$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft File: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft (raw, json) Hash identifier: SED5rO5vY3BXSbB38oootheSR8CdmW6NBUrkghzpeSE= Subject key identifier: AA:32:4B:14:F5:F2:43:64:AF:3C:3A:90:5B:22:57:05:95:C3:1A:19 Authority key identifier: 0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F Certificate issuer: /CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Certificate serial: 2B49656A14582E4E1BD08DC49F25BDBAD07E1275 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:47:41 +0000 Manifest this update: Fri 24 Jul 2026 02:42:41 +0000 Manifest next update: Sat 25 Jul 2026 04:57:41 +0000 Files and hashes: 1: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl (hash: zhbPH3RilYq8orLBBgYIVHmqGccooxpkUFvgkvtp75M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:49:65:6a:14:58:2e:4e:1b:d0:8d:c4:9f:25:bd:ba:d0:7e:12:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Validity Not Before: Jul 24 02:42:41 2026 GMT Not After : Jul 25 04:57:41 2026 GMT Subject: CN=AA324B14F5F24364AF3C3A905B22570595C31A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c8:d4:95:b7:9a:2b:37:87:6e:25:85:dc:a4: 39:73:84:bd:05:2b:d8:48:62:3b:9e:6f:c1:55:8c: 60:36:1f:61:1c:19:ec:3c:88:b2:18:e6:8d:29:1c: a9:80:68:c4:29:67:f7:10:79:5f:74:59:5d:32:c9: e9:d8:cb:2b:06:45:11:8d:4d:8a:d1:2f:b5:7e:ad: a7:77:5f:de:f5:88:9e:b3:d7:a8:80:d4:f4:fa:c1: 40:0e:68:ef:65:86:ca:22:96:ab:0c:86:50:6b:c1: f5:b9:96:d3:27:83:69:e2:76:f5:5e:17:d7:5b:21: 0d:f4:c4:a9:b0:c3:0c:26:34:2c:f8:5d:a6:0e:44: 77:e5:ec:84:55:e4:cb:0a:46:93:f1:d8:82:7b:b7: c2:cb:66:af:9a:02:20:c7:99:9e:3b:33:6e:0c:84: f4:38:60:26:e5:7f:1a:21:83:59:bb:a4:57:a1:ff: aa:66:f2:d4:cd:02:b7:1d:29:24:42:03:9f:d4:a3: b5:9a:3f:8d:ee:96:76:99:3a:e2:ee:bb:61:3d:75: ea:a8:38:ce:5d:00:f7:67:29:1e:f9:e6:73:39:07: e4:68:f6:91:65:ae:f0:89:82:9b:29:0b:c1:09:55: 82:2a:5a:da:85:90:9f:66:a4:87:96:f9:f9:60:21: 39:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:32:4B:14:F5:F2:43:64:AF:3C:3A:90:5B:22:57:05:95:C3:1A:19 X509v3 Authority Key Identifier: keyid:0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:86:ab:f2:de:21:aa:2c:6d:d8:ad:a9:4d:fd:0d:8b:01:91: b7:da:5f:ce:7d:66:0f:61:57:2f:f5:ee:04:14:b7:af:da:7e: 52:d4:e6:be:b2:c0:c9:08:11:ed:d0:d5:f9:33:d7:74:73:b0: 60:c9:d5:b5:fa:a4:0a:8c:68:33:aa:98:80:a2:05:10:9c:fe: 12:64:c0:98:de:0a:96:2f:f9:71:f9:1f:6f:cf:ec:ce:66:f8: 69:54:b2:cd:00:e2:44:8c:73:cd:75:a0:8e:56:bd:06:d4:e1: 8b:41:f0:be:81:ee:cb:e0:b7:8b:2a:e7:03:df:ec:b5:91:a0: 38:65:68:6d:88:6b:e1:ef:cd:04:a9:da:a6:de:ef:87:da:88: 16:bc:b9:f5:ba:2a:21:e0:c5:65:59:bc:f9:84:24:d4:68:7f: 87:b3:1f:ad:81:73:3a:28:0c:5c:16:07:95:18:ea:86:c4:e8: e5:75:e0:c9:35:cd:11:d6:71:de:9d:42:6b:b9:0b:b2:bf:65: 4e:61:5b:e5:2b:0a:7c:67:6a:48:e2:40:64:16:b8:be:1c:00: 9d:cf:7b:69:4f:62:ec:b4:d7:0c:5f:6c:b4:08:91:fc:1d:f6: f6:b2:49:ad:3a:76:f0:19:c1:d2:a7:54:10:ca:56:e4:49:8a: 3a:b7:85:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0llahRYLk4b0I3EnyW9utB+EnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFG MjQ4OTIwRjAeFw0yNjA3MjQwMjQyNDFaFw0yNjA3MjUwNDU3NDFaMDMxMTAvBgNV BAMTKEFBMzI0QjE0RjVGMjQzNjRBRjNDM0E5MDVCMjI1NzA1OTVDMzFBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlyNSVt5orN4duJYXcpDlzhL0F K9hIYjueb8FVjGA2H2EcGew8iLIY5o0pHKmAaMQpZ/cQeV90WV0yyenYyysGRRGN TYrRL7V+rad3X971iJ6z16iA1PT6wUAOaO9lhsoilqsMhlBrwfW5ltMng2nidvVe F9dbIQ30xKmwwwwmNCz4XaYORHfl7IRV5MsKRpPx2IJ7t8LLZq+aAiDHmZ47M24M hPQ4YCblfxohg1m7pFeh/6pm8tTNArcdKSRCA5/Uo7WaP43ulnaZOuLuu2E9deqo OM5dAPdnKR755nM5B+Ro9pFlrvCJgpspC8EJVYIqWtqFkJ9mpIeW+flgITmLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqjJLFPXyQ2SvPDqQWyJXBZXDGhkwHwYDVR0j BBgwFoAUD7YeF9tcOnxr6ggOJH4jcfJIkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdE QjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFGMjQ4OTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI2MUUxN0RCNUMzQTdDNkJFQTA4MEUyNDdFMjM3MUYyNDg5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIz NzFGMjQ4OTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSGq/LeIaosbditqU39DYsBkbfaX859Zg9h Vy/17gQUt6/aflLU5r6ywMkIEe3Q1fkz13RzsGDJ1bX6pAqMaDOqmICiBRCc/hJk wJjeCpYv+XH5H2/P7M5m+GlUss0A4kSMc811oI5WvQbU4YtB8L6B7svgt4sq5wPf 7LWRoDhlaG2Ia+HvzQSp2qbe74faiBa8ufW6KiHgxWVZvPmEJNRof4ezH62Bczoo DFwWB5UY6obE6OV14Mk1zRHWcd6dQmu5C7K/ZU5hW+UrCnxnakjiQGQWuL4cAJ3P e2lPYuy01wxfbLQIkfwd9vaySa06dvAZwdKnVBDKVuRJijq3hTU= -----END CERTIFICATE-----Generated at Fri Jul 24 09:00:50 2026 by rpki-client