$ rpki-client -vvf rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft File: 0FA563F934776139827AEC94F0EABC66549ABEA7.mft (raw, json) Hash identifier: XLeGCTN+qF1NkY1M+Hr4rGtmHuY1YG6f4bRSUpwd58Y= Subject key identifier: 87:0B:FF:A1:D3:E6:53:A0:3B:0F:35:16:5F:FF:DC:4F:0E:D0:5F:62 Authority key identifier: 0F:A5:63:F9:34:77:61:39:82:7A:EC:94:F0:EA:BC:66:54:9A:BE:A7 Certificate issuer: /CN=0FA563F934776139827AEC94F0EABC66549ABEA7 Certificate serial: 0AFF55166E8E579FC7B528344C646681293835A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 05:11:12 +0000 Manifest this update: Sat 20 Jun 2026 05:06:12 +0000 Manifest next update: Sun 21 Jun 2026 06:24:12 +0000 Files and hashes: 1: 0FA563F934776139827AEC94F0EABC66549ABEA7.crl (hash: O+S8h+wjN0boTCf4SlXih5Ndlnxs3GKDJ9p+fSDBX44=) 2: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: hKgJQ4xI+aCZdi0ilafubxO/sGeJ6q34TucNQfy4ilQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.crl rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ff:55:16:6e:8e:57:9f:c7:b5:28:34:4c:64:66:81:29:38:35:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA563F934776139827AEC94F0EABC66549ABEA7 Validity Not Before: Jun 20 05:06:12 2026 GMT Not After : Jun 21 06:24:12 2026 GMT Subject: CN=870BFFA1D3E653A03B0F35165FFFDC4F0ED05F62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:88:42:e5:3f:40:9a:6b:d3:69:1b:a6:af: 3a:3b:97:01:6f:61:82:33:a3:c9:cc:ba:bb:5e:3b: ff:ea:d6:ae:b2:54:da:52:7b:e3:c6:15:89:d3:be: 58:a6:6e:ad:3f:21:4a:aa:c9:ad:5a:3c:94:51:37: 8a:a4:1b:63:5c:b7:7f:10:87:ae:55:93:f1:a9:12: 64:da:f0:dc:f9:48:bb:bb:08:08:e6:e0:5e:bd:18: 97:5c:37:6b:f4:62:4c:23:20:87:48:bb:e5:64:a3: 53:f6:b7:c9:04:58:8f:7a:c8:12:99:0c:ee:48:ad: f0:32:65:67:72:97:a6:db:cf:0f:19:83:00:37:24: e0:b7:39:9a:61:c7:12:e9:d4:b7:85:50:20:6f:74: 24:27:7f:12:8c:f4:01:5c:62:a8:17:f4:1e:d0:49: ec:1d:c8:b4:8d:1e:20:8f:b3:63:f5:90:14:20:e8: 73:35:26:f0:99:3f:e0:a5:c5:ec:40:a6:47:47:cd: 18:0d:c6:78:01:18:e0:70:38:5a:20:6f:82:1c:07: 7f:fe:48:79:13:01:aa:55:b0:db:ea:49:ff:b4:dd: 28:9e:c9:0d:11:e1:b9:af:8a:36:ca:60:89:11:8a: 87:a1:0c:4b:36:80:d9:db:e5:74:f5:3a:94:20:79: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0B:FF:A1:D3:E6:53:A0:3B:0F:35:16:5F:FF:DC:4F:0E:D0:5F:62 X509v3 Authority Key Identifier: keyid:0F:A5:63:F9:34:77:61:39:82:7A:EC:94:F0:EA:BC:66:54:9A:BE:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:38:e3:34:67:5f:03:7b:d9:7b:01:cf:19:da:10:eb:1a:9b: 1e:83:92:52:63:61:c9:34:bd:56:f2:81:32:52:85:f9:f1:8e: dd:67:9e:bb:77:c0:03:37:e3:e2:77:39:9b:49:20:7f:41:7d: cd:bc:33:2c:6e:20:12:00:43:44:2c:08:98:99:99:f2:b1:e8: a3:c8:66:ae:f9:98:02:2f:b7:96:61:69:ee:08:01:79:55:91: 67:57:34:28:d3:e8:95:7d:e2:0e:e9:cc:35:05:79:2e:37:e4: 04:8d:de:49:50:16:f5:7c:c5:d0:be:1f:c8:55:d3:10:51:b9: 4e:2b:f3:8e:04:c1:c6:94:a7:5c:02:12:67:dd:d4:2e:37:94: a7:95:c9:06:4c:03:84:d0:8f:c2:a2:9c:85:0a:3e:f0:34:bd: 0c:c3:16:1f:18:51:9e:66:68:19:f0:63:cb:02:9e:27:86:81: 0e:e0:3d:ba:32:91:9a:68:f0:c2:37:3f:27:b1:ad:c0:ae:c2: 2f:ce:c2:b6:0d:11:43:16:3c:5f:5d:cb:35:8e:00:6b:36:65: b0:67:e8:30:81:c3:9f:72:e6:09:15:f1:05:7f:2b:6b:ae:9a: d6:79:47:49:95:8b:6e:23:ec:9c:0d:e0:87:55:16:3e:d6:cf: 1a:e0:ce:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCv9VFm6OV5/HtSg0TGRmgSk4NagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNTYzRjkzNDc3NjEzOTgyN0FFQzk0RjBFQUJDNjY1 NDlBQkVBNzAeFw0yNjA2MjAwNTA2MTJaFw0yNjA2MjEwNjI0MTJaMDMxMTAvBgNV BAMTKDg3MEJGRkExRDNFNjUzQTAzQjBGMzUxNjVGRkZEQzRGMEVEMDVGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fohC5T9AmmvTaRumrzo7lwFv YYIzo8nMurteO//q1q6yVNpSe+PGFYnTvlimbq0/IUqqya1aPJRRN4qkG2Nct38Q h65Vk/GpEmTa8Nz5SLu7CAjm4F69GJdcN2v0YkwjIIdIu+Vko1P2t8kEWI96yBKZ DO5IrfAyZWdyl6bbzw8ZgwA3JOC3OZphxxLp1LeFUCBvdCQnfxKM9AFcYqgX9B7Q SewdyLSNHiCPs2P1kBQg6HM1JvCZP+ClxexApkdHzRgNxngBGOBwOFogb4IcB3/+ SHkTAapVsNvqSf+03SieyQ0R4bmvijbKYIkRioehDEs2gNnb5XT1OpQgeWOBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhwv/odPmU6A7DzUWX//cTw7QX2IwHwYDVR0j BBgwFoAUD6Vj+TR3YTmCeuyU8Oq8ZlSavqcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJiNDNlYzgtZjU4Mi00MDI1LThmMzYtM2NlYTUzOWQwYjA5LzAvMEZBNTYzRjkz NDc3NjEzOTgyN0FFQzk0RjBFQUJDNjY1NDlBQkVBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkE1NjNGOTM0Nzc2MTM5ODI3QUVDOTRGMEVBQkM2NjU0OUFC RUE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvMEZBNTYzRjkzNDc3NjEzOTgyN0FFQzk0RjBFQUJD NjY1NDlBQkVBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU44zRnXwN72XsBzxnaEOsamx6DklJjYck0 vVbygTJShfnxjt1nnrt3wAM34+J3OZtJIH9Bfc28MyxuIBIAQ0QsCJiZmfKx6KPI Zq75mAIvt5Zhae4IAXlVkWdXNCjT6JV94g7pzDUFeS435ASN3klQFvV8xdC+H8hV 0xBRuU4r844EwcaUp1wCEmfd1C43lKeVyQZMA4TQj8KinIUKPvA0vQzDFh8YUZ5m aBnwY8sCnieGgQ7gPboykZpo8MI3PyexrcCuwi/OwrYNEUMWPF9dyzWOAGs2ZbBn 6DCBw59y5gkV8QV/K2uumtZ5R0mVi24j7JwN4IdVFj7Wzxrgzi0= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:12 2026 by rpki-client