$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft File: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft (raw, json) Hash identifier: JIKQTgtfuB0TGpTvNmNCoJSDcvzzG+wGxBMnT4Oj0jA= Subject key identifier: 30:E8:A1:0C:3D:77:50:7E:E0:2F:AF:E1:41:C5:BF:75:5E:92:D0:7F Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE Certificate issuer: /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Certificate serial: 26A1C068670D2208F1509B1F4A42991326421EE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft Manifest number: 36 Signing time: Thu 11 Jun 2026 17:22:31 +0000 Manifest this update: Thu 11 Jun 2026 17:17:31 +0000 Manifest next update: Fri 12 Jun 2026 17:54:31 +0000 Files and hashes: 1: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: pcqtzLzNaNYPks2/OHv2K1hXp8EkBWXZ157lBF+eG6I=) 2: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: Q7IDKK7bd4+D1LbWjZoromCTyfDrru1LNqDTxcv/O1c=) 3: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl (hash: 3POef69ta0cYJfXEkGhYj/vy6Y8NIRaN6EamBVxv1z4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 17:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a1:c0:68:67:0d:22:08:f1:50:9b:1f:4a:42:99:13:26:42:1e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Validity Not Before: Jun 11 17:17:31 2026 GMT Not After : Jun 12 17:54:31 2026 GMT Subject: CN=30E8A10C3D77507EE02FAFE141C5BF755E92D07F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:76:b2:63:4e:6a:30:f7:df:6f:50:56:b1:20: 43:52:4f:94:a4:50:f1:0b:25:f2:a1:b1:c5:ad:85: 49:66:e6:a8:88:fe:89:91:4f:f0:22:76:86:f8:7d: a8:a9:98:b0:36:7e:83:5f:7d:ba:34:04:a3:ab:bd: 4c:02:de:d7:ae:e2:d9:02:b7:e9:b5:8a:32:b7:fd: 82:30:ca:f6:e2:a1:ae:9f:41:88:0d:76:18:1b:3f: bb:74:44:8c:f8:2d:e4:10:44:db:c1:68:0b:9d:cb: 54:e9:8c:4d:f2:05:f1:f6:46:7a:a2:8f:50:d4:96: 22:72:c8:47:94:c1:5f:2e:2a:8a:a6:27:e1:8b:db: 98:39:77:d9:29:45:a0:95:4a:46:18:69:e9:65:b6: 35:5f:89:61:2a:7d:4b:79:14:1d:e2:92:69:08:50: 22:5b:d0:79:14:b3:55:a9:a7:a3:fe:8e:ce:ec:e8: fb:28:9f:df:15:c4:4b:5a:83:67:d3:72:cd:c1:51: 1a:69:7c:a8:0f:8c:e2:9d:34:d3:12:6c:6e:87:04: cd:f2:53:77:82:99:d4:9c:16:3c:8f:07:47:95:9c: 59:c2:d2:e9:16:e5:9e:7e:d8:01:77:dc:94:b0:83: 8c:47:89:e0:d2:b4:cb:f0:cf:09:76:4b:ef:a6:45: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E8:A1:0C:3D:77:50:7E:E0:2F:AF:E1:41:C5:BF:75:5E:92:D0:7F X509v3 Authority Key Identifier: keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:49:ec:14:40:7a:32:ac:db:6e:c2:24:e6:b6:fa:a6:97:5f: ed:42:45:5e:53:f7:4c:56:02:a4:a8:87:b6:37:43:c0:0e:d5: 93:f3:07:1a:80:46:0a:41:28:88:b0:45:87:86:e1:2d:75:36: a5:53:19:b6:58:9a:d8:b7:dd:98:de:6c:0d:42:41:1b:02:69: db:1c:fe:57:cb:09:af:4f:d5:38:d3:2e:ce:ee:89:09:5e:f3: f6:ab:e3:20:e4:d5:b2:79:b8:07:c3:78:06:de:8e:71:cd:da: 9c:01:4f:4f:86:69:e4:e5:39:47:e1:46:99:82:f5:0e:6d:1e: 39:76:b5:0c:8f:77:c3:4e:00:07:43:84:fe:e1:cb:cc:8f:d6: 93:68:b0:5e:ff:7a:6d:15:e8:af:65:c3:5f:8f:e5:a0:dc:c2: 67:b0:94:d3:cd:1b:3a:48:c8:54:b1:82:f4:01:ed:6c:d3:a5: 3d:e2:ca:bf:be:11:93:15:30:36:5e:26:12:cf:8b:a9:65:ed: 0d:1c:cd:0d:77:5c:88:87:e2:48:58:46:f8:d8:6c:83:fc:34: f1:69:51:a9:f9:8e:d6:d5:53:a9:19:b7:24:ab:ff:cd:aa:24: ca:5f:e0:6b:29:f6:d0:47:d2:0e:5a:74:03:a8:26:f6:36:65: 6a:40:ca:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJqHAaGcNIgjxUJsfSkKZEyZCHuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThD NkNFQ0JCRTAeFw0yNjA2MTExNzE3MzFaFw0yNjA2MTIxNzU0MzFaMDMxMTAvBgNV BAMTKDMwRThBMTBDM0Q3NzUwN0VFMDJGQUZFMTQxQzVCRjc1NUU5MkQwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhdrJjTmow999vUFaxIENST5Sk UPELJfKhscWthUlm5qiI/omRT/Aidob4faipmLA2foNffbo0BKOrvUwC3teu4tkC t+m1ijK3/YIwyvbioa6fQYgNdhgbP7t0RIz4LeQQRNvBaAudy1TpjE3yBfH2Rnqi j1DUliJyyEeUwV8uKoqmJ+GL25g5d9kpRaCVSkYYaelltjVfiWEqfUt5FB3ikmkI UCJb0HkUs1Wpp6P+js7s6Pson98VxEtag2fTcs3BURppfKgPjOKdNNMSbG6HBM3y U3eCmdScFjyPB0eVnFnC0ukW5Z5+2AF33JSwg4xHieDStMvwzwl2S++mRSdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMOihDD13UH7gL6/hQcW/dV6S0H8wHwYDVR0j BBgwFoAUC/1q3Lz3RXwFx/qRppWHWMbOy74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmYyNTA2YjEtMzk2ZC00OTllLWI3ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENC Q0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThDNkNFQ0JCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkZENkFEQ0JDRjc0NTdDMDVDN0ZBOTFBNjk1ODc1OEM2Q0VD QkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3 NThDNkNFQ0JCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINJ7BRAejKs227CJOa2+qaXX+1CRV5T90xW AqSoh7Y3Q8AO1ZPzBxqARgpBKIiwRYeG4S11NqVTGbZYmti33ZjebA1CQRsCadsc /lfLCa9P1TjTLs7uiQle8/ar4yDk1bJ5uAfDeAbejnHN2pwBT0+GaeTlOUfhRpmC 9Q5tHjl2tQyPd8NOAAdDhP7hy8yP1pNosF7/em0V6K9lw1+P5aDcwmewlNPNGzpI yFSxgvQB7WzTpT3iyr++EZMVMDZeJhLPi6ll7Q0czQ13XIiH4khYRvjYbIP8NPFp Uan5jtbVU6kZtySr/82qJMpf4Gsp9tBH0g5adAOoJvY2ZWpAyuo= -----END CERTIFICATE-----Generated at Fri Jun 12 06:03:38 2026 by rpki-client