$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft File: 0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft (raw, json) Hash identifier: 0yaF04/PvDe5v0bKi3xbEGAVlPIuSKPasyDahGBu810= Subject key identifier: 91:EA:E7:BD:23:60:C1:7A:BA:09:3C:10:D0:14:86:E7:01:06:3D:86 Authority key identifier: 0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE Certificate issuer: /CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE Certificate serial: 385C0AD9E21C46B9BDE39F737234A8ABB0132B39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:43:00 +0000 Manifest this update: Tue 02 Jun 2026 14:38:00 +0000 Manifest next update: Wed 03 Jun 2026 14:46:00 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: 8ZFSRd4IMl+7UA1+qh6mSwLg2Ure6CZXxSWgxu+4aBo=) 2: 0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl (hash: qtDv8ctownY5DO5vi3sMT+4IKTxpEoaehlWusDCeHXY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 14:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5c:0a:d9:e2:1c:46:b9:bd:e3:9f:73:72:34:a8:ab:b0:13:2b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE Validity Not Before: Jun 2 14:38:00 2026 GMT Not After : Jun 3 14:46:00 2026 GMT Subject: CN=91EAE7BD2360C17ABA093C10D01486E701063D86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0d:bd:07:67:ae:a0:25:b1:60:1e:d9:c6:61: 7f:04:2d:1e:80:fb:b4:89:2f:56:fa:74:e1:f7:d1: f0:53:de:45:8e:cc:66:02:4d:f5:f6:06:da:a7:66: d5:92:3a:01:b2:21:1f:97:83:85:71:95:ef:25:33: f5:ca:89:48:b3:a9:1d:20:3c:b8:46:4b:0c:03:8f: 9e:96:27:58:90:0f:d6:a2:6e:d3:db:a6:62:e8:15: 93:3c:72:6e:39:09:f9:ad:df:25:f7:1e:3d:11:2e: c0:ac:0a:07:01:c7:24:f0:17:46:7a:1a:31:32:8d: 0e:70:5e:8c:70:1f:09:46:d3:35:f5:25:53:94:71: 19:63:4e:5a:9d:1b:b1:36:f5:d6:07:54:a5:6a:b4: 85:66:11:73:ad:b0:0c:19:57:bd:17:3d:c3:25:03: 0e:e1:10:8b:f2:05:37:37:21:84:de:19:c3:7a:5f: 10:ae:79:a8:f3:fc:1c:ed:a5:21:41:7d:95:2f:99: 22:81:68:7e:97:ec:b6:47:19:ba:5f:ef:49:e1:2d: 15:35:ae:65:f2:fb:ce:5d:e5:f4:54:c9:ca:c2:16: 9a:28:1f:15:e3:7e:29:9b:35:c6:80:53:d6:8e:1e: de:84:2f:43:48:0a:52:77:e9:f3:8e:06:a7:a3:90: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EA:E7:BD:23:60:C1:7A:BA:09:3C:10:D0:14:86:E7:01:06:3D:86 X509v3 Authority Key Identifier: keyid:0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:91:3b:70:d5:91:c3:10:6b:18:77:26:6f:f9:52:4e:87:0d: d7:dd:55:5b:33:5d:25:e6:9a:8c:b6:1f:f5:ea:f1:02:80:f2: 0b:40:b9:07:e0:3b:3f:60:43:0e:c4:97:70:31:e0:03:b7:a1: 30:d0:8e:e4:e1:b2:35:88:1e:2b:58:6f:ff:29:f6:4e:b5:fd: ca:d2:d6:ab:6e:c8:76:7d:21:8f:d5:08:df:70:b8:aa:cb:90: 67:cd:da:50:fe:1e:57:6b:2c:d2:ee:33:e2:34:3a:85:3f:9e: 25:19:8b:12:e6:42:31:2e:b5:5c:08:1b:a1:48:81:29:81:56: 14:08:3e:59:11:15:cd:9b:ab:cf:a0:32:97:b3:f4:8d:dc:43: 63:8c:ce:ff:50:7d:79:d7:48:00:52:b2:4f:8a:fe:c4:ae:f4: 40:10:95:b2:37:e1:2d:03:a1:13:1e:8a:1e:27:95:68:05:a9: b4:58:8e:b0:63:b3:10:8b:22:90:b7:7a:7a:ac:af:1b:4e:4f: 58:b1:09:7f:7d:0c:f9:f5:25:16:c2:23:71:bb:c8:28:67:f2: 69:36:1e:07:eb:17:ae:b8:5b:ea:4c:5d:0b:bb:71:df:84:b6: 9b:c4:b2:32:63:a5:ce:40:5f:75:98:21:90:48:26:b7:c2:cf: 8a:ef:44:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFwK2eIcRrm9459zcjSoq7ATKzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJFRkMxRUM1OTNCMTZDNzlCQzU2MDBFRjU4MTNCMEND NkUyNDhCRTAeFw0yNjA2MDIxNDM4MDBaFw0yNjA2MDMxNDQ2MDBaMDMxMTAvBgNV BAMTKDkxRUFFN0JEMjM2MEMxN0FCQTA5M0MxMEQwMTQ4NkU3MDEwNjNEODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWDb0HZ66gJbFgHtnGYX8ELR6A +7SJL1b6dOH30fBT3kWOzGYCTfX2BtqnZtWSOgGyIR+Xg4Vxle8lM/XKiUizqR0g PLhGSwwDj56WJ1iQD9aibtPbpmLoFZM8cm45Cfmt3yX3Hj0RLsCsCgcBxyTwF0Z6 GjEyjQ5wXoxwHwlG0zX1JVOUcRljTlqdG7E29dYHVKVqtIVmEXOtsAwZV70XPcMl Aw7hEIvyBTc3IYTeGcN6XxCueajz/BztpSFBfZUvmSKBaH6X7LZHGbpf70nhLRU1 rmXy+85d5fRUycrCFpooHxXjfimbNcaAU9aOHt6EL0NIClJ36fOOBqejkLpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkernvSNgwXq6CTwQ0BSG5wEGPYYwHwYDVR0j BBgwFoAUC+/B7Fk7FsebxWAO9YE7DMbiSL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ4NzEzMDMtMDIxYS00YTBiLTllZmItYWUyZGI2YzkwZDg0LzAvMEJFRkMxRUM1 OTNCMTZDNzlCQzU2MDBFRjU4MTNCMENDNkUyNDhCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkVGQzFFQzU5M0IxNkM3OUJDNTYwMEVGNTgxM0IwQ0M2RTI0 OEJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvMEJFRkMxRUM1OTNCMTZDNzlCQzU2MDBFRjU4MTNC MENDNkUyNDhCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACRO3DVkcMQaxh3Jm/5Uk6HDdfdVVszXSXm moy2H/Xq8QKA8gtAuQfgOz9gQw7El3Ax4AO3oTDQjuThsjWIHitYb/8p9k61/crS 1qtuyHZ9IY/VCN9wuKrLkGfN2lD+HldrLNLuM+I0OoU/niUZixLmQjEutVwIG6FI gSmBVhQIPlkRFc2bq8+gMpez9I3cQ2OMzv9QfXnXSABSsk+K/sSu9EAQlbI34S0D oRMeih4nlWgFqbRYjrBjsxCLIpC3enqsrxtOT1ixCX99DPn1JRbCI3G7yChn8mk2 HgfrF664W+pMXQu7cd+EtpvEsjJjpc5AX3WYIZBIJrfCz4rvRPA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:55 2026 by rpki-client