$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft File: 0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft (raw, json) Hash identifier: 4IKOBVLl1+Ln4uDyUCm/7TqMKN/0rM0/e9uXBk8WgbM= Subject key identifier: B0:91:B1:23:2B:58:FE:39:B4:5B:3F:E9:3F:B6:25:8D:57:C9:29:C2 Authority key identifier: 0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C Certificate issuer: /CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C Certificate serial: 17729ACC585A768B481BAC5FA8B48427C5306E25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft Manifest number: BF Signing time: Wed 23 Sep 2026 02:24:08 +0000 Manifest this update: Wed 23 Sep 2026 02:19:08 +0000 Manifest next update: Thu 24 Sep 2026 04:25:08 +0000 Files and hashes: 1: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: 1ahR27z0iK0sLUuSdSvJqFvWkpicPRlm9gEDg/UGewo=) 2: 0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl (hash: W7gQRF6OfiP5oaYeTtO7tFz4oTL6YpPIbgUWrH+8THI=) 3: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: mZ4ni8RZ+trHAYAq+YWcBinFPw6rEt7xuDt1TTSRtHw=) 4: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: FtAyLFgcPcOrwdeATSorkqQ+qnS6UD5lf+AdbVbITfE=) 5: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: E4KMhggOb7nlhIiO3VBqj+3GAnMNf5AMaTtZTYutCpg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:72:9a:cc:58:5a:76:8b:48:1b:ac:5f:a8:b4:84:27:c5:30:6e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C Validity Not Before: Sep 23 02:19:08 2026 GMT Not After : Sep 24 04:25:08 2026 GMT Subject: CN=B091B1232B58FE39B45B3FE93FB6258D57C929C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:34:6b:6a:6d:9f:cc:0f:6f:cc:1f:f1:70:9a: 7a:3a:78:0d:5d:2e:b2:a7:37:43:95:04:eb:9d:2b: d5:67:cc:22:29:3e:d8:61:e4:e0:73:21:62:73:e1: 7a:46:89:9c:40:bd:56:1c:32:2f:c8:86:a5:8e:5e: de:b2:1f:11:e1:04:bc:1a:a1:9d:f4:d6:c0:22:96: 92:99:3b:3d:ea:94:f3:0b:86:90:5f:78:39:46:bd: 8d:82:0c:45:6d:28:e1:32:0c:c4:7f:1b:e6:2c:43: 0a:2e:8e:4c:01:d3:04:1d:b7:00:00:42:04:45:82: 3a:4c:8f:66:37:6d:09:0e:9b:a0:54:ae:92:ce:61: c7:1f:d4:3a:09:4e:61:ef:6e:f6:7e:5a:9a:51:8d: 16:e6:ac:8c:79:87:44:56:62:f9:8b:5a:d9:22:d0: dc:fe:f1:c7:3f:1b:66:0b:9b:c1:6e:c5:2e:68:ca: 52:2f:19:72:a1:31:fd:1d:d4:b6:7a:b0:c3:e2:94: 2c:ae:cf:3b:aa:77:04:85:94:b6:3b:8c:10:6c:fc: 2d:7e:89:48:87:d2:2d:ed:16:2d:64:b7:fd:4d:ca: 4d:65:90:5a:cd:4b:a9:76:d8:44:d4:8d:e5:86:3d: b5:1b:86:3d:83:3c:e8:15:17:63:a3:05:02:17:ee: 62:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:91:B1:23:2B:58:FE:39:B4:5B:3F:E9:3F:B6:25:8D:57:C9:29:C2 X509v3 Authority Key Identifier: keyid:0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:10:6d:f9:90:22:fd:87:e2:0d:63:43:e0:d7:34:6c:73:13: 94:78:c6:a5:c3:7a:7b:3f:87:83:9e:09:c8:6b:b6:85:f5:cf: 79:cc:c3:8d:88:22:f1:3f:84:85:7a:58:3d:1b:44:ad:cd:3f: e6:7e:95:1e:d3:74:f3:d9:d4:31:67:59:63:3c:a0:f5:55:e2: 86:2f:46:17:fc:9c:19:e5:77:7c:e4:dd:1b:52:3a:dc:08:4a: 29:e1:bf:ea:5d:af:f3:c6:30:6c:56:b1:52:9e:51:23:23:05: d0:72:a6:bf:4b:9a:a3:d0:20:ad:e9:8f:96:24:f8:4c:df:23: 77:a9:68:af:df:8a:b1:09:17:0a:d2:c9:b1:89:c1:5f:07:ad: bf:27:08:ac:77:25:2b:e9:38:42:21:5b:cb:b6:ba:96:73:5e: 9f:d8:99:63:ee:95:84:e0:f7:18:ed:fc:b3:cd:f5:05:db:21: 72:79:df:d2:da:b6:6a:bd:df:7a:ea:d5:b5:5f:ce:89:64:27: c7:b6:77:3b:18:90:a5:04:73:cf:07:5c:4a:38:1b:a5:7f:04: c4:e9:0e:ea:de:77:1e:42:46:7a:81:6e:29:62:2d:2f:9d:65: 60:31:70:0a:60:25:c1:a5:2b:60:e2:61:a3:1a:98:49:3c:a1: e5:8e:51:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3KazFhadotIG6xfqLSEJ8UwbiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERDRUYyMTBFNkIyRDlDNTVDRkZEM0IxNUU1RTk0MEMz QUZFN0EzQzAeFw0yNjA5MjMwMjE5MDhaFw0yNjA5MjQwNDI1MDhaMDMxMTAvBgNV BAMTKEIwOTFCMTIzMkI1OEZFMzlCNDVCM0ZFOTNGQjYyNThENTdDOTI5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCANGtqbZ/MD2/MH/Fwmno6eA1d LrKnN0OVBOudK9VnzCIpPthh5OBzIWJz4XpGiZxAvVYcMi/IhqWOXt6yHxHhBLwa oZ301sAilpKZOz3qlPMLhpBfeDlGvY2CDEVtKOEyDMR/G+YsQwoujkwB0wQdtwAA QgRFgjpMj2Y3bQkOm6BUrpLOYccf1DoJTmHvbvZ+WppRjRbmrIx5h0RWYvmLWtki 0Nz+8cc/G2YLm8FuxS5oylIvGXKhMf0d1LZ6sMPilCyuzzuqdwSFlLY7jBBs/C1+ iUiH0i3tFi1kt/1Nyk1lkFrNS6l22ETUjeWGPbUbhj2DPOgVF2OjBQIX7mKzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsJGxIytY/jm0Wz/pP7YljVfJKcIwHwYDVR0j BBgwFoAUDc7yEOay2cVc/9OxXl6UDDr+ejwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2ZGYtYjI0M2M1MTY0ZDIyLzAvMERDRUYyMTBF NkIyRDlDNTVDRkZEM0IxNUU1RTk0MEMzQUZFN0EzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRENFRjIxMEU2QjJEOUM1NUNGRkQzQjE1RTVFOTQwQzNBRkU3 QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvMERDRUYyMTBFNkIyRDlDNTVDRkZEM0IxNUU1RTk0 MEMzQUZFN0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkQbfmQIv2H4g1jQ+DXNGxzE5R4xqXDens/ h4OeCchrtoX1z3nMw42IIvE/hIV6WD0bRK3NP+Z+lR7TdPPZ1DFnWWM8oPVV4oYv Rhf8nBnld3zk3RtSOtwISinhv+pdr/PGMGxWsVKeUSMjBdBypr9LmqPQIK3pj5Yk +EzfI3epaK/firEJFwrSybGJwV8Hrb8nCKx3JSvpOEIhW8u2upZzXp/YmWPulYTg 9xjt/LPN9QXbIXJ539Latmq933rq1bVfzolkJ8e2dzsYkKUEc88HXEo4G6V/BMTp Duredx5CRnqBbiliLS+dZWAxcApgJcGlK2DiYaMamEk8oeWOUUY= -----END CERTIFICATE-----Generated at Wed Sep 23 20:16:46 2026 by rpki-client