$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft File: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft (raw, json) Hash identifier: ZLtmZ8ggujLyBT0l5BdzGWCSvmBSoO922AM4RmXclTM= Subject key identifier: 4F:C4:00:AF:0F:24:97:70:D7:88:43:EC:F1:29:48:13:E8:D7:35:13 Authority key identifier: 0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 Certificate issuer: /CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Certificate serial: 2C95F1032630087A3F5FC69F799A3A4E5BB7FEFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft Manifest number: C8 Signing time: Sat 26 Sep 2026 07:44:20 +0000 Manifest this update: Sat 26 Sep 2026 07:39:20 +0000 Manifest next update: Sun 27 Sep 2026 09:58:20 +0000 Files and hashes: 1: 3130332e3137322e3139372e302f32342d3234203d3e20313336343435.roa (hash: tb675eaiEkDHOnmcu1KovtY2QzQr8ZannoNpqOhzL8A=) 2: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl (hash: OiBUavIUVb2j7HfYZwbeL25hAlQYJ1ixwfjKKo9jt8o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 09:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:95:f1:03:26:30:08:7a:3f:5f:c6:9f:79:9a:3a:4e:5b:b7:fe:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Validity Not Before: Sep 26 07:39:20 2026 GMT Not After : Sep 27 09:58:20 2026 GMT Subject: CN=4FC400AF0F249770D78843ECF1294813E8D73513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ad:df:1b:9a:8b:73:8f:58:f0:dd:1d:bf:7a: 0f:19:dc:90:7f:64:7d:eb:ad:25:06:05:88:06:8f: db:81:37:ab:44:cd:42:6c:af:69:88:46:19:d3:10: 54:d0:60:bb:29:72:6d:a6:7c:b3:a5:a9:5f:ce:e2: 13:ba:c0:99:18:2c:c6:77:76:9f:94:5b:7b:3e:c6: e2:85:15:e4:66:08:52:e9:b5:ec:d6:c1:9a:ef:f4: 1c:a5:4c:8d:94:c5:0d:5b:47:52:aa:74:8d:ba:48: 2f:d1:a6:a0:2c:8b:d3:20:de:a5:9f:e9:e1:77:16: db:af:d9:2a:0f:ac:11:58:8d:54:0d:89:fc:69:c1: 0b:48:79:ca:24:13:0e:ea:fd:7b:5a:df:55:1a:b4: b5:ab:38:94:08:58:0e:fd:20:e0:a3:52:95:06:e4: d2:35:95:33:eb:3a:a3:ac:13:6d:56:61:8d:e3:26: ed:c2:4e:43:30:61:c5:db:04:21:9a:e5:db:62:0b: 16:62:c4:35:0b:4a:cb:e4:59:b9:e6:c4:93:3e:07: 6b:96:af:13:bc:07:24:7c:9a:6a:f1:1f:c0:55:14: f3:b8:bf:e1:24:fc:97:61:fa:36:fd:b2:a3:d2:a9: 70:7c:23:a3:1a:e3:48:8b:b0:cd:4b:a5:e9:e7:18: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C4:00:AF:0F:24:97:70:D7:88:43:EC:F1:29:48:13:E8:D7:35:13 X509v3 Authority Key Identifier: keyid:0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:13:55:1a:4d:98:d6:3e:6f:d2:a2:1b:7d:24:6f:2e:1e:47: 25:be:cc:3e:73:b8:78:0e:1f:c1:ea:e0:15:a7:1e:0e:3c:25: 40:c3:79:1f:a0:23:d0:05:27:fb:53:78:03:1a:19:5a:60:66: 6d:1c:80:44:dc:5e:31:c8:c0:86:b5:d1:37:ee:44:99:75:5b: 2e:b8:dc:39:cc:2e:81:e4:c4:4d:0d:2d:e6:a9:da:1f:e5:5a: 01:fe:b8:e0:a0:7e:b9:0e:fa:d8:ae:77:4d:8c:97:3d:74:9d: a4:54:3c:db:ff:a3:76:d2:9f:7b:28:d9:c9:27:99:3f:13:14: 3c:53:d9:ad:47:57:4c:8e:36:e6:dc:b7:6e:3a:f8:2e:4d:7a: f1:f4:75:99:48:6e:0c:69:4e:63:a6:b6:a2:92:3e:4c:c8:38: ae:2a:f1:2b:23:07:a2:eb:43:d5:e7:b9:da:89:a4:a9:fa:c8: 3b:b2:8e:77:05:59:c6:56:37:c2:f6:9f:d7:79:6d:40:11:15: cf:4c:af:a7:97:b3:b7:01:e5:a9:97:9e:45:4e:8c:e1:09:3d: 7f:16:40:b7:b6:2a:d0:2d:a8:1a:e7:4c:c3:3f:17:87:36:03: 7a:c6:91:75:73:a7:17:d2:33:aa:d5:df:a1:72:94:48:61:a2: 44:ad:00:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJXxAyYwCHo/X8afeZo6Tlu3/vwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYw OEU2N0JCOTAeFw0yNjA5MjYwNzM5MjBaFw0yNjA5MjcwOTU4MjBaMDMxMTAvBgNV BAMTKDRGQzQwMEFGMEYyNDk3NzBENzg4NDNFQ0YxMjk0ODEzRThENzM1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGrd8bmotzj1jw3R2/eg8Z3JB/ ZH3rrSUGBYgGj9uBN6tEzUJsr2mIRhnTEFTQYLspcm2mfLOlqV/O4hO6wJkYLMZ3 dp+UW3s+xuKFFeRmCFLptezWwZrv9BylTI2UxQ1bR1KqdI26SC/RpqAsi9Mg3qWf 6eF3Ftuv2SoPrBFYjVQNifxpwQtIecokEw7q/Xta31UatLWrOJQIWA79IOCjUpUG 5NI1lTPrOqOsE21WYY3jJu3CTkMwYcXbBCGa5dtiCxZixDULSsvkWbnmxJM+B2uW rxO8ByR8mmrxH8BVFPO4v+Ek/Jdh+jb9sqPSqXB8I6Ma40iLsM1LpennGD4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT8QArw8kl3DXiEPs8SlIE+jXNRMwHwYDVR0j BBgwFoAUC7ofy42XbaLxwpNX/nfeHwjme7kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM5N2NmYzUtZTBiMC00ODIwLWI4NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4 RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYwOEU2N0JCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkJBMUZDQjhEOTc2REEyRjFDMjkzNTdGRTc3REUxRjA4RTY3 QkI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RF MUYwOEU2N0JCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8TVRpNmNY+b9KiG30kby4eRyW+zD5zuHgO H8Hq4BWnHg48JUDDeR+gI9AFJ/tTeAMaGVpgZm0cgETcXjHIwIa10TfuRJl1Wy64 3DnMLoHkxE0NLeap2h/lWgH+uOCgfrkO+tiud02Mlz10naRUPNv/o3bSn3so2ckn mT8TFDxT2a1HV0yONubct246+C5NevH0dZlIbgxpTmOmtqKSPkzIOK4q8SsjB6Lr Q9XnudqJpKn6yDuyjncFWcZWN8L2n9d5bUARFc9Mr6eXs7cB5amXnkVOjOEJPX8W QLe2KtAtqBrnTMM/F4c2A3rGkXVzpxfSM6rV36FylEhhokStAKM= -----END CERTIFICATE-----Generated at Sat Sep 26 15:13:10 2026 by rpki-client