$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft File: 0FA563F934776139827AEC94F0EABC66549ABEA7.mft (raw, json) Hash identifier: vSWUFx9zvxZfSx5Tkz3sFfnkMisy4oE9pgf06LdaN7k= Subject key identifier: 30:BA:AB:75:5F:30:22:1E:E0:2F:81:1A:98:BD:63:A6:45:DA:D9:B9 Authority key identifier: 0F:A5:63:F9:34:77:61:39:82:7A:EC:94:F0:EA:BC:66:54:9A:BE:A7 Certificate issuer: /CN=0FA563F934776139827AEC94F0EABC66549ABEA7 Certificate serial: 57C9BDFFB8B13623F613B16DF12AD4186350E308 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft Manifest number: C7 Signing time: Sun 27 Sep 2026 02:11:58 +0000 Manifest this update: Sun 27 Sep 2026 02:06:58 +0000 Manifest next update: Mon 28 Sep 2026 05:27:58 +0000 Files and hashes: 1: 0FA563F934776139827AEC94F0EABC66549ABEA7.crl (hash: MjjFYaGVqyJaOp3ojlqg23vfQiFXPAUZudmDEMoUypc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.crl rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c9:bd:ff:b8:b1:36:23:f6:13:b1:6d:f1:2a:d4:18:63:50:e3:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA563F934776139827AEC94F0EABC66549ABEA7 Validity Not Before: Sep 27 02:06:58 2026 GMT Not After : Sep 28 05:27:58 2026 GMT Subject: CN=30BAAB755F30221EE02F811A98BD63A645DAD9B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d0:3b:f5:43:3b:49:c3:d9:b8:7d:b0:5f:50: 51:a8:a4:0c:bc:0d:0e:bc:68:7b:37:d6:15:8a:ab: f5:06:53:c5:bf:95:e6:f7:9f:58:23:45:13:4f:96: 01:aa:23:f0:56:56:7d:7c:f2:d4:bd:c1:c5:2c:b7: d7:33:d3:32:b2:8e:1b:4e:02:17:ae:6d:33:b2:6a: 63:60:9b:9b:a0:0f:6d:5f:19:8e:e1:3f:c3:bd:57: 54:96:e8:bc:d4:5c:a6:21:6d:18:3a:ec:ef:31:d4: 8d:1e:23:50:48:98:40:82:b8:b7:b9:ca:2f:2f:f3: b2:14:a2:f7:4a:65:0e:59:42:ea:c1:02:79:fa:78: e1:e1:6e:7a:7a:36:9f:7a:a5:f3:71:54:a6:b0:a7: 50:0c:5e:12:72:ee:01:75:05:d2:49:83:65:f9:bb: 5f:41:d7:22:bf:c1:19:a3:77:88:a0:06:b8:4d:5f: 03:db:41:51:51:8a:35:43:12:f3:6b:02:21:46:de: a2:9a:03:ef:db:dd:35:c4:48:b4:6f:24:67:3f:3b: de:72:d2:0e:02:7c:db:c9:11:fa:4c:56:db:cc:12: 9b:f3:ea:98:72:54:c9:09:5f:d4:90:9d:6c:59:a4: 52:53:4f:a7:6e:94:59:2b:02:d6:ba:03:61:e5:e4: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BA:AB:75:5F:30:22:1E:E0:2F:81:1A:98:BD:63:A6:45:DA:D9:B9 X509v3 Authority Key Identifier: keyid:0F:A5:63:F9:34:77:61:39:82:7A:EC:94:F0:EA:BC:66:54:9A:BE:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FA563F934776139827AEC94F0EABC66549ABEA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/0FA563F934776139827AEC94F0EABC66549ABEA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4d:59:41:5a:1e:cd:b2:28:19:bb:4e:ea:16:44:31:35:98: 5c:58:f7:f5:98:3c:40:af:ba:b2:3f:d4:d2:2f:96:76:30:fe: a2:a5:cd:c1:9b:ef:a1:a5:a6:1d:be:23:3c:0d:db:8b:49:55: a8:f1:e1:aa:ed:70:21:3d:0c:39:87:37:5b:6d:70:32:e3:9e: 16:08:e8:95:d5:1a:2b:e1:41:22:13:b2:64:38:51:69:10:ce: 73:9f:ff:e2:ec:cf:00:cf:04:92:36:63:56:63:c8:e0:cf:ec: 38:fa:11:c8:d4:1a:08:4c:b9:bb:5f:74:bd:16:09:de:53:92: d6:60:ef:ea:52:65:20:d0:a3:85:bf:bc:93:26:cf:31:0c:13: 8c:cb:ba:da:4c:d7:d5:92:c4:b4:f4:f9:33:01:54:df:7b:5c: 98:02:c5:3d:6c:bb:08:83:87:bd:41:88:a5:5a:d7:cb:41:fb: 02:77:19:81:c3:ab:80:18:5e:10:61:10:f0:9f:71:4a:51:7d: 4e:8c:a8:69:ba:45:1b:1a:42:de:62:df:0d:00:f6:2c:8d:f6: d9:b1:a3:c2:fa:7c:e6:29:b6:dc:89:ec:52:f8:33:a9:ff:3a: 4b:dc:e1:0d:19:8f:7b:e7:53:e0:a6:13:49:4b:0c:64:ff:ea: f3:e3:9c:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8m9/7ixNiP2E7Ft8SrUGGNQ4wgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNTYzRjkzNDc3NjEzOTgyN0FFQzk0RjBFQUJDNjY1 NDlBQkVBNzAeFw0yNjA5MjcwMjA2NThaFw0yNjA5MjgwNTI3NThaMDMxMTAvBgNV BAMTKDMwQkFBQjc1NUYzMDIyMUVFMDJGODExQTk4QkQ2M0E2NDVEQUQ5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0Dv1QztJw9m4fbBfUFGopAy8 DQ68aHs31hWKq/UGU8W/leb3n1gjRRNPlgGqI/BWVn188tS9wcUst9cz0zKyjhtO AheubTOyamNgm5ugD21fGY7hP8O9V1SW6LzUXKYhbRg67O8x1I0eI1BImECCuLe5 yi8v87IUovdKZQ5ZQurBAnn6eOHhbnp6Np96pfNxVKawp1AMXhJy7gF1BdJJg2X5 u19B1yK/wRmjd4igBrhNXwPbQVFRijVDEvNrAiFG3qKaA+/b3TXESLRvJGc/O95y 0g4CfNvJEfpMVtvMEpvz6phyVMkJX9SQnWxZpFJTT6dulFkrAta6A2Hl5EhRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMLqrdV8wIh7gL4EamL1jpkXa2bkwHwYDVR0j BBgwFoAUD6Vj+TR3YTmCeuyU8Oq8ZlSavqcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJiNDNlYzgtZjU4Mi00MDI1LThmMzYtM2NlYTUzOWQwYjA5LzAvMEZBNTYzRjkz NDc3NjEzOTgyN0FFQzk0RjBFQUJDNjY1NDlBQkVBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkE1NjNGOTM0Nzc2MTM5ODI3QUVDOTRGMEVBQkM2NjU0OUFC RUE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvMEZBNTYzRjkzNDc3NjEzOTgyN0FFQzk0RjBFQUJD NjY1NDlBQkVBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1NWUFaHs2yKBm7TuoWRDE1mFxY9/WYPECv urI/1NIvlnYw/qKlzcGb76Glph2+IzwN24tJVajx4artcCE9DDmHN1ttcDLjnhYI 6JXVGivhQSITsmQ4UWkQznOf/+LszwDPBJI2Y1ZjyODP7Dj6EcjUGghMubtfdL0W Cd5TktZg7+pSZSDQo4W/vJMmzzEME4zLutpM19WSxLT0+TMBVN97XJgCxT1suwiD h71BiKVa18tB+wJ3GYHDq4AYXhBhEPCfcUpRfU6MqGm6RRsaQt5i3w0A9iyN9tmx o8L6fOYpttyJ7FL4M6n/Okvc4Q0Zj3vnU+CmE0lLDGT/6vPjnNU= -----END CERTIFICATE-----Generated at Sun Sep 27 23:56:51 2026 by rpki-client