$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft File: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft (raw, json) Hash identifier: Ty+S4yS3pwHhTrJ2i1URYsRCk0bEIDnTwT8a3bQT5HQ= Subject key identifier: 31:AB:13:48:11:1C:71:F0:E8:DE:3F:93:04:10:F3:49:F9:68:66:D6 Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE Certificate issuer: /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Certificate serial: 1A68C6692F5B27602CD262F5CB1D8F7CBA40CE64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 23:23:25 +0000 Manifest this update: Thu 23 Jul 2026 23:18:25 +0000 Manifest next update: Sat 25 Jul 2026 02:22:25 +0000 Files and hashes: 1: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: pcqtzLzNaNYPks2/OHv2K1hXp8EkBWXZ157lBF+eG6I=) 2: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: Q7IDKK7bd4+D1LbWjZoromCTyfDrru1LNqDTxcv/O1c=) 3: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl (hash: qH1dXfWUg+3Qebtyq0E3P085Mnx2n0pK9jzzeJmRqUg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:68:c6:69:2f:5b:27:60:2c:d2:62:f5:cb:1d:8f:7c:ba:40:ce:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Validity Not Before: Jul 23 23:18:25 2026 GMT Not After : Jul 25 02:22:25 2026 GMT Subject: CN=31AB1348111C71F0E8DE3F930410F349F96866D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:10:85:40:3f:3a:e9:28:2f:c3:67:d9:0f:fb: f6:a3:33:fb:30:88:41:2c:49:89:a3:05:27:d1:84: 87:c4:4e:36:25:30:47:12:58:73:46:41:f4:cd:f8: c8:68:2e:bf:79:19:0b:b0:cd:c2:44:1c:59:62:dd: 27:e0:49:ba:de:1d:6f:8a:ca:a8:d0:0d:9b:73:2b: cd:08:31:ea:72:59:58:8c:3b:de:15:75:0c:89:52: 8b:d3:24:fd:5c:3c:d2:45:f5:d8:b5:95:67:a2:bb: 38:a5:82:de:57:a5:b1:18:fb:34:4b:91:af:a8:1f: 30:d5:c3:52:5b:e6:4f:22:cb:77:59:b5:da:dd:fb: 4d:aa:b0:bc:d9:53:dc:68:63:57:2c:04:86:ea:dc: 6d:a3:38:48:80:aa:72:e6:80:ac:f5:c0:79:41:c8: 19:9b:a5:de:40:57:eb:19:20:43:47:bf:c1:4d:8e: 09:a1:0b:44:c6:b0:9e:00:9d:1a:39:68:5d:35:13: 8f:fe:d8:e1:f9:f4:fb:8c:1b:09:fb:26:09:b7:f5: 41:91:ce:7a:5b:eb:65:a6:71:c9:0e:14:72:a7:72: ed:ae:bd:64:11:c0:31:a0:6e:01:d4:3d:4f:2b:3c: e9:9d:c1:3c:bd:7e:22:33:a0:32:f6:a1:b0:57:33: 94:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AB:13:48:11:1C:71:F0:E8:DE:3F:93:04:10:F3:49:F9:68:66:D6 X509v3 Authority Key Identifier: keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:55:2c:72:6e:45:30:35:b6:8e:42:b1:60:e3:9c:d3:31:6f: 47:84:7b:df:1d:3c:f1:8e:98:5b:67:c7:5e:9b:4f:ec:e9:e6: 62:a6:98:34:2f:17:6e:7c:2b:64:57:ab:4f:eb:54:49:3a:29: ed:89:5b:eb:60:a0:0b:0f:db:4d:4c:7c:30:96:17:20:f4:ce: 8f:a5:ba:97:a9:a0:fb:2d:a2:77:ed:34:6c:cd:23:9c:ae:67: 5e:44:bc:46:7f:bb:9a:b7:5e:54:dc:db:50:b7:9c:7c:6f:da: 66:02:d4:70:a9:54:60:71:ff:8b:dd:c7:ae:8b:88:71:2f:fb: a2:03:60:0f:b6:15:b9:cc:e9:ea:06:0d:f2:91:1a:9f:57:29: c3:4f:92:1b:fe:c4:2a:51:42:d1:bd:a7:c5:a5:f6:99:75:f0: 12:22:d7:88:65:5d:e4:40:a7:f7:73:f5:e8:4b:3e:85:ef:6d: 43:7d:b3:7e:45:34:df:d0:84:6a:0e:5d:5d:36:ce:fd:4c:c1: d1:a1:e0:56:8c:b0:e9:fa:bd:7e:2a:76:ff:88:be:50:01:d1: bd:e6:d6:d8:cf:c8:90:24:06:21:5c:88:5d:97:60:87:1c:df: 61:67:dd:8e:66:e8:2b:7d:86:64:f7:54:ee:4b:f2:9c:a4:66: 5c:19:d9:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmjGaS9bJ2As0mL1yx2PfLpAzmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThD NkNFQ0JCRTAeFw0yNjA3MjMyMzE4MjVaFw0yNjA3MjUwMjIyMjVaMDMxMTAvBgNV BAMTKDMxQUIxMzQ4MTExQzcxRjBFOERFM0Y5MzA0MTBGMzQ5Rjk2ODY2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjEIVAPzrpKC/DZ9kP+/ajM/sw iEEsSYmjBSfRhIfETjYlMEcSWHNGQfTN+MhoLr95GQuwzcJEHFli3SfgSbreHW+K yqjQDZtzK80IMepyWViMO94VdQyJUovTJP1cPNJF9di1lWeiuzilgt5XpbEY+zRL ka+oHzDVw1Jb5k8iy3dZtdrd+02qsLzZU9xoY1csBIbq3G2jOEiAqnLmgKz1wHlB yBmbpd5AV+sZIENHv8FNjgmhC0TGsJ4AnRo5aF01E4/+2OH59PuMGwn7Jgm39UGR znpb62WmcckOFHKncu2uvWQRwDGgbgHUPU8rPOmdwTy9fiIzoDL2obBXM5SFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMasTSBEccfDo3j+TBBDzSfloZtYwHwYDVR0j BBgwFoAUC/1q3Lz3RXwFx/qRppWHWMbOy74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmYyNTA2YjEtMzk2ZC00OTllLWI3ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENC Q0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThDNkNFQ0JCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkZENkFEQ0JDRjc0NTdDMDVDN0ZBOTFBNjk1ODc1OEM2Q0VD QkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3 NThDNkNFQ0JCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZVLHJuRTA1to5CsWDjnNMxb0eEe98dPPGO mFtnx16bT+zp5mKmmDQvF258K2RXq0/rVEk6Ke2JW+tgoAsP201MfDCWFyD0zo+l upepoPstonftNGzNI5yuZ15EvEZ/u5q3XlTc21C3nHxv2mYC1HCpVGBx/4vdx66L iHEv+6IDYA+2FbnM6eoGDfKRGp9XKcNPkhv+xCpRQtG9p8Wl9pl18BIi14hlXeRA p/dz9ehLPoXvbUN9s35FNN/QhGoOXV02zv1MwdGh4FaMsOn6vX4qdv+IvlAB0b3m 1tjPyJAkBiFciF2XYIcc32Fn3Y5m6Ct9hmT3VO5L8pykZlwZ2ZM= -----END CERTIFICATE-----Generated at Fri Jul 24 04:03:51 2026 by rpki-client