$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft File: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft (raw, json) Hash identifier: WBfUokiRSRyxX9tX0WJVNUq2ujlSCDv2+tU5OiNh4FM= Subject key identifier: 24:4F:56:9C:81:B0:9A:1B:2B:E1:42:4B:11:71:DF:62:40:10:4D:36 Authority key identifier: 0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F Certificate issuer: /CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Certificate serial: 2CC306B27D6631B4CA9C4705C1AEBFC998C7D414 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft Manifest number: BD Signing time: Sun 20 Sep 2026 18:09:14 +0000 Manifest this update: Sun 20 Sep 2026 18:04:14 +0000 Manifest next update: Mon 21 Sep 2026 20:45:14 +0000 Files and hashes: 1: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl (hash: nLmJyoleBEpbWBw9NJsWMVreQaPWw43RlP6kzT5w9jY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c3:06:b2:7d:66:31:b4:ca:9c:47:05:c1:ae:bf:c9:98:c7:d4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Validity Not Before: Sep 20 18:04:14 2026 GMT Not After : Sep 21 20:45:14 2026 GMT Subject: CN=244F569C81B09A1B2BE1424B1171DF6240104D36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:db:5e:cd:be:77:eb:a2:41:19:7a:8d:84:da: d8:b0:35:e7:91:38:5e:16:6b:de:eb:79:50:cb:2a: 37:cf:e8:25:30:55:28:3f:fa:05:8c:c0:3e:29:c4: 4e:79:ae:cc:29:44:48:d4:16:22:18:ae:d6:c7:37: d3:0d:68:24:a3:db:9c:51:6c:28:f1:53:3b:ea:db: 3b:52:a5:2b:a5:79:c5:41:0b:7f:5a:10:2a:87:fe: 36:d0:0f:61:14:70:a9:28:1b:25:2b:a2:1b:5a:3d: dd:d6:6a:8b:77:10:54:34:60:14:9e:48:05:05:af: 96:67:40:70:a5:fa:6b:30:40:cd:47:eb:59:1d:ef: e0:e2:bf:7d:dd:e1:72:08:69:00:00:bb:a7:3d:09: a3:de:60:06:dd:43:7b:d0:78:97:e4:69:f8:17:fe: 79:2c:8f:28:93:fe:ae:cd:bb:8b:0a:44:6a:16:05: 37:51:d7:dd:b2:3d:c5:59:ae:a7:9a:93:18:b6:4d: 2c:6a:79:6e:11:99:93:8d:b6:9a:7a:cd:7e:a5:11: 7f:23:08:24:50:44:7e:7b:63:4c:90:e3:2e:c8:81: a7:8d:67:ff:94:a7:91:da:a9:ed:ad:6d:19:62:08: be:fc:31:8d:ea:b9:9a:60:87:a0:5d:2e:72:22:e6: b0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4F:56:9C:81:B0:9A:1B:2B:E1:42:4B:11:71:DF:62:40:10:4D:36 X509v3 Authority Key Identifier: keyid:0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c2:a5:8c:5c:df:06:76:ed:b7:1d:54:1d:33:94:9e:bf:2f: 0a:36:d5:f9:c1:8f:56:b9:41:d7:19:d5:cd:3d:36:cf:35:79: 0f:99:ca:62:f9:5d:a8:2a:4e:6f:06:30:40:a1:a9:d9:88:9d: 22:3d:97:c6:43:c0:e6:3a:da:6d:3f:43:ab:95:36:8c:e5:08: 38:97:57:63:15:d6:7a:51:77:09:15:2e:21:de:c6:9f:d0:a8: 41:5e:bc:e3:fa:e8:22:d5:be:e3:e9:8a:19:34:bd:b8:39:a6: a5:e2:f3:69:62:71:49:ed:11:e6:e3:76:5d:e0:ec:4d:e5:fd: fd:52:41:94:ad:b8:34:13:03:5c:cb:00:d1:be:d6:b2:18:c9: 5d:61:ae:83:98:e6:e4:6e:fc:20:ca:7a:9e:ce:79:7f:0a:6b: 3f:97:b6:f0:a1:dd:58:0c:eb:8f:f9:c2:7b:56:78:55:51:c6: 43:12:d4:6a:b4:8c:1d:52:29:1e:8d:74:5f:30:26:ec:16:08: 53:82:b1:35:14:ee:c7:97:ae:4a:96:63:25:34:8d:96:cc:04: 35:8c:e7:f9:8d:9c:81:1f:80:e0:3e:14:85:f4:4d:14:ed:53: 9d:97:31:89:fa:49:53:de:62:c2:2a:03:f9:52:6e:b5:50:b9: 00:4f:7d:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMMGsn1mMbTKnEcFwa6/yZjH1BQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFG MjQ4OTIwRjAeFw0yNjA5MjAxODA0MTRaFw0yNjA5MjEyMDQ1MTRaMDMxMTAvBgNV BAMTKDI0NEY1NjlDODFCMDlBMUIyQkUxNDI0QjExNzFERjYyNDAxMDREMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb217NvnfrokEZeo2E2tiwNeeR OF4Wa97reVDLKjfP6CUwVSg/+gWMwD4pxE55rswpREjUFiIYrtbHN9MNaCSj25xR bCjxUzvq2ztSpSulecVBC39aECqH/jbQD2EUcKkoGyUrohtaPd3Waot3EFQ0YBSe SAUFr5ZnQHCl+mswQM1H61kd7+Div33d4XIIaQAAu6c9CaPeYAbdQ3vQeJfkafgX /nksjyiT/q7Nu4sKRGoWBTdR192yPcVZrqeakxi2TSxqeW4RmZONtpp6zX6lEX8j CCRQRH57Y0yQ4y7IgaeNZ/+Up5Haqe2tbRliCL78MY3quZpgh6BdLnIi5rAvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJE9WnIGwmhsr4UJLEXHfYkAQTTYwHwYDVR0j BBgwFoAUD7YeF9tcOnxr6ggOJH4jcfJIkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdE QjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFGMjQ4OTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI2MUUxN0RCNUMzQTdDNkJFQTA4MEUyNDdFMjM3MUYyNDg5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIz NzFGMjQ4OTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPCpYxc3wZ27bcdVB0zlJ6/Lwo21fnBj1a5 QdcZ1c09Ns81eQ+ZymL5XagqTm8GMEChqdmInSI9l8ZDwOY62m0/Q6uVNozlCDiX V2MV1npRdwkVLiHexp/QqEFevOP66CLVvuPpihk0vbg5pqXi82licUntEebjdl3g 7E3l/f1SQZStuDQTA1zLANG+1rIYyV1hroOY5uRu/CDKep7OeX8Kaz+XtvCh3VgM 64/5wntWeFVRxkMS1Gq0jB1SKR6NdF8wJuwWCFOCsTUU7seXrkqWYyU0jZbMBDWM 5/mNnIEfgOA+FIX0TRTtU52XMYn6SVPeYsIqA/lSbrVQuQBPfaE= -----END CERTIFICATE-----Generated at Mon Sep 21 07:04:50 2026 by rpki-client