$ rpki-client -vvvf rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft File: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft (raw, json) Hash identifier: B/c4jBJFI2sm+nQkg3D8NWRzK78C9N1QgF6k7UVpsQk= Subject key identifier: 01:EF:DC:69:33:D8:91:64:5E:8C:FC:B7:35:0B:51:10:EC:2C:DD:38 Authority key identifier: 0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F Certificate issuer: /CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F Certificate serial: 6758E23D85F7FE0F89931B33CA8C5D36F91705B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft Manifest number: BE Signing time: Mon 21 Sep 2026 17:18:08 +0000 Manifest this update: Mon 21 Sep 2026 17:13:08 +0000 Manifest next update: Tue 22 Sep 2026 18:15:08 +0000 Files and hashes: 1: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: 6eZrQcS7fk+urKWjqhBrdX4ASTj5STJSLSE2pWSJoPQ=) 2: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl (hash: k70hliwj0Kdb8YL8MdZdzWNTvqx3pjGyNrGo0cah5sI=) 3: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: FeuEPBSyh4088t58wEF7WYPlFCQyhRPORfmVK/BUUf4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:58:e2:3d:85:f7:fe:0f:89:93:1b:33:ca:8c:5d:36:f9:17:05:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F Validity Not Before: Sep 21 17:13:08 2026 GMT Not After : Sep 22 18:15:08 2026 GMT Subject: CN=01EFDC6933D891645E8CFCB7350B5110EC2CDD38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:19:83:7d:18:fa:4d:a0:b8:3c:39:bd:09: 72:67:55:a8:5b:11:b9:c9:d3:25:16:aa:a8:ad:d5: 20:1e:38:62:5f:8e:32:ef:d9:25:0c:63:99:c2:77: 6d:15:f7:ab:e6:d1:cd:3b:11:3a:b6:bc:17:d0:77: f1:6d:a7:c3:23:a9:60:5e:2c:66:a3:6d:cc:33:63: 9c:0c:dd:e3:1e:2a:2e:e2:04:26:11:21:c8:a1:35: d4:8f:53:cb:dd:28:d9:97:4d:dc:51:61:25:8a:2c: f5:02:a9:3e:ed:c9:31:db:84:76:ac:b0:2c:84:f9: ad:5b:06:3b:54:e2:69:c1:dc:43:36:c3:10:48:d0: d0:86:78:0b:6b:71:5c:8a:55:48:85:88:f8:d0:8d: e5:bf:dd:91:39:05:d8:9d:5c:4a:bc:10:46:e1:8e: 95:c3:de:25:7a:5a:4c:c3:e1:3f:a1:9d:5a:18:50: 88:7b:22:a0:19:b0:25:a9:56:bf:48:5c:89:14:fd: e0:79:16:75:67:ea:20:0c:c6:91:80:e5:4a:5d:c4: 3c:fc:b2:c7:94:54:1c:a4:62:57:91:67:af:0b:50: a3:e5:78:60:7a:c8:f5:08:0e:b7:d4:f8:c0:62:34: 7f:27:65:6b:02:02:15:f2:4c:be:b9:81:38:13:3c: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EF:DC:69:33:D8:91:64:5E:8C:FC:B7:35:0B:51:10:EC:2C:DD:38 X509v3 Authority Key Identifier: keyid:0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:9a:6b:e8:c1:6b:62:e6:40:81:44:05:91:ff:d9:18:60:95: 42:97:13:03:ec:40:06:7a:a0:89:06:43:94:4e:c1:b9:ba:5b: 43:13:1e:56:63:d3:4c:4e:43:25:83:2c:51:f1:54:d2:b0:41: 89:dd:f1:c4:dc:d2:76:16:82:1b:78:de:6c:88:65:fd:70:c0: 2b:3c:c1:4c:1d:69:16:47:63:a2:ac:ea:73:c4:89:33:c0:a1: 48:3a:88:18:29:bc:0f:78:a5:94:3c:8e:59:d4:2b:88:7b:70: eb:a2:8d:80:1e:93:99:ac:40:df:6f:57:6d:4a:92:91:ed:71: de:bd:1e:fb:2d:b5:3d:d5:0d:ee:26:4c:b5:9f:40:9e:e6:95: 67:66:ce:73:5b:3e:fd:82:35:c0:57:55:15:1e:fc:23:56:2e: 87:91:8c:e2:5c:65:e2:10:89:ae:97:42:ca:9a:ce:c3:43:57: c6:84:59:4e:15:96:8f:bb:38:21:e7:1e:56:54:85:d5:9e:b1: 82:9b:86:e0:e3:b5:6f:ed:40:03:3d:3e:1a:4b:47:5c:10:6a: 47:8d:2c:51:f0:86:ef:60:7b:84:97:4a:68:0f:9a:6a:8a:5e: 4c:85:23:95:0b:62:64:c1:5c:36:1c:c1:eb:27:c7:e4:f9:d4: 44:dd:f9:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1jiPYX3/g+JkxszyoxdNvkXBbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1 QkZCOUEwRjAeFw0yNjA5MjExNzEzMDhaFw0yNjA5MjIxODE1MDhaMDMxMTAvBgNV BAMTKDAxRUZEQzY5MzNEODkxNjQ1RThDRkNCNzM1MEI1MTEwRUMyQ0REMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJBmDfRj6TaC4PDm9CXJnVahb EbnJ0yUWqqit1SAeOGJfjjLv2SUMY5nCd20V96vm0c07ETq2vBfQd/Ftp8MjqWBe LGajbcwzY5wM3eMeKi7iBCYRIcihNdSPU8vdKNmXTdxRYSWKLPUCqT7tyTHbhHas sCyE+a1bBjtU4mnB3EM2wxBI0NCGeAtrcVyKVUiFiPjQjeW/3ZE5BdidXEq8EEbh jpXD3iV6WkzD4T+hnVoYUIh7IqAZsCWpVr9IXIkU/eB5FnVn6iAMxpGA5UpdxDz8 sseUVBykYleRZ68LUKPleGB6yPUIDrfU+MBiNH8nZWsCAhXyTL65gTgTPBr/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAe/caTPYkWRejPy3NQtREOws3TgwHwYDVR0j BBgwFoAUC9TgBeTZdS+hvE9SrvXIB1v7mg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJiNzE1MzYtNzE3ZS00NWRiLWEwM2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVF NEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1QkZCOUEwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkQ0RTAwNUU0RDk3NTJGQTFCQzRGNTJBRUY1QzgwNzVCRkI5 QTBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4 MDc1QkZCOUEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqaa+jBa2LmQIFEBZH/2RhglUKXEwPsQAZ6 oIkGQ5ROwbm6W0MTHlZj00xOQyWDLFHxVNKwQYnd8cTc0nYWght43myIZf1wwCs8 wUwdaRZHY6Ks6nPEiTPAoUg6iBgpvA94pZQ8jlnUK4h7cOuijYAek5msQN9vV21K kpHtcd69HvsttT3VDe4mTLWfQJ7mlWdmznNbPv2CNcBXVRUe/CNWLoeRjOJcZeIQ ia6XQsqazsNDV8aEWU4Vlo+7OCHnHlZUhdWesYKbhuDjtW/tQAM9PhpLR1wQakeN LFHwhu9ge4SXSmgPmmqKXkyFI5ULYmTBXDYcwesnx+T51ETd+ec= -----END CERTIFICATE-----Generated at Tue Sep 22 03:24:31 2026 by rpki-client