$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft File: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft (raw, json) Hash identifier: jT40XTTnUVIhgD/OfRn4NdJhpf8FK1BDaC3v91h9ygM= Subject key identifier: 0A:23:7E:07:39:89:8B:8A:B6:CB:80:96:A4:62:CA:91:56:FF:E5:69 Authority key identifier: 0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F Certificate issuer: /CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Certificate serial: 20A2A56C98163CE5BC083A9DD9ACD1DAB1A6B546 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:39:25 +0000 Manifest this update: Tue 12 May 2026 21:34:25 +0000 Manifest next update: Thu 14 May 2026 00:23:25 +0000 Files and hashes: 1: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl (hash: F6AckdbSY3Wmm5VW9JEYJrEvRyzAWs2l3iVDGSl5J6c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a2:a5:6c:98:16:3c:e5:bc:08:3a:9d:d9:ac:d1:da:b1:a6:b5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Validity Not Before: May 12 21:34:25 2026 GMT Not After : May 14 00:23:25 2026 GMT Subject: CN=0A237E0739898B8AB6CB8096A462CA9156FFE569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e8:b7:5f:c0:fb:62:14:9b:86:f2:ee:41:90: f2:46:43:70:0d:e4:fc:5c:3b:cb:0a:ee:b2:8c:6d: 3d:50:00:4a:9d:77:f7:da:ec:d7:00:50:e4:f9:a6: 82:7e:ac:67:c3:82:a7:ee:a5:51:9b:e1:c0:ec:20: d4:7a:f3:1a:f8:31:6d:eb:0a:ab:d6:2d:29:b3:38: 8f:d2:78:2d:1d:f7:4f:82:b2:97:49:90:dc:eb:8e: 9b:b7:4d:fd:6b:e9:59:c4:cf:e5:02:82:b1:6f:3b: 6b:74:7f:fd:fe:d9:d0:45:95:48:9d:a5:6c:31:0f: 32:64:36:36:15:2c:fe:a9:b0:80:ab:89:72:b9:3e: 06:38:ff:c8:ed:6a:a9:96:45:35:ec:0a:c9:72:d9: ab:63:ed:32:4f:c6:08:a4:82:42:08:d0:b4:9f:80: a2:5e:4b:74:f6:ee:29:60:87:c2:ab:94:10:46:22: aa:2c:eb:3d:ed:33:e7:e9:e3:c9:a3:7f:28:71:19: 8d:69:a1:89:2b:48:8c:27:7e:2a:19:89:76:a5:dd: a8:cd:20:29:b2:0b:64:76:bc:49:e2:40:b9:6a:99: 03:48:ca:c8:73:07:b7:94:7d:af:09:e3:3e:ae:4f: 10:34:ea:4e:72:a8:5b:b0:46:39:13:3c:35:f0:0f: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:23:7E:07:39:89:8B:8A:B6:CB:80:96:A4:62:CA:91:56:FF:E5:69 X509v3 Authority Key Identifier: keyid:0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:25:5e:d8:6f:77:8b:0a:ca:a3:5d:3e:4f:1d:00:24:30:40: 8d:f8:82:0f:60:0b:56:6b:92:d9:89:75:dc:07:0a:c0:7f:8d: 80:2a:eb:26:73:af:d4:87:9a:1a:80:be:50:33:55:96:0b:82: 4f:0a:5b:54:27:99:f3:ba:b2:3b:7e:c7:84:07:20:3a:24:01: a6:e3:d1:c4:67:ce:ac:b5:ad:76:37:e0:8d:08:bc:2b:db:5f: a9:2d:5c:4c:54:17:49:c5:25:f2:c7:57:cd:1c:fb:c0:2f:4c: d5:85:2a:7e:14:97:64:b5:7a:10:0e:58:da:c2:45:36:23:2f: e2:29:83:24:aa:bd:19:22:2e:84:05:70:93:9e:0a:30:74:13: d8:99:96:5c:1b:a4:17:1e:54:4a:8b:05:dd:ec:f6:52:53:0e: 58:67:99:48:44:d4:81:2f:a0:88:2b:bd:71:89:05:81:4c:04: f2:19:03:71:a3:85:70:97:ab:e8:e1:6d:c4:42:5b:82:8c:b4: 76:7d:3e:64:22:8a:76:a2:0f:2d:53:14:28:2d:e2:64:4a:06: d9:98:af:d3:90:74:45:31:d0:6e:d1:e2:ad:28:7f:e2:0f:e3: 40:21:f4:c7:c8:dc:de:84:f6:43:90:c0:2e:15:e7:2a:c3:09: 1f:1f:6b:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKKlbJgWPOW8CDqd2azR2rGmtUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFG MjQ4OTIwRjAeFw0yNjA1MTIyMTM0MjVaFw0yNjA1MTQwMDIzMjVaMDMxMTAvBgNV BAMTKDBBMjM3RTA3Mzk4OThCOEFCNkNCODA5NkE0NjJDQTkxNTZGRkU1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6LdfwPtiFJuG8u5BkPJGQ3AN 5PxcO8sK7rKMbT1QAEqdd/fa7NcAUOT5poJ+rGfDgqfupVGb4cDsINR68xr4MW3r CqvWLSmzOI/SeC0d90+CspdJkNzrjpu3Tf1r6VnEz+UCgrFvO2t0f/3+2dBFlUid pWwxDzJkNjYVLP6psICriXK5PgY4/8jtaqmWRTXsCsly2atj7TJPxgikgkII0LSf gKJeS3T27ilgh8KrlBBGIqos6z3tM+fp48mjfyhxGY1poYkrSIwnfioZiXal3ajN ICmyC2R2vEniQLlqmQNIyshzB7eUfa8J4z6uTxA06k5yqFuwRjkTPDXwD/YjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCiN+BzmJi4q2y4CWpGLKkVb/5WkwHwYDVR0j BBgwFoAUD7YeF9tcOnxr6ggOJH4jcfJIkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdE QjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFGMjQ4OTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI2MUUxN0RCNUMzQTdDNkJFQTA4MEUyNDdFMjM3MUYyNDg5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIz NzFGMjQ4OTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4lXthvd4sKyqNdPk8dACQwQI34gg9gC1Zr ktmJddwHCsB/jYAq6yZzr9SHmhqAvlAzVZYLgk8KW1QnmfO6sjt+x4QHIDokAabj 0cRnzqy1rXY34I0IvCvbX6ktXExUF0nFJfLHV80c+8AvTNWFKn4Ul2S1ehAOWNrC RTYjL+IpgySqvRkiLoQFcJOeCjB0E9iZllwbpBceVEqLBd3s9lJTDlhnmUhE1IEv oIgrvXGJBYFMBPIZA3GjhXCXq+jhbcRCW4KMtHZ9PmQiinaiDy1TFCgt4mRKBtmY r9OQdEUx0G7R4q0of+IP40Ah9MfI3N6E9kOQwC4V5yrDCR8fa7s= -----END CERTIFICATE-----Generated at Wed May 13 06:11:57 2026 by rpki-client