$ rpki-client -vvvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft File: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft (raw, json) Hash identifier: +W8UsC/KZ/Dea5K8bb78lVO8YB+zk8hey1tBbJYrg9w= Subject key identifier: B3:37:6C:7D:6E:EF:94:C0:21:33:BD:60:D7:86:28:F1:DC:62:24:2D Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 Certificate issuer: /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Certificate serial: 42DE60A4578BFABA71198F6062D2A8D92FD2B46E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft Manifest number: BF Signing time: Mon 21 Sep 2026 09:48:45 +0000 Manifest this update: Mon 21 Sep 2026 09:43:45 +0000 Manifest next update: Tue 22 Sep 2026 11:40:45 +0000 Files and hashes: 1: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: zvwgezfW86SlRC31YjwJ71lKNs9pTZisRey08uUZDrw=) 2: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: p4ukH1H84E2OXHZ0f+4rfYiVhbuRJ3ak7nrQukeOEIw=) 3: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: aop1U/z5XKpBzcRvoj7W7+/ffJTbEvTMlvj03extEio=) 4: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: t0sQe3wy1nx7fCaoG1vw4eb+2MVxEa2LAolsSj9bAGg=) 5: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: F62HpzCPf0jVzJzqHRtqYgkpCr6Z0Ln+rY5et4Po02Y=) 6: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: j/oR6MYId1xXKHb1Z5SsBRuqUKKVLnH73F7eTR7zcCg=) 7: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: jpiOTHzKh1vGnb3tSE/Xoje7GEL1N7x9x1Df56pKagM=) 8: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: fb53zmVp3ZEKD6KlMvVv2uQVwzv7wo/XFESLY4RW+fc=) 9: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: 5tf246IHwaj7s4oEu9nu0sb2z4yR2BLV01+7PT3/O1c=) 10: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: dDbCFuKbC0+1oibgHS1pBLUQZLf12v2I7Ivqihl/WFA=) 11: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: iKmDknm+sz9G+4ieO2jOHSbGQz1z9iCG43k/bYAHB3k=) 12: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl (hash: 0N759PJPYBzIc5gMVlbNVN/KdlM+h/NCgWcCVm4NXNY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:de:60:a4:57:8b:fa:ba:71:19:8f:60:62:d2:a8:d9:2f:d2:b4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Validity Not Before: Sep 21 09:43:45 2026 GMT Not After : Sep 22 11:40:45 2026 GMT Subject: CN=B3376C7D6EEF94C02133BD60D78628F1DC62242D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:96:89:35:e6:8c:54:c7:3a:5c:79:3d:e0: cb:15:f1:4a:32:6d:89:e6:12:01:21:f7:c2:59:ad: 72:1e:56:bb:7e:bb:ef:d4:93:43:d0:15:41:6b:16: 57:3a:d8:8a:2e:cd:2b:35:6a:ab:d8:6f:45:cb:56: 56:d7:1e:e3:f0:8d:e1:a4:b8:7d:f3:90:a0:44:36: ef:fb:df:79:36:bd:94:47:29:a6:9e:35:d4:ce:d2: 75:e1:61:f0:57:0a:2f:f8:14:5b:52:cc:32:7d:f6: be:ac:3f:80:f6:fd:6b:a3:ac:71:bf:f0:4d:50:9d: 0c:9a:7a:e5:ed:73:17:ce:6a:82:cc:3b:fa:81:67: bc:19:37:5a:fd:38:1a:bf:f6:52:e9:33:0a:38:22: 63:23:86:b8:30:e1:8c:eb:a3:fc:d3:5c:4b:27:2d: 49:96:cb:41:57:b9:7e:ed:31:ea:ef:b5:07:48:58: d6:15:73:a7:5b:08:11:b2:5b:89:1f:ad:29:6d:cf: bc:e5:a7:62:b2:15:d5:06:93:ed:e1:33:f8:68:61: 73:59:84:7f:60:8e:70:95:9c:45:be:c4:70:22:c3: c1:36:26:fb:23:c5:e0:25:34:44:f1:7a:e4:22:9a: 65:29:4e:e5:e9:ec:cb:94:7f:ce:fc:14:b6:b6:3c: b2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:37:6C:7D:6E:EF:94:C0:21:33:BD:60:D7:86:28:F1:DC:62:24:2D X509v3 Authority Key Identifier: keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:5f:e7:a4:1a:ea:31:1e:cc:eb:90:5c:90:c4:05:96:33:6d: 39:1d:1b:64:08:63:3e:ab:05:e0:30:83:18:c6:e4:18:93:60: 96:ba:6f:f6:8c:1e:9c:0b:2e:93:91:b6:29:07:c7:5f:71:f2: 44:53:1e:c3:42:47:13:8e:0f:7f:aa:f0:50:d2:a3:f3:14:3e: 23:b8:6b:6f:f1:13:a6:af:23:59:b2:ce:72:1a:c5:37:49:ac: df:13:94:51:df:0b:9f:6e:53:72:34:65:94:4c:79:75:fc:7b: 7e:8d:55:84:26:e8:51:0a:6b:18:b4:6b:3e:72:d3:1f:68:32: 14:66:1a:c0:8f:0a:c2:5e:c5:9a:3a:ca:6f:05:79:39:92:87: 83:5e:f1:27:e8:a2:65:53:91:60:38:20:ac:71:07:25:83:39: 45:db:4f:dc:a8:aa:b7:c1:52:11:17:0d:c1:bf:40:18:01:3a: c9:0b:42:04:5d:9b:75:21:f1:18:5a:f3:09:31:7e:2f:14:06: 98:ba:24:67:b0:36:18:b2:3c:d0:ee:55:9c:3d:86:fa:73:a5: 7a:54:2c:e3:ba:1f:51:0f:d0:05:46:36:0c:62:85:df:b4:02: 64:24:69:35:df:fc:a7:77:31:39:0f:24:02:7f:2e:93:f9:08: 80:3c:c1:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQt5gpFeL+rpxGY9gYtKo2S/StG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJC REE5OUNCMDAeFw0yNjA5MjEwOTQzNDVaFw0yNjA5MjIxMTQwNDVaMDMxMTAvBgNV BAMTKEIzMzc2QzdENkVFRjk0QzAyMTMzQkQ2MEQ3ODYyOEYxREM2MjI0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHtJaJNeaMVMc6XHk94MsV8Uoy bYnmEgEh98JZrXIeVrt+u+/Uk0PQFUFrFlc62IouzSs1aqvYb0XLVlbXHuPwjeGk uH3zkKBENu/733k2vZRHKaaeNdTO0nXhYfBXCi/4FFtSzDJ99r6sP4D2/WujrHG/ 8E1QnQyaeuXtcxfOaoLMO/qBZ7wZN1r9OBq/9lLpMwo4ImMjhrgw4Yzro/zTXEsn LUmWy0FXuX7tMervtQdIWNYVc6dbCBGyW4kfrSltz7zlp2KyFdUGk+3hM/hoYXNZ hH9gjnCVnEW+xHAiw8E2JvsjxeAlNETxeuQimmUpTuXp7MuUf878FLa2PLJ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUszdsfW7vlMAhM71g14Yo8dxiJC0wHwYDVR0j BBgwFoAUD7Qksg1qRYDm0yM/zy658r2pnLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM4ZDI3NTUtMzgwZC00NzdlLWJmMjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIw RDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJCREE5OUNCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI0MjRCMjBENkE0NTgwRTZEMzIzM0ZDRjJFQjlGMkJEQTk5 Q0IwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM4ZDI3NTUtMzgwZC00NzdlLWJm MjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5 RjJCREE5OUNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhf56Qa6jEezOuQXJDEBZYzbTkdG2QIYz6r BeAwgxjG5BiTYJa6b/aMHpwLLpORtikHx19x8kRTHsNCRxOOD3+q8FDSo/MUPiO4 a2/xE6avI1myznIaxTdJrN8TlFHfC59uU3I0ZZRMeXX8e36NVYQm6FEKaxi0az5y 0x9oMhRmGsCPCsJexZo6ym8FeTmSh4Ne8SfoomVTkWA4IKxxByWDOUXbT9yoqrfB UhEXDcG/QBgBOskLQgRdm3Uh8Rha8wkxfi8UBpi6JGewNhiyPNDuVZw9hvpzpXpU LOO6H1EP0AVGNgxihd+0AmQkaTXf/Kd3MTkPJAJ/LpP5CIA8wak= -----END CERTIFICATE-----Generated at Mon Sep 21 21:58:07 2026 by rpki-client