$ rpki-client -vvf rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft File: 0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft (raw, json) Hash identifier: y49PEZaMkqHs0R0hHheQM45g/Zw5SBIaSk1E54TVTOE= Subject key identifier: 0F:F3:1B:19:12:6C:41:88:F2:5B:42:52:3F:A9:EC:4D:EB:06:17:C1 Authority key identifier: 0C:1E:C4:D6:BE:1D:7A:19:2B:A6:D1:88:CA:0C:75:70:E5:D7:6C:EC Certificate issuer: /CN=0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC Certificate serial: 440EE5FFF191CE2C6142A51C027D5AACC1E0A340 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 03:23:55 +0000 Manifest this update: Sat 20 Jun 2026 03:18:55 +0000 Manifest next update: Sun 21 Jun 2026 04:04:55 +0000 Files and hashes: 1: 0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl (hash: oKk2iiHzdGmXnEki6t/ItpteGc/e9JrhBioi3gQvoKY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0e:e5:ff:f1:91:ce:2c:61:42:a5:1c:02:7d:5a:ac:c1:e0:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC Validity Not Before: Jun 20 03:18:55 2026 GMT Not After : Jun 21 04:04:55 2026 GMT Subject: CN=0FF31B19126C4188F25B42523FA9EC4DEB0617C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7e:46:2a:1d:08:30:ae:6f:7a:52:e5:4d:e3: 99:4e:b9:95:7a:f3:1f:17:b5:09:45:01:15:54:7b: 92:a2:ea:e0:91:61:9f:d7:93:ba:f1:88:94:51:10: 85:6b:60:2f:82:6d:bb:89:c4:4c:92:02:85:49:6e: b9:d2:2e:8c:12:fe:0c:1c:5b:31:ce:f6:4a:fd:cf: 0d:3d:78:be:cf:e6:a7:ae:8a:46:f3:72:61:dc:8f: 35:4d:2e:ec:b6:eb:aa:39:3a:43:ce:45:29:57:ba: 3e:e3:29:ac:ec:d0:ca:e5:b4:98:93:19:b8:3e:0a: ff:bc:e7:bd:93:01:34:9d:03:af:b6:33:43:d4:38: 17:89:6d:a1:cd:8b:d3:d3:23:7f:a1:51:86:1b:55: 4e:9e:0f:0d:30:eb:d7:1b:9b:70:16:a9:45:b2:e9: 46:4b:26:a5:9d:62:76:d7:b5:7f:98:58:bb:83:be: 0e:f6:27:75:de:ba:af:28:c7:f6:e6:c5:6c:c0:5d: ea:b9:49:96:d0:53:94:d9:62:39:c8:6f:ea:90:87: 09:79:c7:1b:4f:ec:aa:a3:28:29:c5:d3:2b:b3:b3: 4d:5e:ac:24:fd:b2:73:66:48:f5:e5:2e:e6:49:c3: 89:63:f8:dc:a6:bd:85:49:21:a8:85:5f:a2:20:a3: 62:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F3:1B:19:12:6C:41:88:F2:5B:42:52:3F:A9:EC:4D:EB:06:17:C1 X509v3 Authority Key Identifier: keyid:0C:1E:C4:D6:BE:1D:7A:19:2B:A6:D1:88:CA:0C:75:70:E5:D7:6C:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/0C1EC4D6BE1D7A192BA6D188CA0C7570E5D76CEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:99:8a:20:8f:06:b6:8b:a9:f2:51:65:fa:2a:6b:36:03:b0: 07:20:9b:db:5d:3a:bb:77:22:bf:ab:39:0c:a3:55:16:8e:bb: 26:58:6f:ed:61:11:37:99:a1:12:8a:6a:f0:a5:58:21:fc:57: ba:47:2a:bc:82:8d:ac:66:60:b7:0d:20:2d:05:d3:13:8e:19: bd:8a:98:35:65:16:2c:cd:81:de:9a:f0:59:ec:4b:08:05:ee: a9:67:fa:2c:17:78:fd:fd:32:83:f8:f9:5b:3f:53:0c:4c:17: 20:df:60:c3:7e:3d:b7:75:0f:ee:17:50:6c:e8:43:44:f3:97: 6a:8a:22:38:fe:6c:b7:02:fd:a7:fd:36:0e:73:77:59:8f:5a: 04:7e:2b:9d:2d:ee:97:e2:fb:e5:3c:a2:ea:17:9b:59:2a:53: 37:5a:fe:11:6f:d8:50:25:e2:4a:88:60:21:a1:f0:1d:0f:51: ac:91:48:d9:c5:31:14:f7:cf:ee:1d:6c:b6:a6:d1:ff:ce:bc: cd:1d:69:31:be:df:5c:6c:10:d7:d4:ef:5a:9d:12:ee:e0:a1: 12:a0:c7:68:78:c0:6a:00:4d:fd:8e:88:ec:80:0e:da:d5:24: 8b:cb:23:b6:57:e0:8e:fc:ff:63:e0:3b:17:61:8e:67:30:17: 59:c7:45:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURA7l//GRzixhQqUcAn1arMHgo0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRUM0RDZCRTFEN0ExOTJCQTZEMTg4Q0EwQzc1NzBF NUQ3NkNFQzAeFw0yNjA2MjAwMzE4NTVaFw0yNjA2MjEwNDA0NTVaMDMxMTAvBgNV BAMTKDBGRjMxQjE5MTI2QzQxODhGMjVCNDI1MjNGQTlFQzRERUIwNjE3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQfkYqHQgwrm96UuVN45lOuZV6 8x8XtQlFARVUe5Ki6uCRYZ/Xk7rxiJRREIVrYC+CbbuJxEySAoVJbrnSLowS/gwc WzHO9kr9zw09eL7P5qeuikbzcmHcjzVNLuy266o5OkPORSlXuj7jKazs0MrltJiT Gbg+Cv+8572TATSdA6+2M0PUOBeJbaHNi9PTI3+hUYYbVU6eDw0w69cbm3AWqUWy 6UZLJqWdYnbXtX+YWLuDvg72J3Xeuq8ox/bmxWzAXeq5SZbQU5TZYjnIb+qQhwl5 xxtP7KqjKCnF0yuzs01erCT9snNmSPXlLuZJw4lj+NymvYVJIaiFX6Igo2ILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD/MbGRJsQYjyW0JSP6nsTesGF8EwHwYDVR0j BBgwFoAUDB7E1r4dehkrptGIygx1cOXXbOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDE4MGY3NTUtNWMyNy00MGY4LTgwYWYtMmZhOGRmMTE1MjgyLzAvMEMxRUM0RDZC RTFEN0ExOTJCQTZEMTg4Q0EwQzc1NzBFNUQ3NkNFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQzFFQzRENkJFMUQ3QTE5MkJBNkQxODhDQTBDNzU3MEU1RDc2 Q0VDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMEMxRUM0RDZCRTFEN0ExOTJCQTZEMTg4Q0EwQzc1 NzBFNUQ3NkNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKZiiCPBraLqfJRZfoqazYDsAcgm9tdOrt3 Ir+rOQyjVRaOuyZYb+1hETeZoRKKavClWCH8V7pHKryCjaxmYLcNIC0F0xOOGb2K mDVlFizNgd6a8FnsSwgF7qln+iwXeP39MoP4+Vs/UwxMFyDfYMN+Pbd1D+4XUGzo Q0Tzl2qKIjj+bLcC/af9Ng5zd1mPWgR+K50t7pfi++U8ouoXm1kqUzda/hFv2FAl 4kqIYCGh8B0PUayRSNnFMRT3z+4dbLam0f/OvM0daTG+31xsENfU71qdEu7goRKg x2h4wGoATf2OiOyADtrVJIvLI7ZX4I78/2PgOxdhjmcwF1nHRXM= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:41 2026 by rpki-client