$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.mft File: 0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.mft (raw, json) Hash identifier: eCPg2D4sSXb7TMmyYRiGufrsBi55GF6jSOCQ3JE4+3k= Subject key identifier: 0B:80:DA:94:8A:44:92:E6:1B:E7:2F:2A:3E:2E:08:F9:23:21:69:88 Authority key identifier: 0C:56:F3:DD:AD:22:0A:B9:DC:E7:B0:A6:96:ED:44:CE:77:BD:57:0F Certificate issuer: /CN=0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F Certificate serial: 19E9A20B3749B3C0C020D96B31FDD2BCB10FDC25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:05:46 +0000 Manifest this update: Wed 23 Sep 2026 20:00:46 +0000 Manifest next update: Thu 24 Sep 2026 21:14:46 +0000 Files and hashes: 1: 3230322e38302e3131322e302f32302d3234203d3e203233363939.roa (hash: wEY2lF+B/+lmh7kliYB2g0xWo++JPQxi7UmnAblWHes=) 2: 0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.crl (hash: TlPZu3sIZygamgai8yA9xiNsDL8LwixBuMiSgs1FjAw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.crl rsync://rpki-rsync.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e9:a2:0b:37:49:b3:c0:c0:20:d9:6b:31:fd:d2:bc:b1:0f:dc:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F Validity Not Before: Sep 23 20:00:46 2026 GMT Not After : Sep 24 21:14:46 2026 GMT Subject: CN=0B80DA948A4492E61BE72F2A3E2E08F923216988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:49:5e:ec:7f:a2:2d:51:91:c2:7d:dd:14:b2: be:03:79:a4:30:32:3b:ed:90:63:57:48:64:cd:dc: 4a:b5:08:67:6a:ee:ba:b4:11:4f:87:a2:2a:58:05: 96:db:3c:78:dc:a3:8e:87:ae:f6:80:c8:55:8d:7b: 47:fc:47:56:7b:42:29:46:ef:01:52:65:de:d9:69: c8:43:c9:cd:d2:c4:8f:a6:7a:88:36:4f:8a:59:d5: 53:7e:b3:6c:f3:35:3f:df:ea:e6:42:bc:2c:5f:84: 13:52:dd:48:79:e6:55:66:7e:13:26:c2:f8:ed:a3: 64:44:8a:16:9c:6e:bc:ec:4d:a0:c9:6e:4f:ff:da: 46:8d:b9:4d:85:6f:25:25:29:a5:3a:04:0d:8c:db: 6a:b3:30:8b:3d:d5:a0:ce:df:90:9a:85:ee:0d:5b: 9d:44:9f:3c:6a:0a:f5:ac:29:e4:1a:ff:a5:74:60: 49:6f:3d:76:6e:01:b7:89:de:d8:82:9d:76:54:9d: 71:ed:78:8c:0f:e2:90:43:f1:04:22:72:36:94:67: 2c:dd:82:ad:b5:6d:5c:86:11:1d:74:56:45:04:ae: 49:0c:56:c6:12:85:ae:78:e0:c7:a6:e7:5a:d0:e3: 17:11:19:14:a8:9a:75:da:e2:f3:5c:6d:c9:d0:69: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:80:DA:94:8A:44:92:E6:1B:E7:2F:2A:3E:2E:08:F9:23:21:69:88 X509v3 Authority Key Identifier: keyid:0C:56:F3:DD:AD:22:0A:B9:DC:E7:B0:A6:96:ED:44:CE:77:BD:57:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/0C56F3DDAD220AB9DCE7B0A696ED44CE77BD570F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0b:e9:bd:48:9d:40:5f:69:51:e0:6d:d8:9b:53:88:f6:56: b5:fa:04:ee:a0:0d:10:b0:09:f6:79:e6:8f:4b:88:b7:d6:07: 2e:5b:bc:96:6b:e2:96:ba:00:6d:b8:91:d7:17:f2:30:27:53: 71:a4:2f:f8:04:71:ad:92:8a:19:16:8c:bd:d4:79:15:6e:cc: 19:8a:67:78:79:bf:79:ed:94:01:2b:fb:c1:68:bd:a1:52:3e: cc:08:f0:11:47:29:7d:42:e9:d7:b5:95:52:c5:7c:6f:56:5d: 2d:d6:6c:7a:d7:0d:77:4e:2f:e5:c6:44:b5:5d:9d:ad:d8:a0: 9d:bf:93:bc:82:61:2f:ef:15:60:23:c2:92:6d:74:3c:0d:d0: 6a:9a:42:c7:ec:73:9b:9d:84:6c:99:39:ec:3e:f1:ff:68:3b: 04:89:03:0d:b7:cd:a8:ec:69:f8:5b:0b:f3:9b:f1:20:ec:ac: f9:f6:3f:88:ab:fe:55:13:c6:2a:b9:c7:5b:1e:90:da:ee:05: e6:a7:e3:09:aa:ca:b4:72:9e:c1:04:b2:09:69:ec:be:89:36: 6f:d5:2e:94:8b:4c:73:01:35:fc:80:41:c7:67:39:b1:a7:d7: de:b8:9f:9a:c3:4b:2e:b5:97:63:0e:e6:ac:c5:bb:75:03:8a: 04:82:c5:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGemiCzdJs8DAINlrMf3SvLEP3CUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM1NkYzRERBRDIyMEFCOURDRTdCMEE2OTZFRDQ0Q0U3 N0JENTcwRjAeFw0yNjA5MjMyMDAwNDZaFw0yNjA5MjQyMTE0NDZaMDMxMTAvBgNV BAMTKDBCODBEQTk0OEE0NDkyRTYxQkU3MkYyQTNFMkUwOEY5MjMyMTY5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmSV7sf6ItUZHCfd0Usr4DeaQw MjvtkGNXSGTN3Eq1CGdq7rq0EU+HoipYBZbbPHjco46HrvaAyFWNe0f8R1Z7QilG 7wFSZd7ZachDyc3SxI+meog2T4pZ1VN+s2zzNT/f6uZCvCxfhBNS3Uh55lVmfhMm wvjto2REihacbrzsTaDJbk//2kaNuU2FbyUlKaU6BA2M22qzMIs91aDO35Cahe4N W51EnzxqCvWsKeQa/6V0YElvPXZuAbeJ3tiCnXZUnXHteIwP4pBD8QQicjaUZyzd gq21bVyGER10VkUErkkMVsYSha544Mem51rQ4xcRGRSomnXa4vNcbcnQaYA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC4DalIpEkuYb5y8qPi4I+SMhaYgwHwYDVR0j BBgwFoAUDFbz3a0iCrnc57Cmlu1Ezne9Vw8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjM4YTIzMTktYjRmZi00OTczLThkYTktYzQxYWQyZjczMWYzLzAvMEM1NkYzRERB RDIyMEFCOURDRTdCMEE2OTZFRDQ0Q0U3N0JENTcwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQzU2RjNEREFEMjIwQUI5RENFN0IwQTY5NkVENDRDRTc3QkQ1 NzBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM4YTIzMTktYjRmZi00OTczLThk YTktYzQxYWQyZjczMWYzLzAvMEM1NkYzRERBRDIyMEFCOURDRTdCMEE2OTZFRDQ0 Q0U3N0JENTcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIL6b1InUBfaVHgbdibU4j2VrX6BO6gDRCw CfZ55o9LiLfWBy5bvJZr4pa6AG24kdcX8jAnU3GkL/gEca2SihkWjL3UeRVuzBmK Z3h5v3ntlAEr+8FovaFSPswI8BFHKX1C6de1lVLFfG9WXS3WbHrXDXdOL+XGRLVd na3YoJ2/k7yCYS/vFWAjwpJtdDwN0GqaQsfsc5udhGyZOew+8f9oOwSJAw23zajs afhbC/Ob8SDsrPn2P4ir/lUTxiq5x1sekNruBean4wmqyrRynsEEsglp7L6JNm/V LpSLTHMBNfyAQcdnObGn1964n5rDSy61l2MO5qzFu3UDigSCxWY= -----END CERTIFICATE-----Generated at Thu Sep 24 12:43:31 2026 by rpki-client