$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft File: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft (raw, json) Hash identifier: grsKcZ4U3MuXtZNqFEuOWjyCCm3oCY22cC0OyAU9frU= Subject key identifier: 3F:3C:FF:38:E7:4B:87:39:4D:B4:D1:5C:F8:10:FD:82:75:40:11:9E Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE Certificate issuer: /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Certificate serial: 4B0F7FF7B7DC14D79D44D711CBFB04FAE2943E83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 02:33:49 +0000 Manifest this update: Thu 24 Sep 2026 02:28:49 +0000 Manifest next update: Fri 25 Sep 2026 03:31:49 +0000 Files and hashes: 1: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: Q7IDKK7bd4+D1LbWjZoromCTyfDrru1LNqDTxcv/O1c=) 2: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: pcqtzLzNaNYPks2/OHv2K1hXp8EkBWXZ157lBF+eG6I=) 3: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl (hash: 6TMF+CTIXdIJKkAUFIjHmPLnLX4xTshhek6KEWTZ27I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0f:7f:f7:b7:dc:14:d7:9d:44:d7:11:cb:fb:04:fa:e2:94:3e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Validity Not Before: Sep 24 02:28:49 2026 GMT Not After : Sep 25 03:31:49 2026 GMT Subject: CN=3F3CFF38E74B87394DB4D15CF810FD827540119E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a2:04:ca:8e:11:68:03:14:6f:7e:97:99:0d: 34:7e:dd:43:16:32:a3:4e:c4:10:76:82:6c:04:26: 16:10:7a:2e:41:c5:5e:e9:30:36:b0:67:03:f5:a9: 63:9f:68:30:89:aa:9e:f6:c6:6f:78:be:43:a8:21: 6f:bc:b3:7e:5e:19:10:aa:a6:85:84:a0:59:8a:ac: 64:00:3d:fd:97:41:d9:a1:cd:50:e5:d7:8a:b1:f3: a3:e4:f9:78:c3:a7:ff:21:93:23:74:e1:c9:d5:70: 10:45:68:b4:ed:74:82:cc:a6:0c:76:22:96:e1:2d: 80:66:09:b7:ea:5d:ae:fa:f9:33:14:09:7f:6e:8b: 21:45:23:6a:82:39:c2:29:83:11:a7:2f:fd:94:f6: 48:25:ac:ea:dd:f2:d9:24:13:14:ec:4d:79:b8:d0: 41:e4:99:35:97:af:50:f6:19:39:16:46:35:aa:40: be:8f:53:78:04:b9:64:22:66:3c:d9:12:70:36:d1: 1c:35:34:17:40:25:8d:61:10:47:0b:cc:ac:5b:be: 40:89:70:26:8d:c9:2f:69:35:f5:cf:47:6e:70:30: 97:9c:38:fa:09:5e:82:9a:d5:91:10:c0:59:29:23: 91:e7:ad:b1:18:0d:ca:b5:a1:b3:6c:73:f1:53:7a: c8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3C:FF:38:E7:4B:87:39:4D:B4:D1:5C:F8:10:FD:82:75:40:11:9E X509v3 Authority Key Identifier: keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:db:a0:e5:82:c2:0d:ef:5d:28:c3:8c:1d:d8:60:14:a6:17: 67:c6:35:8c:55:f5:f3:8d:d5:55:66:5e:6b:d4:ee:7b:e2:4f: f3:1e:c4:8e:1b:eb:02:e2:93:f9:7c:ab:a4:b8:8c:bf:81:04: 8d:31:3b:47:c2:61:95:76:6a:ba:e0:d5:9a:50:58:91:3f:08: 06:91:ce:22:c0:71:f2:fe:7a:b0:e9:75:7e:b3:2f:73:29:3d: 15:7a:e5:14:d8:74:45:01:f1:17:aa:ad:35:a1:fd:2f:ec:b2: 9a:fa:fd:d6:cc:f2:d1:7d:40:c8:f0:97:7a:69:bf:15:b4:a4: 98:8d:01:47:cd:df:dd:89:0b:fc:c3:d9:03:1b:9a:57:61:02: 2b:ed:b0:a6:a6:6c:26:34:6f:c8:de:7e:82:e2:9d:3f:5c:23: 50:7c:63:58:2f:55:87:ac:77:85:d5:6d:b2:bf:a9:e7:17:98: 0e:06:0e:02:5d:92:47:ba:b7:d4:be:da:0b:d0:96:22:65:da: ba:d2:a2:31:22:50:27:55:d7:4c:91:22:46:89:5f:49:6c:fb: 2b:1d:e1:6e:27:b3:d2:34:e4:e5:23:ce:ba:a3:c9:76:7c:53: e3:d7:82:81:d1:f9:e9:e5:f6:bb:0f:9e:4a:af:b0:4a:3b:38: 16:34:0a:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSw9/97fcFNedRNcRy/sE+uKUPoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThD NkNFQ0JCRTAeFw0yNjA5MjQwMjI4NDlaFw0yNjA5MjUwMzMxNDlaMDMxMTAvBgNV BAMTKDNGM0NGRjM4RTc0Qjg3Mzk0REI0RDE1Q0Y4MTBGRDgyNzU0MDExOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpogTKjhFoAxRvfpeZDTR+3UMW MqNOxBB2gmwEJhYQei5BxV7pMDawZwP1qWOfaDCJqp72xm94vkOoIW+8s35eGRCq poWEoFmKrGQAPf2XQdmhzVDl14qx86Pk+XjDp/8hkyN04cnVcBBFaLTtdILMpgx2 IpbhLYBmCbfqXa76+TMUCX9uiyFFI2qCOcIpgxGnL/2U9kglrOrd8tkkExTsTXm4 0EHkmTWXr1D2GTkWRjWqQL6PU3gEuWQiZjzZEnA20Rw1NBdAJY1hEEcLzKxbvkCJ cCaNyS9pNfXPR25wMJecOPoJXoKa1ZEQwFkpI5HnrbEYDcq1obNsc/FTesh5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPzz/OOdLhzlNtNFc+BD9gnVAEZ4wHwYDVR0j BBgwFoAUC/1q3Lz3RXwFx/qRppWHWMbOy74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmYyNTA2YjEtMzk2ZC00OTllLWI3ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENC Q0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThDNkNFQ0JCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkZENkFEQ0JDRjc0NTdDMDVDN0ZBOTFBNjk1ODc1OEM2Q0VD QkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3 NThDNkNFQ0JCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrboOWCwg3vXSjDjB3YYBSmF2fGNYxV9fON 1VVmXmvU7nviT/MexI4b6wLik/l8q6S4jL+BBI0xO0fCYZV2arrg1ZpQWJE/CAaR ziLAcfL+erDpdX6zL3MpPRV65RTYdEUB8ReqrTWh/S/sspr6/dbM8tF9QMjwl3pp vxW0pJiNAUfN392JC/zD2QMbmldhAivtsKambCY0b8jefoLinT9cI1B8Y1gvVYes d4XVbbK/qecXmA4GDgJdkke6t9S+2gvQliJl2rrSojEiUCdV10yRIkaJX0ls+ysd 4W4ns9I05OUjzrqjyXZ8U+PXgoHR+enl9rsPnkqvsEo7OBY0Crw= -----END CERTIFICATE-----Generated at Thu Sep 24 10:39:52 2026 by rpki-client