$ rpki-client -vvvf rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft File: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft (raw, json) Hash identifier: tIAzy+UeUkm2e/kbC5h0vFAD6RQ6HCQd7NyDMO1QubU= Subject key identifier: 80:B0:F4:63:C5:D3:5C:A9:D3:6D:D3:86:E0:A8:38:8A:FF:E2:73:DD Authority key identifier: 0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F Certificate issuer: /CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F Certificate serial: 268825D3D4FF243EC99EF83B4A0047EBDF03C3B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:49:17 +0000 Manifest this update: Wed 23 Sep 2026 22:44:17 +0000 Manifest next update: Fri 25 Sep 2026 01:39:17 +0000 Files and hashes: 1: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl (hash: eCikDATtB7U90WxJx0PeKMbCblvse3r5LL4CD71yRFA=) 2: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: FeuEPBSyh4088t58wEF7WYPlFCQyhRPORfmVK/BUUf4=) 3: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: 6eZrQcS7fk+urKWjqhBrdX4ASTj5STJSLSE2pWSJoPQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:88:25:d3:d4:ff:24:3e:c9:9e:f8:3b:4a:00:47:eb:df:03:c3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F Validity Not Before: Sep 23 22:44:17 2026 GMT Not After : Sep 25 01:39:17 2026 GMT Subject: CN=80B0F463C5D35CA9D36DD386E0A8388AFFE273DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:25:46:e4:15:86:82:89:c2:77:b1:11:4a:ca: f3:c3:8c:7a:e7:51:7d:33:54:58:f8:04:c2:90:9d: ed:88:b8:fe:d5:ed:a8:ee:a4:5a:a3:0b:64:f5:a2: e9:58:2a:0e:dc:39:92:a9:e0:80:93:07:8d:01:05: 4e:83:6f:da:e7:9d:82:5f:f6:95:5b:98:01:5b:8c: ad:63:7e:b4:db:4e:be:9d:5a:26:1c:32:1d:04:01: b0:08:ee:be:05:d4:7d:4a:b6:61:ae:24:48:9e:34: 67:1e:70:88:55:18:18:ee:75:93:b1:09:7c:56:cc: f0:04:7d:8b:77:b6:6a:c6:46:ae:09:61:1e:f8:74: 54:11:2c:25:86:52:17:3e:b2:c7:e7:7f:3c:c0:6e: 10:6f:73:a5:b2:52:27:5c:69:80:4f:32:59:21:bb: a1:b2:ae:cd:59:0e:20:a2:af:b8:30:cf:a4:08:f1: bb:80:92:47:ce:c9:13:3d:bf:5b:8d:7f:ef:d5:bf: 32:1f:ed:28:b3:55:a6:10:e0:5d:73:de:72:a5:fe: 79:e7:14:db:c1:46:d9:f1:60:3e:45:ae:8c:86:26: 92:8f:e5:0d:ba:86:3f:dd:3e:ed:e8:0d:64:bc:b1: b0:ca:52:e0:92:7a:44:2e:7c:54:e1:52:44:01:c7: 66:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B0:F4:63:C5:D3:5C:A9:D3:6D:D3:86:E0:A8:38:8A:FF:E2:73:DD X509v3 Authority Key Identifier: keyid:0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ca:d1:6d:a0:66:43:f3:0a:42:e2:de:00:d8:34:da:5f:03: 6d:9f:63:08:79:2a:98:a2:7f:12:04:7a:2d:2e:7a:ff:dd:5e: c8:91:f8:25:4a:39:93:b4:e4:2e:8c:c7:41:da:f9:d0:4b:72: b6:6c:b1:19:00:82:95:4e:0e:c7:f9:c4:a5:bb:e3:d5:be:43: 94:36:36:e9:2a:5e:a5:57:62:4e:21:b0:ac:2a:f8:8b:6a:40: a9:6e:73:93:5c:77:56:23:ce:66:7e:88:b6:09:fc:f0:a6:12: f6:87:36:17:4a:37:e4:b4:a3:ae:cf:7b:99:75:65:ba:5f:36: 06:9d:3f:71:ba:85:48:82:57:5f:26:f5:88:f7:e0:3c:f0:49: 25:dd:ce:60:5a:17:d3:91:40:78:5d:17:56:68:ae:77:f0:97: ca:d5:6d:57:ef:88:2b:4c:24:5b:d9:2d:ce:ab:26:6b:e9:67: 69:1e:ee:79:96:73:2a:b9:20:6a:3a:fb:f1:19:e7:7c:43:a9: 0e:e0:10:b8:26:8c:76:e9:b6:90:22:86:a0:2d:7f:4d:10:76: cf:c8:1d:36:30:57:b5:56:fe:76:38:f3:70:0f:24:f7:d5:34: 72:ba:12:d4:74:ff:cd:aa:64:24:72:e1:6c:82:49:bc:1c:df: 00:0e:05:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJogl09T/JD7Jnvg7SgBH698Dw7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1 QkZCOUEwRjAeFw0yNjA5MjMyMjQ0MTdaFw0yNjA5MjUwMTM5MTdaMDMxMTAvBgNV BAMTKDgwQjBGNDYzQzVEMzVDQTlEMzZERDM4NkUwQTgzODhBRkZFMjczREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4JUbkFYaCicJ3sRFKyvPDjHrn UX0zVFj4BMKQne2IuP7V7ajupFqjC2T1oulYKg7cOZKp4ICTB40BBU6Db9rnnYJf 9pVbmAFbjK1jfrTbTr6dWiYcMh0EAbAI7r4F1H1KtmGuJEieNGcecIhVGBjudZOx CXxWzPAEfYt3tmrGRq4JYR74dFQRLCWGUhc+ssfnfzzAbhBvc6WyUidcaYBPMlkh u6Gyrs1ZDiCir7gwz6QI8buAkkfOyRM9v1uNf+/VvzIf7SizVaYQ4F1z3nKl/nnn FNvBRtnxYD5FroyGJpKP5Q26hj/dPu3oDWS8sbDKUuCSekQufFThUkQBx2afAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgLD0Y8XTXKnTbdOG4Kg4iv/ic90wHwYDVR0j BBgwFoAUC9TgBeTZdS+hvE9SrvXIB1v7mg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJiNzE1MzYtNzE3ZS00NWRiLWEwM2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVF NEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1QkZCOUEwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkQ0RTAwNUU0RDk3NTJGQTFCQzRGNTJBRUY1QzgwNzVCRkI5 QTBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4 MDc1QkZCOUEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7K0W2gZkPzCkLi3gDYNNpfA22fYwh5Kpii fxIEei0uev/dXsiR+CVKOZO05C6Mx0Ha+dBLcrZssRkAgpVODsf5xKW749W+Q5Q2 NukqXqVXYk4hsKwq+ItqQKluc5Ncd1YjzmZ+iLYJ/PCmEvaHNhdKN+S0o67Pe5l1 ZbpfNgadP3G6hUiCV18m9Yj34DzwSSXdzmBaF9ORQHhdF1Zornfwl8rVbVfviCtM JFvZLc6rJmvpZ2ke7nmWcyq5IGo6+/EZ53xDqQ7gELgmjHbptpAihqAtf00Qds/I HTYwV7VW/nY483APJPfVNHK6EtR0/82qZCRy4WyCSbwc3wAOBVA= -----END CERTIFICATE-----Generated at Thu Sep 24 18:41:14 2026 by rpki-client