$ rpki-client -vvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft File: 0A0BE818C9E480D5B3C1387F48406FDF75525054.mft (raw, json) Hash identifier: xtESO0oM/EsTygauLIFWmLdsfzZXR+dzZIIY23+BI1A= Subject key identifier: 3F:0B:36:7B:DF:C3:23:E8:DE:51:FB:96:34:5B:3B:06:1F:2F:EA:C2 Authority key identifier: 0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54 Certificate issuer: /CN=0A0BE818C9E480D5B3C1387F48406FDF75525054 Certificate serial: 670EDA93B89980A1B6A5A13FF5EF129D42786FDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft Manifest number: 43 Signing time: Fri 19 Jun 2026 18:33:14 +0000 Manifest this update: Fri 19 Jun 2026 18:28:14 +0000 Manifest next update: Sat 20 Jun 2026 20:12:14 +0000 Files and hashes: 1: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: +JyCkLsQ3tpHW5cHfUXrYK9OeTIPdF1qJiIUkvR3JIw=) 2: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: ZvHMdtaJZWzSLaq7f17lDIIdd170kCIaPzhP2QwWe1o=) 3: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: d/Fq+IffZJ+OozrZYhdBokPyli+2KVods0E+Vb13ir4=) 4: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: XruWQQhjREtyk1SmNsMjFRHLoSTVd3r/+m7FYV8d8Kc=) 5: 0A0BE818C9E480D5B3C1387F48406FDF75525054.crl (hash: gv/Rx/wpnbePyzBekEkzHCTl9QbxmO2nJdfnbsLQxxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0e:da:93:b8:99:80:a1:b6:a5:a1:3f:f5:ef:12:9d:42:78:6f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A0BE818C9E480D5B3C1387F48406FDF75525054 Validity Not Before: Jun 19 18:28:14 2026 GMT Not After : Jun 20 20:12:14 2026 GMT Subject: CN=3F0B367BDFC323E8DE51FB96345B3B061F2FEAC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:9f:cf:7f:59:5a:0a:ae:63:ad:07:c2:44: 14:1c:a3:09:4f:6c:e7:16:ee:fc:e4:29:26:da:d2: d6:00:cf:5c:82:de:31:19:77:d9:ae:cb:14:09:be: 59:2c:de:64:70:22:ba:2e:30:72:ca:7c:e0:9c:57: ec:0e:dc:e7:30:04:9c:7d:e8:17:4c:39:69:41:e4: 70:0c:97:e6:63:ac:9e:3c:2a:08:5b:8d:03:eb:41: 81:da:31:a3:7b:ce:21:ab:c0:72:97:59:2a:0c:2e: 57:19:80:8d:d3:57:14:d6:3e:53:6b:b3:6f:fe:b1: 65:a8:27:ee:df:5d:36:f8:e9:c3:47:3d:1a:81:1a: d6:58:f7:b1:ae:cf:f9:13:0e:da:15:b1:94:8f:26: f0:1d:ce:57:f3:56:ce:93:93:9c:5e:a4:86:f2:3b: d9:3a:f5:21:de:de:fd:92:1c:34:ba:f8:9d:bd:76: 47:bb:12:c6:1d:ee:01:ba:ac:b7:3f:a2:4d:5c:d5: d3:fa:ec:e1:96:10:90:e7:10:85:40:cf:f8:29:a7: 91:6d:36:f8:41:93:93:7b:57:c6:fa:76:76:4b:01: 0b:04:c5:3b:c7:82:a8:f2:12:4e:1a:31:9d:9f:72: 6f:22:4c:5f:51:49:33:53:40:72:49:bd:51:15:dd: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0B:36:7B:DF:C3:23:E8:DE:51:FB:96:34:5B:3B:06:1F:2F:EA:C2 X509v3 Authority Key Identifier: keyid:0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ed:71:98:89:d6:1d:39:4d:05:39:06:09:2c:4a:d4:d8:cc: 4e:28:47:4e:87:53:06:05:ce:ba:29:73:92:fd:88:c5:f2:b4: 4b:f0:c4:fe:d7:64:24:d6:23:44:6f:49:47:1a:dd:e5:2a:f9: 04:8d:c2:26:bb:d0:d1:23:9a:8d:18:e4:6e:6b:2e:0e:9a:d3: 3f:02:e3:94:09:e1:5e:42:34:d9:37:9c:59:93:00:52:87:fc: 5a:90:7a:c4:39:a8:fb:81:60:82:f2:d2:b1:15:81:d3:30:3d: cc:56:80:d7:4a:ac:40:d2:fd:59:34:31:94:70:47:65:06:e7: 4f:b5:05:4e:c2:34:16:e9:e5:5d:77:71:b3:16:0e:fc:a9:5d: 4d:91:c8:ec:68:46:d6:29:73:5c:68:a8:b3:49:48:cb:e2:f2: 14:fa:2c:ad:7f:cc:27:c3:a7:51:52:df:2a:6c:e3:f1:1b:17: 76:83:12:9f:ce:b3:81:a2:91:75:c0:bb:42:d4:cb:7c:b2:54: ae:81:48:69:5d:15:0e:dc:cb:3d:14:e8:4d:c8:3e:63:c0:3c: 1a:6d:02:5e:8a:7e:ee:1c:f3:38:20:bd:fa:c6:05:bf:07:93: a4:c9:9a:ec:23:a5:46:36:89:06:14:74:19:e2:6e:d8:96:58: 93:41:92:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZw7ak7iZgKG2paE/9e8SnUJ4b94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZGREY3 NTUyNTA1NDAeFw0yNjA2MTkxODI4MTRaFw0yNjA2MjAyMDEyMTRaMDMxMTAvBgNV BAMTKDNGMEIzNjdCREZDMzIzRThERTUxRkI5NjM0NUIzQjA2MUYyRkVBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1NZ/Pf1laCq5jrQfCRBQcowlP bOcW7vzkKSba0tYAz1yC3jEZd9muyxQJvlks3mRwIrouMHLKfOCcV+wO3OcwBJx9 6BdMOWlB5HAMl+ZjrJ48KghbjQPrQYHaMaN7ziGrwHKXWSoMLlcZgI3TVxTWPlNr s2/+sWWoJ+7fXTb46cNHPRqBGtZY97Guz/kTDtoVsZSPJvAdzlfzVs6Tk5xepIby O9k69SHe3v2SHDS6+J29dke7EsYd7gG6rLc/ok1c1dP67OGWEJDnEIVAz/gpp5Ft NvhBk5N7V8b6dnZLAQsExTvHgqjyEk4aMZ2fcm8iTF9RSTNTQHJJvVEV3bWbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPws2e9/DI+jeUfuWNFs7Bh8v6sIwHwYDVR0j BBgwFoAUCgvoGMnkgNWzwTh/SEBv33VSUFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThD OUU0ODBENUIzQzEzODdGNDg0MDZGREY3NTUyNTA1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTBCRTgxOEM5RTQ4MEQ1QjNDMTM4N0Y0ODQwNkZERjc1NTI1 MDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZG REY3NTUyNTA1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjtcZiJ1h05TQU5BgksStTYzE4oR06HUwYF zropc5L9iMXytEvwxP7XZCTWI0RvSUca3eUq+QSNwia70NEjmo0Y5G5rLg6a0z8C 45QJ4V5CNNk3nFmTAFKH/FqQesQ5qPuBYILy0rEVgdMwPcxWgNdKrEDS/Vk0MZRw R2UG50+1BU7CNBbp5V13cbMWDvypXU2RyOxoRtYpc1xoqLNJSMvi8hT6LK1/zCfD p1FS3yps4/EbF3aDEp/Os4GikXXAu0LUy3yyVK6BSGldFQ7cyz0U6E3IPmPAPBpt Al6Kfu4c8zggvfrGBb8Hk6TJmuwjpUY2iQYUdBnibtiWWJNBkpE= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:47 2026 by rpki-client