$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft File: 0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft (raw, json) Hash identifier: XNrd83G+a++gnyJuLY/lLvz60PsA37/+NkoYERlTpO4= Subject key identifier: 13:32:42:07:E5:49:D8:1C:A7:14:99:9D:B5:1A:61:B2:F0:86:A8:95 Authority key identifier: 0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70 Certificate issuer: /CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870 Certificate serial: 5B1367E1E4039183DAE83FBEEF9A84761D22BCBD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 10:03:08 +0000 Manifest this update: Fri 25 Sep 2026 09:58:08 +0000 Manifest next update: Sat 26 Sep 2026 10:16:08 +0000 Files and hashes: 1: 0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl (hash: 3R/F0ScNIbrrilJjBtXZcaZtkBE62CXjBZbzlRsvMA4=) 2: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: DVbfArMTlg+UHrMZklDTYc3fTbYxFUjdyjuDCut72nE=) 3: 3136302e32322e36362e302f32332d3233203d3e20313534343130.roa (hash: x+Zmass52e0XiEEcxmz35DHW32ZXdCP/lp7OD4a3w4Y=) 4: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: ChO0wv9yKUM7ukCp9cBiuF/qy0Q/8i0Sz7WEvpLu0oo=) 5: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: 4TAm+Tq7VEmBP4/ZDSMoQRtNl/2F8B0387VCKH9srzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 10:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:13:67:e1:e4:03:91:83:da:e8:3f:be:ef:9a:84:76:1d:22:bc:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870 Validity Not Before: Sep 25 09:58:08 2026 GMT Not After : Sep 26 10:16:08 2026 GMT Subject: CN=13324207E549D81CA714999DB51A61B2F086A895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:70:3e:39:f7:a6:4e:1c:ac:a5:ce:21:e5: ee:dd:76:c3:b1:7e:e6:a1:2e:2f:5e:f3:1b:fb:3a: 70:d0:2d:d4:50:28:54:03:22:ee:1d:ba:d7:c2:65: 19:eb:90:e5:d4:20:de:7a:f4:70:63:30:40:e6:17: 2f:0c:2d:8f:73:09:d2:e0:7e:10:bf:c9:30:28:4c: 22:10:28:31:a7:20:95:51:28:11:f8:e7:53:20:9a: fc:cc:ec:02:38:82:cb:49:0e:ed:26:f1:b7:b0:e8: 5d:03:9b:18:ca:c0:89:9a:c4:89:8c:cc:cf:76:8d: 60:1d:9d:5d:d6:1f:85:29:1b:b9:68:74:5d:d7:24: 88:d8:31:d8:bd:cd:5e:a5:04:ee:0c:2f:74:5f:fa: cc:72:bb:9a:36:22:cc:af:d0:d9:a1:e0:d5:a9:d6: af:26:d3:ee:ca:8a:40:64:eb:05:1a:b8:18:df:07: e7:6b:1b:1c:ad:76:11:77:fc:22:b4:78:fe:ff:cd: 51:e7:19:f5:53:1e:e6:13:8f:48:cd:b8:49:3f:d5: 94:0a:fe:fb:11:4b:38:6b:89:8a:dd:38:b5:4b:ca: e5:0f:aa:d4:f8:d8:b4:47:37:e2:3e:6b:41:00:7b: ba:27:07:aa:28:c4:cb:7d:6d:22:dc:d3:b2:04:34: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:32:42:07:E5:49:D8:1C:A7:14:99:9D:B5:1A:61:B2:F0:86:A8:95 X509v3 Authority Key Identifier: keyid:0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ce:e1:f9:00:dd:b4:f5:37:3f:bd:e8:03:fd:33:6c:ad:e4: 63:be:a3:a5:39:31:eb:a4:4d:51:f2:6e:43:09:5c:80:73:c5: 62:43:56:6a:f0:bf:55:9d:1c:aa:4a:46:78:06:6a:ef:59:4a: 73:89:35:fe:12:a2:a3:01:de:15:b3:82:12:46:bb:d7:a1:6a: 3c:ed:0e:ff:f8:31:de:9b:c8:a4:2c:ef:4f:42:31:5a:1b:63: a4:5d:fc:b5:8f:83:f7:05:de:7a:22:eb:16:2e:23:5f:23:fa: 4c:e9:7d:d5:cc:f3:ef:54:a2:21:d8:3b:0f:6f:65:0a:83:0a: 03:b3:39:40:c0:0f:d8:36:e5:86:55:65:84:cc:aa:4f:60:a5: 06:a4:c8:d9:01:69:a9:a3:59:85:28:e7:05:a1:b7:95:de:42: 56:f8:bc:54:f9:7c:a2:73:aa:5b:9c:e2:a6:2e:3e:24:df:df: cd:b0:1a:24:b7:84:30:b5:c4:4a:1c:a4:6d:5d:cb:b0:15:84: 19:74:07:01:2b:88:91:64:38:8c:3c:a9:10:84:f1:6c:5c:3d: 64:c5:1c:77:04:95:2d:cd:8e:b3:56:4c:85:c7:a7:b0:75:6d: 2f:54:b1:fd:29:37:03:81:9b:2b:a3:f7:9a:aa:35:fa:da:ff: 8b:a6:08:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxNn4eQDkYPa6D++75qEdh0ivL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjJGMUYwRDEwQzVFQzdENzI0MTBFNTYzNzUyNUI2 MjFDNDg3MDAeFw0yNjA5MjUwOTU4MDhaFw0yNjA5MjYxMDE2MDhaMDMxMTAvBgNV BAMTKDEzMzI0MjA3RTU0OUQ4MUNBNzE0OTk5REI1MUE2MUIyRjA4NkE4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1nA+OfemThyspc4h5e7ddsOx fuahLi9e8xv7OnDQLdRQKFQDIu4dutfCZRnrkOXUIN569HBjMEDmFy8MLY9zCdLg fhC/yTAoTCIQKDGnIJVRKBH451MgmvzM7AI4gstJDu0m8bew6F0DmxjKwImaxImM zM92jWAdnV3WH4UpG7lodF3XJIjYMdi9zV6lBO4ML3Rf+sxyu5o2Isyv0Nmh4NWp 1q8m0+7KikBk6wUauBjfB+drGxytdhF3/CK0eP7/zVHnGfVTHuYTj0jNuEk/1ZQK /vsRSzhriYrdOLVLyuUPqtT42LRHN+I+a0EAe7onB6ooxMt9bSLc07IENHZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEzJCB+VJ2BynFJmdtRphsvCGqJUwHwYDVR0j BBgwFoAUD7YvHw0Qxex9ckEOVjdSW2IcSHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRiOTI3ZGYtYmM5Yy00YmU2LWExZmEtMmUxMjVjNDY5ZjcxLzAvMEZCNjJGMUYw RDEwQzVFQzdENzI0MTBFNTYzNzUyNUI2MjFDNDg3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRkI2MkYxRjBEMTBDNUVDN0Q3MjQxMEU1NjM3NTI1QjYyMUM0 ODcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvMEZCNjJGMUYwRDEwQzVFQzdENzI0MTBFNTYzNzUy NUI2MjFDNDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7O4fkA3bT1Nz+96AP9M2yt5GO+o6U5Meuk TVHybkMJXIBzxWJDVmrwv1WdHKpKRngGau9ZSnOJNf4SoqMB3hWzghJGu9ehajzt Dv/4Md6byKQs709CMVobY6Rd/LWPg/cF3noi6xYuI18j+kzpfdXM8+9UoiHYOw9v ZQqDCgOzOUDAD9g25YZVZYTMqk9gpQakyNkBaamjWYUo5wWht5XeQlb4vFT5fKJz qluc4qYuPiTf382wGiS3hDC1xEocpG1dy7AVhBl0BwEriJFkOIw8qRCE8WxcPWTF HHcElS3NjrNWTIXHp7B1bS9Usf0pNwOBmyuj95qqNfra/4umCBE= -----END CERTIFICATE-----Generated at Fri Sep 25 22:23:23 2026 by rpki-client