$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft File: 0D2802EC43905EEA387602B994B8B579041C8507.mft (raw, json) Hash identifier: EX3rDwtyHN9yduMQ9cOtKkzWHPYo8oO7LVWzQeKaDeg= Subject key identifier: 86:C5:20:37:5F:1F:A4:59:60:55:B6:6E:DB:28:22:64:15:03:3B:CC Authority key identifier: 0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 Certificate issuer: /CN=0D2802EC43905EEA387602B994B8B579041C8507 Certificate serial: 0C02A39A56066B7FC3B559DD7FEE51D1C7ECA96D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft Manifest number: C5 Signing time: Wed 23 Sep 2026 16:00:56 +0000 Manifest this update: Wed 23 Sep 2026 15:55:56 +0000 Manifest next update: Thu 24 Sep 2026 19:42:56 +0000 Files and hashes: 1: 0D2802EC43905EEA387602B994B8B579041C8507.crl (hash: /sRpuo5/zOCJAbgrr01vFSEC9vO3v5qrxBFJ/CuSQ3k=) 2: 3130332e3133372e33382e302f32332d3234203d3e20313338303737.roa (hash: LpmeCYIxoWBDvzjeANLy6rKl3zTbux6LO0Gm7oz2kiY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:02:a3:9a:56:06:6b:7f:c3:b5:59:dd:7f:ee:51:d1:c7:ec:a9:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D2802EC43905EEA387602B994B8B579041C8507 Validity Not Before: Sep 23 15:55:56 2026 GMT Not After : Sep 24 19:42:56 2026 GMT Subject: CN=86C520375F1FA4596055B66EDB28226415033BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:43:26:49:f3:16:8d:ad:d1:dd:12:be:40: 62:96:67:6b:f2:b4:80:48:37:5d:24:fc:50:02:d3: 20:fb:85:53:91:e9:6e:6b:73:4f:de:01:30:9e:a4: 50:7a:a7:61:91:09:a5:74:cf:1f:ed:7e:82:d7:f2: 07:25:06:38:49:fe:57:60:30:30:b7:ae:ea:94:5e: f4:23:ad:ec:45:d8:43:a7:bc:80:e1:ee:77:96:24: f5:10:e7:23:6b:2a:a9:a9:11:fc:4b:eb:d7:e3:68: 52:75:2c:33:5c:25:1e:83:b5:5e:eb:7d:b5:89:85: 02:ac:0c:d2:b3:cb:03:71:a5:85:cc:bf:10:5b:74: 9c:e5:45:02:3d:1d:25:69:98:a0:79:7a:b7:b0:69: 20:26:b6:18:0b:c0:83:d3:af:f2:9a:1f:98:86:09: 42:98:05:ab:61:b0:b4:36:97:b4:33:f4:8a:51:3b: 77:b0:a2:48:cf:20:bc:3b:b4:28:01:93:06:1d:fd: c9:d2:72:5c:a9:49:cc:ba:c7:08:e9:23:cc:5f:4c: 1a:d0:b5:89:95:40:09:ac:39:9b:53:39:22:b5:49: 4f:af:93:77:a0:b3:9e:6f:c1:0a:b2:ad:2e:84:25: b2:c0:9f:17:8f:40:73:60:45:fc:9f:e9:03:81:c1: 35:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C5:20:37:5F:1F:A4:59:60:55:B6:6E:DB:28:22:64:15:03:3B:CC X509v3 Authority Key Identifier: keyid:0D:28:02:EC:43:90:5E:EA:38:76:02:B9:94:B8:B5:79:04:1C:85:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D2802EC43905EEA387602B994B8B579041C8507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/0D2802EC43905EEA387602B994B8B579041C8507.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:67:d2:18:78:53:ff:4a:b1:e9:2a:63:f6:70:f6:a3:d6:0f: be:c7:0b:8f:d6:b6:a6:db:ef:f4:d9:07:00:bf:bd:ae:a5:19: 49:df:68:23:0d:b5:f4:3a:94:09:d2:ff:01:b6:06:3b:6d:9f: 26:30:91:20:91:2c:59:0b:e2:7d:a5:3c:b5:0d:d4:f4:08:df: d8:ce:e4:0a:dc:6d:4e:ae:81:07:0a:3b:26:cd:e9:da:0c:15: 5d:54:7b:ae:52:c1:c2:30:26:96:cc:62:4f:64:f5:ea:65:aa: a2:5d:a0:e2:63:5a:14:7c:e5:6f:55:88:34:65:d3:ce:a7:c2: c9:e1:2c:bc:4d:1c:ee:a9:f7:07:3b:bd:ec:b2:d1:40:cd:28: c0:d1:1f:5d:ef:4f:ec:80:8b:cf:06:8d:dc:e4:d0:08:19:c7: 3a:8e:ec:a8:ac:d6:9a:38:b6:76:5c:13:92:ef:3f:fe:d0:5c: 8d:ab:02:0d:cc:86:30:aa:29:d8:8f:d0:1b:56:9b:7a:7d:fb: c6:60:b0:90:22:ab:d7:ff:cd:b8:82:b5:d4:85:70:1c:09:ab: 53:46:fb:09:2e:20:78:57:a8:68:e7:16:9e:94:19:fd:33:1e: b0:0f:86:2d:0c:2d:5c:1d:06:3d:ba:73:a1:1e:f4:ef:7a:4f: d7:0e:51:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDAKjmlYGa3/DtVndf+5R0cfsqW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1Nzkw NDFDODUwNzAeFw0yNjA5MjMxNTU1NTZaFw0yNjA5MjQxOTQyNTZaMDMxMTAvBgNV BAMTKDg2QzUyMDM3NUYxRkE0NTk2MDU1QjY2RURCMjgyMjY0MTUwMzNCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa9UMmSfMWja3R3RK+QGKWZ2vy tIBIN10k/FAC0yD7hVOR6W5rc0/eATCepFB6p2GRCaV0zx/tfoLX8gclBjhJ/ldg MDC3ruqUXvQjrexF2EOnvIDh7neWJPUQ5yNrKqmpEfxL69fjaFJ1LDNcJR6DtV7r fbWJhQKsDNKzywNxpYXMvxBbdJzlRQI9HSVpmKB5erewaSAmthgLwIPTr/KaH5iG CUKYBathsLQ2l7Qz9IpRO3ewokjPILw7tCgBkwYd/cnSclypScy6xwjpI8xfTBrQ tYmVQAmsOZtTOSK1SU+vk3egs55vwQqyrS6EJbLAnxePQHNgRfyf6QOBwTUZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhsUgN18fpFlgVbZu2ygiZBUDO8wwHwYDVR0j BBgwFoAUDSgC7EOQXuo4dgK5lLi1eQQchQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTNiYmYxZGEtZTMxNy00OGVmLWFkNmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0 MzkwNUVFQTM4NzYwMkI5OTRCOEI1NzkwNDFDODUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRDI4MDJFQzQzOTA1RUVBMzg3NjAyQjk5NEI4QjU3OTA0MUM4 NTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMEQyODAyRUM0MzkwNUVFQTM4NzYwMkI5OTRCOEI1 NzkwNDFDODUwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVn0hh4U/9KsekqY/Zw9qPWD77HC4/Wtqbb 7/TZBwC/va6lGUnfaCMNtfQ6lAnS/wG2BjttnyYwkSCRLFkL4n2lPLUN1PQI39jO 5ArcbU6ugQcKOybN6doMFV1Ue65SwcIwJpbMYk9k9eplqqJdoOJjWhR85W9ViDRl 086nwsnhLLxNHO6p9wc7veyy0UDNKMDRH13vT+yAi88Gjdzk0AgZxzqO7Kis1po4 tnZcE5LvP/7QXI2rAg3MhjCqKdiP0BtWm3p9+8ZgsJAiq9f/zbiCtdSFcBwJq1NG +wkuIHhXqGjnFp6UGf0zHrAPhi0MLVwdBj26c6Ee9O96T9cOUfw= -----END CERTIFICATE-----Generated at Thu Sep 24 01:57:17 2026 by rpki-client