:14:5d:6f:b4:47:75:64:be: 54:5b:2e:cf:93:8b:ff:1e:0a:53:0c:a7:9b:9f:30:84:bc:59: c0:e5:2e:09:57:0e:7e:bd:27:a5:82:e0:50:ea:2d:c1:4e:4a: cd:4e:b8:5a:b3:74:99:eb:33:02:f4:0c:1c:dc:4b:c3:d4:2c: 3d:d4:bb:24:c7:65:b0:00:fc:37:94:27:58:10:92:c1:e8:ef: 55:4c:3d:bc:21:88:7d:77:44:9d:90:fa:6f:e7:24:3c:b8:e7: 19:41:05:90:f3:41:d9:52:5c:08:ea:7d:62:e2:79:2c:d2:0e: b9:ce:c4:8a:17:cc:1c:ef:08:9a:06:08:56:ef:73:cb:d6:b1: db:5c:3b:66:9e:90:37:91:10:e9:bc:79:41:a9:b4:47:85:c4: 79:77:e6:5f:ce:9e:0b:84:56:8b:f3:1f:39:65:ec:a4:a0:ef: 17:63:67:2f:e6:3e:34:73:19:b1:52:5d:7e:47:df:5a:46:ae: c7:85:20:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN87O7p1tifh+/q9SNwUQjgoDnqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY3NDVCMEQ0RDJGN0VBRjhGQUY1RDkyMDBFRUVDOEVF MTAzNjk1ODAeFw0yNjA2MDIxODA2NTlaFw0yNjA2MDMyMTM5NTlaMDMxMTAvBgNV BAMTKEJCREQzMjE0OTg0NjVCMzgxRkZENzkxOEEyNTdBQjUzNzMwQTEzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpbx+c2uFMasXbm40IyGBh/Eo 4W9BRf2R+CbPUgSZZ+rhGN511DcMcLiaZ8TgIYuQLhlZJ9C5MDpF4p2dGB/l+YzB HzURwGcnfwXWnnuWEB++TTDmqLppZysnbENbp1Aeiqe8TnhLYvb+tZQXpu1wlqgO TNZbwYmMoiZRinkMsfPCJ91JPLVbbroFfZbtd/UMuTwfbG2Hc57qLHhTDsgOn2gV o9Z0XNegstnyohybR6WPzHBThzWJCGBMbiSnYogpHb0fBR9z27Oxm/dVHd2nDylV bfmxVmZVlojseelCsTxFzPnp8tb31kk9pCwlxLN2KCOObAN0wVkTE1aNa8IpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu90yFJhGWzgf/XkYolerU3MKE58wHwYDVR0j BBgwFoAUD3RbDU0vfq+Pr12SAO7sjuEDaVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTViYTQ3Y2UtMzk5Mi00MzFjLWFiZjEtNjgxYTRjYzhlYzQ4LzAvMEY3NDVCMEQ0 RDJGN0VBRjhGQUY1RDkyMDBFRUVDOEVFMTAzNjk1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjc0NUIwRDREMkY3RUFGOEZBRjVEOTIwMEVFRUM4RUUxMDM2 OTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTViYTQ3Y2UtMzk5Mi00MzFjLWFi ZjEtNjgxYTRjYzhlYzQ4LzAvMEY3NDVCMEQ0RDJGN0VBRjhGQUY1RDkyMDBFRUVD OEVFMTAzNjk1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvPkdroBPfUIVqmgwaNtkU2E1PzXJjejLeY HPxSKDA6OoixCzgrrKlcju1nRGsps1+6xAYwMAUBCeCEAlQDbP4UXW+0R3VkvlRb Ls+Ti/8eClMMp5ufMIS8WcDlLglXDn69J6WC4FDqLcFOSs1OuFqzdJnrMwL0DBzc S8PULD3UuyTHZbAA/DeUJ1gQksHo71VMPbwhiH13RJ2Q+m/nJDy45xlBBZDzQdlS XAjqfWLieSzSDrnOxIoXzBzvCJoGCFbvc8vWsdtcO2aekDeREOm8eUGptEeFxHl3 5l/OnguEVovzHzll7KSg7xdjZy/mPjRzGbFSXX5H31pGrseFIIU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:13 2026 by rpki-client