$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft File: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft (raw, json) Hash identifier: uZOg+Pn3FiMh0RAfnPCWp3T1BmS4Ib5qCtntLWUet6w= Subject key identifier: D4:7B:5F:4F:52:4B:6E:DD:19:55:4A:B2:C7:09:21:D1:13:B2:89:7D Authority key identifier: 0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA Certificate issuer: /CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Certificate serial: 56F6CF62B4C6E0E24509FA51FE4330729BBCA70C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 04:05:43 +0000 Manifest this update: Thu 24 Sep 2026 04:00:43 +0000 Manifest next update: Fri 25 Sep 2026 04:10:43 +0000 Files and hashes: 1: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: wGWAkljELKeAaAd3PWlxElTnzVBFIyJlkgaeJs8LIbg=) 2: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl (hash: Gr5bJ5ZlxZJGhbKSUVd0MJrjfkMazaNZTd9HuVjdFFc=) 3: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: AfqLgmWvcp/HfbbhsOhmQtK0n/maxUMDksVbAZ7tmAM=) 4: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: dKm4h4htb+xuOuzBD2j/P3WbreIMIoqa9hQCTFJdoG0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f6:cf:62:b4:c6:e0:e2:45:09:fa:51:fe:43:30:72:9b:bc:a7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Validity Not Before: Sep 24 04:00:43 2026 GMT Not After : Sep 25 04:10:43 2026 GMT Subject: CN=D47B5F4F524B6EDD19554AB2C70921D113B2897D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:01:22:1f:53:7b:c3:08:96:19:a5:0e:f0: 2a:5f:67:3e:33:32:25:d0:b9:57:57:1d:15:66:fc: 16:05:3f:ab:1c:66:68:76:19:82:82:b1:f1:a0:0c: bb:e9:46:b1:cf:eb:f9:34:3d:a0:d5:07:5e:94:08: 13:80:63:c7:37:89:74:35:e4:46:be:48:85:28:c4: e4:ce:6d:e8:52:e0:9e:4d:c0:47:30:a1:71:12:ca: 66:2f:22:d5:4d:64:3d:e6:68:62:bf:19:aa:e5:9f: d1:4d:5b:95:9c:1a:c8:87:12:4b:fc:ed:34:84:cd: 37:48:4d:ab:29:bd:55:6e:c6:ac:d4:a6:ae:d2:89: 28:ba:6a:d5:a6:ac:2a:78:fc:84:70:69:1b:56:4a: 16:34:65:d6:3f:de:33:8b:dd:31:8f:ac:1b:ff:7b: 4d:a6:d1:08:bf:97:b3:26:3a:f3:1e:04:0d:bd:df: 3a:7f:a0:f5:89:fb:4c:b8:51:4b:53:2a:0f:23:a7: be:17:18:05:a5:ed:d5:45:60:9e:2f:c8:f2:26:66: 64:63:ba:fb:59:45:a1:6d:53:28:31:8f:1f:6b:ac: e8:74:9a:7a:fa:76:f1:8e:d8:cb:5d:82:e2:83:c1: ad:1f:46:97:8b:43:2f:f7:a2:6a:cd:4b:4b:d5:9d: cf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7B:5F:4F:52:4B:6E:DD:19:55:4A:B2:C7:09:21:D1:13:B2:89:7D X509v3 Authority Key Identifier: keyid:0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:33:0e:ca:89:0a:c1:47:49:11:6c:52:17:20:3c:7a:ef:92: ab:12:bb:23:c9:1f:07:67:ad:c5:af:a5:8c:fb:c3:be:47:a0: 0e:b9:ea:49:c7:aa:ca:03:3a:e4:56:06:67:37:d8:e3:d4:c9: 3c:d8:d1:2f:55:ea:a4:ef:b8:d6:57:7f:9d:ae:ed:6d:58:b0: 8b:f8:ac:0c:5c:0d:ed:ef:44:30:96:0c:aa:66:38:c1:d2:04: 05:4f:46:df:20:5f:10:3f:92:3e:7a:6c:b8:52:56:d6:22:58: 8b:f8:5b:91:eb:52:d1:2e:70:4e:61:0d:95:70:ea:8d:25:3f: 6f:16:9f:da:4d:a2:f2:c9:85:14:74:6c:aa:a3:59:93:21:f4: 70:ce:8e:96:f8:5f:82:08:53:aa:13:98:58:6c:98:83:8b:02: bb:d0:6d:72:db:e4:87:81:2d:92:76:ad:c4:e1:99:c0:7e:8c: 48:2f:6e:2a:87:e2:06:98:2e:6a:33:5c:52:b0:4e:ef:95:93: 75:41:d2:76:46:e8:9c:91:62:2f:1b:55:39:e0:29:76:ae:46: a7:c5:13:5d:2e:4f:ad:68:80:d0:12:4f:c8:88:8a:b7:c2:c3: d9:ce:38:b8:fe:48:c9:6e:9f:48:49:15:79:d1:2d:4c:06:bd: 06:d6:4d:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvbPYrTG4OJFCfpR/kMwcpu8pwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlC NzU1RTRGQTAeFw0yNjA5MjQwNDAwNDNaFw0yNjA5MjUwNDEwNDNaMDMxMTAvBgNV BAMTKEQ0N0I1RjRGNTI0QjZFREQxOTU1NEFCMkM3MDkyMUQxMTNCMjg5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgYwEiH1N7wwiWGaUO8CpfZz4z MiXQuVdXHRVm/BYFP6scZmh2GYKCsfGgDLvpRrHP6/k0PaDVB16UCBOAY8c3iXQ1 5Ea+SIUoxOTObehS4J5NwEcwoXESymYvItVNZD3maGK/Garln9FNW5WcGsiHEkv8 7TSEzTdITaspvVVuxqzUpq7SiSi6atWmrCp4/IRwaRtWShY0ZdY/3jOL3TGPrBv/ e02m0Qi/l7MmOvMeBA293zp/oPWJ+0y4UUtTKg8jp74XGAWl7dVFYJ4vyPImZmRj uvtZRaFtUygxjx9rrOh0mnr6dvGO2MtdguKDwa0fRpeLQy/3omrNS0vVnc/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1HtfT1JLbt0ZVUqyxwkh0ROyiX0wHwYDVR0j BBgwFoAUDfaEGkXn9MPozJCvNrv72bdV5PowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGRhZjlmMGYtNGZiMS00MGMwLWIzODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0 NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlCNzU1RTRGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wREY2ODQxQTQ1RTdGNEMzRThDQzkwQUYzNkJCRkJEOUI3NTVF NEZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZC RDlCNzU1RTRGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMzDsqJCsFHSRFsUhcgPHrvkqsSuyPJHwdn rcWvpYz7w75HoA656knHqsoDOuRWBmc32OPUyTzY0S9V6qTvuNZXf52u7W1YsIv4 rAxcDe3vRDCWDKpmOMHSBAVPRt8gXxA/kj56bLhSVtYiWIv4W5HrUtEucE5hDZVw 6o0lP28Wn9pNovLJhRR0bKqjWZMh9HDOjpb4X4IIU6oTmFhsmIOLArvQbXLb5IeB LZJ2rcThmcB+jEgvbiqH4gaYLmozXFKwTu+Vk3VB0nZG6JyRYi8bVTngKXauRqfF E10uT61ogNAST8iIirfCw9nOOLj+SMlun0hJFXnRLUwGvQbWTRI= -----END CERTIFICATE-----Generated at Thu Sep 24 12:54:07 2026 by rpki-client