$ rpki-client -vvf rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft File: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft (raw, json) Hash identifier: BBGFc8XUdjcsn5z8T6nNlLBz7Xmmjp5ccR017cKoMY0= Subject key identifier: FB:FD:C1:AD:05:E3:22:8A:8F:48:AD:5F:0F:86:D2:8A:6B:03:35:87 Authority key identifier: 0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 Certificate issuer: /CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Certificate serial: 7F7E0663F9FFB4AACED6C6D4155DE40855816A87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 11:40:48 +0000 Manifest this update: Mon 20 Jul 2026 11:35:48 +0000 Manifest next update: Tue 21 Jul 2026 14:36:48 +0000 Files and hashes: 1: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl (hash: rfdffwWQ1b/JlyGi6moeBGjYdxD/zWnkJjDqnA54dmU=) 2: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: ioAK8PuVzBK8o1vLJamanAVbMzvKPhJnFFlStnHERk0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:7e:06:63:f9:ff:b4:aa:ce:d6:c6:d4:15:5d:e4:08:55:81:6a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Validity Not Before: Jul 20 11:35:48 2026 GMT Not After : Jul 21 14:36:48 2026 GMT Subject: CN=FBFDC1AD05E3228A8F48AD5F0F86D28A6B033587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:14:a8:96:4e:e1:1e:9b:ac:04:d3:83:ee: 6f:f5:ac:16:ad:bb:60:97:3f:40:f2:e7:44:7e:81: a1:82:eb:27:b5:e2:b8:c8:c3:b5:70:96:87:9c:8a: fe:fc:47:8a:0e:43:a9:c8:86:3d:e8:f5:c4:42:8c: bf:f7:a5:1b:9b:30:64:88:26:3a:35:86:9e:89:ea: 5a:d0:10:8d:7f:08:aa:3d:61:59:6d:44:26:2b:4e: 5f:00:8a:c4:ed:da:97:fc:c4:75:5b:f4:69:31:fe: 9a:03:1b:fe:6d:50:96:d4:20:75:c8:a7:5e:50:64: 1a:11:e7:11:d9:d5:6c:5b:09:1b:0e:d4:06:e0:73: 99:35:bd:d2:02:08:d3:b1:ce:90:5b:dd:97:e2:23: 0b:52:7c:33:3a:1f:56:f6:ff:79:0a:33:00:d6:45: 02:44:dc:1e:d2:34:60:3d:58:41:d7:75:1b:d8:fa: 01:54:3e:29:c4:b5:8d:f4:ae:3b:e5:7d:71:d6:ae: 21:16:ce:76:f4:f8:3a:e6:81:e4:5f:f0:c9:3a:32: 41:f8:f2:88:4f:51:84:26:7a:ea:69:40:59:bc:81: 12:6d:7e:fa:b4:83:f5:1e:6b:0b:2a:bc:42:e9:fa: f3:a2:05:20:e6:c9:92:4b:56:90:6a:55:6b:6a:ed: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FD:C1:AD:05:E3:22:8A:8F:48:AD:5F:0F:86:D2:8A:6B:03:35:87 X509v3 Authority Key Identifier: keyid:0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:de:af:e8:3d:d8:01:b8:2c:a5:db:9d:a8:11:f6:ec:90:b7: cb:0e:1d:d7:d9:b0:fd:73:f7:92:58:77:c3:db:49:53:28:30: e0:91:4d:fc:e2:18:ee:1e:06:d1:62:4c:34:f1:5b:a3:39:ee: 90:14:ee:87:c5:93:af:79:0a:6d:79:28:79:2d:28:3a:6d:f5: b4:d0:1f:1c:98:2c:a8:b7:6a:6a:86:2a:b8:10:47:6a:e2:92: 26:9a:50:e1:75:4a:94:db:8d:51:19:f3:33:46:ae:59:4c:23: 0d:bb:99:18:39:4e:7c:8c:5e:73:e0:a7:fb:5c:86:d9:51:21: 95:8e:d9:3a:80:98:c5:e3:31:20:d9:10:4a:f4:8d:38:f6:a4: 7d:34:5c:a1:cc:30:8e:3f:52:a0:75:07:29:ac:b5:34:4b:11: 57:e3:e1:22:7d:9c:c8:61:2d:31:af:a7:ff:43:f1:67:f6:db: b6:a5:6a:2a:a8:78:f0:ce:7a:60:09:85:d6:b2:d1:f2:53:78: b1:46:ba:d5:50:63:1e:8d:85:c0:65:19:a5:9c:6e:ea:40:a6: d3:05:bd:aa:8c:61:39:bf:0b:4d:9d:0b:69:65:25:94:18:73: 60:27:e5:17:c2:a1:73:7b:0d:ad:f2:c2:b5:94:b6:b0:6b:c9: ca:5f:67:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf34GY/n/tKrO1sbUFV3kCFWBaocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYw OEU2N0JCOTAeFw0yNjA3MjAxMTM1NDhaFw0yNjA3MjExNDM2NDhaMDMxMTAvBgNV BAMTKEZCRkRDMUFEMDVFMzIyOEE4RjQ4QUQ1RjBGODZEMjhBNkIwMzM1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmoBSolk7hHpusBNOD7m/1rBat u2CXP0Dy50R+gaGC6ye14rjIw7Vwloeciv78R4oOQ6nIhj3o9cRCjL/3pRubMGSI Jjo1hp6J6lrQEI1/CKo9YVltRCYrTl8AisTt2pf8xHVb9Gkx/poDG/5tUJbUIHXI p15QZBoR5xHZ1WxbCRsO1Abgc5k1vdICCNOxzpBb3ZfiIwtSfDM6H1b2/3kKMwDW RQJE3B7SNGA9WEHXdRvY+gFUPinEtY30rjvlfXHWriEWznb0+DrmgeRf8Mk6MkH4 8ohPUYQmeuppQFm8gRJtfvq0g/UeawsqvELp+vOiBSDmyZJLVpBqVWtq7UWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+/3BrQXjIoqPSK1fD4bSimsDNYcwHwYDVR0j BBgwFoAUC7ofy42XbaLxwpNX/nfeHwjme7kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM5N2NmYzUtZTBiMC00ODIwLWI4NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4 RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYwOEU2N0JCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkJBMUZDQjhEOTc2REEyRjFDMjkzNTdGRTc3REUxRjA4RTY3 QkI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RF MUYwOEU2N0JCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjer+g92AG4LKXbnagR9uyQt8sOHdfZsP1z 95JYd8PbSVMoMOCRTfziGO4eBtFiTDTxW6M57pAU7ofFk695Cm15KHktKDpt9bTQ HxyYLKi3amqGKrgQR2rikiaaUOF1SpTbjVEZ8zNGrllMIw27mRg5TnyMXnPgp/tc htlRIZWO2TqAmMXjMSDZEEr0jTj2pH00XKHMMI4/UqB1BymstTRLEVfj4SJ9nMhh LTGvp/9D8Wf227alaiqoePDOemAJhday0fJTeLFGutVQYx6NhcBlGaWcbupAptMF vaqMYTm/C02dC2llJZQYc2An5RfCoXN7Da3ywrWUtrBrycpfZ8Y= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:53 2026 by rpki-client