$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft File: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft (raw, json) Hash identifier: kmr637zpAyO1w82GcYVWuC6bbBnSHZzd7/HId42bQU0= Subject key identifier: 58:35:A6:65:BB:2F:E2:A8:0A:44:E6:C0:D2:3F:1B:A9:61:1C:5F:81 Authority key identifier: 0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 Certificate issuer: /CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Certificate serial: 36071E3307CCE59A15889A7560E11C53A7471F69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:56:44 +0000 Manifest this update: Thu 24 Sep 2026 04:51:44 +0000 Manifest next update: Fri 25 Sep 2026 07:15:44 +0000 Files and hashes: 1: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl (hash: bR6DYeCfLaHDRw30nw4b0po5cef5P+QzCOsxBpeEl1o=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: jRxu5an33fAHIDK703BGcnxxr2+K2imQoOMYIzAUMUk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:07:1e:33:07:cc:e5:9a:15:88:9a:75:60:e1:1c:53:a7:47:1f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Validity Not Before: Sep 24 04:51:44 2026 GMT Not After : Sep 25 07:15:44 2026 GMT Subject: CN=5835A665BB2FE2A80A44E6C0D23F1BA9611C5F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:9c:a1:a3:6c:6d:16:13:4d:91:70:40:95: be:8f:7a:88:fe:3d:c4:8c:cd:eb:d1:59:4e:79:d7: 4f:45:69:3f:33:37:1f:93:5c:8d:89:9f:32:47:f0: f7:dc:6b:58:69:41:c7:bf:be:29:19:f1:d8:20:3b: 9b:0f:70:f4:6f:cb:a4:44:e7:da:34:05:9c:c7:61: 0f:53:ea:11:99:11:02:71:bc:d5:98:26:43:39:a4: a6:49:6a:a5:d1:dd:ce:c8:92:78:4d:a6:30:2b:6c: 53:8a:8f:c7:a7:8d:64:b5:57:a2:06:0d:b5:28:6e: 3c:4d:b1:10:6a:7e:3b:2a:63:69:67:f3:9d:ab:ef: ab:bd:05:7a:f9:0b:7f:ce:77:ab:e1:49:80:95:3b: ae:32:2a:8c:13:34:05:79:67:62:7d:cf:86:0d:ef: c5:c3:a8:ed:68:9d:e3:e8:de:d3:c6:06:37:57:cc: 92:3c:45:34:de:17:60:9d:77:72:f4:06:e4:87:ab: 07:db:06:eb:7d:c6:8a:73:5f:56:31:2e:fd:f7:ff: d4:fd:a5:59:be:95:50:57:93:cd:f9:3b:24:80:11: 5c:0c:d0:a6:0c:86:03:3a:49:f6:2c:25:03:40:90: 9a:76:3b:38:ca:08:75:ff:61:a5:7a:bf:1c:12:a9: 2a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:35:A6:65:BB:2F:E2:A8:0A:44:E6:C0:D2:3F:1B:A9:61:1C:5F:81 X509v3 Authority Key Identifier: keyid:0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:4f:43:12:71:42:19:75:91:ce:7c:6c:d1:b7:b4:95:ce:97: 8f:39:b6:8c:51:86:dd:76:6d:65:63:60:8c:a2:81:cf:90:fe: 15:82:30:ad:fc:b2:aa:1b:66:2a:b2:c7:70:16:6f:2a:ef:4f: eb:4d:46:4e:99:11:4b:42:3c:38:9f:3c:ae:86:ad:55:75:b3: e6:ae:7d:c7:56:2e:d7:29:fb:ef:fd:c7:5b:c0:ae:bc:f7:35: d9:5f:c9:68:dd:0d:0a:02:21:13:80:fc:a1:aa:70:ba:16:d6: df:6f:75:6a:02:85:c4:76:c9:64:d3:94:87:72:96:2f:8e:2a: 28:af:67:71:08:28:5e:0e:37:a4:91:b0:1b:39:2d:da:b7:94: ff:39:aa:54:6f:bf:ec:9f:d3:93:b5:70:c2:ea:6f:38:65:2f: f7:14:ba:ee:ed:fb:5b:32:8e:28:ec:32:ae:c8:99:a6:1a:4b: f9:02:1d:07:80:2b:7d:c9:73:d4:ed:0a:77:26:28:71:3c:c5: ff:c9:37:5e:e0:6d:26:e1:c4:ad:36:e2:ca:4a:0b:4e:3f:92: 4d:40:97:95:c9:74:1d:64:aa:db:90:08:7d:29:67:34:1d:45: 9b:c8:c1:ba:78:99:36:97:88:d8:1c:5f:56:dc:46:9a:cb:9e: ae:d7:65:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNgceMwfM5ZoViJp1YOEcU6dHH2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0 NDc1MjNFNTAeFw0yNjA5MjQwNDUxNDRaFw0yNjA5MjUwNzE1NDRaMDMxMTAvBgNV BAMTKDU4MzVBNjY1QkIyRkUyQTgwQTQ0RTZDMEQyM0YxQkE5NjExQzVGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mZyho2xtFhNNkXBAlb6Peoj+ PcSMzevRWU55109FaT8zNx+TXI2JnzJH8Pfca1hpQce/vikZ8dggO5sPcPRvy6RE 59o0BZzHYQ9T6hGZEQJxvNWYJkM5pKZJaqXR3c7IknhNpjArbFOKj8enjWS1V6IG DbUobjxNsRBqfjsqY2ln852r76u9BXr5C3/Od6vhSYCVO64yKowTNAV5Z2J9z4YN 78XDqO1onePo3tPGBjdXzJI8RTTeF2Cdd3L0BuSHqwfbBut9xopzX1YxLv33/9T9 pVm+lVBXk835OySAEVwM0KYMhgM6SfYsJQNAkJp2OzjKCHX/YaV6vxwSqSqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWDWmZbsv4qgKRObA0j8bqWEcX4EwHwYDVR0j BBgwFoAUDz3Nlfw/xtfXs9FodquB4UR1I+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQ0ZGZiNWEtNmUyNC00YTRkLTg5NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVG QzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0NDc1MjNFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjNEQ0Q5NUZDM0ZDNkQ3RDdCM0QxNjg3NkFCODFFMTQ0NzUy M0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgx RTE0NDc1MjNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRPQxJxQhl1kc58bNG3tJXOl485toxRht12 bWVjYIyigc+Q/hWCMK38sqobZiqyx3AWbyrvT+tNRk6ZEUtCPDifPK6GrVV1s+au fcdWLtcp++/9x1vArrz3NdlfyWjdDQoCIROA/KGqcLoW1t9vdWoChcR2yWTTlIdy li+OKiivZ3EIKF4ON6SRsBs5Ldq3lP85qlRvv+yf05O1cMLqbzhlL/cUuu7t+1sy jijsMq7ImaYaS/kCHQeAK33Jc9TtCncmKHE8xf/JN17gbSbhxK024spKC04/kk1A l5XJdB1kqtuQCH0pZzQdRZvIwbp4mTaXiNgcX1bcRprLnq7XZbs= -----END CERTIFICATE-----Generated at Thu Sep 24 13:20:26 2026 by rpki-client