$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft File: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft (raw, json) Hash identifier: H23QKAIvJjTZTPlXJVPOYnqQthJP4dwOGAFIJcImzOQ= Subject key identifier: 6A:9B:AA:6F:BE:DF:6A:51:01:84:28:B3:5A:D5:6A:2A:94:B9:37:57 Authority key identifier: 0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 Certificate issuer: /CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Certificate serial: 32EB6E7DB6CE87A5D95AD15C1BCAFE85E2F2B57D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:30:03 +0000 Manifest this update: Thu 23 Jul 2026 16:25:03 +0000 Manifest next update: Fri 24 Jul 2026 19:06:03 +0000 Files and hashes: 1: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl (hash: BzfB+m5kb0/4ot+PRUqY0Xi8nerA6/8eIRsWgJMgHbA=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: RKQ6wa1x5VScJTj3fjdeSQ/eUi7ms4u121kFQZr9klo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:eb:6e:7d:b6:ce:87:a5:d9:5a:d1:5c:1b:ca:fe:85:e2:f2:b5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Validity Not Before: Jul 23 16:25:03 2026 GMT Not After : Jul 24 19:06:03 2026 GMT Subject: CN=6A9BAA6FBEDF6A51018428B35AD56A2A94B93757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3d:36:97:4e:32:d7:79:ec:ce:48:ba:78:5f: 93:27:02:b0:be:9b:eb:a9:25:c9:a9:15:b9:51:6b: 87:3f:d3:b1:9b:ce:3e:1a:27:96:5c:0f:2b:36:e2: fb:a3:14:e6:89:a3:75:93:2f:ac:b3:0c:94:e0:90: 79:b3:7e:61:b4:61:5d:30:30:af:34:cd:14:bc:ea: 80:ec:be:0d:a0:43:13:9a:55:8a:1e:82:69:77:33: c6:1e:77:f9:eb:ba:b0:96:09:ca:f8:d1:5e:17:5e: c4:22:9d:0d:4b:ff:ad:5f:8e:2f:17:12:a5:3d:f0: 34:6a:89:b4:ec:f4:8e:ff:ea:d0:4f:dd:c0:e0:57: 08:58:f2:41:0f:51:47:a6:23:3a:6b:3e:64:b5:cc: d5:7d:d3:3d:72:2f:37:06:9f:bb:4b:c6:b7:82:57: 29:03:6c:5f:63:88:b5:22:9d:bd:15:e2:0e:af:ec: 81:03:73:96:ed:ad:46:3e:a6:05:b7:7c:98:cf:e2: b7:6c:f9:d4:1c:cf:7b:48:4b:4e:e0:49:7d:ff:85: 83:80:0d:c7:8c:2d:74:7e:11:d3:57:e9:67:be:40: db:be:70:44:55:c7:c8:94:fb:75:9a:e5:e7:e1:53: 05:67:4f:93:d5:e4:d9:81:94:fa:de:25:e9:c1:c1: ab:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9B:AA:6F:BE:DF:6A:51:01:84:28:B3:5A:D5:6A:2A:94:B9:37:57 X509v3 Authority Key Identifier: keyid:0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d7:d2:0d:dc:b6:5c:b6:e8:19:b4:c6:a5:f2:c9:ce:c3:ba: fe:c5:67:87:53:53:03:73:20:0b:c1:49:94:67:db:a6:d1:92: 07:d5:89:1e:f8:10:c7:c9:9a:e6:94:5f:d0:b3:bb:60:74:da: c1:a1:e7:b5:4a:f1:db:b1:df:ff:40:8d:4b:3f:b7:5a:bd:94: 9b:76:b4:f7:bd:9c:77:34:28:e1:ae:f1:ea:8a:b5:16:1a:39: a8:9c:a5:fb:f6:8d:55:09:4f:47:e5:e7:52:6e:3b:e1:6e:3f: 57:98:99:92:74:19:b0:01:8c:84:25:c0:a9:7b:ab:82:b3:8e: f6:d3:97:bb:e8:b9:96:ac:a5:86:78:58:bd:02:b5:02:1c:57: 23:f6:80:6e:77:48:fe:f2:d2:6b:77:04:e5:24:5c:03:87:bb: ac:5d:93:43:1f:40:63:5c:00:bf:16:03:cb:f4:5a:b6:a5:df: a1:4c:b9:4d:40:4a:45:56:a6:86:51:74:cd:12:de:a4:a9:da: cb:c0:44:68:43:d2:d0:99:35:08:51:b2:16:29:c9:12:67:06: 38:cf:04:bf:7f:00:4b:c6:bc:89:f0:03:9c:60:4e:6f:cc:9d: fe:f7:06:3f:32:26:69:85:f9:47:51:c7:c4:7d:f2:06:ed:f3: 54:73:dd:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMutufbbOh6XZWtFcG8r+heLytX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVFNEZC MUY5NTMzOTAeFw0yNjA3MjMxNjI1MDNaFw0yNjA3MjQxOTA2MDNaMDMxMTAvBgNV BAMTKDZBOUJBQTZGQkVERjZBNTEwMTg0MjhCMzVBRDU2QTJBOTRCOTM3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvPTaXTjLXeezOSLp4X5MnArC+ m+upJcmpFblRa4c/07Gbzj4aJ5ZcDys24vujFOaJo3WTL6yzDJTgkHmzfmG0YV0w MK80zRS86oDsvg2gQxOaVYoegml3M8Yed/nrurCWCcr40V4XXsQinQ1L/61fji8X EqU98DRqibTs9I7/6tBP3cDgVwhY8kEPUUemIzprPmS1zNV90z1yLzcGn7tLxreC VykDbF9jiLUinb0V4g6v7IEDc5btrUY+pgW3fJjP4rds+dQcz3tIS07gSX3/hYOA DceMLXR+EdNX6We+QNu+cERVx8iU+3Wa5efhUwVnT5PV5NmBlPreJenBwaufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUapuqb77falEBhCizWtVqKpS5N1cwHwYDVR0j BBgwFoAUC5FDzV0qg1fiAR54Q5leT7H5UzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ0OGJkMDQtZjc4Ny00MTRhLWE1MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1 RDJBODM1N0UyMDExRTc4NDM5OTVFNEZCMUY5NTMzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjkxNDNDRDVEMkE4MzU3RTIwMTFFNzg0Mzk5NUU0RkIxRjk1 MzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVF NEZCMUY5NTMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHX0g3ctly26Bm0xqXyyc7Duv7FZ4dTUwNz IAvBSZRn26bRkgfViR74EMfJmuaUX9Czu2B02sGh57VK8dux3/9AjUs/t1q9lJt2 tPe9nHc0KOGu8eqKtRYaOaicpfv2jVUJT0fl51JuO+FuP1eYmZJ0GbABjIQlwKl7 q4KzjvbTl7vouZaspYZ4WL0CtQIcVyP2gG53SP7y0mt3BOUkXAOHu6xdk0MfQGNc AL8WA8v0Wral36FMuU1ASkVWpoZRdM0S3qSp2svARGhD0tCZNQhRshYpyRJnBjjP BL9/AEvGvInwA5xgTm/Mnf73Bj8yJmmF+UdRx8R98gbt81Rz3d0= -----END CERTIFICATE-----Generated at Fri Jul 24 09:08:16 2026 by rpki-client