$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft File: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft (raw, json) Hash identifier: ETj9ntwduAE4Lr2HxaATvwDqRnRvfHBNz4j2P2Xv1zU= Subject key identifier: 0E:4D:4A:A3:DA:38:40:B8:CE:11:9E:25:5A:39:34:C7:7E:62:02:70 Authority key identifier: 0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 Certificate issuer: /CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Certificate serial: 2B4F534E236511A7842311EBEF5DEC411CD102E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft Manifest number: C5 Signing time: Thu 24 Sep 2026 06:03:15 +0000 Manifest this update: Thu 24 Sep 2026 05:58:15 +0000 Manifest next update: Fri 25 Sep 2026 07:04:15 +0000 Files and hashes: 1: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl (hash: fyIA+SDwC1yRUoDrlOcAtSwLe4miYdQz2BWlaJ9MteI=) 2: 3130332e3137322e3139372e302f32342d3234203d3e20313336343435.roa (hash: tb675eaiEkDHOnmcu1KovtY2QzQr8ZannoNpqOhzL8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4f:53:4e:23:65:11:a7:84:23:11:eb:ef:5d:ec:41:1c:d1:02:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Validity Not Before: Sep 24 05:58:15 2026 GMT Not After : Sep 25 07:04:15 2026 GMT Subject: CN=0E4D4AA3DA3840B8CE119E255A3934C77E620270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:ff:e4:19:5d:fb:67:eb:cf:28:b4:f4:b7: b9:37:fc:d5:9e:3a:95:d7:9a:56:60:8d:de:fa:37: 37:10:f3:70:70:d3:1b:ff:ad:00:0a:6a:0a:a8:02: e2:8a:91:8b:f9:d9:bb:a3:f5:ca:42:e8:4f:67:6d: c5:27:32:e6:93:aa:48:36:73:54:18:12:c9:53:74: 56:f6:ce:1c:8b:57:c4:42:fa:f9:a5:a2:07:04:6d: d5:17:32:d4:45:1e:79:ee:ec:ff:dc:0f:c2:3a:d9: cb:82:7b:7e:e9:1e:06:d5:02:ff:9b:c7:6c:74:7b: 3b:d0:74:4f:6c:03:27:01:2f:25:92:30:f2:a0:59: 2d:64:d0:da:5c:32:3c:50:16:9d:90:2a:f0:5a:97: 2d:96:9a:e9:02:f3:5d:78:17:cf:d8:1a:ba:1b:f7: 9a:17:0b:4b:6d:cb:89:5e:51:d9:5f:d8:e7:c4:f8: ce:9e:c0:6a:d3:b6:dc:45:2e:a7:fe:03:e4:61:3c: 33:ca:13:4b:d1:23:98:4c:26:a4:a4:bb:80:5b:ed: ef:7d:44:20:91:41:39:1f:a2:c3:07:32:fe:d5:17: a3:50:68:9c:36:7b:da:e9:c6:20:79:59:30:41:14: 23:19:d8:9c:dd:e1:f5:fe:db:be:3e:ee:12:ab:16: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4D:4A:A3:DA:38:40:B8:CE:11:9E:25:5A:39:34:C7:7E:62:02:70 X509v3 Authority Key Identifier: keyid:0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b9:3d:56:c0:32:4d:39:ba:89:6e:92:5f:42:79:77:65:b5: 6b:56:8f:1c:49:f0:d0:20:da:11:9b:4c:2d:48:4f:c1:0e:51: 78:b7:78:0a:7c:0b:5b:f9:84:c4:69:87:26:e3:e2:6a:4c:ab: 4f:89:63:9e:0e:ce:df:a8:b8:d9:7d:b0:5f:c3:d6:46:ac:df: 17:6e:d3:68:14:54:0a:4c:80:18:53:a5:d6:9c:c5:66:60:b0: ce:12:95:6a:24:23:aa:ca:37:04:ed:52:01:70:2d:ca:14:b2: 3a:83:8a:6f:4d:6d:95:a0:33:0d:f2:7a:35:4e:e1:d2:a5:57: 36:9e:7c:85:88:c8:47:68:17:36:4e:7c:cf:a9:e8:e6:66:bc: 3c:46:54:2b:28:73:20:35:51:c1:8f:de:a5:7e:6f:24:e9:bb: d2:3d:6e:b7:62:f2:91:8e:cc:be:9f:45:00:8e:5d:27:7f:dd: f4:9a:c2:00:ab:3e:1c:0f:06:ad:e4:5c:ee:53:23:ec:7a:74: cf:2b:eb:14:02:5d:b4:55:46:df:ef:fb:ae:18:f7:8d:84:15: 32:12:21:f9:9f:5c:78:a7:77:8d:c8:59:41:c4:cf:ca:29:9d: a5:6d:4d:2c:38:97:e4:4d:9d:62:2c:99:23:1c:7b:a1:ce:f3: 17:ab:d5:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK09TTiNlEaeEIxHr713sQRzRAuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYw OEU2N0JCOTAeFw0yNjA5MjQwNTU4MTVaFw0yNjA5MjUwNzA0MTVaMDMxMTAvBgNV BAMTKDBFNEQ0QUEzREEzODQwQjhDRTExOUUyNTVBMzkzNEM3N0U2MjAyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrDf/kGV37Z+vPKLT0t7k3/NWe OpXXmlZgjd76NzcQ83Bw0xv/rQAKagqoAuKKkYv52buj9cpC6E9nbcUnMuaTqkg2 c1QYEslTdFb2zhyLV8RC+vmlogcEbdUXMtRFHnnu7P/cD8I62cuCe37pHgbVAv+b x2x0ezvQdE9sAycBLyWSMPKgWS1k0NpcMjxQFp2QKvBaly2WmukC8114F8/YGrob 95oXC0tty4leUdlf2OfE+M6ewGrTttxFLqf+A+RhPDPKE0vRI5hMJqSku4Bb7e99 RCCRQTkfosMHMv7VF6NQaJw2e9rpxiB5WTBBFCMZ2Jzd4fX+274+7hKrFkO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDk1Ko9o4QLjOEZ4lWjk0x35iAnAwHwYDVR0j BBgwFoAUC7ofy42XbaLxwpNX/nfeHwjme7kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM5N2NmYzUtZTBiMC00ODIwLWI4NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4 RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYwOEU2N0JCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkJBMUZDQjhEOTc2REEyRjFDMjkzNTdGRTc3REUxRjA4RTY3 QkI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RF MUYwOEU2N0JCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC25PVbAMk05uolukl9CeXdltWtWjxxJ8NAg 2hGbTC1IT8EOUXi3eAp8C1v5hMRphybj4mpMq0+JY54Ozt+ouNl9sF/D1kas3xdu 02gUVApMgBhTpdacxWZgsM4SlWokI6rKNwTtUgFwLcoUsjqDim9NbZWgMw3yejVO 4dKlVzaefIWIyEdoFzZOfM+p6OZmvDxGVCsocyA1UcGP3qV+byTpu9I9brdi8pGO zL6fRQCOXSd/3fSawgCrPhwPBq3kXO5TI+x6dM8r6xQCXbRVRt/v+64Y942EFTIS IfmfXHind43IWUHEz8opnaVtTSw4l+RNnWIsmSMce6HO8xer1SY= -----END CERTIFICATE-----Generated at Thu Sep 24 23:29:38 2026 by rpki-client