$ rpki-client -vvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft File: 0BA4160695EA940C660FFE532DE277E48EEAA80C.mft (raw, json) Hash identifier: o5VpEmcC1h5OJ+5cJ2zTwAj8K0r5Yzk9WIxPWok80+c= Subject key identifier: E8:59:44:0D:35:83:F9:80:4F:31:14:BE:AB:7C:A6:39:AD:8B:9D:63 Authority key identifier: 0B:A4:16:06:95:EA:94:0C:66:0F:FE:53:2D:E2:77:E4:8E:EA:A8:0C Certificate issuer: /CN=0BA4160695EA940C660FFE532DE277E48EEAA80C Certificate serial: 1756A0C9C6AD4C775B70B681A141EB0F27A62A7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft Manifest number: 0E Signing time: Tue 12 May 2026 16:41:16 +0000 Manifest this update: Tue 12 May 2026 16:36:16 +0000 Manifest next update: Wed 13 May 2026 19:20:16 +0000 Files and hashes: 1: 0BA4160695EA940C660FFE532DE277E48EEAA80C.crl (hash: XNkyBk3tErgk26OC3umwCKmx+Ej+UDbkx+TNV4+YJC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.crl rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:56:a0:c9:c6:ad:4c:77:5b:70:b6:81:a1:41:eb:0f:27:a6:2a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BA4160695EA940C660FFE532DE277E48EEAA80C Validity Not Before: May 12 16:36:16 2026 GMT Not After : May 13 19:20:16 2026 GMT Subject: CN=E859440D3583F9804F3114BEAB7CA639AD8B9D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:a8:29:15:27:d8:3b:e2:6c:b8:19:9f:51: 1c:ee:08:15:49:bd:56:4c:06:49:73:14:11:d5:fc: f4:7d:d5:6e:32:03:f2:5a:51:07:42:04:28:b8:18: 1f:6f:a4:6a:7e:5c:37:47:85:1c:bf:6a:d5:9d:6b: f4:23:f7:8e:71:41:fb:be:95:98:22:da:79:ec:2c: 47:56:b2:15:7c:5a:20:c6:e3:34:e9:50:a4:e3:e7: eb:9e:12:53:67:5a:a5:d6:b1:8a:97:00:12:c0:5b: 6b:52:83:68:55:19:96:1e:fa:d8:40:df:55:26:ec: 73:5d:9e:b0:51:0a:b8:8f:05:21:d4:61:9a:e7:ec: 89:96:19:ab:a6:e1:f8:f2:b0:ee:43:78:2c:49:90: d4:25:79:f0:ec:2c:aa:42:fc:ac:3c:35:ce:69:e1: c5:f0:d0:19:0c:2c:36:e6:c8:2c:1d:3f:44:06:49: f0:43:3c:7d:19:01:3a:8c:05:09:9e:1c:c1:dd:04: 29:68:85:5a:7b:33:44:0c:bc:30:22:1c:6a:78:9c: 63:cc:cf:7c:0c:da:2d:56:9b:6a:65:e5:81:60:16: 2c:09:46:8c:f1:4d:7a:96:ce:a0:7d:5f:91:1f:17: 54:f4:eb:c1:c4:cc:95:c0:92:94:08:5d:e9:5e:0b: bc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:59:44:0D:35:83:F9:80:4F:31:14:BE:AB:7C:A6:39:AD:8B:9D:63 X509v3 Authority Key Identifier: keyid:0B:A4:16:06:95:EA:94:0C:66:0F:FE:53:2D:E2:77:E4:8E:EA:A8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:9a:44:eb:9f:8d:be:84:99:b1:96:c0:35:ef:a5:28:58:9d: 85:2f:de:9a:1a:34:4d:9e:f5:6c:6a:31:db:0c:c5:89:fc:d5: e1:2f:fd:32:4a:fb:04:bf:58:8c:90:72:32:b5:a8:98:05:cc: d4:a3:a6:0e:3d:f6:ea:eb:9e:ae:42:56:f8:db:ba:9d:37:df: 35:8c:7b:c1:94:5a:c3:35:55:1f:df:36:cd:05:e2:52:2f:89: 43:09:52:60:f9:3c:f8:1e:71:61:e5:02:40:dd:9c:1d:87:15: b5:9a:eb:de:df:16:0b:70:19:e7:f0:68:6f:56:c6:41:8b:9d: 3c:73:9f:9b:72:dc:c3:7d:bc:c0:98:87:79:21:d1:15:b7:30: b6:1f:1b:cd:ea:a4:ce:7d:98:f4:fa:03:d3:5e:30:c6:a1:96: ac:5c:a3:7c:1c:17:9d:57:54:6d:9d:f1:72:18:d2:97:ed:93: 60:ff:ba:79:4a:52:1a:fd:5a:66:a4:71:b0:8e:90:d7:da:a7: 32:80:f5:b5:cd:f4:0d:a7:16:44:20:ee:5f:4e:76:f0:d7:e6: 79:df:b5:4f:fd:23:0a:da:4f:d1:7b:15:a6:9e:65:14:43:c4: ac:73:52:ed:42:a6:70:80:9c:8b:71:99:7b:bf:00:5c:c5:c6: 5d:ce:df:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF1agycatTHdbcLaBoUHrDyemKnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBNDE2MDY5NUVBOTQwQzY2MEZGRTUzMkRFMjc3RTQ4 RUVBQTgwQzAeFw0yNjA1MTIxNjM2MTZaFw0yNjA1MTMxOTIwMTZaMDMxMTAvBgNV BAMTKEU4NTk0NDBEMzU4M0Y5ODA0RjMxMTRCRUFCN0NBNjM5QUQ4QjlENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmlqgpFSfYO+JsuBmfURzuCBVJ vVZMBklzFBHV/PR91W4yA/JaUQdCBCi4GB9vpGp+XDdHhRy/atWda/Qj945xQfu+ lZgi2nnsLEdWshV8WiDG4zTpUKTj5+ueElNnWqXWsYqXABLAW2tSg2hVGZYe+thA 31Um7HNdnrBRCriPBSHUYZrn7ImWGaum4fjysO5DeCxJkNQlefDsLKpC/Kw8Nc5p 4cXw0BkMLDbmyCwdP0QGSfBDPH0ZATqMBQmeHMHdBClohVp7M0QMvDAiHGp4nGPM z3wM2i1Wm2pl5YFgFiwJRozxTXqWzqB9X5EfF1T068HEzJXAkpQIXeleC7wzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6FlEDTWD+YBPMRS+q3ymOa2LnWMwHwYDVR0j BBgwFoAUC6QWBpXqlAxmD/5TLeJ35I7qqAwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM3ZjE5NWEtMzY5ZS00NGJhLTgwY2UtNzIxNzNkNTFhMzcyLzEvMEJBNDE2MDY5 NUVBOTQwQzY2MEZGRTUzMkRFMjc3RTQ4RUVBQTgwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkE0MTYwNjk1RUE5NDBDNjYwRkZFNTMyREUyNzdFNDhFRUFB ODBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzEvMEJBNDE2MDY5NUVBOTQwQzY2MEZGRTUzMkRFMjc3 RTQ4RUVBQTgwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGaROufjb6EmbGWwDXvpShYnYUv3poaNE2e 9WxqMdsMxYn81eEv/TJK+wS/WIyQcjK1qJgFzNSjpg499urrnq5CVvjbup033zWM e8GUWsM1VR/fNs0F4lIviUMJUmD5PPgecWHlAkDdnB2HFbWa697fFgtwGefwaG9W xkGLnTxzn5ty3MN9vMCYh3kh0RW3MLYfG83qpM59mPT6A9NeMMahlqxco3wcF51X VG2d8XIY0pftk2D/unlKUhr9WmakcbCOkNfapzKA9bXN9A2nFkQg7l9OdvDX5nnf tU/9IwraT9F7FaaeZRRDxKxzUu1CpnCAnItxmXu/AFzFxl3O31Q= -----END CERTIFICATE-----Generated at Wed May 13 10:42:56 2026 by rpki-client