$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft File: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft (raw, json) Hash identifier: EU1nao85cSMQIqqvV0u1nYdmBlGNFEy6dsSkmtQvu90= Subject key identifier: 85:19:28:13:8E:9C:FD:50:C4:A9:B0:C4:5B:94:D6:38:0A:CB:70:71 Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE Certificate issuer: /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Certificate serial: 0C428DD32CF733F82FB68689EBE282F1F0531D74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft Manifest number: 72 Signing time: Sun 26 Jul 2026 23:52:41 +0000 Manifest this update: Sun 26 Jul 2026 23:47:41 +0000 Manifest next update: Tue 28 Jul 2026 00:45:41 +0000 Files and hashes: 1: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: Q7IDKK7bd4+D1LbWjZoromCTyfDrru1LNqDTxcv/O1c=) 2: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl (hash: c88xWUj39PEf8wADccVXJSPLhHxM5VedRHDMomdrr1A=) 3: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: pcqtzLzNaNYPks2/OHv2K1hXp8EkBWXZ157lBF+eG6I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:42:8d:d3:2c:f7:33:f8:2f:b6:86:89:eb:e2:82:f1:f0:53:1d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Validity Not Before: Jul 26 23:47:41 2026 GMT Not After : Jul 28 00:45:41 2026 GMT Subject: CN=851928138E9CFD50C4A9B0C45B94D6380ACB7071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:88:aa:bb:fd:08:b0:03:89:23:35:f2:9e:6f: 68:dc:38:49:90:3f:94:8f:a4:23:2c:6a:4e:b8:33: 5f:07:98:c1:e1:c0:e6:da:84:6d:d5:c3:29:a8:e3: 10:e8:d5:95:bd:62:fa:23:a8:6a:c8:12:f3:e3:49: df:78:3e:69:c7:2c:e6:4e:7f:17:52:e1:f0:5f:c6: 9d:3e:c2:a3:d8:b1:c2:3c:7b:13:1c:7d:2c:53:34: d6:bf:75:6b:1d:05:ef:d0:0e:27:c4:64:04:84:9f: 34:22:8e:e0:31:6f:ed:51:e1:9c:3e:5c:83:f9:a7: 46:99:c3:94:fe:14:23:58:a0:8a:0a:7f:16:ce:e6: 0d:69:20:3f:e4:5f:0d:17:28:6e:1f:67:78:13:97: 79:7d:97:54:f7:2a:33:da:ee:0d:6a:fc:d2:5f:52: a4:b9:25:ca:25:74:44:8d:37:61:40:72:d5:d6:1a: 40:e9:56:95:df:06:32:ba:a4:ad:31:a6:0f:04:52: d3:7a:d0:c3:db:e4:44:44:32:be:fe:82:00:58:aa: e6:00:fe:29:b2:4a:5e:ab:2c:52:44:cc:7b:62:98: 8e:4b:04:b0:74:8d:91:92:0f:ea:66:3e:07:b7:a8: be:d2:a5:15:d0:5b:81:23:76:97:4c:23:c0:ee:cc: 73:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:19:28:13:8E:9C:FD:50:C4:A9:B0:C4:5B:94:D6:38:0A:CB:70:71 X509v3 Authority Key Identifier: keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:09:67:ec:b8:26:b8:1b:92:db:58:1a:76:52:5d:fa:20:21: 67:82:1e:dc:f7:be:8e:27:2f:77:4d:e7:15:88:94:fc:91:18: f6:13:f1:15:e9:d3:5b:77:ab:8a:46:09:3e:64:78:ae:44:19: 2d:f4:bc:4f:10:5c:5c:b8:9a:c7:a3:de:6b:84:25:ae:7e:3a: 72:ae:f2:b9:7a:a5:45:40:d7:57:2f:be:16:d1:75:c6:c2:63: 18:d7:39:15:d9:85:15:67:fc:e3:b6:c5:89:f3:69:bb:76:50: b3:8c:4e:0f:48:2f:86:4b:cd:3c:9f:61:50:99:8d:ad:fe:c5: b9:50:9e:4b:24:00:ca:c1:e3:b4:ec:85:6d:11:89:4a:dc:4b: 4a:e4:3a:10:cc:50:d3:3f:c1:d8:60:ed:5c:1e:df:62:ea:e8: bd:5a:42:9a:66:9e:af:90:f2:7c:bd:cb:ec:04:5f:ec:9d:27: 54:1f:16:9a:6a:1b:fa:30:73:42:6e:4b:0c:3c:c0:fc:1f:80: 39:60:1b:b6:84:0a:70:13:3d:46:ca:e1:6e:63:43:02:67:1e: 73:10:e8:47:3c:02:ba:18:2c:0a:a6:ad:f3:dc:f6:88:b6:99: 30:88:fd:b3:08:90:e7:64:bc:02:e8:ba:5f:05:09:3a:27:3b: fc:69:ea:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDEKN0yz3M/gvtoaJ6+KC8fBTHXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThD NkNFQ0JCRTAeFw0yNjA3MjYyMzQ3NDFaFw0yNjA3MjgwMDQ1NDFaMDMxMTAvBgNV BAMTKDg1MTkyODEzOEU5Q0ZENTBDNEE5QjBDNDVCOTRENjM4MEFDQjcwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNiKq7/QiwA4kjNfKeb2jcOEmQ P5SPpCMsak64M18HmMHhwObahG3Vwymo4xDo1ZW9YvojqGrIEvPjSd94PmnHLOZO fxdS4fBfxp0+wqPYscI8exMcfSxTNNa/dWsdBe/QDifEZASEnzQijuAxb+1R4Zw+ XIP5p0aZw5T+FCNYoIoKfxbO5g1pID/kXw0XKG4fZ3gTl3l9l1T3KjPa7g1q/NJf UqS5JcoldESNN2FActXWGkDpVpXfBjK6pK0xpg8EUtN60MPb5EREMr7+ggBYquYA /imySl6rLFJEzHtimI5LBLB0jZGSD+pmPge3qL7SpRXQW4EjdpdMI8DuzHNxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhRkoE46c/VDEqbDEW5TWOArLcHEwHwYDVR0j BBgwFoAUC/1q3Lz3RXwFx/qRppWHWMbOy74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmYyNTA2YjEtMzk2ZC00OTllLWI3ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENC Q0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThDNkNFQ0JCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkZENkFEQ0JDRjc0NTdDMDVDN0ZBOTFBNjk1ODc1OEM2Q0VD QkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3 NThDNkNFQ0JCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoJZ+y4JrgbkttYGnZSXfogIWeCHtz3vo4n L3dN5xWIlPyRGPYT8RXp01t3q4pGCT5keK5EGS30vE8QXFy4msej3muEJa5+OnKu 8rl6pUVA11cvvhbRdcbCYxjXORXZhRVn/OO2xYnzabt2ULOMTg9IL4ZLzTyfYVCZ ja3+xblQnkskAMrB47TshW0RiUrcS0rkOhDMUNM/wdhg7Vwe32Lq6L1aQppmnq+Q 8ny9y+wEX+ydJ1QfFppqG/owc0JuSww8wPwfgDlgG7aECnATPUbK4W5jQwJnHnMQ 6Ec8AroYLAqmrfPc9oi2mTCI/bMIkOdkvALoul8FCTonO/xp6gU= -----END CERTIFICATE-----Generated at Mon Jul 27 14:20:11 2026 by rpki-client