$ rpki-client -vvf rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft File: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft (raw, json) Hash identifier: g3hxV9qvC0je2ONEWYaGCAjfTjOvdvBSHusRpeItVvw= Subject key identifier: 33:27:5A:2D:B3:E8:F0:D8:57:39:A6:76:AF:C0:B7:FA:ED:41:61:F0 Authority key identifier: 0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 Certificate issuer: /CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Certificate serial: 02E67078F3E45DBDBCEBFCDED563B9A0B07155F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:58:12 +0000 Manifest this update: Tue 12 May 2026 20:53:12 +0000 Manifest next update: Thu 14 May 2026 00:12:12 +0000 Files and hashes: 1: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl (hash: TJxINXNYXWsrXGzrQ3IbF6kzKxQyJ3XGNKfcCPzMCmU=) 2: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: ioAK8PuVzBK8o1vLJamanAVbMzvKPhJnFFlStnHERk0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e6:70:78:f3:e4:5d:bd:bc:eb:fc:de:d5:63:b9:a0:b0:71:55:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Validity Not Before: May 12 20:53:12 2026 GMT Not After : May 14 00:12:12 2026 GMT Subject: CN=33275A2DB3E8F0D85739A676AFC0B7FAED4161F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:86:4e:a6:85:4a:27:26:2b:72:ee:11:84: c0:a2:9a:81:5f:07:6d:81:eb:d3:47:f5:38:85:ae: d7:95:4c:2f:c5:0c:9d:57:ce:d8:77:a8:ae:5c:2b: 56:fe:07:22:1e:23:e5:61:66:19:d5:b6:6b:30:30: f0:2e:e9:60:ee:b8:ce:22:2c:c5:69:e7:29:64:f3: 8b:d6:e3:07:c8:a7:e7:4f:40:35:28:d4:95:a4:b4: b6:29:b3:a3:d7:b6:e5:97:ef:4d:27:2f:28:92:90: 3c:5c:21:49:15:ee:6f:37:66:43:6f:dc:ff:b1:ac: cf:8f:88:fc:6b:0c:16:7c:96:93:ab:10:5b:99:fb: 84:22:74:90:5b:ba:14:5e:8f:97:fa:27:43:a6:29: c5:4f:9c:82:ae:75:cc:e0:ce:ff:ce:6f:0a:b2:0d: 54:70:dc:0d:c8:2e:05:a4:dd:7b:9a:6d:02:13:8a: b8:3e:9a:c0:5e:e5:d8:53:6f:c5:2e:be:91:21:23: 00:dd:1c:97:80:07:14:cd:30:0e:b0:46:25:95:45: f1:53:4a:3b:5f:73:49:16:b5:f7:71:f4:81:c7:84: ba:a1:c5:66:93:b3:f7:d7:e0:fc:6f:72:7c:08:06: 01:4d:65:62:28:22:24:7e:73:fa:90:29:30:72:92: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:27:5A:2D:B3:E8:F0:D8:57:39:A6:76:AF:C0:B7:FA:ED:41:61:F0 X509v3 Authority Key Identifier: keyid:0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:0b:39:9b:2c:8d:c6:33:77:1d:39:32:6c:71:dd:8a:b6:3d: 84:58:f0:42:cb:99:a6:38:23:1e:74:92:a0:5b:e6:5e:ed:ca: 99:6c:24:7d:d5:62:1c:f3:b5:2a:65:e2:6e:c7:9c:e6:4e:c2: 52:78:b6:9b:dc:3b:9e:f4:21:7b:e7:9b:7f:09:7c:d3:51:52: 2e:09:43:dd:39:95:1e:fe:d6:9e:e8:b4:cb:bb:d9:07:10:b9: 2b:66:04:9d:e0:24:70:d7:18:79:57:eb:bc:30:33:7e:d5:e3: 85:19:cb:4d:e6:90:e7:4b:cc:84:93:a9:d0:fa:eb:c7:79:5d: 5f:31:af:17:24:65:78:c5:60:b0:d3:16:28:ac:1e:1b:6e:32: e0:7d:d5:96:16:0b:57:18:10:e2:c3:88:f1:a0:07:69:9d:51: 1d:96:83:74:dc:b9:aa:bf:56:52:a1:5e:5e:23:be:f1:1e:21: 54:62:a5:66:5c:4a:60:ec:a4:15:f8:fd:c6:2c:44:0b:b3:4a: f1:6d:06:5f:3c:e7:f6:db:48:43:cf:ab:94:83:b6:e9:b3:3d: ac:1b:a6:e1:89:71:41:a6:64:40:06:e2:00:c1:ce:08:15:63: fb:70:c4:9b:26:60:0e:64:c4:d5:f3:c2:72:03:06:3b:40:c9: 1f:da:3c:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuZwePPkXb286/ze1WO5oLBxVfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYw OEU2N0JCOTAeFw0yNjA1MTIyMDUzMTJaFw0yNjA1MTQwMDEyMTJaMDMxMTAvBgNV BAMTKDMzMjc1QTJEQjNFOEYwRDg1NzM5QTY3NkFGQzBCN0ZBRUQ0MTYxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbv4ZOpoVKJyYrcu4RhMCimoFf B22B69NH9TiFrteVTC/FDJ1Xzth3qK5cK1b+ByIeI+VhZhnVtmswMPAu6WDuuM4i LMVp5ylk84vW4wfIp+dPQDUo1JWktLYps6PXtuWX700nLyiSkDxcIUkV7m83ZkNv 3P+xrM+PiPxrDBZ8lpOrEFuZ+4QidJBbuhRej5f6J0OmKcVPnIKudczgzv/Obwqy DVRw3A3ILgWk3XuabQITirg+msBe5dhTb8UuvpEhIwDdHJeABxTNMA6wRiWVRfFT Sjtfc0kWtfdx9IHHhLqhxWaTs/fX4PxvcnwIBgFNZWIoIiR+c/qQKTBykln5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMydaLbPo8NhXOaZ2r8C3+u1BYfAwHwYDVR0j BBgwFoAUC7ofy42XbaLxwpNX/nfeHwjme7kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM5N2NmYzUtZTBiMC00ODIwLWI4NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4 RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYwOEU2N0JCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkJBMUZDQjhEOTc2REEyRjFDMjkzNTdGRTc3REUxRjA4RTY3 QkI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RF MUYwOEU2N0JCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEELOZssjcYzdx05Mmxx3Yq2PYRY8ELLmaY4 Ix50kqBb5l7typlsJH3VYhzztSpl4m7HnOZOwlJ4tpvcO570IXvnm38JfNNRUi4J Q905lR7+1p7otMu72QcQuStmBJ3gJHDXGHlX67wwM37V44UZy03mkOdLzISTqdD6 68d5XV8xrxckZXjFYLDTFiisHhtuMuB91ZYWC1cYEOLDiPGgB2mdUR2Wg3Tcuaq/ VlKhXl4jvvEeIVRipWZcSmDspBX4/cYsRAuzSvFtBl885/bbSEPPq5SDtumzPawb puGJcUGmZEAG4gDBzggVY/twxJsmYA5kxNXzwnIDBjtAyR/aPDU= -----END CERTIFICATE-----Generated at Wed May 13 01:37:21 2026 by rpki-client