$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft File: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft (raw, json) Hash identifier: dqMbBJlJ4L7Fe6kqXbLcGbbw2rLc5kQfiqeZFZYht5U= Subject key identifier: F1:74:27:82:5A:BD:0C:35:07:DB:FF:A0:02:1A:10:3E:17:20:84:30 Authority key identifier: 0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F Certificate issuer: /CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Certificate serial: 3B2A3715CAC9F4F2DF1E80A1CA4E1E6DC48E101F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 22:22:57 +0000 Manifest this update: Fri 19 Jun 2026 22:17:57 +0000 Manifest next update: Sat 20 Jun 2026 22:36:57 +0000 Files and hashes: 1: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl (hash: phMOG3/Ssxz75UzIjQmePTwMgMF2ZxmP6n7+MSgMKN8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:2a:37:15:ca:c9:f4:f2:df:1e:80:a1:ca:4e:1e:6d:c4:8e:10:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Validity Not Before: Jun 19 22:17:57 2026 GMT Not After : Jun 20 22:36:57 2026 GMT Subject: CN=F17427825ABD0C3507DBFFA0021A103E17208430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:72:35:76:d5:bc:e7:43:35:f8:81:d3:42:e4: 5e:8b:ac:bd:f5:5f:66:f6:4f:25:5d:ba:0f:39:79: a5:21:fd:03:b6:4e:f4:a7:b3:82:80:f2:89:0b:14: 38:45:cf:bf:24:c6:22:be:aa:55:73:1a:2d:77:15: ed:28:d5:22:d9:04:ac:19:88:78:32:2c:9b:2b:6d: f3:2c:90:35:42:3f:d1:35:16:7c:e8:1f:c3:6b:4e: b0:c5:33:eb:5b:46:ce:a4:d2:44:dc:8b:7c:de:a1: 31:0c:3e:91:1d:78:48:1f:2e:6c:93:a6:4f:af:b8: 6b:ca:bb:6e:07:e9:b1:ff:00:0b:b0:b3:bb:23:c4: bf:64:28:23:fd:cb:97:f1:50:9d:1f:cc:b6:5c:72: bc:9e:13:f1:dc:ae:e4:fb:9a:08:18:19:a4:9e:2d: e0:c7:65:56:8e:fd:ee:ba:3b:f0:00:80:c4:2e:d5: 8c:75:c3:f4:17:bd:d2:46:29:dd:af:fc:e3:2e:db: 9d:fb:70:a3:81:01:ca:3b:a5:9a:a6:03:ab:d7:20: 9c:6d:3f:a9:20:2e:19:44:68:2a:1e:b8:11:bf:fd: fd:5a:34:57:da:6e:80:e9:08:db:3e:45:c1:55:cf: f7:5b:41:da:83:95:e1:35:ab:bb:c4:e3:04:32:2d: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:74:27:82:5A:BD:0C:35:07:DB:FF:A0:02:1A:10:3E:17:20:84:30 X509v3 Authority Key Identifier: keyid:0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:81:a8:b6:6f:93:a0:95:41:18:71:b2:7d:99:62:76:f2:f6: ed:9a:8f:99:5c:6c:cd:b3:ba:52:ed:77:9f:a4:05:6a:b5:fb: 4f:2a:22:f0:6e:cd:0c:f0:44:d2:ac:93:23:73:94:c5:02:1a: ea:b7:13:2b:32:75:3f:2c:30:aa:46:21:6c:02:49:5b:95:54: 87:30:e6:95:d6:52:df:db:25:79:61:7e:df:a4:04:a9:40:a4: bc:41:65:a3:3e:3f:df:c9:98:9a:f3:a7:62:47:eb:60:7e:e7: a8:71:84:f0:66:2e:ca:1c:0a:bc:59:48:94:94:f1:df:9b:54: 47:c1:5d:82:9c:00:24:3e:91:bf:6c:b8:8f:5d:29:04:dd:86: 0d:f1:be:c4:9f:d3:d8:27:8f:6f:d5:cf:e0:46:69:4d:fe:ca: e8:16:e8:83:8d:df:9a:05:e3:d9:9d:f0:99:4e:69:5b:82:66: 1c:14:d0:5d:c7:a8:ad:d4:ae:87:0e:58:9d:e3:cc:c2:db:42: 56:de:8b:f5:bf:0f:7b:08:21:2d:36:94:0d:ec:09:8e:af:ff: bf:13:01:79:29:54:96:ed:42:6b:14:60:3c:89:83:ad:93:69: c2:d6:35:e7:ae:28:81:bd:0c:1a:7d:02:4f:0c:53:77:b0:16: c9:fb:00:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOyo3FcrJ9PLfHoChyk4ebcSOEB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFG MjQ4OTIwRjAeFw0yNjA2MTkyMjE3NTdaFw0yNjA2MjAyMjM2NTdaMDMxMTAvBgNV BAMTKEYxNzQyNzgyNUFCRDBDMzUwN0RCRkZBMDAyMUExMDNFMTcyMDg0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocjV21bznQzX4gdNC5F6LrL31 X2b2TyVdug85eaUh/QO2TvSns4KA8okLFDhFz78kxiK+qlVzGi13Fe0o1SLZBKwZ iHgyLJsrbfMskDVCP9E1FnzoH8NrTrDFM+tbRs6k0kTci3zeoTEMPpEdeEgfLmyT pk+vuGvKu24H6bH/AAuws7sjxL9kKCP9y5fxUJ0fzLZccryeE/HcruT7mggYGaSe LeDHZVaO/e66O/AAgMQu1Yx1w/QXvdJGKd2v/OMu2537cKOBAco7pZqmA6vXIJxt P6kgLhlEaCoeuBG//f1aNFfaboDpCNs+RcFVz/dbQdqDleE1q7vE4wQyLZWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8XQnglq9DDUH2/+gAhoQPhcghDAwHwYDVR0j BBgwFoAUD7YeF9tcOnxr6ggOJH4jcfJIkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdE QjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFGMjQ4OTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI2MUUxN0RCNUMzQTdDNkJFQTA4MEUyNDdFMjM3MUYyNDg5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIz NzFGMjQ4OTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqBqLZvk6CVQRhxsn2ZYnby9u2aj5lcbM2z ulLtd5+kBWq1+08qIvBuzQzwRNKskyNzlMUCGuq3EysydT8sMKpGIWwCSVuVVIcw 5pXWUt/bJXlhft+kBKlApLxBZaM+P9/JmJrzp2JH62B+56hxhPBmLsocCrxZSJSU 8d+bVEfBXYKcACQ+kb9suI9dKQTdhg3xvsSf09gnj2/Vz+BGaU3+yugW6ION35oF 49md8JlOaVuCZhwU0F3HqK3UrocOWJ3jzMLbQlbei/W/D3sIIS02lA3sCY6v/78T AXkpVJbtQmsUYDyJg62TacLWNeeuKIG9DBp9Ak8MU3ewFsn7AC8= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:06 2026 by rpki-client