$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft File: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft (raw, json) Hash identifier: kLo2Uu5u/2GCA8LIm7TnTB9iYk7ycSe1/1EQPENxhcI= Subject key identifier: 7F:AF:68:6D:89:51:80:E4:F2:D0:43:95:38:A8:4D:59:86:69:B9:F6 Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Certificate serial: 6A9F962D96E27E1EEAB88DD19559A30BDCB97CC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 06:13:27 +0000 Manifest this update: Thu 24 Sep 2026 06:08:27 +0000 Manifest next update: Fri 25 Sep 2026 07:58:27 +0000 Files and hashes: 1: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=) 2: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl (hash: R/oLuNNYJi/Hr+zFFKMp3wOpe+e4Syn5sPThibD9sYk=) 3: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: k9hB5TmUACjkJxeE951FHmSf1SEQX33K8sTdpuXO8BI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:9f:96:2d:96:e2:7e:1e:ea:b8:8d:d1:95:59:a3:0b:dc:b9:7c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Validity Not Before: Sep 24 06:08:27 2026 GMT Not After : Sep 25 07:58:27 2026 GMT Subject: CN=7FAF686D895180E4F2D0439538A84D598669B9F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:2c:f7:b7:0a:2a:57:35:e7:8d:37:b2:ea: 24:4d:4e:29:7e:9e:e4:b3:5b:cd:51:d4:c4:86:ea: 4c:c7:b2:69:40:36:82:1a:2f:e3:ba:ff:5d:26:ee: 9e:b9:5a:07:24:12:c3:0c:ec:ed:2d:66:1a:59:f3: d3:ec:6b:08:f2:7f:4e:e9:7b:b7:24:a2:57:3d:21: 40:10:95:95:6b:df:fc:e8:56:a9:41:24:ca:20:cf: 79:41:d8:00:74:c5:05:8f:36:59:3f:3c:be:1a:75: c7:c7:22:17:70:e1:aa:bd:a3:0e:63:bd:14:5c:87: 0a:60:ca:30:0b:55:fe:45:5e:88:a8:2b:65:34:d3: 7d:c4:8e:8b:5e:6d:54:ed:9e:69:ff:d2:1c:4a:96: 68:fd:eb:cf:a7:b3:ac:d9:14:7b:cc:e1:fa:cd:76: 35:37:6f:61:25:2d:7a:08:3d:75:13:7a:54:40:90: 57:6d:d0:db:48:4a:d5:b8:59:b2:ff:d7:b1:fd:b9: 03:15:49:26:4a:9f:ba:77:96:15:0b:bc:e0:28:0e: d9:5b:e1:91:ef:5a:bb:f8:ef:93:f8:85:a2:c0:6a: 16:08:b1:60:cf:82:9c:4d:2e:02:7f:23:81:10:ec: 2b:3b:6d:42:90:a2:37:70:bd:13:07:84:f6:aa:65: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AF:68:6D:89:51:80:E4:F2:D0:43:95:38:A8:4D:59:86:69:B9:F6 X509v3 Authority Key Identifier: keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3b:2f:7e:3e:15:1a:29:65:53:7b:8e:c5:3e:e7:18:f9:ca: 1a:a3:49:52:16:24:58:a5:c2:41:d7:52:30:27:5b:22:3a:d7: a5:b3:fd:72:86:d0:47:24:c1:be:aa:99:68:15:b7:8f:8c:b6: 3c:aa:f0:6c:69:c9:48:a3:e8:50:c8:ea:a2:ee:fe:95:6f:ce: db:cf:24:91:05:8a:e5:d7:11:8e:03:25:90:e2:a1:3d:72:80: e8:ce:6a:34:a8:40:f3:ae:90:69:46:cb:d6:b1:3c:d1:0c:93: 62:19:78:db:0c:9a:20:92:45:8d:15:d6:99:a1:e9:65:c2:86: 1e:6d:78:cf:0b:04:ea:1c:95:3b:e8:85:52:01:01:d8:c3:37: ed:3a:84:a2:80:c5:16:44:fc:57:59:11:4e:6f:46:7d:76:6e: 80:ef:47:8b:fd:da:73:1e:b4:7c:c3:99:18:d9:de:9a:de:32: 1c:73:00:65:b8:90:6f:8f:82:e9:12:ba:e0:73:94:91:4d:bd: e5:4e:ea:b9:40:86:90:d9:7f:ea:06:59:95:cd:f1:e5:9e:a5: 05:45:ca:c2:ce:7d:e3:9f:44:05:5b:af:89:93:10:19:3a:33: 11:72:68:eb:35:1d:be:74:a8:ab:94:b9:ff:53:be:29:95:1c: c7:e0:15:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUap+WLZbifh7quI3RlVmjC9y5fMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RF RkU5QjVBMzAeFw0yNjA5MjQwNjA4MjdaFw0yNjA5MjUwNzU4MjdaMDMxMTAvBgNV BAMTKDdGQUY2ODZEODk1MTgwRTRGMkQwNDM5NTM4QTg0RDU5ODY2OUI5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tiz3twoqVzXnjTey6iRNTil+ nuSzW81R1MSG6kzHsmlANoIaL+O6/10m7p65WgckEsMM7O0tZhpZ89Psawjyf07p e7ckolc9IUAQlZVr3/zoVqlBJMogz3lB2AB0xQWPNlk/PL4adcfHIhdw4aq9ow5j vRRchwpgyjALVf5FXoioK2U0033EjotebVTtnmn/0hxKlmj968+ns6zZFHvM4frN djU3b2ElLXoIPXUTelRAkFdt0NtIStW4WbL/17H9uQMVSSZKn7p3lhULvOAoDtlb 4ZHvWrv475P4haLAahYIsWDPgpxNLgJ/I4EQ7Cs7bUKQojdwvRMHhPaqZZqVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf69obYlRgOTy0EOVOKhNWYZpufYwHwYDVR0j BBgwFoAUDyCwYBSdvzFoG0MhuoXWfe/ptaMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4MmJjYTMtZTg1OC00ZDUyLWIxYTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAx NDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RFRkU5QjVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjIwQjA2MDE0OURCRjMxNjgxQjQzMjFCQTg1RDY3REVGRTlC NUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2 N0RFRkU5QjVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADA7L34+FRopZVN7jsU+5xj5yhqjSVIWJFil wkHXUjAnWyI616Wz/XKG0Eckwb6qmWgVt4+Mtjyq8GxpyUij6FDI6qLu/pVvztvP JJEFiuXXEY4DJZDioT1ygOjOajSoQPOukGlGy9axPNEMk2IZeNsMmiCSRY0V1pmh 6WXChh5teM8LBOoclTvohVIBAdjDN+06hKKAxRZE/FdZEU5vRn12boDvR4v92nMe tHzDmRjZ3preMhxzAGW4kG+PgukSuuBzlJFNveVO6rlAhpDZf+oGWZXN8eWepQVF ysLOfeOfRAVbr4mTEBk6MxFyaOs1Hb50qKuUuf9TvimVHMfgFXQ= -----END CERTIFICATE-----Generated at Thu Sep 24 19:03:37 2026 by rpki-client