$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft File: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft (raw, json) Hash identifier: y/bXQY9s3+lUQmKeok8jfs1co6LQA5PezO1l7PeVb/U= Subject key identifier: FD:38:B2:CD:09:6F:A9:05:D8:FE:CC:35:27:60:D0:B9:37:1E:B4:5F Authority key identifier: 0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 Certificate issuer: /CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Certificate serial: 7E38EB17A0D95EF30E0B7A9D65B9F10533B6984E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:31:00 +0000 Manifest this update: Tue 02 Jun 2026 17:26:00 +0000 Manifest next update: Wed 03 Jun 2026 19:59:00 +0000 Files and hashes: 1: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl (hash: dywv61cJUKIt4EPM7ovifR422cGwn1r3FsFbxkrx6vA=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: RKQ6wa1x5VScJTj3fjdeSQ/eUi7ms4u121kFQZr9klo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:38:eb:17:a0:d9:5e:f3:0e:0b:7a:9d:65:b9:f1:05:33:b6:98:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Validity Not Before: Jun 2 17:26:00 2026 GMT Not After : Jun 3 19:59:00 2026 GMT Subject: CN=FD38B2CD096FA905D8FECC352760D0B9371EB45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:81:2b:cf:22:2e:ca:4e:f7:10:63:6c:a2:48: ab:63:31:1c:0b:7b:b5:ce:3e:36:41:17:dd:01:e2: 8c:c9:47:b4:c7:1e:bc:64:e4:a4:45:1f:8c:5f:2b: 6c:0f:5b:2b:db:fb:9d:e8:c7:2e:27:48:92:b3:7e: 6e:31:3b:4a:da:7a:2e:b4:a3:9f:31:cc:8d:0e:b6: 54:0e:09:50:d0:82:30:8e:67:a7:e9:27:1c:39:39: a8:20:45:2f:4a:11:80:06:bc:b8:fd:5d:60:db:73: df:ec:9c:5f:fc:b3:3f:20:8d:97:c2:cc:90:29:3d: 5d:c9:a7:52:09:34:72:c7:9a:a4:29:66:4f:23:f2: 08:44:6a:d7:19:bf:bb:a9:cc:12:6d:26:89:71:62: ef:a9:46:de:0b:ec:4d:eb:4a:28:60:0b:4f:fb:e5: 5a:4b:3d:c2:e1:e8:d4:14:54:c6:c3:ca:5a:99:30: 9f:13:83:22:6c:70:94:3c:21:b3:0c:ee:eb:4b:21: b6:65:7f:74:ec:d3:c1:e3:f6:46:b6:be:e4:bb:61: 8e:2b:52:bd:f5:09:71:08:62:93:6b:89:fd:bc:02: 91:7c:c3:a6:a9:38:70:b2:09:42:a3:fb:87:d3:6d: 8e:4c:e4:26:6c:fc:c5:08:42:e5:50:3d:ab:a7:a0: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:38:B2:CD:09:6F:A9:05:D8:FE:CC:35:27:60:D0:B9:37:1E:B4:5F X509v3 Authority Key Identifier: keyid:0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4a:a4:61:27:07:8e:b0:a5:9f:c0:55:fd:45:9a:26:5c:01: c1:aa:5f:9d:72:63:e1:9b:0b:a8:b8:48:49:bc:33:6f:1b:2e: 4a:6a:52:08:2d:57:66:44:07:c5:36:55:ec:73:19:d3:3c:8b: 73:f7:78:7d:23:20:96:4b:bd:c1:60:e8:44:a3:ea:56:c1:73: 0f:8a:1a:3f:c8:0d:46:c7:e7:a8:98:f3:b4:dc:9c:ad:47:dd: 68:fb:45:42:e2:9f:d2:5b:ab:74:ad:9a:de:ab:13:43:6e:57: 17:33:e4:3b:62:4c:fc:3e:bb:9b:24:7f:4a:3c:14:be:ca:48: b9:79:da:73:f9:4b:78:87:b3:c1:58:76:67:4f:4f:71:92:ed: 21:b2:62:42:c5:09:6c:30:6f:7d:96:7f:ba:84:52:87:0b:13: 5c:74:db:86:ab:c2:ce:6c:8c:15:d1:45:30:13:ba:3a:88:32: 19:7b:2b:04:2d:28:81:84:3a:92:76:29:f4:64:0e:40:40:fe: 74:a6:5e:10:3e:da:94:95:46:16:74:77:aa:b1:0e:90:1a:a8: 8a:69:ff:48:b4:d8:98:1a:ea:37:8c:01:67:41:63:0b:6b:a2: d9:b4:be:90:41:d8:d1:77:f4:d2:93:6b:18:2a:ef:16:b6:86: 88:00:fc:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfjjrF6DZXvMOC3qdZbnxBTO2mE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVFNEZC MUY5NTMzOTAeFw0yNjA2MDIxNzI2MDBaFw0yNjA2MDMxOTU5MDBaMDMxMTAvBgNV BAMTKEZEMzhCMkNEMDk2RkE5MDVEOEZFQ0MzNTI3NjBEMEI5MzcxRUI0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXgSvPIi7KTvcQY2yiSKtjMRwL e7XOPjZBF90B4ozJR7THHrxk5KRFH4xfK2wPWyvb+53oxy4nSJKzfm4xO0raei60 o58xzI0OtlQOCVDQgjCOZ6fpJxw5OaggRS9KEYAGvLj9XWDbc9/snF/8sz8gjZfC zJApPV3Jp1IJNHLHmqQpZk8j8ghEatcZv7upzBJtJolxYu+pRt4L7E3rSihgC0/7 5VpLPcLh6NQUVMbDylqZMJ8TgyJscJQ8IbMM7utLIbZlf3Ts08Hj9ka2vuS7YY4r Ur31CXEIYpNrif28ApF8w6apOHCyCUKj+4fTbY5M5CZs/MUIQuVQPaunoESbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/TiyzQlvqQXY/sw1J2DQuTcetF8wHwYDVR0j BBgwFoAUC5FDzV0qg1fiAR54Q5leT7H5UzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ0OGJkMDQtZjc4Ny00MTRhLWE1MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1 RDJBODM1N0UyMDExRTc4NDM5OTVFNEZCMUY5NTMzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjkxNDNDRDVEMkE4MzU3RTIwMTFFNzg0Mzk5NUU0RkIxRjk1 MzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVF NEZCMUY5NTMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJKpGEnB46wpZ/AVf1FmiZcAcGqX51yY+Gb C6i4SEm8M28bLkpqUggtV2ZEB8U2VexzGdM8i3P3eH0jIJZLvcFg6ESj6lbBcw+K Gj/IDUbH56iY87TcnK1H3Wj7RULin9Jbq3Stmt6rE0NuVxcz5DtiTPw+u5skf0o8 FL7KSLl52nP5S3iHs8FYdmdPT3GS7SGyYkLFCWwwb32Wf7qEUocLE1x024arws5s jBXRRTATujqIMhl7KwQtKIGEOpJ2KfRkDkBA/nSmXhA+2pSVRhZ0d6qxDpAaqIpp /0i02Jga6jeMAWdBYwtrotm0vpBB2NF39NKTaxgq7xa2hogA/P0= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:43 2026 by rpki-client