$ rpki-client -vvf rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft File: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft (raw, json) Hash identifier: UzTaBG5QOVVNb5diE05dRqfOa60VVdk2wZngw9tmq/Y= Subject key identifier: 52:03:6C:B3:5E:71:15:EC:01:EC:04:19:4F:D6:A2:E4:73:94:2D:F5 Authority key identifier: 0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 Certificate issuer: /CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Certificate serial: 4AA42E97368CC2C5DFE1BB57C572DDC6CB74BFBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:26:29 +0000 Manifest this update: Tue 02 Jun 2026 13:21:29 +0000 Manifest next update: Wed 03 Jun 2026 17:00:29 +0000 Files and hashes: 1: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: jRxu5an33fAHIDK703BGcnxxr2+K2imQoOMYIzAUMUk=) 2: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl (hash: Z7GdKON18ZERBP5QH+D/bu6N4Yl+9nVZ7hgUc245se0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a4:2e:97:36:8c:c2:c5:df:e1:bb:57:c5:72:dd:c6:cb:74:bf:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Validity Not Before: Jun 2 13:21:29 2026 GMT Not After : Jun 3 17:00:29 2026 GMT Subject: CN=52036CB35E7115EC01EC04194FD6A2E473942DF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:e7:b6:97:a0:34:4d:ae:0f:78:91:db:f7: df:0e:25:4f:7f:16:cf:0b:bc:4a:51:e4:86:96:80: bd:17:7c:21:3a:24:9f:11:99:92:6d:cf:04:89:c2: 50:1a:79:e8:c1:42:b8:29:bb:bb:c9:16:75:25:af: 21:fe:e8:dd:95:48:3b:e2:19:a4:ee:42:97:2f:7e: 49:e0:66:de:4f:ae:84:cb:4d:3a:23:d3:f4:ad:cc: bb:4a:e9:20:55:4a:f5:89:78:95:8a:a8:cd:ba:64: 38:eb:e1:9c:fa:42:71:da:a5:48:a3:da:43:ce:51: 96:2c:85:1b:d3:fe:a6:3b:8c:0b:56:9a:62:7d:7c: ba:a1:6a:25:f8:b9:12:1f:6f:6b:b3:19:aa:47:a4: ce:16:97:fd:db:f6:7e:55:f0:56:67:87:34:dd:38: e8:fe:a8:0e:3e:fb:65:b3:e8:e4:d4:9f:89:28:21: b9:42:a0:30:03:df:90:93:c2:bf:09:07:d8:ed:0f: c6:7c:21:5d:90:83:dd:94:b5:60:18:72:63:94:47: 82:56:bf:7f:80:cf:51:02:c1:6c:d9:27:3c:04:ef: 5a:50:83:1e:fe:e0:29:db:02:27:05:9c:14:a2:38: b9:77:34:7f:3a:4b:97:35:38:59:30:34:90:9b:34: d1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:03:6C:B3:5E:71:15:EC:01:EC:04:19:4F:D6:A2:E4:73:94:2D:F5 X509v3 Authority Key Identifier: keyid:0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5b:3f:c9:15:67:a3:27:c0:f7:c2:2f:5d:fe:7a:ee:16:cc: 83:1d:67:a0:20:97:f2:f1:3d:91:13:7b:f0:7f:56:f9:f5:12: b7:42:1f:a8:95:98:85:a1:70:49:ef:21:b9:53:57:7f:a9:44: eb:13:be:2f:23:fc:22:9e:60:06:26:51:b6:66:0c:5a:2c:82: a8:33:ad:8f:a7:4a:79:55:8d:67:d5:be:c2:ef:10:e3:89:ae: 35:58:7c:cd:d5:6e:61:a7:bf:5d:dd:40:8a:30:93:fc:a5:cc: b0:de:86:60:44:f5:ef:aa:00:77:a5:9b:34:24:9f:65:3c:32: 5f:7c:f1:70:dd:b7:72:ba:82:a3:a4:9d:86:2e:26:c2:94:0a: 67:b9:ab:96:e4:f7:74:b7:7a:57:db:93:5e:0f:1c:b3:f3:c4: 84:f6:1d:f3:fc:d6:a9:44:3b:41:41:59:f9:d3:7d:8a:a5:6a: c3:0a:44:4d:36:1d:a5:8a:c2:91:7c:f2:0a:a0:2e:0b:08:bb: 78:c9:a1:69:3e:5f:ef:92:85:50:e4:48:b3:6c:3c:e3:60:21: 7e:2b:6c:69:b9:13:33:a6:02:8e:a3:d1:9a:c3:40:02:c1:c5: a7:fe:ab:74:44:63:fc:51:22:ab:ca:8b:df:96:d6:57:39:14: 4f:bf:7a:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqQulzaMwsXf4btXxXLdxst0v7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0 NDc1MjNFNTAeFw0yNjA2MDIxMzIxMjlaFw0yNjA2MDMxNzAwMjlaMDMxMTAvBgNV BAMTKDUyMDM2Q0IzNUU3MTE1RUMwMUVDMDQxOTRGRDZBMkU0NzM5NDJERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3ue2l6A0Ta4PeJHb998OJU9/ Fs8LvEpR5IaWgL0XfCE6JJ8RmZJtzwSJwlAaeejBQrgpu7vJFnUlryH+6N2VSDvi GaTuQpcvfkngZt5ProTLTToj0/StzLtK6SBVSvWJeJWKqM26ZDjr4Zz6QnHapUij 2kPOUZYshRvT/qY7jAtWmmJ9fLqhaiX4uRIfb2uzGapHpM4Wl/3b9n5V8FZnhzTd OOj+qA4++2Wz6OTUn4koIblCoDAD35CTwr8JB9jtD8Z8IV2Qg92UtWAYcmOUR4JW v3+Az1ECwWzZJzwE71pQgx7+4CnbAicFnBSiOLl3NH86S5c1OFkwNJCbNNHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUgNss15xFewB7AQZT9ai5HOULfUwHwYDVR0j BBgwFoAUDz3Nlfw/xtfXs9FodquB4UR1I+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQ0ZGZiNWEtNmUyNC00YTRkLTg5NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVG QzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0NDc1MjNFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjNEQ0Q5NUZDM0ZDNkQ3RDdCM0QxNjg3NkFCODFFMTQ0NzUy M0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgx RTE0NDc1MjNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJbP8kVZ6MnwPfCL13+eu4WzIMdZ6Agl/Lx PZETe/B/Vvn1ErdCH6iVmIWhcEnvIblTV3+pROsTvi8j/CKeYAYmUbZmDFosgqgz rY+nSnlVjWfVvsLvEOOJrjVYfM3VbmGnv13dQIowk/ylzLDehmBE9e+qAHelmzQk n2U8Ml988XDdt3K6gqOknYYuJsKUCme5q5bk93S3elfbk14PHLPzxIT2HfP81qlE O0FBWfnTfYqlasMKRE02HaWKwpF88gqgLgsIu3jJoWk+X++ShVDkSLNsPONgIX4r bGm5EzOmAo6j0ZrDQALBxaf+q3REY/xRIqvKi9+W1lc5FE+/evc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:22 2026 by rpki-client