$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft File: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft (raw, json) Hash identifier: yGub9mvMsEr/Aq2RiZUS1Wws/rrASQuUhiUs/9lhBZk= Subject key identifier: 5C:EB:52:7A:47:A8:5C:84:5F:71:F8:D3:02:05:7E:DF:A5:28:26:EB Authority key identifier: 0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F Certificate issuer: /CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Certificate serial: 12433EA08998874BB4629BC75374B5FFA0D8ADAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:36:23 +0000 Manifest this update: Thu 24 Sep 2026 12:31:23 +0000 Manifest next update: Fri 25 Sep 2026 12:50:23 +0000 Files and hashes: 1: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl (hash: YXzuh1CKL7x7lCDfxzWbEcdiNot/dv0Qh9UC940JqZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:43:3e:a0:89:98:87:4b:b4:62:9b:c7:53:74:b5:ff:a0:d8:ad:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Validity Not Before: Sep 24 12:31:23 2026 GMT Not After : Sep 25 12:50:23 2026 GMT Subject: CN=5CEB527A47A85C845F71F8D302057EDFA52826EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:15:a9:d5:00:5b:0d:0b:42:8c:6a:1d:95: 7a:f7:3f:96:30:f8:aa:53:67:cb:45:aa:81:17:2b: 29:91:c1:26:91:22:a2:07:4e:3c:e6:60:63:3b:2f: d1:9e:7d:e3:ae:d8:98:3c:51:36:4d:02:0a:a8:5e: 20:85:3a:47:88:be:d3:59:eb:12:f2:12:80:cf:d7: 96:0f:e9:a5:73:f3:1d:d7:99:c7:f4:59:47:ad:3b: 2b:71:e9:6e:55:e9:b4:54:6d:39:8e:ff:12:9e:66: 52:29:8e:97:87:71:44:c5:9a:2b:33:45:d6:70:da: 5f:bc:b2:1b:af:78:73:ae:3f:b3:1d:c0:46:08:d1: f5:56:cd:d0:1c:9d:da:d8:2a:08:da:dc:d0:2b:bc: 2b:27:99:ec:89:7f:3b:ba:7f:15:e8:62:b8:46:e7: 52:70:1a:5d:36:17:0c:a1:10:f4:5f:98:9a:88:ea: bf:fd:ff:52:5c:d4:6a:a6:cf:b6:b3:a6:29:23:4f: 9c:8c:3e:02:88:b8:06:35:ad:86:73:22:15:89:f5: 39:f6:df:a5:5a:e6:07:1a:27:f9:ec:2f:74:7a:46: 7d:67:6d:f9:58:60:5c:3e:cb:1f:f6:0c:a9:e6:6e: 81:70:77:0d:e9:9d:51:23:67:82:8d:37:d3:57:b6: 50:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EB:52:7A:47:A8:5C:84:5F:71:F8:D3:02:05:7E:DF:A5:28:26:EB X509v3 Authority Key Identifier: keyid:0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b0:a9:cb:07:d1:56:f1:c7:09:bf:dc:0b:9e:b0:ff:87:03: fd:73:bb:b0:89:37:95:85:84:ad:80:1f:2c:65:89:86:15:54: 68:92:78:99:68:ba:6f:77:fd:0d:31:c4:79:5c:a4:b9:11:4c: 41:9f:4f:98:9b:cb:a8:3b:67:bf:7e:1d:cf:86:88:d8:6b:07: 12:4c:81:11:0e:a3:a2:01:06:ae:ee:6b:fd:0a:af:4f:32:84: c1:ce:84:bd:87:99:61:1e:d9:96:64:cf:fd:2a:e3:37:8b:63: 52:32:1c:d5:aa:fe:de:11:8b:3c:e2:ef:af:ca:a8:9f:5e:b6: 41:b2:8a:a9:01:49:4d:50:f4:89:d8:13:63:7f:6f:1b:44:8e: de:ed:71:f9:19:f4:47:7d:aa:1d:bb:39:69:bc:97:a6:b4:d6: 43:f5:55:3a:3b:9f:e2:87:36:6c:f2:db:6b:9f:84:98:f4:73: c6:ea:5e:30:c5:76:3f:62:8a:48:d2:c3:22:44:6d:91:2d:c5: a5:6c:eb:ed:5a:ec:6f:fc:38:80:63:7f:62:0c:3c:2d:83:e1: 1a:c1:7d:27:9c:42:9d:96:05:8b:cb:61:02:80:be:be:c9:aa: 70:98:f8:9f:66:81:a7:fb:f7:47:64:08:87:b4:ee:bd:e9:5c: 35:ba:3f:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkM+oImYh0u0YpvHU3S1/6DYraswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFG MjQ4OTIwRjAeFw0yNjA5MjQxMjMxMjNaFw0yNjA5MjUxMjUwMjNaMDMxMTAvBgNV BAMTKDVDRUI1MjdBNDdBODVDODQ1RjcxRjhEMzAyMDU3RURGQTUyODI2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQxWp1QBbDQtCjGodlXr3P5Yw +KpTZ8tFqoEXKymRwSaRIqIHTjzmYGM7L9GefeOu2Jg8UTZNAgqoXiCFOkeIvtNZ 6xLyEoDP15YP6aVz8x3Xmcf0WUetOytx6W5V6bRUbTmO/xKeZlIpjpeHcUTFmisz RdZw2l+8shuveHOuP7MdwEYI0fVWzdAcndrYKgja3NArvCsnmeyJfzu6fxXoYrhG 51JwGl02FwyhEPRfmJqI6r/9/1Jc1Gqmz7azpikjT5yMPgKIuAY1rYZzIhWJ9Tn2 36Va5gcaJ/nsL3R6Rn1nbflYYFw+yx/2DKnmboFwdw3pnVEjZ4KNN9NXtlC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXOtSekeoXIRfcfjTAgV+36UoJuswHwYDVR0j BBgwFoAUD7YeF9tcOnxr6ggOJH4jcfJIkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdE QjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFGMjQ4OTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI2MUUxN0RCNUMzQTdDNkJFQTA4MEUyNDdFMjM3MUYyNDg5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIz NzFGMjQ4OTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiwqcsH0Vbxxwm/3AuesP+HA/1zu7CJN5WF hK2AHyxliYYVVGiSeJloum93/Q0xxHlcpLkRTEGfT5iby6g7Z79+Hc+GiNhrBxJM gREOo6IBBq7ua/0Kr08yhMHOhL2HmWEe2ZZkz/0q4zeLY1IyHNWq/t4Rizzi76/K qJ9etkGyiqkBSU1Q9InYE2N/bxtEjt7tcfkZ9Ed9qh27OWm8l6a01kP1VTo7n+KH Nmzy22ufhJj0c8bqXjDFdj9iikjSwyJEbZEtxaVs6+1a7G/8OIBjf2IMPC2D4RrB fSecQp2WBYvLYQKAvr7JqnCY+J9mgaf790dkCIe07r3pXDW6P44= -----END CERTIFICATE-----Generated at Thu Sep 24 21:25:00 2026 by rpki-client