$ rpki-client -vvf rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft File: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft (raw, json) Hash identifier: ujXOjAh0IKuFVYwqAwfmYX7U6F8N5x28UakHkE5Diag= Subject key identifier: EC:B9:7A:9F:97:75:46:05:81:34:87:F5:AC:6D:11:4A:22:EA:FC:40 Authority key identifier: 0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 Certificate issuer: /CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Certificate serial: 183F00F740DA1006249C7ABCBDBA4F7300FCBA2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:04:01 +0000 Manifest this update: Mon 20 Jul 2026 13:59:01 +0000 Manifest next update: Tue 21 Jul 2026 17:10:01 +0000 Files and hashes: 1: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: jRxu5an33fAHIDK703BGcnxxr2+K2imQoOMYIzAUMUk=) 2: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl (hash: rnxq4OeHOjFHd8LTB9zPt4pXaVcKS1XiG7hkamYaaq0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3f:00:f7:40:da:10:06:24:9c:7a:bc:bd:ba:4f:73:00:fc:ba:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Validity Not Before: Jul 20 13:59:01 2026 GMT Not After : Jul 21 17:10:01 2026 GMT Subject: CN=ECB97A9F97754605813487F5AC6D114A22EAFC40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ad:72:b3:c2:25:12:6f:15:d7:de:0d:ca:be: db:ad:5c:f8:cf:dc:91:62:f1:06:fa:aa:4e:aa:98: bc:0e:84:67:f5:4a:6c:82:d3:05:48:06:96:29:91: 48:e8:17:24:5d:15:23:a0:00:70:08:64:f5:c4:9c: b9:3d:a1:11:01:98:6c:60:92:a5:57:25:f1:af:08: 71:54:69:0e:35:d4:e4:fe:e4:38:21:b2:38:94:53: 80:06:28:2c:f6:5e:0a:d5:d8:7e:88:eb:db:9c:52: 4f:9d:d2:4e:e2:e0:85:f7:c3:28:12:3e:82:ff:be: c4:05:a1:e8:6e:51:6c:0f:f1:dc:47:91:96:7f:58: 42:7e:e3:37:e8:4b:ce:5e:cb:ef:ff:c6:97:98:82: bc:87:d4:53:bd:4d:ce:7c:17:24:8e:f7:0d:fd:30: af:e9:de:a3:0c:fd:35:b3:66:39:86:6f:1e:19:4f: 71:a6:ed:3c:0b:2b:bc:8b:7f:3e:99:c5:c7:e2:a9: a2:4d:e8:74:54:1d:7c:34:6f:ae:18:62:c6:91:bf: 10:bb:4e:2f:ea:55:76:33:73:ce:1a:dd:f4:2a:57: bd:07:22:47:5e:90:97:ff:c5:4d:23:96:88:c3:a6: 4a:b8:4f:93:95:a4:18:c4:9f:95:dc:c3:dd:74:ba: b1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B9:7A:9F:97:75:46:05:81:34:87:F5:AC:6D:11:4A:22:EA:FC:40 X509v3 Authority Key Identifier: keyid:0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:77:5a:9c:9d:0f:5f:c0:b1:5e:92:64:51:d1:a7:b5:9d:f2: 6b:6e:83:a9:6e:18:29:81:15:99:2a:2a:6a:d5:e4:35:25:44: 2d:3d:42:88:06:88:6a:d9:97:4c:2c:bd:e7:20:9a:fd:9c:a2: 51:1b:d8:39:01:15:14:d4:be:8a:11:91:09:1b:5f:a1:0f:b1: 7c:07:2c:55:01:25:33:ea:3f:63:60:66:1d:f3:0d:76:1d:c1: 54:b3:47:b1:f8:f8:53:f6:70:cc:0c:4f:25:f1:4f:c5:ed:28: 05:53:e0:a0:8f:cc:6f:88:08:06:fa:25:17:99:7a:b6:52:cc: 9c:03:5d:16:6a:5c:63:f7:4b:ef:f2:66:ec:60:92:23:6d:77: 10:13:94:07:9c:62:fc:a2:00:b6:ba:13:df:f0:a7:7e:a5:e4: 72:32:7d:87:61:99:fe:f6:e7:5d:85:52:a6:47:b5:37:b9:74: 64:03:a2:5b:b8:d7:fd:b1:0d:f9:07:3f:cd:bb:be:35:06:ba: 29:81:0d:99:4b:d4:3c:0c:da:56:aa:7d:d1:06:9c:cf:bf:3b: 50:6c:d4:0a:a6:d1:68:5e:20:b3:24:db:4a:c1:de:8a:77:7c: bb:28:c1:82:e9:a1:61:d2:1c:b4:6f:2c:d9:a2:93:8b:19:ec: e4:87:65:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGD8A90DaEAYknHq8vbpPcwD8ui4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0 NDc1MjNFNTAeFw0yNjA3MjAxMzU5MDFaFw0yNjA3MjExNzEwMDFaMDMxMTAvBgNV BAMTKEVDQjk3QTlGOTc3NTQ2MDU4MTM0ODdGNUFDNkQxMTRBMjJFQUZDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrXKzwiUSbxXX3g3KvtutXPjP 3JFi8Qb6qk6qmLwOhGf1SmyC0wVIBpYpkUjoFyRdFSOgAHAIZPXEnLk9oREBmGxg kqVXJfGvCHFUaQ411OT+5DghsjiUU4AGKCz2XgrV2H6I69ucUk+d0k7i4IX3wygS PoL/vsQFoehuUWwP8dxHkZZ/WEJ+4zfoS85ey+//xpeYgryH1FO9Tc58FySO9w39 MK/p3qMM/TWzZjmGbx4ZT3Gm7TwLK7yLfz6ZxcfiqaJN6HRUHXw0b64YYsaRvxC7 Ti/qVXYzc84a3fQqV70HIkdekJf/xU0jlojDpkq4T5OVpBjEn5Xcw910urFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Ll6n5d1RgWBNIf1rG0RSiLq/EAwHwYDVR0j BBgwFoAUDz3Nlfw/xtfXs9FodquB4UR1I+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQ0ZGZiNWEtNmUyNC00YTRkLTg5NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVG QzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0NDc1MjNFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjNEQ0Q5NUZDM0ZDNkQ3RDdCM0QxNjg3NkFCODFFMTQ0NzUy M0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgx RTE0NDc1MjNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKF3WpydD1/AsV6SZFHRp7Wd8mtug6luGCmB FZkqKmrV5DUlRC09QogGiGrZl0wsvecgmv2colEb2DkBFRTUvooRkQkbX6EPsXwH LFUBJTPqP2NgZh3zDXYdwVSzR7H4+FP2cMwMTyXxT8XtKAVT4KCPzG+ICAb6JReZ erZSzJwDXRZqXGP3S+/yZuxgkiNtdxATlAecYvyiALa6E9/wp36l5HIyfYdhmf72 512FUqZHtTe5dGQDolu41/2xDfkHP827vjUGuimBDZlL1DwM2laqfdEGnM+/O1Bs 1Aqm0WheILMk20rB3op3fLsowYLpoWHSHLRvLNmik4sZ7OSHZV0= -----END CERTIFICATE-----Generated at Tue Jul 21 06:15:49 2026 by rpki-client