$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft File: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft (raw, json) Hash identifier: joRxC1VsUor8+USRMZa9MbWViRvlBcKMxzWUfcjzZ6Y= Subject key identifier: E9:E8:27:5C:1D:63:0C:3F:F2:CD:68:3A:10:4C:C4:D7:AE:AA:29:BC Authority key identifier: 0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 Certificate issuer: /CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Certificate serial: 27F3B99E65928B3F6B8BB8DE3799A4EE423C63FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 08:31:12 +0000 Manifest this update: Thu 24 Sep 2026 08:26:12 +0000 Manifest next update: Fri 25 Sep 2026 10:27:12 +0000 Files and hashes: 1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: RKQ6wa1x5VScJTj3fjdeSQ/eUi7ms4u121kFQZr9klo=) 2: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl (hash: b6eV+oiH64UMHetb4WLcG02M1L81ilYmPv2mIbCHgN8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f3:b9:9e:65:92:8b:3f:6b:8b:b8:de:37:99:a4:ee:42:3c:63:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Validity Not Before: Sep 24 08:26:12 2026 GMT Not After : Sep 25 10:27:12 2026 GMT Subject: CN=E9E8275C1D630C3FF2CD683A104CC4D7AEAA29BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:c8:ee:e0:3f:fe:e5:b8:6f:f8:3a:3a:89: 29:f4:c2:b3:38:d2:66:72:1e:88:2f:43:92:4f:aa: cf:8e:3d:ea:37:9e:68:bd:42:20:59:cb:84:b4:73: 44:fa:4e:45:3a:f9:5d:2a:5e:81:05:4a:67:02:d9: 4c:48:06:6a:b7:09:4d:64:e2:b7:ac:28:12:62:70: 08:79:9b:56:39:26:b4:fb:3d:cd:c6:f0:e4:78:86: b1:c9:de:3f:ed:36:02:20:e9:93:7f:c1:b6:08:25: 5b:ce:83:36:86:74:59:ac:a1:cc:07:e3:77:63:71: a2:79:f2:91:2b:b1:61:cb:b4:b0:3b:e1:b4:40:78: 1c:bc:b3:80:e1:7d:1f:67:8a:5e:41:dc:f5:15:c1: 4a:82:87:d7:bb:6a:fc:10:11:94:64:4f:34:1f:0b: 30:00:52:b1:ec:6b:87:83:3d:23:e8:ae:e4:ab:07: c6:48:5a:f2:79:0a:34:dd:19:c6:25:3c:60:ee:76: d6:4f:ae:26:97:19:3a:5c:27:c6:9e:88:01:71:38: 80:5f:2e:ad:9b:e1:5e:f2:2c:68:45:83:11:0f:e5: 02:e1:1a:23:6e:f5:59:e6:11:a6:ec:e2:3a:82:05: 69:f8:8a:3b:0a:e9:26:de:51:b0:27:30:7a:bf:45: 12:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E8:27:5C:1D:63:0C:3F:F2:CD:68:3A:10:4C:C4:D7:AE:AA:29:BC X509v3 Authority Key Identifier: keyid:0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b8:1a:56:b6:00:71:66:f1:f5:80:92:30:48:aa:39:02:9b: f6:86:45:18:34:1a:01:4e:fc:df:3f:52:62:4f:22:a8:0f:1e: 61:f1:f8:08:68:a3:fd:24:98:1f:b8:bf:fe:99:b1:fa:31:5a: e3:13:bc:b5:e2:54:76:b4:60:7b:40:e4:04:3d:f0:dd:db:b9: e2:d6:a0:6c:34:ae:3d:50:c9:0a:4f:0a:9f:98:ab:84:14:73: fe:e3:0f:7b:ff:db:78:67:77:64:f8:03:66:da:26:4c:05:7c: 42:0e:86:c2:f2:3d:db:f4:16:42:10:87:ad:1a:68:19:ce:fc: de:e7:b6:20:55:b1:f1:78:d5:d1:e9:c4:06:2a:43:0a:c4:dc: 2f:04:f4:6d:4f:75:c8:cb:e7:b8:c1:4b:a9:52:e2:41:e4:a8: 14:15:11:ec:83:1c:59:20:d5:43:5c:1e:7b:ae:3d:a0:04:0c: 39:3d:01:9f:94:26:19:e5:e2:04:5c:aa:e9:b8:b5:8d:88:7b: 5f:8e:50:73:70:8a:2c:28:5f:cf:4a:3e:31:66:86:cd:db:ea: a5:79:40:99:66:7e:ff:16:34:3a:a4:a7:c6:64:ae:ec:9c:36: e5:e8:6a:4c:3e:d2:f2:03:ef:05:4a:e9:fc:c5:e5:9e:72:9a: 27:07:15:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/O5nmWSiz9ri7jeN5mk7kI8Y/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVFNEZC MUY5NTMzOTAeFw0yNjA5MjQwODI2MTJaFw0yNjA5MjUxMDI3MTJaMDMxMTAvBgNV BAMTKEU5RTgyNzVDMUQ2MzBDM0ZGMkNENjgzQTEwNENDNEQ3QUVBQTI5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRYMju4D/+5bhv+Do6iSn0wrM4 0mZyHogvQ5JPqs+OPeo3nmi9QiBZy4S0c0T6TkU6+V0qXoEFSmcC2UxIBmq3CU1k 4resKBJicAh5m1Y5JrT7Pc3G8OR4hrHJ3j/tNgIg6ZN/wbYIJVvOgzaGdFmsocwH 43djcaJ58pErsWHLtLA74bRAeBy8s4DhfR9nil5B3PUVwUqCh9e7avwQEZRkTzQf CzAAUrHsa4eDPSPoruSrB8ZIWvJ5CjTdGcYlPGDudtZPriaXGTpcJ8aeiAFxOIBf Lq2b4V7yLGhFgxEP5QLhGiNu9VnmEabs4jqCBWn4ijsK6SbeUbAnMHq/RRK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6egnXB1jDD/yzWg6EEzE166qKbwwHwYDVR0j BBgwFoAUC5FDzV0qg1fiAR54Q5leT7H5UzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ0OGJkMDQtZjc4Ny00MTRhLWE1MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1 RDJBODM1N0UyMDExRTc4NDM5OTVFNEZCMUY5NTMzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjkxNDNDRDVEMkE4MzU3RTIwMTFFNzg0Mzk5NUU0RkIxRjk1 MzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVF NEZCMUY5NTMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy4Gla2AHFm8fWAkjBIqjkCm/aGRRg0GgFO /N8/UmJPIqgPHmHx+Ahoo/0kmB+4v/6ZsfoxWuMTvLXiVHa0YHtA5AQ98N3bueLW oGw0rj1QyQpPCp+Yq4QUc/7jD3v/23hnd2T4A2baJkwFfEIOhsLyPdv0FkIQh60a aBnO/N7ntiBVsfF41dHpxAYqQwrE3C8E9G1PdcjL57jBS6lS4kHkqBQVEeyDHFkg 1UNcHnuuPaAEDDk9AZ+UJhnl4gRcqum4tY2Ie1+OUHNwiiwoX89KPjFmhs3b6qV5 QJlmfv8WNDqkp8ZkruycNuXoakw+0vID7wVK6fzF5Z5ymicHFb0= -----END CERTIFICATE-----Generated at Thu Sep 24 23:14:10 2026 by rpki-client