$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft File: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft (raw, json) Hash identifier: t/MsmiL/nlsQfDRtBXd3/KH+U9KDC3msQ49PdFgkG5U= Subject key identifier: 75:DF:28:6A:F6:C1:23:F5:BA:00:B8:B3:6E:04:E6:50:8F:DD:73:10 Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 Certificate issuer: /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Certificate serial: 0BC5DB3AC2528E1D8AA22A3183F4F94D22466FCE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 12:47:01 +0000 Manifest this update: Wed 23 Sep 2026 12:42:01 +0000 Manifest next update: Thu 24 Sep 2026 15:58:01 +0000 Files and hashes: 1: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: nzJ2KTaH0mWJ2JUT7TIQaEIs1V4rS2Hb5qe4oVuW+qY=) 2: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: i6JN3toKQT5i4NNrRSH28JimRYw5XqvDzH+54AyAuPo=) 3: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: cscNYPGsX1ZTL4zXvVeeKicXVJQf2gUl7CaS2wz5lho=) 4: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: /nw/dsQp3nfOBW0Do0NFqr3xduuQUXnkGUlyPsTQV10=) 5: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl (hash: llo6A4miNOqs2u8jmMDHFctWtk2ACZ59zwjlZBlXAYY=) 6: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: wzbhyHWdZFf+4zRG4eljIzSQe2JUQdKqrkpbRniPBU4=) 7: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: 5z0mLNjU28RRuMehTiGd0TZpTvoqOni8uwA3Q/9FXCA=) 8: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: jwkbabyLyV6UKztbR0SZEz5ZRMUHBTd8adRm57dyw+w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c5:db:3a:c2:52:8e:1d:8a:a2:2a:31:83:f4:f9:4d:22:46:6f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Validity Not Before: Sep 23 12:42:01 2026 GMT Not After : Sep 24 15:58:01 2026 GMT Subject: CN=75DF286AF6C123F5BA00B8B36E04E6508FDD7310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:8f:56:9f:a4:a5:f9:ed:d9:29:a7:72:fe: d5:5c:b6:14:16:93:df:68:f2:23:93:3a:40:17:b9: 48:d1:27:76:08:04:df:20:5b:11:e3:c1:a8:cf:72: 86:25:ef:cf:3e:77:d1:39:ff:ae:5a:87:ed:4e:82: 6b:12:e4:2c:72:89:b1:18:00:57:99:9f:a0:f8:c6: 63:71:43:b7:14:07:0f:30:6b:3d:50:bd:65:7b:c6: dc:92:d0:17:39:48:3a:85:31:bf:93:ad:2e:63:62: 2f:39:7d:a7:83:76:e9:50:f0:f7:b2:3d:30:6b:81: e3:43:5f:f2:d4:5e:9f:60:6f:80:52:5d:a2:df:0a: 83:37:ab:f3:97:24:c8:7d:5c:e6:fb:94:34:fc:71: 35:ed:1f:c2:aa:49:be:9f:a3:69:d5:a8:f0:97:ab: 5e:16:b1:8b:e4:bc:84:ae:84:da:35:36:b9:6c:85: e8:6c:bb:b7:c5:33:55:4f:10:af:77:3d:be:44:0b: 2f:af:ea:61:46:90:ad:03:0a:c7:33:fe:0b:9b:ec: 25:e4:64:f8:35:49:43:43:bc:26:e4:11:5d:4b:b8: 6d:be:ec:f5:28:2e:2a:db:a4:04:04:9d:a8:83:b9: 17:17:b4:f0:da:29:4c:ee:60:22:3c:21:fe:e3:fa: e6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DF:28:6A:F6:C1:23:F5:BA:00:B8:B3:6E:04:E6:50:8F:DD:73:10 X509v3 Authority Key Identifier: keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ca:e5:e7:b0:31:d1:eb:8d:59:8c:26:08:c9:b7:6a:51:8d: 18:ef:19:6f:9b:75:4b:76:b7:3c:15:bb:37:64:bd:a8:c1:77: e3:31:ff:b0:6a:01:d3:ef:f2:ec:84:76:10:67:ca:54:54:65: 6b:dd:89:29:92:e9:03:d5:5d:a6:6c:47:10:af:94:e2:5f:36: 4f:b1:1b:3a:44:25:09:76:cd:60:fa:52:19:00:c8:10:78:86: 81:a9:47:dc:bd:21:fe:1d:da:ce:02:46:a6:57:24:8b:73:e1: 33:49:01:8c:e6:80:b3:f2:8a:76:3b:cf:1f:de:16:29:60:04: 36:03:f3:f3:5d:de:a5:a4:0f:1f:a7:7c:f4:43:5d:b3:07:18: bd:31:bd:eb:f9:a6:53:26:3a:be:dd:ad:81:9f:5f:f6:32:c9: 5f:f8:bc:c4:02:cb:8f:b6:c7:7d:d8:76:1b:cf:af:d3:e3:88: cf:f8:58:f0:04:55:6d:1d:b8:9f:f5:63:79:99:ab:3b:79:45: eb:38:d8:47:32:20:9f:ae:64:aa:6c:b4:ef:b6:52:7c:df:12: df:88:70:50:ba:b9:41:96:f0:25:20:43:ee:a2:cb:be:8f:a9: b0:17:c3:a2:03:d6:ae:19:43:dd:e7:03:4b:33:1c:84:12:ee: 30:01:38:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8XbOsJSjh2Koioxg/T5TSJGb84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUy MTc2RUVDODAeFw0yNjA5MjMxMjQyMDFaFw0yNjA5MjQxNTU4MDFaMDMxMTAvBgNV BAMTKDc1REYyODZBRjZDMTIzRjVCQTAwQjhCMzZFMDRFNjUwOEZERDczMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUo9Wn6Sl+e3ZKady/tVcthQW k99o8iOTOkAXuUjRJ3YIBN8gWxHjwajPcoYl788+d9E5/65ah+1OgmsS5CxyibEY AFeZn6D4xmNxQ7cUBw8waz1QvWV7xtyS0Bc5SDqFMb+TrS5jYi85faeDdulQ8Pey PTBrgeNDX/LUXp9gb4BSXaLfCoM3q/OXJMh9XOb7lDT8cTXtH8KqSb6fo2nVqPCX q14WsYvkvISuhNo1Nrlshehsu7fFM1VPEK93Pb5ECy+v6mFGkK0DCscz/gub7CXk ZPg1SUNDvCbkEV1LuG2+7PUoLirbpAQEnaiDuRcXtPDaKUzuYCI8If7j+uapAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdd8oavbBI/W6ALizbgTmUI/dcxAwHwYDVR0j BBgwFoAUD/4uoSrBVq94rC2aRZrxbiF27sgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NkNTM5NDgtZGRmMy00NDlhLWJmMmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEy QUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUyMTc2RUVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkZFMkVBMTJBQzE1NkFGNzhBQzJEOUE0NTlBRjE2RTIxNzZF RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYx NkUyMTc2RUVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3K5eewMdHrjVmMJgjJt2pRjRjvGW+bdUt2 tzwVuzdkvajBd+Mx/7BqAdPv8uyEdhBnylRUZWvdiSmS6QPVXaZsRxCvlOJfNk+x GzpEJQl2zWD6UhkAyBB4hoGpR9y9If4d2s4CRqZXJItz4TNJAYzmgLPyinY7zx/e FilgBDYD8/Nd3qWkDx+nfPRDXbMHGL0xvev5plMmOr7drYGfX/YyyV/4vMQCy4+2 x33YdhvPr9PjiM/4WPAEVW0duJ/1Y3mZqzt5Res42EcyIJ+uZKpstO+2UnzfEt+I cFC6uUGW8CUgQ+6iy76PqbAXw6ID1q4ZQ93nA0szHIQS7jABOBg= -----END CERTIFICATE-----Generated at Wed Sep 23 23:46:43 2026 by rpki-client