$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft File: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft (raw, json) Hash identifier: S9Lyx1UT9UaY6k+R1bscUuo/9dxyjSGZTyN8gla2QpU= Subject key identifier: 1D:D7:A6:1B:7D:3C:74:4B:47:19:5A:1C:7B:CC:36:3F:D3:35:24:CE Authority key identifier: 0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B Certificate issuer: /CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Certificate serial: 2D62787E91685611ADD3A2F2CD3D3884C5F589DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 14:23:08 +0000 Manifest this update: Fri 19 Jun 2026 14:18:08 +0000 Manifest next update: Sat 20 Jun 2026 16:08:08 +0000 Files and hashes: 1: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl (hash: kepSPiiNU0Ge6Q+uizJDxCWQrmjHtAlbK3QPb22zql0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 16:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:62:78:7e:91:68:56:11:ad:d3:a2:f2:cd:3d:38:84:c5:f5:89:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Validity Not Before: Jun 19 14:18:08 2026 GMT Not After : Jun 20 16:08:08 2026 GMT Subject: CN=1DD7A61B7D3C744B47195A1C7BCC363FD33524CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:c0:be:49:67:ce:cb:33:1e:58:d8:1e:23: ab:6a:4b:41:be:94:05:1a:f2:db:67:7a:ee:3f:f1: 1e:11:b8:d1:d0:23:60:94:b7:92:71:94:be:18:eb: 36:0b:5b:1c:0e:b5:ce:5c:9e:ad:8b:0c:0e:1b:f9: 77:f6:2d:e7:43:b7:5a:14:e2:b3:7a:35:7b:7a:cb: 19:90:d9:93:ff:65:3c:c7:84:99:96:a9:e6:72:13: 8a:d0:89:8f:3f:de:78:f7:b3:12:bc:bf:53:84:ab: 4f:0f:35:ca:25:69:d6:86:bf:02:f9:f9:2c:3f:5a: bb:df:21:e9:85:e8:67:da:4e:c6:1f:ae:5f:64:c4: d4:39:07:b2:80:25:65:09:72:32:9f:1d:fe:5d:11: a4:57:2c:4c:a9:76:c8:c5:53:4d:9a:c7:0b:3d:e3: 8d:ed:2e:2b:0f:69:9b:3f:82:e1:ce:3f:9a:51:58: cd:c6:f8:5f:c3:2f:b7:74:e8:be:fc:26:3b:0b:c5: 0d:09:0a:cd:f4:06:63:c3:03:00:52:ab:ca:29:3a: b7:50:e3:e1:3e:dc:fc:f6:43:83:b3:ef:eb:7b:1b: 5f:2e:f2:56:c6:4d:a2:82:a4:bc:3c:99:06:f3:84: 6b:d2:46:bd:48:ba:98:6a:4c:c1:15:21:b2:cd:8b: a6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D7:A6:1B:7D:3C:74:4B:47:19:5A:1C:7B:CC:36:3F:D3:35:24:CE X509v3 Authority Key Identifier: keyid:0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9b:57:ba:8f:01:b2:0c:a0:e1:ad:98:29:28:4f:89:7f:83: a9:37:61:88:ea:45:7d:cb:56:7e:10:fa:14:e1:ee:3a:8b:17: 51:e4:a8:9f:80:68:9a:06:db:fb:34:13:c2:ae:0b:9f:d4:59: 14:b8:d6:7a:44:c0:fa:97:15:4b:54:77:28:b5:e6:d1:c1:e6: 9b:19:83:7d:27:70:36:aa:f8:15:2d:06:e5:ff:46:35:d5:96: 0c:f6:72:e7:d1:c1:7b:be:2f:dd:bb:9c:a4:57:42:3a:89:ab: f7:ee:ad:c4:4e:0b:1d:55:af:47:2a:e2:64:60:19:fc:ed:7d: 59:24:db:00:ca:07:3a:03:4e:e7:9d:80:85:54:9e:4b:c2:ca: c4:22:38:9d:39:34:e9:cb:26:ae:ee:72:99:82:4c:20:50:04: 42:87:7f:27:93:b4:de:6a:b6:5f:8d:a7:c2:48:23:04:b8:d4: f5:a6:f3:f1:3e:01:08:64:c7:34:e2:7f:81:14:70:a4:a0:5b: 65:0a:1c:10:dc:47:7d:7e:7b:1b:77:cf:be:2e:1e:42:39:7c: a5:e0:20:c8:3a:09:bb:0f:a6:a1:43:96:34:ed:a9:1f:ce:c6: 3a:59:37:8d:c9:e1:f5:a0:2a:4f:43:6f:ea:97:ae:0a:d1:25: 5e:92:4a:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULWJ4fpFoVhGt06LyzT04hMX1idwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0UwOURD RDRDOEM2QjAeFw0yNjA2MTkxNDE4MDhaFw0yNjA2MjAxNjA4MDhaMDMxMTAvBgNV BAMTKDFERDdBNjFCN0QzQzc0NEI0NzE5NUExQzdCQ0MzNjNGRDMzNTI0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XsC+SWfOyzMeWNgeI6tqS0G+ lAUa8ttneu4/8R4RuNHQI2CUt5JxlL4Y6zYLWxwOtc5cnq2LDA4b+Xf2LedDt1oU 4rN6NXt6yxmQ2ZP/ZTzHhJmWqeZyE4rQiY8/3nj3sxK8v1OEq08PNcoladaGvwL5 +Sw/WrvfIemF6GfaTsYfrl9kxNQ5B7KAJWUJcjKfHf5dEaRXLEypdsjFU02axws9 443tLisPaZs/guHOP5pRWM3G+F/DL7d06L78JjsLxQ0JCs30BmPDAwBSq8opOrdQ 4+E+3Pz2Q4Oz7+t7G18u8lbGTaKCpLw8mQbzhGvSRr1IuphqTMEVIbLNi6YpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHdemG308dEtHGVoce8w2P9M1JM4wHwYDVR0j BBgwFoAUCgU0FL6lscPDZ9X8D6Pgnc1MjGswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRC RUE1QjFDM0MzNjdENUZDMEZBM0UwOURDRDRDOEM2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTA1MzQxNEJFQTVCMUMzQzM2N0Q1RkMwRkEzRTA5RENENEM4 QzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0Uw OURDRDRDOEM2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJibV7qPAbIMoOGtmCkoT4l/g6k3YYjqRX3L Vn4Q+hTh7jqLF1HkqJ+AaJoG2/s0E8KuC5/UWRS41npEwPqXFUtUdyi15tHB5psZ g30ncDaq+BUtBuX/RjXVlgz2cufRwXu+L927nKRXQjqJq/furcROCx1Vr0cq4mRg GfztfVkk2wDKBzoDTuedgIVUnkvCysQiOJ05NOnLJq7ucpmCTCBQBEKHfyeTtN5q tl+Np8JIIwS41PWm8/E+AQhkxzTif4EUcKSgW2UKHBDcR31+ext3z74uHkI5fKXg IMg6CbsPpqFDljTtqR/OxjpZN43J4fWgKk9Db+qXrgrRJV6SSkY= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:20 2026 by rpki-client