$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft File: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft (raw, json) Hash identifier: wQzCHqUBGA92tDvTTivV1BHkmjnz4e+aeYkWD9ZK86s= Subject key identifier: 49:6C:AD:2D:44:75:93:A1:28:F0:01:11:6D:B5:77:93:9B:A3:D9:A1 Authority key identifier: 0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 Certificate issuer: /CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Certificate serial: 0D6933B18DAEA48F2B3A3F9862F952F5C94F8880 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 00:06:54 +0000 Manifest this update: Thu 18 Jun 2026 00:01:54 +0000 Manifest next update: Fri 19 Jun 2026 01:40:54 +0000 Files and hashes: 1: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl (hash: kYLOwGAyzLZPojhqQZ+W+F/RiKpe2uLg29TBvT35UFc=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: ccmy2LH8bOvIWU+GPrMO4FL2775rB00lVz7jkl8O1gM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 01:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:69:33:b1:8d:ae:a4:8f:2b:3a:3f:98:62:f9:52:f5:c9:4f:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Validity Not Before: Jun 18 00:01:54 2026 GMT Not After : Jun 19 01:40:54 2026 GMT Subject: CN=496CAD2D447593A128F001116DB577939BA3D9A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:a6:f3:59:76:1f:df:77:5b:3c:fa:e5:77: 69:c9:da:05:56:a3:10:aa:84:be:26:da:89:e6:e7: 98:50:a5:e7:cf:c1:ff:a1:af:fa:7e:cd:70:f5:2a: b6:72:98:02:b3:96:56:9b:86:83:45:f0:66:58:87: 52:2e:a4:2c:b5:79:de:39:ad:ec:89:bd:38:9e:c6: 30:0e:10:d3:d3:07:67:94:b8:4c:f8:1f:b1:6b:a5: 06:5d:a2:cc:76:7b:0a:fb:76:84:b1:e5:a9:b3:2c: 0c:a5:d7:3f:f4:f1:02:93:5c:13:20:a5:5e:5e:71: 08:1d:40:6a:98:99:07:f9:ab:5f:3e:a3:cb:d2:be: de:c5:a4:ec:66:bf:96:49:f3:31:17:4e:b9:46:b5: 61:ee:e0:d9:9e:90:67:fe:01:f7:91:ae:7c:78:3a: da:9c:b4:43:f0:7c:55:af:0e:cb:aa:74:08:c5:d0: 7b:c4:3c:25:22:8a:0a:a5:1c:df:17:50:0f:77:04: 88:26:7e:20:68:96:c2:e7:c3:09:d5:53:89:7e:f4: 93:64:8c:49:0a:b4:cc:4e:1c:9a:33:95:63:5b:95: ea:5f:71:1b:72:50:a6:e3:20:b1:7d:a5:36:0d:da: 16:4c:be:b8:cd:eb:11:33:17:51:8f:ba:e2:56:b6: 63:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6C:AD:2D:44:75:93:A1:28:F0:01:11:6D:B5:77:93:9B:A3:D9:A1 X509v3 Authority Key Identifier: keyid:0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:85:e3:66:df:4d:2e:38:6d:25:94:3b:0f:ed:00:eb:46:17: 88:e2:a1:5f:4a:f0:40:1f:c2:f5:c8:3e:e7:f0:ca:f4:18:d2: a8:d8:01:13:d4:c4:7c:d5:fa:17:f6:7c:17:e8:1c:1a:e2:57: e1:73:d9:4d:8f:9e:f1:f5:f0:bd:87:7f:45:5e:b7:23:3a:3e: d8:0a:80:b8:50:f3:81:e7:c4:98:dd:3a:c5:7e:2b:24:24:ef: d4:1c:02:a8:a7:29:d7:d5:ca:fa:a2:ea:92:70:90:40:46:d5: a5:59:01:e1:b6:5b:97:d3:d1:70:f7:d8:ff:8c:7a:6b:d2:8f: 3d:a7:a7:9a:ea:69:12:f8:77:e8:b9:91:de:fe:72:32:d6:4d: f9:a1:10:8c:be:77:67:09:cc:4f:e5:b1:76:e7:7e:27:0b:68: 59:0e:08:31:d0:d4:93:7f:b2:6f:c4:4d:ac:3c:34:e2:c1:fb: 53:b4:40:bb:18:46:b2:13:a9:a1:c1:2a:60:0b:da:40:53:0c: 08:4a:2b:f4:70:f1:1d:5b:7b:33:32:6a:37:d9:68:52:08:9d: bc:09:f6:a1:da:ee:00:91:a6:d0:d2:34:0e:1f:5f:a0:50:15: 04:ed:54:c0:0f:03:9e:00:42:67:26:7c:a5:35:f6:ce:bd:be: d7:35:e2:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWkzsY2upI8rOj+YYvlS9clPiIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcw QUFDRThGNjAeFw0yNjA2MTgwMDAxNTRaFw0yNjA2MTkwMTQwNTRaMDMxMTAvBgNV BAMTKDQ5NkNBRDJENDQ3NTkzQTEyOEYwMDExMTZEQjU3NzkzOUJBM0Q5QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTyabzWXYf33dbPPrld2nJ2gVW oxCqhL4m2onm55hQpefPwf+hr/p+zXD1KrZymAKzllabhoNF8GZYh1IupCy1ed45 reyJvTiexjAOENPTB2eUuEz4H7FrpQZdosx2ewr7doSx5amzLAyl1z/08QKTXBMg pV5ecQgdQGqYmQf5q18+o8vSvt7FpOxmv5ZJ8zEXTrlGtWHu4NmekGf+AfeRrnx4 OtqctEPwfFWvDsuqdAjF0HvEPCUiigqlHN8XUA93BIgmfiBolsLnwwnVU4l+9JNk jEkKtMxOHJozlWNblepfcRtyUKbjILF9pTYN2hZMvrjN6xEzF1GPuuJWtmOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSWytLUR1k6Eo8AERbbV3k5uj2aEwHwYDVR0j BBgwFoAUCp5g9Kx6xx4kaJNbyl0Nlwqs6PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRB QzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcwQUFDRThGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQTlFNjBGNEFDN0FDNzFFMjQ2ODkzNUJDQTVEMEQ5NzBBQUNF OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBE OTcwQUFDRThGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2F42bfTS44bSWUOw/tAOtGF4jioV9K8EAf wvXIPufwyvQY0qjYARPUxHzV+hf2fBfoHBriV+Fz2U2PnvH18L2Hf0VetyM6PtgK gLhQ84HnxJjdOsV+KyQk79QcAqinKdfVyvqi6pJwkEBG1aVZAeG2W5fT0XD32P+M emvSjz2np5rqaRL4d+i5kd7+cjLWTfmhEIy+d2cJzE/lsXbnficLaFkOCDHQ1JN/ sm/ETaw8NOLB+1O0QLsYRrITqaHBKmAL2kBTDAhKK/Rw8R1bezMyajfZaFIInbwJ 9qHa7gCRptDSNA4fX6BQFQTtVMAPA54AQmcmfKU19s69vtc14oY= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:18 2026 by rpki-client