$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft File: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft (raw, json) Hash identifier: CiaPSx6IRZCIhuhrV82vubbXBV3CCoMy1NpYBHZyC6s= Subject key identifier: 92:1B:C2:07:AA:D8:4D:B3:9E:9B:F1:9E:6D:E0:E9:67:AA:41:8E:77 Authority key identifier: 0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA Certificate issuer: /CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Certificate serial: 57A52E8B856BC2248EC9D2A4686DD19F441BF6DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft Manifest number: BE Signing time: Mon 21 Sep 2026 22:29:29 +0000 Manifest this update: Mon 21 Sep 2026 22:24:29 +0000 Manifest next update: Wed 23 Sep 2026 02:20:29 +0000 Files and hashes: 1: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: dKm4h4htb+xuOuzBD2j/P3WbreIMIoqa9hQCTFJdoG0=) 2: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: AfqLgmWvcp/HfbbhsOhmQtK0n/maxUMDksVbAZ7tmAM=) 3: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: wGWAkljELKeAaAd3PWlxElTnzVBFIyJlkgaeJs8LIbg=) 4: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl (hash: BGGCH7jOYVAajY0kZwwf13EsmYBQtfNt8c71a1Olv8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a5:2e:8b:85:6b:c2:24:8e:c9:d2:a4:68:6d:d1:9f:44:1b:f6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Validity Not Before: Sep 21 22:24:29 2026 GMT Not After : Sep 23 02:20:29 2026 GMT Subject: CN=921BC207AAD84DB39E9BF19E6DE0E967AA418E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:a2:f8:2d:87:9c:0d:28:60:e5:2d:1a:0d: e8:8a:f7:6d:9c:7f:dd:0c:b6:43:da:86:da:12:54: d3:ae:4e:8a:1f:ce:c6:76:7c:62:6f:87:82:50:29: d3:9f:c2:33:9a:af:4c:d2:05:59:33:4b:28:16:1a: 45:1e:01:68:ff:0f:40:41:a2:46:14:21:ef:6b:77: dd:d4:1e:2c:6d:a3:4d:59:c9:6f:47:61:c5:d7:63: 96:77:55:c8:2d:72:23:72:2b:e6:02:0d:98:4d:8c: 29:11:f2:2d:99:91:71:93:d0:40:1b:6b:fe:34:df: f4:4e:bc:5a:73:00:f6:be:d5:f2:73:fc:ad:fe:c9: 0f:e4:7f:e4:04:70:a9:de:44:f3:6e:30:92:dd:f2: b2:c6:0f:d9:5a:0b:fa:c4:38:80:b4:02:cd:2f:0f: 54:83:5e:98:35:85:21:1a:18:a4:29:c7:22:de:f6: c8:4f:40:b6:b6:a0:68:26:b4:4b:2c:72:16:fa:af: fb:5c:52:7d:5d:1b:0f:09:95:4a:7d:78:af:f1:41: 4f:ef:ae:8f:50:19:8f:2c:d0:19:6b:89:d0:8a:6d: 23:69:f2:99:ca:30:81:82:2a:29:98:aa:29:0c:b9: fb:08:ff:f7:d6:ff:dd:9e:7d:0d:0e:1c:9e:56:b1: 3e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1B:C2:07:AA:D8:4D:B3:9E:9B:F1:9E:6D:E0:E9:67:AA:41:8E:77 X509v3 Authority Key Identifier: keyid:0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:93:6a:4e:d7:43:7e:d6:71:6e:84:c5:63:6e:ae:25:72:97: 4a:81:cb:42:8e:b1:5e:cc:9a:79:f8:41:b9:74:53:e2:78:c9: 08:5b:c8:af:16:01:61:bf:81:2a:82:26:09:c2:f5:47:c1:9b: 2c:5f:3f:ff:c9:55:a5:08:0d:42:bf:50:f7:29:ba:78:c6:dd: cf:87:65:6d:ae:dc:b9:77:0a:6b:7a:b9:ee:84:2d:b1:55:b5: c0:a2:67:2d:12:81:05:ff:3c:d4:c1:7c:3d:1f:b5:fb:93:e2: 10:28:dd:2e:3e:59:04:fb:f2:dc:c2:03:cc:03:b2:17:af:b6: 7a:56:87:82:96:1d:d1:bc:c1:0f:f8:f7:7e:f5:5e:be:4a:e6: d8:58:cd:27:d9:71:ec:f0:cd:a0:10:ca:80:0a:f4:91:76:40: 1e:ef:e7:45:d3:97:77:9f:c9:8b:4c:dc:2c:c7:73:66:61:19: a9:4f:45:7f:40:b7:ff:7a:ed:b3:a6:3a:1b:cb:42:5d:da:b8: a1:c2:1f:c9:84:c4:34:dd:26:21:19:80:7b:38:c4:d9:33:6c: 73:17:42:73:fb:07:ae:06:e1:47:62:50:9e:0b:05:ec:bb:64: d3:2b:5a:b2:ef:a1:79:61:44:db:f7:1e:56:c4:58:c3:db:d9: 65:fc:96:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6Uui4VrwiSOydKkaG3Rn0Qb9towDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlC NzU1RTRGQTAeFw0yNjA5MjEyMjI0MjlaFw0yNjA5MjMwMjIwMjlaMDMxMTAvBgNV BAMTKDkyMUJDMjA3QUFEODREQjM5RTlCRjE5RTZERTBFOTY3QUE0MThFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCryaL4LYecDShg5S0aDeiK922c f90MtkPahtoSVNOuToofzsZ2fGJvh4JQKdOfwjOar0zSBVkzSygWGkUeAWj/D0BB okYUIe9rd93UHixto01ZyW9HYcXXY5Z3VcgtciNyK+YCDZhNjCkR8i2ZkXGT0EAb a/403/ROvFpzAPa+1fJz/K3+yQ/kf+QEcKneRPNuMJLd8rLGD9laC/rEOIC0As0v D1SDXpg1hSEaGKQpxyLe9shPQLa2oGgmtEsschb6r/tcUn1dGw8JlUp9eK/xQU/v ro9QGY8s0BlridCKbSNp8pnKMIGCKimYqikMufsI//fW/92efQ0OHJ5WsT65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkhvCB6rYTbOem/GebeDpZ6pBjncwHwYDVR0j BBgwFoAUDfaEGkXn9MPozJCvNrv72bdV5PowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGRhZjlmMGYtNGZiMS00MGMwLWIzODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0 NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlCNzU1RTRGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wREY2ODQxQTQ1RTdGNEMzRThDQzkwQUYzNkJCRkJEOUI3NTVF NEZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZC RDlCNzU1RTRGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGTak7XQ37WcW6ExWNuriVyl0qBy0KOsV7M mnn4Qbl0U+J4yQhbyK8WAWG/gSqCJgnC9UfBmyxfP//JVaUIDUK/UPcpunjG3c+H ZW2u3Ll3Cmt6ue6ELbFVtcCiZy0SgQX/PNTBfD0ftfuT4hAo3S4+WQT78tzCA8wD shevtnpWh4KWHdG8wQ/49371Xr5K5thYzSfZcezwzaAQyoAK9JF2QB7v50XTl3ef yYtM3CzHc2ZhGalPRX9At/967bOmOhvLQl3auKHCH8mExDTdJiEZgHs4xNkzbHMX QnP7B64G4UdiUJ4LBey7ZNMrWrLvoXlhRNv3HlbEWMPb2WX8ls0= -----END CERTIFICATE-----Generated at Tue Sep 22 01:27:39 2026 by rpki-client