$ rpki-client -vvf rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft File: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft (raw, json) Hash identifier: qc/vFk4k5u/6KZIxfBuUGFFwuUYRKjriIx2+9atiYWY= Subject key identifier: 18:39:EA:53:43:50:4C:8D:3D:21:6D:A7:9C:94:E4:04:C9:91:C8:67 Authority key identifier: 0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 Certificate issuer: /CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Certificate serial: 34548B6EF73BBABDE51EBE23E0478539BAC3596E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:23:45 +0000 Manifest this update: Thu 23 Jul 2026 15:18:45 +0000 Manifest next update: Fri 24 Jul 2026 15:31:45 +0000 Files and hashes: 1: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: ioAK8PuVzBK8o1vLJamanAVbMzvKPhJnFFlStnHERk0=) 2: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl (hash: ru5hhaBEFffNWwu0w0oR85sws3gGSnPJ1DR1FYkDjl8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:54:8b:6e:f7:3b:ba:bd:e5:1e:be:23:e0:47:85:39:ba:c3:59:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Validity Not Before: Jul 23 15:18:45 2026 GMT Not After : Jul 24 15:31:45 2026 GMT Subject: CN=1839EA5343504C8D3D216DA79C94E404C991C867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:a3:d4:1a:66:0b:52:b7:d5:08:86:74:31: e5:b1:4d:84:d6:f8:fd:fc:ed:5d:7e:81:e2:c4:c3: 3a:0e:ec:5e:b7:5f:83:bb:16:e7:b7:9d:35:02:f0: 4c:6c:b6:5a:ee:25:8d:cb:fc:fa:ff:23:a4:3f:87: 4f:14:3e:a7:9e:60:b5:4e:c2:6b:2b:bd:a8:5f:31: 65:cc:4f:83:50:5f:46:68:a8:5a:88:9f:89:d2:ac: 28:69:54:a2:98:06:cf:ff:27:a6:69:b6:b0:72:59: 68:74:89:08:f0:1e:19:c4:3d:00:11:d4:78:1d:0b: fe:e8:ae:9c:2b:dd:d7:b5:76:bf:69:9d:dd:e3:3d: 5f:c0:5a:b5:86:29:eb:63:04:8a:9e:8c:d3:49:60: 82:ba:35:54:0c:dc:43:4d:3b:6c:00:65:83:2a:70: f2:41:1d:6d:3b:f8:0c:cd:0f:dc:88:bd:52:90:25: b9:33:49:32:a8:e8:1f:13:a9:62:b0:5e:51:bb:03: 58:5d:f6:66:70:90:53:e5:91:fd:8a:0c:8b:71:5e: c2:77:7f:9d:2c:25:a8:ed:78:e7:67:24:89:f2:b5: 39:48:53:d4:4d:44:91:4f:fc:54:07:05:a0:2e:39: fa:f6:d4:a7:f6:58:ef:54:1e:6f:12:30:24:23:81: d7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:39:EA:53:43:50:4C:8D:3D:21:6D:A7:9C:94:E4:04:C9:91:C8:67 X509v3 Authority Key Identifier: keyid:0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f4:7d:f7:44:93:7c:52:3c:05:bf:2b:28:7a:f4:02:08:36: 55:e9:ce:c6:13:b5:f9:c9:20:00:1b:96:da:f3:77:19:fa:cf: 73:47:d4:0b:0f:1a:d6:5e:6c:dd:be:c5:25:be:a3:85:d4:84: 16:da:22:c5:b3:7b:b0:60:2a:65:25:e4:52:0a:13:b7:2d:67: 87:57:af:ac:68:ac:05:01:4c:61:fa:0a:24:51:91:dd:dd:ca: 89:1a:03:5f:ed:d9:e2:4c:d1:3f:01:bc:02:9d:98:5d:d2:1f: d2:a7:13:f5:d7:f8:c0:4d:03:fc:48:ce:65:b0:44:5f:75:8e: b9:c3:f2:9e:6d:ea:05:01:67:43:0c:51:80:e0:a1:7c:f1:4a: c1:d8:23:09:f2:0d:dc:1f:41:42:29:96:b8:f8:72:9f:b0:d8: 17:7e:47:fc:7e:1b:31:4a:9c:d9:b8:dd:0e:9e:66:00:93:ed: 8d:77:1e:6b:2a:e9:9c:95:bb:dc:9b:dd:f4:8d:34:c6:06:5e: d5:e8:57:8b:d4:c0:0e:03:7a:c3:80:c0:ed:20:05:39:f7:5d: 43:27:c4:4e:55:2f:a7:63:6a:59:13:8f:27:17:5f:57:ae:fd: ed:c5:03:0f:9d:55:70:6d:8c:8c:4a:0b:e1:24:f2:56:df:24: 3b:45:ec:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNFSLbvc7ur3lHr4j4EeFObrDWW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYw OEU2N0JCOTAeFw0yNjA3MjMxNTE4NDVaFw0yNjA3MjQxNTMxNDVaMDMxMTAvBgNV BAMTKDE4MzlFQTUzNDM1MDRDOEQzRDIxNkRBNzlDOTRFNDA0Qzk5MUM4NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCht6PUGmYLUrfVCIZ0MeWxTYTW +P387V1+geLEwzoO7F63X4O7Fue3nTUC8ExstlruJY3L/Pr/I6Q/h08UPqeeYLVO wmsrvahfMWXMT4NQX0ZoqFqIn4nSrChpVKKYBs//J6ZptrByWWh0iQjwHhnEPQAR 1HgdC/7orpwr3de1dr9pnd3jPV/AWrWGKetjBIqejNNJYIK6NVQM3ENNO2wAZYMq cPJBHW07+AzND9yIvVKQJbkzSTKo6B8TqWKwXlG7A1hd9mZwkFPlkf2KDItxXsJ3 f50sJajteOdnJInytTlIU9RNRJFP/FQHBaAuOfr21Kf2WO9UHm8SMCQjgdd5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGDnqU0NQTI09IW2nnJTkBMmRyGcwHwYDVR0j BBgwFoAUC7ofy42XbaLxwpNX/nfeHwjme7kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM5N2NmYzUtZTBiMC00ODIwLWI4NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4 RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYwOEU2N0JCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkJBMUZDQjhEOTc2REEyRjFDMjkzNTdGRTc3REUxRjA4RTY3 QkI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RF MUYwOEU2N0JCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFv0ffdEk3xSPAW/Kyh69AIINlXpzsYTtfnJ IAAbltrzdxn6z3NH1AsPGtZebN2+xSW+o4XUhBbaIsWze7BgKmUl5FIKE7ctZ4dX r6xorAUBTGH6CiRRkd3dyokaA1/t2eJM0T8BvAKdmF3SH9KnE/XX+MBNA/xIzmWw RF91jrnD8p5t6gUBZ0MMUYDgoXzxSsHYIwnyDdwfQUIplrj4cp+w2Bd+R/x+GzFK nNm43Q6eZgCT7Y13Hmsq6ZyVu9yb3fSNNMYGXtXoV4vUwA4DesOAwO0gBTn3XUMn xE5VL6djalkTjycXX1eu/e3FAw+dVXBtjIxKC+Ek8lbfJDtF7Ho= -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:22 2026 by rpki-client