$ rpki-client -vvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft File: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft (raw, json) Hash identifier: WoxFOnVYlHrrm9lYOGOV28JzxXFW3rJ3fYbT2/LIuXg= Subject key identifier: B7:33:C9:AD:A7:A2:EE:3A:10:F2:C8:59:93:91:BB:B2:E9:99:7A:D4 Authority key identifier: 0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 Certificate issuer: /CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Certificate serial: 2A55C2423637C08D127A0D94FC8CFB9AE3D69367 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 14:49:44 +0000 Manifest this update: Thu 18 Jun 2026 14:44:44 +0000 Manifest next update: Fri 19 Jun 2026 17:51:44 +0000 Files and hashes: 1: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl (hash: U+8zBIjJtN/soC1OGzfd9Fiku2J+ou40KhDqi4jzzMo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:55:c2:42:36:37:c0:8d:12:7a:0d:94:fc:8c:fb:9a:e3:d6:93:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Validity Not Before: Jun 18 14:44:44 2026 GMT Not After : Jun 19 17:51:44 2026 GMT Subject: CN=B733C9ADA7A2EE3A10F2C8599391BBB2E9997AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:ac:f3:d0:9d:80:a0:52:48:cd:1a:88:22: bf:3c:d1:f8:2d:9b:b7:fd:5c:ea:6c:d2:6b:1e:e0: ad:ed:95:56:24:50:88:db:2e:e4:e0:70:4d:a8:98: 6d:e0:d1:3e:17:ab:08:b5:ba:b7:2e:e0:7f:e5:56: 73:11:2b:6a:b6:61:9b:8b:3b:36:ee:25:66:e7:49: 79:8f:3f:ab:08:d6:8a:fe:17:64:af:88:1b:3d:97: ac:c4:db:bc:6e:2f:f6:de:ef:97:49:63:80:fe:5c: 62:77:06:1c:ca:48:07:00:64:97:a0:32:4f:bc:57: 3b:8a:45:65:3a:a1:1d:66:56:f5:46:a6:a8:94:b9: bf:ae:f7:f6:e9:34:3c:04:62:59:4a:48:84:2d:7a: d7:a0:a3:b2:c2:93:10:fb:60:74:4b:c2:f1:cb:e1: 02:25:44:21:55:b9:45:5d:e7:82:cc:23:a6:95:91: 6c:ca:1b:72:41:86:4c:da:c9:63:3f:97:8a:10:08: 49:06:db:44:8c:45:19:2f:49:a1:07:f0:ac:ff:dd: 99:01:b7:43:28:09:7a:1a:9b:35:b6:a3:3c:00:fa: 6a:c6:ad:e0:39:00:f6:17:ff:57:d2:ce:42:06:c5: d4:9e:b2:bd:6e:c1:b7:3b:0a:b4:81:1c:1e:4d:d3: 64:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:33:C9:AD:A7:A2:EE:3A:10:F2:C8:59:93:91:BB:B2:E9:99:7A:D4 X509v3 Authority Key Identifier: keyid:0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:10:da:d9:6e:25:91:20:df:22:b4:a1:4a:d1:3a:2a:81:65: a9:2f:0b:7f:3a:b5:a5:4e:ae:be:b5:67:d0:82:a0:51:79:8f: a7:da:75:16:be:71:41:2f:c7:73:ad:a7:46:2f:71:d1:ec:73: 66:fc:dc:65:e0:9c:af:da:91:70:10:79:0b:65:72:22:fb:00: 86:bd:8e:a6:d3:c8:67:a0:d4:9a:3b:e9:ae:c9:3c:81:28:36: 98:0e:39:24:76:0a:10:0c:3a:12:97:64:54:ef:99:aa:7b:d5: d9:e3:9d:a2:f5:89:a6:4d:4e:a5:d6:ba:b4:1c:d4:89:d4:f5: 18:50:6d:67:86:73:5b:3c:18:16:f1:a7:c5:64:c0:95:91:b4: 4b:14:99:45:8b:df:31:53:04:ee:06:0e:eb:39:78:e1:3a:f3: b2:36:d1:97:e4:54:34:d4:2c:78:64:23:90:8e:d3:78:d6:dc: b4:a8:ee:0a:f3:a2:e4:d1:41:ad:44:7e:c0:2c:4a:47:38:68: a0:2e:69:e9:6b:bf:47:b9:09:77:91:14:e4:1e:c4:9d:1e:0b: a3:34:b6:d8:30:85:fc:89:46:6a:d7:29:c3:ec:b6:cd:d2:ec: 0d:5b:8e:b4:41:c7:50:30:0e:6e:3a:11:88:26:06:6a:d2:f2: 19:35:95:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlXCQjY3wI0Seg2U/Iz7muPWk2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZBMDND NjBBRUNEMzAeFw0yNjA2MTgxNDQ0NDRaFw0yNjA2MTkxNzUxNDRaMDMxMTAvBgNV BAMTKEI3MzNDOUFEQTdBMkVFM0ExMEYyQzg1OTkzOTFCQkIyRTk5OTdBRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wKzz0J2AoFJIzRqIIr880fgt m7f9XOps0mse4K3tlVYkUIjbLuTgcE2omG3g0T4Xqwi1urcu4H/lVnMRK2q2YZuL OzbuJWbnSXmPP6sI1or+F2SviBs9l6zE27xuL/be75dJY4D+XGJ3BhzKSAcAZJeg Mk+8VzuKRWU6oR1mVvVGpqiUub+u9/bpNDwEYllKSIQtetego7LCkxD7YHRLwvHL 4QIlRCFVuUVd54LMI6aVkWzKG3JBhkzayWM/l4oQCEkG20SMRRkvSaEH8Kz/3ZkB t0MoCXoamzW2ozwA+mrGreA5APYX/1fSzkIGxdSesr1uwbc7CrSBHB5N02RVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtzPJraei7joQ8shZk5G7sumZetQwHwYDVR0j BBgwFoAUDn8cOkEYl0mOGc5kxcJqA8YK7NMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEzZGUzZWMtNGQzYy00NDAyLWE3YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0 MTE4OTc0OThFMTlDRTY0QzVDMjZBMDNDNjBBRUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRTdGMUMzQTQxMTg5NzQ5OEUxOUNFNjRDNUMyNkEwM0M2MEFF Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZB MDNDNjBBRUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwQ2tluJZEg3yK0oUrROiqBZakvC386taVO rr61Z9CCoFF5j6fadRa+cUEvx3Otp0YvcdHsc2b83GXgnK/akXAQeQtlciL7AIa9 jqbTyGeg1Jo76a7JPIEoNpgOOSR2ChAMOhKXZFTvmap71dnjnaL1iaZNTqXWurQc 1InU9RhQbWeGc1s8GBbxp8VkwJWRtEsUmUWL3zFTBO4GDus5eOE687I20ZfkVDTU LHhkI5CO03jW3LSo7grzouTRQa1EfsAsSkc4aKAuaelrv0e5CXeRFOQexJ0eC6M0 ttgwhfyJRmrXKcPsts3S7A1bjrRBx1AwDm46EYgmBmrS8hk1lTw= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:42 2026 by rpki-client