$ rpki-client -vvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft File: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft (raw, json) Hash identifier: P0oKK2HcsbU1vo71q8TB5VZ/W14YWUwWK3JjOrtTX+4= Subject key identifier: E4:8B:63:BA:08:6D:9E:46:D2:BA:A8:B2:50:1C:70:79:F1:AE:94:01 Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 Certificate issuer: /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Certificate serial: 46FC45E9AADEA167A0BB6A9A492033150BEBBBFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:46:25 +0000 Manifest this update: Tue 12 May 2026 16:41:25 +0000 Manifest next update: Wed 13 May 2026 20:41:25 +0000 Files and hashes: 1: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: jpiOTHzKh1vGnb3tSE/Xoje7GEL1N7x9x1Df56pKagM=) 2: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: p4ukH1H84E2OXHZ0f+4rfYiVhbuRJ3ak7nrQukeOEIw=) 3: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: F62HpzCPf0jVzJzqHRtqYgkpCr6Z0Ln+rY5et4Po02Y=) 4: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: dDbCFuKbC0+1oibgHS1pBLUQZLf12v2I7Ivqihl/WFA=) 5: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: fb53zmVp3ZEKD6KlMvVv2uQVwzv7wo/XFESLY4RW+fc=) 6: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: 5tf246IHwaj7s4oEu9nu0sb2z4yR2BLV01+7PT3/O1c=) 7: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: t0sQe3wy1nx7fCaoG1vw4eb+2MVxEa2LAolsSj9bAGg=) 8: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl (hash: Xym0Gg/op5/2Bi74z0bGgjdibqgSGLyzyi2vwU1P5SM=) 9: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: j/oR6MYId1xXKHb1Z5SsBRuqUKKVLnH73F7eTR7zcCg=) 10: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: aop1U/z5XKpBzcRvoj7W7+/ffJTbEvTMlvj03extEio=) 11: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: zvwgezfW86SlRC31YjwJ71lKNs9pTZisRey08uUZDrw=) 12: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: iKmDknm+sz9G+4ieO2jOHSbGQz1z9iCG43k/bYAHB3k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:fc:45:e9:aa:de:a1:67:a0:bb:6a:9a:49:20:33:15:0b:eb:bb:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Validity Not Before: May 12 16:41:25 2026 GMT Not After : May 13 20:41:25 2026 GMT Subject: CN=E48B63BA086D9E46D2BAA8B2501C7079F1AE9401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:e2:c5:03:b7:8e:aa:74:17:d2:10:79:a3: f5:8f:cc:05:13:fa:ef:b4:e0:8c:82:ce:2f:c3:ca: 81:94:7e:3b:4d:9e:8d:96:67:df:f2:43:53:18:0a: 35:4f:17:14:04:3b:e4:3c:ea:f3:e6:06:33:60:b6: 28:7e:ce:00:99:9f:c5:f2:95:6c:20:00:e5:1f:6a: c8:c3:50:dd:69:0e:aa:67:ba:e0:c3:a8:58:60:c7: 55:2c:f3:da:7f:9b:85:13:47:92:46:42:5f:26:6a: 76:1a:e8:13:59:5e:67:d0:06:ee:44:f8:02:7f:a4: c3:86:ce:1a:10:f3:8a:fb:ef:92:a3:3f:7e:79:df: 01:2c:55:6b:df:b7:c7:5f:be:93:ce:d4:26:d0:70: a8:a9:3b:0e:f3:ae:2e:3a:b7:7d:c8:f8:3f:a3:a3: 36:90:fa:d5:49:89:2e:79:06:e0:90:6b:f9:5c:86: ca:85:cb:df:0f:16:44:43:bc:f1:d0:4e:96:53:eb: a7:7c:ba:bd:62:5f:d7:9f:78:41:17:80:9c:95:16: fb:b8:96:32:1b:8e:40:8e:d1:ee:92:05:1d:c7:6a: 98:26:68:c9:17:71:8f:9d:80:52:1d:fc:7d:2f:b9: dd:2e:59:3d:76:78:b0:38:2b:66:3f:de:10:ee:fe: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8B:63:BA:08:6D:9E:46:D2:BA:A8:B2:50:1C:70:79:F1:AE:94:01 X509v3 Authority Key Identifier: keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:48:50:d8:24:0f:ce:55:b8:64:7e:03:c2:d4:e9:3f:72:29: 6a:05:ef:2f:87:bb:4c:55:85:23:1c:34:aa:ac:81:7b:5d:3f: 27:7f:20:02:69:00:ca:6f:9e:fb:32:92:ce:08:62:93:f3:2a: 10:39:83:f0:0c:57:02:97:01:7b:cd:cb:8b:aa:ca:e9:80:8e: 4b:25:d5:34:17:f8:23:c2:7f:cc:ab:2a:da:55:f7:9d:7a:63: ab:2d:3a:9f:1b:7c:01:4c:41:a3:3c:04:03:0f:35:8f:8d:a0: 1d:74:7b:7f:50:46:28:70:fd:5d:54:e8:1b:7b:e1:55:85:15: 1f:f5:0e:10:fc:26:d9:12:44:8c:3c:a8:f6:39:2c:c2:0d:2c: eb:94:a4:e3:b7:4e:b8:c5:ae:e7:ef:41:39:8a:a0:6a:93:70: 1a:8b:30:1e:0a:dc:f9:b8:bf:00:3b:4f:30:a5:93:64:19:3c: c9:5f:7f:7e:10:1d:f1:66:ef:a4:63:4d:46:77:35:56:7a:2d: 5d:fe:1a:f6:01:a0:99:a2:46:cb:30:e3:56:57:4a:a5:b5:82: bf:80:5c:d5:05:22:91:29:68:fd:47:e7:f5:80:10:71:6c:fa: b7:ce:4f:db:0f:4c:d4:05:37:99:c0:f2:d5:2f:b6:be:a6:c1: b5:a5:97:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURvxF6areoWegu2qaSSAzFQvru/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJC REE5OUNCMDAeFw0yNjA1MTIxNjQxMjVaFw0yNjA1MTMyMDQxMjVaMDMxMTAvBgNV BAMTKEU0OEI2M0JBMDg2RDlFNDZEMkJBQThCMjUwMUM3MDc5RjFBRTk0MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgcOLFA7eOqnQX0hB5o/WPzAUT +u+04IyCzi/DyoGUfjtNno2WZ9/yQ1MYCjVPFxQEO+Q86vPmBjNgtih+zgCZn8Xy lWwgAOUfasjDUN1pDqpnuuDDqFhgx1Us89p/m4UTR5JGQl8manYa6BNZXmfQBu5E +AJ/pMOGzhoQ84r775KjP3553wEsVWvft8dfvpPO1CbQcKipOw7zri46t33I+D+j ozaQ+tVJiS55BuCQa/lchsqFy98PFkRDvPHQTpZT66d8ur1iX9efeEEXgJyVFvu4 ljIbjkCO0e6SBR3HapgmaMkXcY+dgFId/H0vud0uWT12eLA4K2Y/3hDu/l+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ItjughtnkbSuqiyUBxwefGulAEwHwYDVR0j BBgwFoAUD7Qksg1qRYDm0yM/zy658r2pnLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM4ZDI3NTUtMzgwZC00NzdlLWJmMjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIw RDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJCREE5OUNCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI0MjRCMjBENkE0NTgwRTZEMzIzM0ZDRjJFQjlGMkJEQTk5 Q0IwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM4ZDI3NTUtMzgwZC00NzdlLWJm MjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5 RjJCREE5OUNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFIUNgkD85VuGR+A8LU6T9yKWoF7y+Hu0xV hSMcNKqsgXtdPyd/IAJpAMpvnvsyks4IYpPzKhA5g/AMVwKXAXvNy4uqyumAjksl 1TQX+CPCf8yrKtpV9516Y6stOp8bfAFMQaM8BAMPNY+NoB10e39QRihw/V1U6Bt7 4VWFFR/1DhD8JtkSRIw8qPY5LMINLOuUpOO3TrjFrufvQTmKoGqTcBqLMB4K3Pm4 vwA7TzClk2QZPMlff34QHfFm76RjTUZ3NVZ6LV3+GvYBoJmiRssw41ZXSqW1gr+A XNUFIpEpaP1H5/WAEHFs+rfOT9sPTNQFN5nA8tUvtr6mwbWll6k= -----END CERTIFICATE-----Generated at Tue May 12 22:50:01 2026 by rpki-client