$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft File: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft (raw, json) Hash identifier: +9rTbOuHT97oFNoYbjx9VQrSGF4N62lmEjZayMlIkGw= Subject key identifier: 75:A0:92:C8:1D:B7:17:62:C1:86:97:7B:E4:74:C3:A0:DC:BD:D9:97 Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE Certificate issuer: /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Certificate serial: 4DE0587C9CEEA1BFD6C53E2DDB379DD51404E2D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 09:06:06 +0000 Manifest this update: Sat 26 Sep 2026 09:01:06 +0000 Manifest next update: Sun 27 Sep 2026 12:59:06 +0000 Files and hashes: 1: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: pcqtzLzNaNYPks2/OHv2K1hXp8EkBWXZ157lBF+eG6I=) 2: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl (hash: Ysi8/iUSxZRHXo9mHxn7WNIUxFbrGqTZcolOStm16QI=) 3: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: Q7IDKK7bd4+D1LbWjZoromCTyfDrru1LNqDTxcv/O1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e0:58:7c:9c:ee:a1:bf:d6:c5:3e:2d:db:37:9d:d5:14:04:e2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Validity Not Before: Sep 26 09:01:06 2026 GMT Not After : Sep 27 12:59:06 2026 GMT Subject: CN=75A092C81DB71762C186977BE474C3A0DCBDD997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:f5:21:97:b6:47:6b:61:7b:4c:b6:82:20: d6:c8:62:b7:e5:39:03:98:65:4c:bf:22:17:b4:71: e4:56:83:65:ae:00:4a:c0:6c:ed:ab:64:a3:f6:29: 45:d6:d9:cd:63:48:cc:0b:8e:fa:04:dc:74:f3:9a: c1:8a:3d:99:9a:76:d0:e5:fd:3e:9f:02:28:b4:3f: 6f:b5:31:f5:87:01:73:f9:8f:ba:f3:34:5c:75:f9: 3b:12:7c:48:28:21:8f:f9:0f:b6:6a:d5:dd:fa:75: 7f:a1:cc:df:22:cf:0b:81:96:cb:91:1e:b3:f8:f2: 59:28:45:b1:58:17:01:0c:e1:16:74:1b:72:7a:85: c2:a2:41:56:a7:95:8f:b1:ac:a6:81:b8:d2:20:cd: cb:27:49:02:55:89:e2:cd:ab:c7:9c:89:a0:d6:10: 77:8a:d3:e0:df:c1:c2:ab:98:6f:f8:15:29:21:ab: 04:e2:e2:eb:1b:9d:eb:df:e9:a8:0b:99:86:41:25: fb:4a:b7:44:42:d4:42:a7:c1:c5:d4:01:d1:a4:b7: 15:6a:ec:df:ed:82:cf:0f:2d:c4:5a:87:63:91:c0: 26:bf:fe:f2:be:66:be:44:7c:c4:02:9b:08:a9:bf: 6a:91:91:98:8f:d2:c1:a3:1f:ed:4d:95:0f:bd:b4: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A0:92:C8:1D:B7:17:62:C1:86:97:7B:E4:74:C3:A0:DC:BD:D9:97 X509v3 Authority Key Identifier: keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:22:a5:8b:e3:46:9c:82:17:0d:fc:cd:b0:fc:44:cb:8b:89: a1:78:08:95:e7:ef:bd:5f:ef:01:41:fd:9f:45:dc:9e:68:44: 53:58:81:cd:0d:2b:1d:a8:56:8f:03:13:b9:84:04:c1:6e:0e: 18:5c:53:c5:e8:8e:7c:5d:6d:82:ca:55:f5:ea:c0:0f:7d:1a: 93:62:86:99:3e:56:20:61:d7:ba:f2:e8:a7:ca:81:d4:55:26: 12:c2:7b:09:8a:30:f8:4c:3f:da:80:6e:56:a6:26:b8:72:8f: dd:d1:05:70:7c:9e:af:05:9e:ed:b2:4e:95:0b:d8:a9:d4:7c: 7f:57:12:42:a0:23:34:f6:80:51:1b:db:fd:6b:7a:c9:84:4e: ec:b8:66:cf:c4:6c:89:40:2e:75:00:34:cb:8a:3f:5b:4d:fe: 21:f7:5f:01:d5:23:d5:e0:fa:54:3e:f8:af:cd:28:9d:ba:7b: 91:3c:fa:a1:fa:ff:ff:65:55:60:34:e0:2c:39:f3:b4:f8:f7: 40:27:80:9a:7a:5b:a3:18:8a:cb:8e:e2:07:26:f1:ba:83:e9: 2d:88:54:17:69:1a:07:6b:73:af:d1:72:c9:4c:49:40:c7:dc: 03:f6:9a:ce:45:48:85:f2:5a:cf:0f:2d:f6:c7:fa:95:ab:a5: 11:fa:38:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTeBYfJzuob/WxT4t2zed1RQE4tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThD NkNFQ0JCRTAeFw0yNjA5MjYwOTAxMDZaFw0yNjA5MjcxMjU5MDZaMDMxMTAvBgNV BAMTKDc1QTA5MkM4MURCNzE3NjJDMTg2OTc3QkU0NzRDM0EwRENCREQ5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PvUhl7ZHa2F7TLaCINbIYrfl OQOYZUy/Ihe0ceRWg2WuAErAbO2rZKP2KUXW2c1jSMwLjvoE3HTzmsGKPZmadtDl /T6fAii0P2+1MfWHAXP5j7rzNFx1+TsSfEgoIY/5D7Zq1d36dX+hzN8izwuBlsuR HrP48lkoRbFYFwEM4RZ0G3J6hcKiQVanlY+xrKaBuNIgzcsnSQJVieLNq8eciaDW EHeK0+DfwcKrmG/4FSkhqwTi4usbnevf6agLmYZBJftKt0RC1EKnwcXUAdGktxVq 7N/tgs8PLcRah2ORwCa//vK+Zr5EfMQCmwipv2qRkZiP0sGjH+1NlQ+9tNC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdaCSyB23F2LBhpd75HTDoNy92ZcwHwYDVR0j BBgwFoAUC/1q3Lz3RXwFx/qRppWHWMbOy74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmYyNTA2YjEtMzk2ZC00OTllLWI3ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENC Q0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThDNkNFQ0JCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkZENkFEQ0JDRjc0NTdDMDVDN0ZBOTFBNjk1ODc1OEM2Q0VD QkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3 NThDNkNFQ0JCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgipYvjRpyCFw38zbD8RMuLiaF4CJXn771f 7wFB/Z9F3J5oRFNYgc0NKx2oVo8DE7mEBMFuDhhcU8XojnxdbYLKVfXqwA99GpNi hpk+ViBh17ry6KfKgdRVJhLCewmKMPhMP9qAblamJrhyj93RBXB8nq8Fnu2yTpUL 2KnUfH9XEkKgIzT2gFEb2/1resmETuy4Zs/EbIlALnUANMuKP1tN/iH3XwHVI9Xg +lQ++K/NKJ26e5E8+qH6//9lVWA04Cw587T490AngJp6W6MYisuO4gcm8bqD6S2I VBdpGgdrc6/RcslMSUDH3AP2ms5FSIXyWs8PLfbH+pWrpRH6OKw= -----END CERTIFICATE-----Generated at Sat Sep 26 15:12:49 2026 by rpki-client