$ rpki-client -vvf rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft File: 0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft (raw, json) Hash identifier: aOJRnkFR74EjLk8dc2LuaN2piyKkPJBYSGwD8kudzEY= Subject key identifier: FD:A0:C9:33:86:2D:4B:73:77:16:47:99:88:2C:A0:30:38:B3:62:D3 Authority key identifier: 0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C Certificate issuer: /CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C Certificate serial: 6E852C86BCC141A3E389C7D60FB66B7578CC1B5A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:49:44 +0000 Manifest this update: Tue 02 Jun 2026 11:44:44 +0000 Manifest next update: Wed 03 Jun 2026 14:29:44 +0000 Files and hashes: 1: 0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl (hash: Adz0n5LhpHTvSpRdbzhcQBxWBEAowdsemS1n6yxZjiM=) 2: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: FtAyLFgcPcOrwdeATSorkqQ+qnS6UD5lf+AdbVbITfE=) 3: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: mZ4ni8RZ+trHAYAq+YWcBinFPw6rEt7xuDt1TTSRtHw=) 4: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: 1ahR27z0iK0sLUuSdSvJqFvWkpicPRlm9gEDg/UGewo=) 5: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: E4KMhggOb7nlhIiO3VBqj+3GAnMNf5AMaTtZTYutCpg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 14:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:85:2c:86:bc:c1:41:a3:e3:89:c7:d6:0f:b6:6b:75:78:cc:1b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C Validity Not Before: Jun 2 11:44:44 2026 GMT Not After : Jun 3 14:29:44 2026 GMT Subject: CN=FDA0C933862D4B7377164799882CA03038B362D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:58:53:58:d0:6d:3c:3a:fe:a0:f4:e3:e5:3d: 67:7f:69:a0:fd:dd:9f:ef:83:82:f9:06:46:3f:6f: d3:49:96:68:65:7d:f6:7e:af:d6:0d:5f:be:f9:1c: 93:c6:82:4f:dc:b2:47:56:7a:86:d9:2a:f5:92:16: ce:5d:9c:90:c7:0c:33:0b:e2:5e:cb:81:bc:ed:12: 45:91:03:77:db:6b:7e:59:e8:93:fd:d3:08:66:7e: 2b:f0:e4:98:d8:dc:74:2f:1d:95:91:25:67:46:c0: dc:ce:a5:ea:93:18:6f:b1:4e:41:58:fd:48:76:77: 17:e8:fb:7d:83:09:ef:b5:ee:4e:d7:78:1c:a8:e0: 9b:e2:b9:b9:41:3c:8b:1b:74:e0:ed:15:bc:68:33: 39:1b:58:de:6a:8b:87:54:2c:73:21:ad:51:e8:08: 67:f9:57:ee:5f:fe:54:b7:bd:c6:a9:cb:e3:3d:cd: 27:1e:6a:1f:18:8d:ba:46:b7:c4:63:de:ac:d4:e3: 1d:77:55:f6:39:77:7c:60:0b:0d:1f:bc:1c:9a:d2: e1:20:ba:43:2f:cf:e6:93:f6:f0:68:2a:8a:ec:b5: 67:47:e3:94:ac:8a:83:bb:94:1d:6e:53:a2:cb:e5: 14:53:34:75:98:24:d9:5c:6e:2d:1b:93:bd:58:d4: e2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A0:C9:33:86:2D:4B:73:77:16:47:99:88:2C:A0:30:38:B3:62:D3 X509v3 Authority Key Identifier: keyid:0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:7d:01:a3:66:04:44:08:f3:72:aa:a9:62:b3:84:66:c5:ac: 40:47:22:8c:f1:99:13:07:0b:ef:46:e1:62:73:64:4e:d7:d2: f4:a0:a9:4f:ef:ef:54:e7:6c:90:7c:24:db:d9:67:0c:bf:b3: 34:b5:e1:2d:1c:7c:c9:75:9e:2c:b3:18:55:3b:41:d2:34:ad: ad:58:28:46:d2:db:09:1f:2c:d7:3c:a5:2f:49:be:84:61:e1: de:87:f5:38:e0:6f:67:6f:65:f9:fa:e3:4c:5f:2c:68:ec:be: 9f:d8:52:dd:f9:aa:de:49:3a:b8:cb:9e:9a:1d:b0:d0:9d:18: bf:68:20:96:97:e2:88:5a:53:4a:8d:52:de:18:08:e8:04:9d: 3a:04:13:17:8f:bf:a4:d8:b8:de:d0:77:7e:e3:d3:3a:85:c6: 9b:02:3f:e3:9a:47:fc:b0:18:d8:f0:be:ac:81:4f:04:68:2c: da:66:e5:4a:a1:45:82:26:54:fc:49:82:76:40:53:ab:a7:c7: 0d:f2:b3:1f:89:22:6d:a1:ad:15:9b:cc:63:e9:aa:09:cd:41: 43:4f:c6:e6:f4:d1:e2:85:f6:62:56:81:47:68:d3:7d:18:28: 8f:fe:a1:fb:83:2d:17:e5:d4:a0:48:5a:f2:ee:15:a9:a3:51: ed:36:cb:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUboUshrzBQaPjicfWD7ZrdXjMG1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERDRUYyMTBFNkIyRDlDNTVDRkZEM0IxNUU1RTk0MEMz QUZFN0EzQzAeFw0yNjA2MDIxMTQ0NDRaFw0yNjA2MDMxNDI5NDRaMDMxMTAvBgNV BAMTKEZEQTBDOTMzODYyRDRCNzM3NzE2NDc5OTg4MkNBMDMwMzhCMzYyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGWFNY0G08Ov6g9OPlPWd/aaD9 3Z/vg4L5BkY/b9NJlmhlffZ+r9YNX775HJPGgk/cskdWeobZKvWSFs5dnJDHDDML 4l7LgbztEkWRA3fba35Z6JP90whmfivw5JjY3HQvHZWRJWdGwNzOpeqTGG+xTkFY /Uh2dxfo+32DCe+17k7XeByo4JviublBPIsbdODtFbxoMzkbWN5qi4dULHMhrVHo CGf5V+5f/lS3vcapy+M9zSceah8YjbpGt8Rj3qzU4x13VfY5d3xgCw0fvBya0uEg ukMvz+aT9vBoKorstWdH45SsioO7lB1uU6LL5RRTNHWYJNlcbi0bk71Y1OKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/aDJM4YtS3N3FkeZiCygMDizYtMwHwYDVR0j BBgwFoAUDc7yEOay2cVc/9OxXl6UDDr+ejwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2ZGYtYjI0M2M1MTY0ZDIyLzAvMERDRUYyMTBF NkIyRDlDNTVDRkZEM0IxNUU1RTk0MEMzQUZFN0EzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRENFRjIxMEU2QjJEOUM1NUNGRkQzQjE1RTVFOTQwQzNBRkU3 QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvMERDRUYyMTBFNkIyRDlDNTVDRkZEM0IxNUU1RTk0 MEMzQUZFN0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL99AaNmBEQI83KqqWKzhGbFrEBHIozxmRMH C+9G4WJzZE7X0vSgqU/v71TnbJB8JNvZZwy/szS14S0cfMl1niyzGFU7QdI0ra1Y KEbS2wkfLNc8pS9JvoRh4d6H9Tjgb2dvZfn640xfLGjsvp/YUt35qt5JOrjLnpod sNCdGL9oIJaX4ohaU0qNUt4YCOgEnToEExePv6TYuN7Qd37j0zqFxpsCP+OaR/yw GNjwvqyBTwRoLNpm5UqhRYImVPxJgnZAU6unxw3ysx+JIm2hrRWbzGPpqgnNQUNP xub00eKF9mJWgUdo030YKI/+ofuDLRfl1KBIWvLuFamjUe02y7E= -----END CERTIFICATE-----Generated at Wed Jun 3 04:29:50 2026 by rpki-client