$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft File: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft (raw, json) Hash identifier: gQWjOET+MVSan08usxqEziMinyTvkNVf3pVrr0N4oU0= Subject key identifier: B2:75:C1:C9:D6:A2:71:AF:58:BC:32:CC:2D:37:F5:DD:5E:5A:F5:7F Authority key identifier: 0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 Certificate issuer: /CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Certificate serial: 76F42A7A6180EF81CCE6B0D23A9389229B57BE22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 13:58:52 +0000 Manifest this update: Mon 20 Jul 2026 13:53:52 +0000 Manifest next update: Tue 21 Jul 2026 16:42:52 +0000 Files and hashes: 1: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl (hash: p8FPXcwFFL7NWI5WEpti1RnGjaex9ddxxXkwp5Y/AqY=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: RKQ6wa1x5VScJTj3fjdeSQ/eUi7ms4u121kFQZr9klo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f4:2a:7a:61:80:ef:81:cc:e6:b0:d2:3a:93:89:22:9b:57:be:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Validity Not Before: Jul 20 13:53:52 2026 GMT Not After : Jul 21 16:42:52 2026 GMT Subject: CN=B275C1C9D6A271AF58BC32CC2D37F5DD5E5AF57F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:5c:b7:52:40:66:6e:16:a2:62:25:b6:fd: fe:2e:8f:f2:2a:87:47:2b:eb:ad:26:fb:60:a3:c3: c3:68:f1:61:cc:9f:98:3c:5f:ff:1d:29:ea:b3:65: af:9d:b7:4c:b0:9e:87:56:f0:ad:74:04:af:bc:ed: 71:53:15:87:b1:5c:a8:54:b1:65:4f:cd:ae:00:8c: 3e:b2:cd:a7:f2:09:6a:86:71:8d:86:50:d1:9e:8f: d1:c0:a4:74:77:5c:35:02:2e:92:79:3a:66:41:22: 63:51:af:ce:73:fc:3c:78:d9:d7:d7:73:9d:82:90: 3a:65:7b:5f:ab:1d:3c:07:f9:ab:2f:94:42:9b:46: 51:19:05:83:b2:af:1c:8f:b5:70:bd:3c:2c:96:66: 2a:c6:0f:9a:21:21:ee:e9:25:64:df:40:3a:c5:62: 12:f0:20:25:af:0f:fd:7a:8f:dd:44:47:94:28:f1: c7:68:74:c3:39:ad:70:83:74:38:51:fe:59:2c:ae: 22:88:f4:7a:4e:f0:92:5f:4c:44:0b:3f:88:75:42: aa:67:c5:55:41:11:49:1d:66:c4:a8:cb:0a:cf:cc: c5:b0:55:78:50:bb:c8:61:3a:3d:e9:49:93:2e:58: 2d:e6:6f:ba:8c:83:2f:61:e3:88:df:98:d5:5b:02: c3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:75:C1:C9:D6:A2:71:AF:58:BC:32:CC:2D:37:F5:DD:5E:5A:F5:7F X509v3 Authority Key Identifier: keyid:0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:0f:6d:e9:dc:de:a9:02:7e:a4:6a:21:61:56:10:2e:e5:33: 08:9b:ad:60:b9:96:2b:91:e8:21:d3:43:7b:4f:de:ec:5e:a3: 27:22:fa:e6:25:85:0e:b8:79:5d:79:2b:e8:fc:39:d0:a4:45: 0d:7f:32:2d:87:2d:c4:58:7b:af:b4:12:16:3e:05:cf:16:07: bf:cc:c2:5a:12:67:1d:ac:2c:49:c6:c7:73:1c:9a:89:03:24: d5:35:d4:04:4d:e6:4d:b1:fa:df:cc:6d:05:60:77:be:fa:00: 71:1e:18:eb:84:52:c3:ea:c4:57:51:8a:72:90:d8:b4:7b:ae: 10:e1:eb:71:ab:6f:ce:04:ca:fe:6e:b8:20:0e:b3:9d:b0:8d: d1:49:51:f4:08:28:8d:7b:a6:c5:6c:40:91:74:d0:21:1d:fc: 03:96:fe:32:e9:25:19:b2:0b:bc:35:71:c5:30:2b:98:69:39: e9:f6:5f:d7:06:96:a8:83:c1:e5:a4:a3:46:72:38:6e:71:58: e7:a9:06:fe:77:99:17:7f:1d:bf:43:b2:22:63:62:de:93:49: 17:31:e4:f4:ae:34:e9:0d:ab:30:bd:9d:8b:60:19:c0:ef:7d: 42:50:aa:8a:8d:17:77:c5:3a:35:af:8f:ba:e6:8b:4a:72:9f: c3:b9:20:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvQqemGA74HM5rDSOpOJIptXviIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVFNEZC MUY5NTMzOTAeFw0yNjA3MjAxMzUzNTJaFw0yNjA3MjExNjQyNTJaMDMxMTAvBgNV BAMTKEIyNzVDMUM5RDZBMjcxQUY1OEJDMzJDQzJEMzdGNURENUU1QUY1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EFy3UkBmbhaiYiW2/f4uj/Iq h0cr660m+2Cjw8No8WHMn5g8X/8dKeqzZa+dt0ywnodW8K10BK+87XFTFYexXKhU sWVPza4AjD6yzafyCWqGcY2GUNGej9HApHR3XDUCLpJ5OmZBImNRr85z/Dx42dfX c52CkDple1+rHTwH+asvlEKbRlEZBYOyrxyPtXC9PCyWZirGD5ohIe7pJWTfQDrF YhLwICWvD/16j91ER5Qo8cdodMM5rXCDdDhR/lksriKI9HpO8JJfTEQLP4h1Qqpn xVVBEUkdZsSoywrPzMWwVXhQu8hhOj3pSZMuWC3mb7qMgy9h44jfmNVbAsPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsnXBydaica9YvDLMLTf13V5a9X8wHwYDVR0j BBgwFoAUC5FDzV0qg1fiAR54Q5leT7H5UzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ0OGJkMDQtZjc4Ny00MTRhLWE1MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1 RDJBODM1N0UyMDExRTc4NDM5OTVFNEZCMUY5NTMzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjkxNDNDRDVEMkE4MzU3RTIwMTFFNzg0Mzk5NUU0RkIxRjk1 MzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVF NEZCMUY5NTMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAPbenc3qkCfqRqIWFWEC7lMwibrWC5liuR 6CHTQ3tP3uxeoyci+uYlhQ64eV15K+j8OdCkRQ1/Mi2HLcRYe6+0EhY+Bc8WB7/M wloSZx2sLEnGx3McmokDJNU11ARN5k2x+t/MbQVgd776AHEeGOuEUsPqxFdRinKQ 2LR7rhDh63Grb84Eyv5uuCAOs52wjdFJUfQIKI17psVsQJF00CEd/AOW/jLpJRmy C7w1ccUwK5hpOen2X9cGlqiDweWko0ZyOG5xWOepBv53mRd/Hb9DsiJjYt6TSRcx 5PSuNOkNqzC9nYtgGcDvfUJQqoqNF3fFOjWvj7rmi0pyn8O5IEk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:49 2026 by rpki-client