$ rpki-client -vvf rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft File: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft (raw, json) Hash identifier: b0EEFhQmrVnqgaTiN8QGvt/ifMvG96Kbc/mCIVjCnCU= Subject key identifier: B9:7E:D8:7A:49:7B:9A:02:1D:94:BF:B6:E2:E3:F7:E9:6F:76:70:EB Authority key identifier: 0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F Certificate issuer: /CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F Certificate serial: 68BFDADB5D08BB093BD998CC34CD28F31907542B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:51:20 +0000 Manifest this update: Tue 12 May 2026 19:46:20 +0000 Manifest next update: Wed 13 May 2026 22:31:20 +0000 Files and hashes: 1: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl (hash: CjRndTEBXT4F5U4VPHkR7J+9qgS538oiI8Mt+PDka/U=) 2: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: 6eZrQcS7fk+urKWjqhBrdX4ASTj5STJSLSE2pWSJoPQ=) 3: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: FeuEPBSyh4088t58wEF7WYPlFCQyhRPORfmVK/BUUf4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:bf:da:db:5d:08:bb:09:3b:d9:98:cc:34:cd:28:f3:19:07:54:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F Validity Not Before: May 12 19:46:20 2026 GMT Not After : May 13 22:31:20 2026 GMT Subject: CN=B97ED87A497B9A021D94BFB6E2E3F7E96F7670EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:db:16:92:53:b8:c8:d5:ae:67:7c:af:fd:a2: ca:9a:f2:96:e7:08:07:e6:3b:31:b2:32:2b:25:d3: b0:04:81:08:2d:3a:cb:3b:66:56:eb:7b:e4:e0:98: 76:49:bd:27:de:2b:b4:ec:4e:3b:aa:77:bd:53:76: 89:6e:ee:bf:e2:11:77:0f:0c:14:df:c2:a0:40:d9: 34:6d:6b:0f:c5:dc:60:55:fc:94:39:57:b4:88:99: 51:4b:c7:09:3b:d0:3a:41:3f:95:a5:76:fb:c3:1b: c8:f9:eb:ec:35:47:e2:fd:b3:48:5d:df:f2:14:6c: 42:56:47:37:fa:fc:7e:70:21:33:eb:09:f0:c3:c9: 0f:3f:8b:8e:31:eb:88:ab:fb:74:a8:2f:78:61:1c: f1:52:35:81:08:eb:67:db:a5:7a:90:3e:1c:16:b8: 6a:09:6b:06:23:eb:38:f1:4f:3b:35:5a:56:26:92: a6:15:d0:bf:63:74:8f:a8:b0:9b:bd:5b:e6:59:4e: 5e:e9:26:ed:1a:87:1e:d8:d4:5d:91:bd:55:d9:72: 7d:fb:24:ad:4b:b5:1e:44:51:d4:40:c3:4f:01:88: 51:80:8e:21:ae:d8:3d:9d:83:b8:3d:f0:22:52:2e: e1:fd:42:f2:1c:de:d9:49:be:de:4b:7d:89:a3:de: 8d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7E:D8:7A:49:7B:9A:02:1D:94:BF:B6:E2:E3:F7:E9:6F:76:70:EB X509v3 Authority Key Identifier: keyid:0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8a:3b:99:89:d7:31:eb:10:2a:eb:91:6f:a8:6c:78:9b:da: 5f:09:bd:05:07:bc:b5:88:e4:3c:b0:d2:ca:42:85:3f:e4:7a: f1:d6:0d:2e:da:58:e2:64:43:64:e3:fb:2e:6e:5a:a6:3c:dc: 8e:cf:13:f8:cd:81:3b:f7:f6:0a:8c:1b:d8:ea:0c:58:e8:02: 51:6c:55:51:85:9f:31:03:69:e6:59:8e:28:5b:73:e1:d7:3c: 75:c3:83:ef:ef:78:cd:4b:ad:d6:f8:21:b1:10:05:38:b2:a6: e8:09:21:d2:af:d6:55:d3:3f:d9:de:40:b0:42:7e:23:21:fe: d2:25:4d:a6:ff:d6:40:a2:f2:ab:34:03:36:d5:d6:ab:81:ad: e9:56:ee:0b:46:a7:1d:38:2f:ea:d5:1d:bc:64:9a:54:6c:79: 2b:66:a6:d2:e4:47:71:69:6d:e1:20:8f:62:7b:bb:cf:38:0f: ab:25:54:4b:66:0b:87:b4:2b:f4:bb:8e:02:30:02:50:4a:c3: 49:4b:aa:eb:dc:ce:03:61:59:f0:c6:7f:2b:35:a9:db:de:8e: 8e:0b:d4:f8:b9:f4:7a:a6:f0:87:c2:a8:3d:89:7e:8d:2b:a1: 61:7c:0b:81:13:5b:02:46:ea:07:9e:56:43:a9:6d:d5:ca:a9: 47:62:ad:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaL/a210Iuwk72ZjMNM0o8xkHVCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1 QkZCOUEwRjAeFw0yNjA1MTIxOTQ2MjBaFw0yNjA1MTMyMjMxMjBaMDMxMTAvBgNV BAMTKEI5N0VEODdBNDk3QjlBMDIxRDk0QkZCNkUyRTNGN0U5NkY3NjcwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe2xaSU7jI1a5nfK/9osqa8pbn CAfmOzGyMisl07AEgQgtOss7Zlbre+TgmHZJvSfeK7TsTjuqd71Tdolu7r/iEXcP DBTfwqBA2TRtaw/F3GBV/JQ5V7SImVFLxwk70DpBP5WldvvDG8j56+w1R+L9s0hd 3/IUbEJWRzf6/H5wITPrCfDDyQ8/i44x64ir+3SoL3hhHPFSNYEI62fbpXqQPhwW uGoJawYj6zjxTzs1WlYmkqYV0L9jdI+osJu9W+ZZTl7pJu0ahx7Y1F2RvVXZcn37 JK1LtR5EUdRAw08BiFGAjiGu2D2dg7g98CJSLuH9QvIc3tlJvt5LfYmj3o2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuX7Yekl7mgIdlL+24uP36W92cOswHwYDVR0j BBgwFoAUC9TgBeTZdS+hvE9SrvXIB1v7mg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJiNzE1MzYtNzE3ZS00NWRiLWEwM2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVF NEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1QkZCOUEwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkQ0RTAwNUU0RDk3NTJGQTFCQzRGNTJBRUY1QzgwNzVCRkI5 QTBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4 MDc1QkZCOUEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeKO5mJ1zHrECrrkW+obHib2l8JvQUHvLWI 5Dyw0spChT/kevHWDS7aWOJkQ2Tj+y5uWqY83I7PE/jNgTv39gqMG9jqDFjoAlFs VVGFnzEDaeZZjihbc+HXPHXDg+/veM1Lrdb4IbEQBTiypugJIdKv1lXTP9neQLBC fiMh/tIlTab/1kCi8qs0AzbV1quBrelW7gtGpx04L+rVHbxkmlRseStmptLkR3Fp beEgj2J7u884D6slVEtmC4e0K/S7jgIwAlBKw0lLquvczgNhWfDGfys1qdvejo4L 1Pi59Hqm8IfCqD2Jfo0roWF8C4ETWwJG6geeVkOpbdXKqUdirXU= -----END CERTIFICATE-----Generated at Wed May 13 02:19:04 2026 by rpki-client