$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft File: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft (raw, json) Hash identifier: FCcw+qIr9ZbQUNjzHE7lUr5aogi194kDNqEetcCDaks= Subject key identifier: 3D:AF:FB:49:5B:92:F6:A8:94:AC:8B:CE:3A:ED:B6:C3:CC:76:58:4D Authority key identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 Certificate issuer: /CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Certificate serial: 0D3D0F72F804F820D1494589AA0561EA1DFC653E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft Manifest number: C2 Signing time: Mon 21 Sep 2026 04:16:55 +0000 Manifest this update: Mon 21 Sep 2026 04:11:55 +0000 Manifest next update: Tue 22 Sep 2026 07:33:55 +0000 Files and hashes: 1: 3130332e3138352e38322e302f32332d3233203d3e203538383230.roa (hash: 5tF4qp3pthDfpaMIBTWAt6J465qcSCrI9I/iywJOOfs=) 2: 3130332e3138352e38332e302f32342d3234203d3e20313533363538.roa (hash: gbvsVbre/1qZHWsiXoi/b+h75ZvQI1fjsMMqGabJRM8=) 3: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl (hash: aK0m3mHzAaaqMSTeC0afXKyHJsbZKldoMFL2irmlgxo=) 4: 3130332e3138352e38322e302f32342d3234203d3e20313533363538.roa (hash: 3D6eYWuVv+VfyxKvhmmt+NlubugsC5IamNBQUUTxDDk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3d:0f:72:f8:04:f8:20:d1:49:45:89:aa:05:61:ea:1d:fc:65:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Validity Not Before: Sep 21 04:11:55 2026 GMT Not After : Sep 22 07:33:55 2026 GMT Subject: CN=3DAFFB495B92F6A894AC8BCE3AEDB6C3CC76584D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:a6:b3:08:3f:c1:3f:fe:78:aa:f1:7c:56: 30:6e:be:bc:2f:b3:07:d3:a5:02:cd:fe:4f:6b:8f: 8f:2f:81:73:d0:ae:af:c0:74:12:51:75:2e:6b:88: 0f:e2:ab:53:54:3b:56:78:65:71:3a:7e:1c:41:c7: 2b:c4:5c:a3:2e:c2:b6:db:f0:fc:f3:83:36:c8:7b: 10:b6:ea:d0:d8:db:ea:63:bb:a9:33:55:93:84:55: ee:22:80:c4:8c:77:c6:c3:10:05:d4:45:08:50:41: fd:dc:da:f7:4b:60:24:d0:4d:f5:5e:f0:18:ab:57: 35:d7:d5:b8:12:17:86:76:7b:6d:9d:17:10:78:00: d1:2c:d1:c0:ff:7b:28:62:fa:29:8a:ba:bb:3c:2a: 88:72:e0:4e:54:46:13:3f:ca:9f:82:0b:2f:68:62: b7:97:d1:df:d4:cb:73:50:44:af:61:b5:a5:45:78: 7c:53:db:43:76:d3:7a:24:ad:f6:76:50:ad:0c:b2: 97:bb:e2:83:19:ee:6b:1c:44:44:0d:12:7e:cb:96: fb:3f:95:9f:de:dc:69:f0:ed:39:37:50:c8:ea:cd: bd:5e:e6:37:ff:a9:cd:ae:b9:83:fb:ba:ba:ed:6c: ee:70:e9:84:af:14:0f:0c:4a:51:1b:13:72:9c:ab: 88:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AF:FB:49:5B:92:F6:A8:94:AC:8B:CE:3A:ED:B6:C3:CC:76:58:4D X509v3 Authority Key Identifier: keyid:0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:a9:3c:79:6c:81:05:0d:4c:b8:97:19:49:c7:f8:95:a3:e7: 47:a2:e7:99:2d:ac:2b:94:d1:6f:45:7b:fb:46:38:1e:7f:27: dd:4f:7f:cf:78:de:84:3e:c3:df:3e:e4:fe:a1:59:1d:7a:a4: cd:8c:e4:4b:ca:50:71:d6:d4:8b:cd:d4:3d:d3:c2:c9:1d:c8: cc:76:75:9c:6a:0d:f0:e0:c2:aa:97:9c:2c:34:35:ee:33:f2: 79:6c:b0:75:02:94:b5:c0:28:91:e0:d3:53:0d:ec:7c:55:29: 2c:83:a5:03:a4:05:fc:ca:76:91:de:85:37:fc:99:f9:20:8c: ec:69:9e:29:da:f3:33:cd:24:ad:3b:9b:11:c4:d1:63:19:a5: d5:9b:35:e2:d2:6c:83:33:4b:1d:ba:3e:a1:b5:3e:39:ae:df: 4a:53:1f:02:41:80:61:2c:dc:21:3c:f4:21:16:6e:6b:05:f8: 34:95:3a:a6:07:a1:17:d0:09:3b:19:e9:8f:d8:e5:46:ec:b2: 58:1c:16:fc:90:c2:2e:8b:f9:0a:be:6d:07:04:59:15:75:ce: 06:bd:1a:94:54:9a:07:34:dd:d4:ee:dd:56:34:4f:f1:bc:9b: 25:78:a1:83:fd:c5:fa:02:ce:17:01:17:3c:79:55:6e:33:18: 1b:bd:1c:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDT0PcvgE+CDRSUWJqgVh6h38ZT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3 QzM4NEJDMTAeFw0yNjA5MjEwNDExNTVaFw0yNjA5MjIwNzMzNTVaMDMxMTAvBgNV BAMTKDNEQUZGQjQ5NUI5MkY2QTg5NEFDOEJDRTNBRURCNkMzQ0M3NjU4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/aazCD/BP/54qvF8VjBuvrwv swfTpQLN/k9rj48vgXPQrq/AdBJRdS5riA/iq1NUO1Z4ZXE6fhxBxyvEXKMuwrbb 8PzzgzbIexC26tDY2+pju6kzVZOEVe4igMSMd8bDEAXURQhQQf3c2vdLYCTQTfVe 8BirVzXX1bgSF4Z2e22dFxB4ANEs0cD/eyhi+imKurs8Kohy4E5URhM/yp+CCy9o YreX0d/Uy3NQRK9htaVFeHxT20N203okrfZ2UK0Mspe74oMZ7mscREQNEn7Llvs/ lZ/e3Gnw7Tk3UMjqzb1e5jf/qc2uuYP7urrtbO5w6YSvFA8MSlEbE3Kcq4gTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPa/7SVuS9qiUrIvOOu22w8x2WE0wHwYDVR0j BBgwFoAUDO0e7Q6F4ri6Xv++wCUgPXw4S8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMmNmMDMtZjlmOS00YmNhLThjMmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQw RTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3QzM4NEJDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0VEMUVFRDBFODVFMkI4QkE1RUZGQkVDMDI1MjAzRDdDMzg0 QkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIw M0Q3QzM4NEJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOpPHlsgQUNTLiXGUnH+JWj50ei55ktrCuU 0W9Fe/tGOB5/J91Pf8943oQ+w98+5P6hWR16pM2M5EvKUHHW1IvN1D3TwskdyMx2 dZxqDfDgwqqXnCw0Ne4z8nlssHUClLXAKJHg01MN7HxVKSyDpQOkBfzKdpHehTf8 mfkgjOxpnina8zPNJK07mxHE0WMZpdWbNeLSbIMzSx26PqG1Pjmu30pTHwJBgGEs 3CE89CEWbmsF+DSVOqYHoRfQCTsZ6Y/Y5UbsslgcFvyQwi6L+Qq+bQcEWRV1zga9 GpRUmgc03dTu3VY0T/G8myV4oYP9xfoCzhcBFzx5VW4zGBu9HAI= -----END CERTIFICATE-----Generated at Mon Sep 21 15:44:46 2026 by rpki-client