$ rpki-client -vvvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft File: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft (raw, json) Hash identifier: Wg8QONwSR2ypBjl/Npg1ZFi8fl/ow+Td3HIv9ZI4/QY= Subject key identifier: 48:46:7E:FE:68:DB:B1:23:7E:6D:3E:89:05:FA:0C:77:81:C3:8B:A1 Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 Certificate issuer: /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Certificate serial: 3A6B49038AE9B9C8CC1D90CCFE51B5AB4FAEEDF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 14:29:01 +0000 Manifest this update: Wed 23 Sep 2026 14:24:01 +0000 Manifest next update: Thu 24 Sep 2026 16:26:01 +0000 Files and hashes: 1: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: iKmDknm+sz9G+4ieO2jOHSbGQz1z9iCG43k/bYAHB3k=) 2: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl (hash: jkCZLAEgNDZTW8/1b54p9vl1ZyC4C7G8u6MPfUSeDx8=) 3: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: zvwgezfW86SlRC31YjwJ71lKNs9pTZisRey08uUZDrw=) 4: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: F62HpzCPf0jVzJzqHRtqYgkpCr6Z0Ln+rY5et4Po02Y=) 5: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: jpiOTHzKh1vGnb3tSE/Xoje7GEL1N7x9x1Df56pKagM=) 6: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: j/oR6MYId1xXKHb1Z5SsBRuqUKKVLnH73F7eTR7zcCg=) 7: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: t0sQe3wy1nx7fCaoG1vw4eb+2MVxEa2LAolsSj9bAGg=) 8: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: p4ukH1H84E2OXHZ0f+4rfYiVhbuRJ3ak7nrQukeOEIw=) 9: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: aop1U/z5XKpBzcRvoj7W7+/ffJTbEvTMlvj03extEio=) 10: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: fb53zmVp3ZEKD6KlMvVv2uQVwzv7wo/XFESLY4RW+fc=) 11: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: dDbCFuKbC0+1oibgHS1pBLUQZLf12v2I7Ivqihl/WFA=) 12: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: 5tf246IHwaj7s4oEu9nu0sb2z4yR2BLV01+7PT3/O1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6b:49:03:8a:e9:b9:c8:cc:1d:90:cc:fe:51:b5:ab:4f:ae:ed:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Validity Not Before: Sep 23 14:24:01 2026 GMT Not After : Sep 24 16:26:01 2026 GMT Subject: CN=48467EFE68DBB1237E6D3E8905FA0C7781C38BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:a6:a0:51:fc:c9:8e:e5:e6:9b:38:9d:69: 7f:41:76:5e:95:b3:1c:0a:7b:eb:3d:0e:32:9b:a9: 99:f9:00:2e:fe:34:2b:59:01:48:07:27:86:51:c7: 3f:2f:c2:1a:b3:4a:b3:9e:9f:8a:68:36:24:af:52: 19:33:ee:c8:f1:04:a5:63:90:9c:7e:a4:f5:64:63: da:1d:f8:91:54:af:71:c3:e9:57:e6:05:5f:1a:21: 7c:6e:6b:3d:f4:95:bf:e1:98:b7:de:6f:f3:81:db: 76:b8:43:c5:c2:a9:a5:d0:03:d4:2d:eb:e4:54:68: 6b:8d:3d:a7:54:c8:25:e2:15:d8:97:6c:80:9f:ba: 3f:81:4e:3e:31:46:00:ba:c8:ff:15:39:2a:57:21: c1:b1:9b:bf:6d:b3:a2:bd:4a:e5:d5:51:63:3a:0b: f5:d8:60:56:de:d7:6c:81:aa:f0:f4:1b:59:8e:a3: 68:8b:70:d1:e0:b0:41:01:cd:74:0b:d0:a2:33:6a: 5b:c9:ae:d5:20:f8:89:2f:eb:4e:21:fc:f7:bf:02: 07:54:6e:d5:19:c3:40:cd:59:8b:1a:b5:66:0e:11: 8a:3a:fd:53:26:d3:19:5e:c9:48:58:d9:d4:43:fe: 41:2d:de:80:b1:22:4b:b7:96:2c:8a:6e:cb:10:d2: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:46:7E:FE:68:DB:B1:23:7E:6D:3E:89:05:FA:0C:77:81:C3:8B:A1 X509v3 Authority Key Identifier: keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:43:37:cd:7a:fe:3b:a1:92:f5:53:5f:9c:2e:1e:25:a6:4b: 04:e4:77:52:15:b3:48:26:43:69:07:0e:dd:e5:33:a5:b9:b5: 07:cf:b0:6a:25:4f:2e:c6:dd:dc:31:bb:7e:5a:f5:30:cb:b8: eb:ff:23:b7:89:5d:58:1e:a2:24:26:c6:1a:e7:05:3b:c3:38: f6:4c:a5:1c:f5:b6:60:89:e0:7d:d1:ab:fe:2c:48:5a:f7:22: ed:52:f7:22:89:33:1c:b4:c8:4c:73:24:14:c7:0c:e7:47:99: 96:dc:40:c2:d3:20:50:cb:11:de:b6:5d:07:f9:30:76:9a:36: 1f:7e:9e:ef:3a:e6:cf:a1:d8:97:57:45:8d:a3:23:09:55:b9: ad:49:57:08:50:2c:6c:9a:27:4a:08:22:3c:11:12:98:22:cc: e7:98:46:10:98:90:d5:78:c6:64:db:fb:8d:21:93:2b:e9:19: 1b:18:e1:e1:55:2c:0e:96:7a:16:55:b5:33:57:fc:21:2b:c9: 01:87:dc:fe:19:8a:fb:6c:65:08:72:51:e0:87:f7:1a:02:9e: 47:20:8a:13:02:91:5d:4d:c5:ea:67:97:30:c2:6b:30:ab:1d: c1:08:ea:88:d0:ac:fa:08:8e:c0:87:e3:28:4e:2e:f1:2a:da: c4:b0:03:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOmtJA4rpucjMHZDM/lG1q0+u7fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJC REE5OUNCMDAeFw0yNjA5MjMxNDI0MDFaFw0yNjA5MjQxNjI2MDFaMDMxMTAvBgNV BAMTKDQ4NDY3RUZFNjhEQkIxMjM3RTZEM0U4OTA1RkEwQzc3ODFDMzhCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfn6agUfzJjuXmmzidaX9Bdl6V sxwKe+s9DjKbqZn5AC7+NCtZAUgHJ4ZRxz8vwhqzSrOen4poNiSvUhkz7sjxBKVj kJx+pPVkY9od+JFUr3HD6VfmBV8aIXxuaz30lb/hmLfeb/OB23a4Q8XCqaXQA9Qt 6+RUaGuNPadUyCXiFdiXbICfuj+BTj4xRgC6yP8VOSpXIcGxm79ts6K9SuXVUWM6 C/XYYFbe12yBqvD0G1mOo2iLcNHgsEEBzXQL0KIzalvJrtUg+Ikv604h/Pe/AgdU btUZw0DNWYsatWYOEYo6/VMm0xleyUhY2dRD/kEt3oCxIku3liyKbssQ0hp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSEZ+/mjbsSN+bT6JBfoMd4HDi6EwHwYDVR0j BBgwFoAUD7Qksg1qRYDm0yM/zy658r2pnLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM4ZDI3NTUtMzgwZC00NzdlLWJmMjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIw RDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJCREE5OUNCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI0MjRCMjBENkE0NTgwRTZEMzIzM0ZDRjJFQjlGMkJEQTk5 Q0IwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM4ZDI3NTUtMzgwZC00NzdlLWJm MjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5 RjJCREE5OUNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVDN816/juhkvVTX5wuHiWmSwTkd1IVs0gm Q2kHDt3lM6W5tQfPsGolTy7G3dwxu35a9TDLuOv/I7eJXVgeoiQmxhrnBTvDOPZM pRz1tmCJ4H3Rq/4sSFr3Iu1S9yKJMxy0yExzJBTHDOdHmZbcQMLTIFDLEd62XQf5 MHaaNh9+nu865s+h2JdXRY2jIwlVua1JVwhQLGyaJ0oIIjwREpgizOeYRhCYkNV4 xmTb+40hkyvpGRsY4eFVLA6WehZVtTNX/CEryQGH3P4ZivtsZQhyUeCH9xoCnkcg ihMCkV1NxepnlzDCazCrHcEI6ojQrPoIjsCH4yhOLvEq2sSwA6g= -----END CERTIFICATE-----Generated at Thu Sep 24 06:10:41 2026 by rpki-client