$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft File: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft (raw, json) Hash identifier: EMARlYVUI7ei4AVcR8Yr4DV7DCKpenUG3L04THCX1N0= Subject key identifier: BD:15:44:BE:0E:8A:3A:73:87:50:DD:1C:98:2D:65:1D:BB:B6:8A:B3 Authority key identifier: 0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 Certificate issuer: /CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Certificate serial: 12AE9E15C302DAF9F640DA63F99218E3FBAFD2DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 23:19:26 +0000 Manifest this update: Thu 24 Sep 2026 23:14:26 +0000 Manifest next update: Fri 25 Sep 2026 23:48:26 +0000 Files and hashes: 1: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: jRxu5an33fAHIDK703BGcnxxr2+K2imQoOMYIzAUMUk=) 2: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl (hash: uUK/qnJkVaKTL+iCAZBCVII+II4+lgpwg56+JYGLzVY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ae:9e:15:c3:02:da:f9:f6:40:da:63:f9:92:18:e3:fb:af:d2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Validity Not Before: Sep 24 23:14:26 2026 GMT Not After : Sep 25 23:48:26 2026 GMT Subject: CN=BD1544BE0E8A3A738750DD1C982D651DBBB68AB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:6a:8c:b2:9a:16:5c:79:fc:77:19:66:29: 4f:39:f8:dd:a6:92:34:09:55:05:7c:03:24:62:78: 0e:ce:0d:a9:0b:45:47:21:f8:fd:71:85:50:8d:0e: 8d:87:50:b2:92:03:97:34:e1:5f:65:84:85:5f:48: a7:12:98:64:44:f6:8f:13:d6:b0:22:b8:85:da:c1: cb:ae:f9:58:62:c5:07:d8:d6:d5:7a:70:1f:4e:46: c8:08:f5:ac:fa:10:5f:11:50:1d:e3:67:0f:fa:07: 78:c1:68:bd:9f:a1:64:56:3c:ed:90:fb:dc:b2:68: 80:73:16:11:6e:2a:aa:3a:86:eb:de:21:14:30:10: 81:0e:57:21:b4:7f:d3:45:9d:b0:7b:cf:5c:4c:d3: 52:59:af:63:0c:ae:e4:b7:4f:75:87:74:03:80:46: d7:2b:56:c9:13:f1:0e:a2:03:31:58:d2:92:7b:e8: 46:7a:45:75:03:34:47:5f:60:43:f2:db:93:21:ad: 9a:83:0b:8c:81:b8:43:c9:2e:84:4b:a8:03:2a:d4: b7:a4:50:d1:4b:e9:46:48:ac:ff:58:67:ab:1e:00: 54:6f:30:64:39:bd:3e:3a:7c:83:f1:0f:45:1d:a6: b7:dd:65:57:90:5c:f1:61:d2:44:c0:a0:b3:f3:a7: 12:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:15:44:BE:0E:8A:3A:73:87:50:DD:1C:98:2D:65:1D:BB:B6:8A:B3 X509v3 Authority Key Identifier: keyid:0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f7:56:03:b3:05:e8:a9:09:5e:b0:22:78:31:a6:9b:bb:72: 3f:97:53:b3:5d:88:6e:8b:40:81:f8:87:82:e3:54:37:ef:31: 37:07:52:3d:96:be:cb:39:af:9f:6c:06:6e:2e:5f:bd:4d:84: fb:ce:08:ef:71:cd:05:15:d9:f1:24:0b:c6:a6:d9:5b:80:3d: b2:53:9c:fb:87:ec:91:49:1a:0d:e6:b3:11:cd:bc:c5:13:85: 8d:5b:16:b9:bf:0f:43:b6:9c:cd:9f:04:14:88:c8:2d:8f:bf: 91:fc:d6:63:f1:c0:ba:ae:51:9f:06:61:ff:ae:42:bc:42:f7: f8:42:25:8e:b6:ce:6f:da:7f:97:4b:ba:5d:bd:ed:20:66:b4: 3b:03:c4:ea:4c:b6:73:b0:73:a7:ff:79:23:be:02:0a:7d:cb: 66:28:aa:38:31:a9:6c:c6:66:27:32:39:00:dd:94:6b:8d:17: a2:ee:c6:d3:c3:ef:da:91:f3:10:99:6d:7f:9a:5e:4f:85:7e: 00:9f:e0:85:4a:a3:e7:55:58:05:a8:fc:e5:f3:c5:61:e6:23: 7c:6d:fa:e3:d6:7e:23:41:4c:d9:8f:71:cb:ea:fb:fa:52:7b: 10:11:54:87:05:d8:1f:96:45:9e:7e:ac:af:75:c8:25:ba:83: 68:6d:bf:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEq6eFcMC2vn2QNpj+ZIY4/uv0t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0 NDc1MjNFNTAeFw0yNjA5MjQyMzE0MjZaFw0yNjA5MjUyMzQ4MjZaMDMxMTAvBgNV BAMTKEJEMTU0NEJFMEU4QTNBNzM4NzUwREQxQzk4MkQ2NTFEQkJCNjhBQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87WqMspoWXHn8dxlmKU85+N2m kjQJVQV8AyRieA7ODakLRUch+P1xhVCNDo2HULKSA5c04V9lhIVfSKcSmGRE9o8T 1rAiuIXawcuu+VhixQfY1tV6cB9ORsgI9az6EF8RUB3jZw/6B3jBaL2foWRWPO2Q +9yyaIBzFhFuKqo6huveIRQwEIEOVyG0f9NFnbB7z1xM01JZr2MMruS3T3WHdAOA RtcrVskT8Q6iAzFY0pJ76EZ6RXUDNEdfYEPy25MhrZqDC4yBuEPJLoRLqAMq1Lek UNFL6UZIrP9YZ6seAFRvMGQ5vT46fIPxD0UdprfdZVeQXPFh0kTAoLPzpxIFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvRVEvg6KOnOHUN0cmC1lHbu2irMwHwYDVR0j BBgwFoAUDz3Nlfw/xtfXs9FodquB4UR1I+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQ0ZGZiNWEtNmUyNC00YTRkLTg5NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVG QzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0NDc1MjNFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjNEQ0Q5NUZDM0ZDNkQ3RDdCM0QxNjg3NkFCODFFMTQ0NzUy M0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgx RTE0NDc1MjNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAET3VgOzBeipCV6wIngxppu7cj+XU7NdiG6L QIH4h4LjVDfvMTcHUj2Wvss5r59sBm4uX71NhPvOCO9xzQUV2fEkC8am2VuAPbJT nPuH7JFJGg3msxHNvMUThY1bFrm/D0O2nM2fBBSIyC2Pv5H81mPxwLquUZ8GYf+u QrxC9/hCJY62zm/af5dLul297SBmtDsDxOpMtnOwc6f/eSO+Agp9y2YoqjgxqWzG ZicyOQDdlGuNF6LuxtPD79qR8xCZbX+aXk+FfgCf4IVKo+dVWAWo/OXzxWHmI3xt +uPWfiNBTNmPccvq+/pSexARVIcF2B+WRZ5+rK91yCW6g2htv3c= -----END CERTIFICATE-----Generated at Fri Sep 25 04:45:20 2026 by rpki-client