$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft File: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft (raw, json) Hash identifier: D9+O43/ZDjHBnwOb7xuo+TYNdGg15mYEycV+qDbNDrQ= Subject key identifier: E6:83:C6:B5:FE:E1:E5:29:3A:03:62:43:F3:01:8C:3A:E3:0B:42:85 Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE Certificate issuer: /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Certificate serial: 15F446725D76753E6AA106FC2F8E7ED7F30D4036 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:30:59 +0000 Manifest this update: Tue 12 May 2026 05:25:59 +0000 Manifest next update: Wed 13 May 2026 09:24:59 +0000 Files and hashes: 1: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: pcqtzLzNaNYPks2/OHv2K1hXp8EkBWXZ157lBF+eG6I=) 2: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl (hash: 7797ZFMbs2lGiJ4todXxBCN5lxRV/Z7HV3dV6ZM6Tuo=) 3: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: Q7IDKK7bd4+D1LbWjZoromCTyfDrru1LNqDTxcv/O1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f4:46:72:5d:76:75:3e:6a:a1:06:fc:2f:8e:7e:d7:f3:0d:40:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Validity Not Before: May 12 05:25:59 2026 GMT Not After : May 13 09:24:59 2026 GMT Subject: CN=E683C6B5FEE1E5293A036243F3018C3AE30B4285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ce:71:88:8b:27:d7:7e:42:09:28:c0:e4:5a: 39:74:7d:a9:df:cc:4f:93:d5:e7:64:3d:53:c6:c3: 5a:02:2f:ea:dc:75:cb:7c:de:97:66:12:31:be:48: ae:1e:fe:37:1d:94:7e:52:81:0d:f2:21:ba:d7:3a: c2:76:50:76:e5:6b:e1:bc:c3:79:7a:37:4b:86:e8: 60:4c:0f:a0:73:04:58:2d:57:7d:c1:d4:5a:d0:02: 0a:b9:aa:9c:01:87:74:14:82:71:d4:56:9e:a3:cd: 75:1e:6b:bc:8b:2e:aa:f3:17:f8:7e:2a:c6:a4:34: f8:94:aa:99:06:b7:67:8a:ad:f6:1a:50:b4:15:51: b6:0e:00:ba:c0:91:cb:29:d8:05:84:48:6d:08:11: ec:3d:e4:63:50:3f:d9:6c:de:14:fc:8c:a4:03:22: 0d:cf:77:59:20:d0:b9:ac:5f:83:c6:a9:f8:56:a0: 89:85:fc:73:e9:cd:d6:92:ec:4f:2e:38:59:99:8d: 02:e0:17:a6:4e:6d:73:6b:44:18:e6:b6:01:78:37: 63:9c:c0:4e:db:d1:49:5a:af:f6:b6:2f:be:2e:98: 30:4d:c0:d3:df:81:91:06:97:e3:9c:ba:e4:d1:df: 3c:58:ff:4d:1e:d2:bf:89:fd:6a:d0:38:65:18:b0: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:83:C6:B5:FE:E1:E5:29:3A:03:62:43:F3:01:8C:3A:E3:0B:42:85 X509v3 Authority Key Identifier: keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a5:f4:79:7c:80:63:43:ac:6d:4c:3d:06:d9:f8:c3:ac:b9: c4:7f:3e:6d:ce:49:66:01:e2:ea:6b:9b:30:a5:9c:63:51:a4: af:67:8f:58:0d:d7:57:a2:42:f6:3c:1c:e6:19:5e:1f:ad:4f: 63:c9:ef:1c:95:ed:6e:e9:88:f2:4e:ca:52:6e:aa:68:ca:22: e0:22:2b:39:97:2f:14:ab:31:84:e4:52:f5:c1:0f:30:46:39: c6:34:a1:13:21:60:4e:c0:c9:a5:a3:85:bc:ae:ee:ef:e8:f6: 88:04:a7:31:f0:f8:28:c4:68:aa:06:a8:e7:47:c4:01:28:7a: e1:27:d8:97:35:df:c0:12:e0:99:9c:9c:6f:8c:85:8f:c6:d1: ee:57:de:03:0d:04:93:13:18:47:b1:05:9a:b2:ad:d1:16:2b: 03:ba:68:9a:91:8a:09:03:0e:86:2f:1e:ef:ad:ac:88:c8:50: e1:b9:30:ac:aa:ac:90:bb:13:62:99:2d:a6:d9:23:18:0c:17: c6:52:ee:a1:f6:ed:81:b3:8d:6e:23:9e:cd:05:55:4e:62:f2: 83:00:68:df:e3:ca:39:36:d6:ad:e6:a0:4f:d8:7b:b6:73:56: 2d:f6:ab:94:cf:41:0b:4a:0c:2a:6c:8a:57:1a:64:6c:36:b3: 61:bc:cd:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfRGcl12dT5qoQb8L45+1/MNQDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThD NkNFQ0JCRTAeFw0yNjA1MTIwNTI1NTlaFw0yNjA1MTMwOTI0NTlaMDMxMTAvBgNV BAMTKEU2ODNDNkI1RkVFMUU1MjkzQTAzNjI0M0YzMDE4QzNBRTMwQjQyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaznGIiyfXfkIJKMDkWjl0fanf zE+T1edkPVPGw1oCL+rcdct83pdmEjG+SK4e/jcdlH5SgQ3yIbrXOsJ2UHbla+G8 w3l6N0uG6GBMD6BzBFgtV33B1FrQAgq5qpwBh3QUgnHUVp6jzXUea7yLLqrzF/h+ KsakNPiUqpkGt2eKrfYaULQVUbYOALrAkcsp2AWESG0IEew95GNQP9ls3hT8jKQD Ig3Pd1kg0LmsX4PGqfhWoImF/HPpzdaS7E8uOFmZjQLgF6ZObXNrRBjmtgF4N2Oc wE7b0Ular/a2L74umDBNwNPfgZEGl+OcuuTR3zxY/00e0r+J/WrQOGUYsNBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5oPGtf7h5Sk6A2JD8wGMOuMLQoUwHwYDVR0j BBgwFoAUC/1q3Lz3RXwFx/qRppWHWMbOy74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmYyNTA2YjEtMzk2ZC00OTllLWI3ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENC Q0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThDNkNFQ0JCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkZENkFEQ0JDRjc0NTdDMDVDN0ZBOTFBNjk1ODc1OEM2Q0VD QkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3 NThDNkNFQ0JCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIal9Hl8gGNDrG1MPQbZ+MOsucR/Pm3OSWYB 4uprmzClnGNRpK9nj1gN11eiQvY8HOYZXh+tT2PJ7xyV7W7piPJOylJuqmjKIuAi KzmXLxSrMYTkUvXBDzBGOcY0oRMhYE7AyaWjhbyu7u/o9ogEpzHw+CjEaKoGqOdH xAEoeuEn2Jc138AS4JmcnG+MhY/G0e5X3gMNBJMTGEexBZqyrdEWKwO6aJqRigkD DoYvHu+trIjIUOG5MKyqrJC7E2KZLabZIxgMF8ZS7qH27YGzjW4jns0FVU5i8oMA aN/jyjk21q3moE/Ye7ZzVi32q5TPQQtKDCpsilcaZGw2s2G8zbE= -----END CERTIFICATE-----Generated at Wed May 13 01:37:12 2026 by rpki-client