$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft File: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft (raw, json) Hash identifier: jEl3KoHOsn8hXdOvArTXQSc1nKyElX414vUaiM0QZQw= Subject key identifier: 39:CA:A4:C1:75:5B:E4:02:37:1B:F5:4C:03:CB:1A:9C:E2:24:66:AD Authority key identifier: 0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B Certificate issuer: /CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Certificate serial: 361E663FAC8582B7DF3BF9A59A42CF31F6BEFBEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 11:23:20 +0000 Manifest this update: Fri 24 Jul 2026 11:18:20 +0000 Manifest next update: Sat 25 Jul 2026 14:06:20 +0000 Files and hashes: 1: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl (hash: n3hPfaLJ8FJUqyxstp/9eYZpzt+QIp+mXcuD3/Glnk8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1e:66:3f:ac:85:82:b7:df:3b:f9:a5:9a:42:cf:31:f6:be:fb:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Validity Not Before: Jul 24 11:18:20 2026 GMT Not After : Jul 25 14:06:20 2026 GMT Subject: CN=39CAA4C1755BE402371BF54C03CB1A9CE22466AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:12:a0:66:4f:97:f6:ac:cd:35:56:53:1f: eb:e6:bd:88:29:f8:1a:dc:fe:e3:a2:33:b0:c0:50: de:80:ca:23:7b:92:e2:9f:aa:cf:87:f5:93:3d:2b: 26:06:70:5b:39:6f:60:06:69:0b:39:e5:c6:20:19: 72:88:92:b3:78:2b:2f:92:8c:ca:89:7e:01:b7:81: 8a:04:d3:fe:eb:06:e6:96:87:d4:2c:c3:e0:84:ce: 2e:ae:87:fd:0e:d2:91:5b:fe:0a:11:16:4f:5c:63: 07:d5:a8:a4:fc:3e:06:c1:44:8b:d7:f2:1c:87:ca: 08:04:45:52:dd:a8:25:53:2f:e2:f4:23:ca:8e:21: 3a:fb:22:53:8c:11:82:60:66:26:a2:74:37:94:b0: 9b:fb:e1:c6:05:0a:72:35:ff:46:b2:b7:14:17:3d: 36:27:60:3c:dc:2b:c6:7e:ad:64:8d:82:49:51:87: c8:13:72:30:d3:42:fb:ed:29:6e:cf:58:dc:f7:07: d3:72:5a:2e:8f:d9:37:98:96:08:ba:a7:9d:ea:9e: 50:4f:8c:2c:79:a8:52:61:71:3f:74:74:1e:71:94: 76:47:10:30:eb:cf:0c:2a:97:a7:c5:b5:72:e7:01: 30:a3:86:38:ec:e3:45:64:63:18:e5:e4:71:2e:fa: 2f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CA:A4:C1:75:5B:E4:02:37:1B:F5:4C:03:CB:1A:9C:E2:24:66:AD X509v3 Authority Key Identifier: keyid:0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a6:30:ef:98:c7:99:87:94:d8:de:63:ef:64:a0:35:d9:a6: 20:0d:da:ac:c8:11:56:e9:13:b9:8d:c2:c9:e3:4c:f4:98:60: eb:3d:36:6b:2b:ac:7f:59:8c:fb:f5:7b:54:0a:d8:0f:23:f8: 0a:d7:09:1a:7b:58:f1:bc:55:22:64:92:30:8b:02:86:18:45: 3c:f2:58:df:5a:a3:b5:08:7c:63:d5:a9:24:57:52:75:08:d4: 32:a8:72:60:0e:87:bf:35:4b:dc:ec:d7:fb:e1:6d:13:63:bc: 77:78:6a:c2:b9:ee:e2:7f:7e:bb:7a:30:41:47:6f:1d:b0:4c: 50:a7:9a:a1:17:58:ea:96:20:91:8a:28:d1:db:52:97:88:52: d7:ae:81:b9:21:9a:e2:f6:c1:35:ef:3f:00:f6:04:8b:df:29: c2:4e:d2:27:df:89:cd:62:a8:53:73:82:f4:a4:c3:93:f1:e0: 66:45:fd:5c:41:47:75:3f:59:a3:9c:26:f8:a3:d1:ef:0b:02: 66:b3:3d:42:d0:e2:ea:16:a2:59:67:83:fa:f1:4e:6d:e5:9f: b1:8f:51:96:f7:f2:02:6f:7e:7b:d1:70:bd:6e:68:18:62:1f: e0:0c:d2:bd:f9:f5:78:74:f5:06:3c:26:c8:36:b4:df:77:8d: d6:91:d3:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNh5mP6yFgrffO/mlmkLPMfa+++owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0UwOURD RDRDOEM2QjAeFw0yNjA3MjQxMTE4MjBaFw0yNjA3MjUxNDA2MjBaMDMxMTAvBgNV BAMTKDM5Q0FBNEMxNzU1QkU0MDIzNzFCRjU0QzAzQ0IxQTlDRTIyNDY2QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGtxKgZk+X9qzNNVZTH+vmvYgp +Brc/uOiM7DAUN6AyiN7kuKfqs+H9ZM9KyYGcFs5b2AGaQs55cYgGXKIkrN4Ky+S jMqJfgG3gYoE0/7rBuaWh9Qsw+CEzi6uh/0O0pFb/goRFk9cYwfVqKT8PgbBRIvX 8hyHyggERVLdqCVTL+L0I8qOITr7IlOMEYJgZiaidDeUsJv74cYFCnI1/0aytxQX PTYnYDzcK8Z+rWSNgklRh8gTcjDTQvvtKW7PWNz3B9NyWi6P2TeYlgi6p53qnlBP jCx5qFJhcT90dB5xlHZHEDDrzwwql6fFtXLnATCjhjjs40VkYxjl5HEu+i+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOcqkwXVb5AI3G/VMA8sanOIkZq0wHwYDVR0j BBgwFoAUCgU0FL6lscPDZ9X8D6Pgnc1MjGswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRC RUE1QjFDM0MzNjdENUZDMEZBM0UwOURDRDRDOEM2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTA1MzQxNEJFQTVCMUMzQzM2N0Q1RkMwRkEzRTA5RENENEM4 QzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0Uw OURDRDRDOEM2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKumMO+Yx5mHlNjeY+9koDXZpiAN2qzIEVbp E7mNwsnjTPSYYOs9NmsrrH9ZjPv1e1QK2A8j+ArXCRp7WPG8VSJkkjCLAoYYRTzy WN9ao7UIfGPVqSRXUnUI1DKocmAOh781S9zs1/vhbRNjvHd4asK57uJ/frt6MEFH bx2wTFCnmqEXWOqWIJGKKNHbUpeIUteugbkhmuL2wTXvPwD2BIvfKcJO0iffic1i qFNzgvSkw5Px4GZF/VxBR3U/WaOcJvij0e8LAmazPULQ4uoWollng/rxTm3ln7GP UZb38gJvfnvRcL1uaBhiH+AM0r359Xh09QY8Jsg2tN93jdaR06Y= -----END CERTIFICATE-----Generated at Fri Jul 24 13:53:36 2026 by rpki-client