$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft File: 0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft (raw, json) Hash identifier: oiQkUV5A0UBpWI3nhu9LqEsBwC367RGAyxLGMPDEgXM= Subject key identifier: 29:91:20:93:15:77:77:F4:9F:39:F9:96:40:71:E8:C7:76:C9:6E:3C Authority key identifier: 0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E Certificate issuer: /CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E Certificate serial: 4CABFC4B385F6256D1215C972064100B483D4902 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 17:42:50 +0000 Manifest this update: Wed 23 Sep 2026 17:37:50 +0000 Manifest next update: Thu 24 Sep 2026 19:32:50 +0000 Files and hashes: 1: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: yzj0R3It9R2jU9wBDpqzfiEHW+8PEhf6218rNQIPbSs=) 2: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: FBsWEYtMf7mRaTuEZ/0PxyglRDybKAQxH+CcBw6tqDM=) 3: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: /5dNawMylgFAUVXMnACcE1jgMAFNneCBr14eai7kMCU=) 4: 0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl (hash: l3bDs6RD+VuUsc3TIPCGeTrCcDxdXfvoaRCUmawMidg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ab:fc:4b:38:5f:62:56:d1:21:5c:97:20:64:10:0b:48:3d:49:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E Validity Not Before: Sep 23 17:37:50 2026 GMT Not After : Sep 24 19:32:50 2026 GMT Subject: CN=29912093157777F49F39F9964071E8C776C96E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1c:2a:cc:66:3f:76:61:37:fd:30:56:b7:ec: 17:32:5b:ce:57:1c:60:b1:a1:6a:67:db:fb:ed:74: a6:2d:3d:4e:1e:48:14:84:e1:a1:b5:42:ab:2a:59: bc:61:f7:c6:66:5c:8d:e7:68:84:ca:fa:7d:05:09: c9:2a:66:0b:5b:be:5b:ea:a6:01:f0:2f:b7:ee:56: 44:40:17:20:4f:bd:a8:45:f2:59:3e:d6:9c:aa:30: 34:47:94:c9:30:7e:ee:3e:4b:ef:59:56:98:25:d3: f1:66:57:d7:80:58:ae:66:93:a4:51:3b:92:34:40: fc:4b:3e:30:b2:bc:e1:13:a4:74:cb:30:ca:45:e3: 6a:3b:09:b5:1a:85:d0:99:d4:98:af:5b:76:d6:c5: 7f:1b:c4:8f:0e:2e:17:2f:2d:d2:77:95:8d:80:0b: 4c:51:84:96:89:54:eb:9f:a1:73:c0:2a:99:cc:66: 15:09:53:1b:05:ed:e8:e7:2c:fe:8a:80:aa:5b:74: 55:d4:47:4e:b5:02:d5:8d:65:d2:b7:f3:e8:02:a8: 97:40:4f:2b:e3:33:18:2c:50:e1:8a:a7:d2:0f:3b: 75:6e:90:61:ef:7f:ae:a0:02:b9:f6:b9:07:c7:b5: 15:51:06:5a:43:a7:56:fe:2c:7f:50:4a:3e:e2:8f: d9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:91:20:93:15:77:77:F4:9F:39:F9:96:40:71:E8:C7:76:C9:6E:3C X509v3 Authority Key Identifier: keyid:0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0b:99:21:55:c0:9d:e9:30:5e:6a:d2:04:d0:31:1f:8d:52: 14:66:5f:6c:16:35:98:a0:48:b7:ed:a1:94:05:d5:b0:aa:37: 4f:d1:c1:39:0d:fb:12:7f:01:06:ed:36:78:4d:8d:69:4c:2b: 16:cf:64:fd:0d:e7:9d:5b:85:73:6b:40:2e:63:2e:a3:98:ac: 89:0e:5f:29:46:58:2a:61:d5:e8:c9:84:24:8c:94:58:f5:21: 93:48:fb:fa:53:62:5d:4d:4d:3d:5c:1c:94:af:49:80:7f:76: c0:a3:de:f5:ef:81:6a:86:ac:19:2a:c3:06:e9:a9:bf:3a:e0: 8d:79:2f:b9:01:e4:7d:ea:94:28:c7:05:b3:85:88:6d:75:6d: 07:8d:f8:b6:c8:7f:b6:b9:e7:d9:25:ab:d3:cb:20:9e:0c:97: 6c:89:82:51:38:29:06:a0:57:93:fb:35:f9:81:e1:77:e5:91: 11:34:a2:4e:25:87:0c:5f:ce:ba:51:88:bf:ce:4c:ae:e0:9d: 7f:9b:f9:a5:a0:9c:88:ac:8f:8d:8a:af:21:0a:93:8b:c8:78: 48:2b:73:41:b0:b5:69:79:2e:1b:c5:8d:25:a0:29:23:40:ca: 35:b2:1b:11:f2:ff:5c:07:91:44:0d:70:c3:25:87:cb:24:e4: da:9c:4a:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTKv8SzhfYlbRIVyXIGQQC0g9SQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIxQTc1NkQ2RjFCMTg4RURFRkE1REQ1Q0MzNDI1RDMz QTIzQUM5RTAeFw0yNjA5MjMxNzM3NTBaFw0yNjA5MjQxOTMyNTBaMDMxMTAvBgNV BAMTKDI5OTEyMDkzMTU3Nzc3RjQ5RjM5Rjk5NjQwNzFFOEM3NzZDOTZFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLHCrMZj92YTf9MFa37BcyW85X HGCxoWpn2/vtdKYtPU4eSBSE4aG1QqsqWbxh98ZmXI3naITK+n0FCckqZgtbvlvq pgHwL7fuVkRAFyBPvahF8lk+1pyqMDRHlMkwfu4+S+9ZVpgl0/FmV9eAWK5mk6RR O5I0QPxLPjCyvOETpHTLMMpF42o7CbUahdCZ1JivW3bWxX8bxI8OLhcvLdJ3lY2A C0xRhJaJVOufoXPAKpnMZhUJUxsF7ejnLP6KgKpbdFXUR061AtWNZdK38+gCqJdA TyvjMxgsUOGKp9IPO3VukGHvf66gArn2uQfHtRVRBlpDp1b+LH9QSj7ij9mdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKZEgkxV3d/SfOfmWQHHox3bJbjwwHwYDVR0j BBgwFoAUCxp1bW8bGI7e+l3VzDQl0zojrJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2QyNjY1MTEtNjM5ZS00YzJiLTk2MzQtOWNjMWUyMmZhNzA4LzAvMEIxQTc1NkQ2 RjFCMTg4RURFRkE1REQ1Q0MzNDI1RDMzQTIzQUM5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjFBNzU2RDZGMUIxODhFREVGQTVERDVDQzM0MjVEMzNBMjNB QzlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvMEIxQTc1NkQ2RjFCMTg4RURFRkE1REQ1Q0MzNDI1 RDMzQTIzQUM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4LmSFVwJ3pMF5q0gTQMR+NUhRmX2wWNZig SLftoZQF1bCqN0/RwTkN+xJ/AQbtNnhNjWlMKxbPZP0N551bhXNrQC5jLqOYrIkO XylGWCph1ejJhCSMlFj1IZNI+/pTYl1NTT1cHJSvSYB/dsCj3vXvgWqGrBkqwwbp qb864I15L7kB5H3qlCjHBbOFiG11bQeN+LbIf7a559klq9PLIJ4Ml2yJglE4KQag V5P7NfmB4XflkRE0ok4lhwxfzrpRiL/OTK7gnX+b+aWgnIisj42KryEKk4vIeEgr c0GwtWl5LhvFjSWgKSNAyjWyGxHy/1wHkUQNcMMlh8sk5NqcSkI= -----END CERTIFICATE-----Generated at Wed Sep 23 23:14:51 2026 by rpki-client