$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft File: 0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft (raw, json) Hash identifier: xIey1hhQ7PYr87rnhvwqvpmDt0Vo6f8t+yh65zgHTcc= Subject key identifier: 54:77:9D:F1:67:10:F6:B2:9F:4B:41:48:E8:78:90:25:8D:51:1B:F2 Authority key identifier: 0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E Certificate issuer: /CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E Certificate serial: 4EAA76634A5C8B9DA97AF90DB8A642C4643B96AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft Manifest number: BF Signing time: Sun 20 Sep 2026 19:10:33 +0000 Manifest this update: Sun 20 Sep 2026 19:05:33 +0000 Manifest next update: Mon 21 Sep 2026 19:21:33 +0000 Files and hashes: 1: 0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl (hash: x7CBPDZFshQYTpd9PSCDB0gyTu2Rj4/VGM7wEeaxOKc=) 2: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: yzj0R3It9R2jU9wBDpqzfiEHW+8PEhf6218rNQIPbSs=) 3: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: /5dNawMylgFAUVXMnACcE1jgMAFNneCBr14eai7kMCU=) 4: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: FBsWEYtMf7mRaTuEZ/0PxyglRDybKAQxH+CcBw6tqDM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:aa:76:63:4a:5c:8b:9d:a9:7a:f9:0d:b8:a6:42:c4:64:3b:96:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E Validity Not Before: Sep 20 19:05:33 2026 GMT Not After : Sep 21 19:21:33 2026 GMT Subject: CN=54779DF16710F6B29F4B4148E87890258D511BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:88:05:e7:24:89:08:ff:73:78:57:fa:24: 16:01:d7:25:dc:85:ae:e2:b1:05:3a:6e:8f:b8:99: 77:b7:04:75:22:a7:1a:d0:fa:52:3a:d8:6f:8d:2e: b2:a7:65:f9:40:13:a9:10:9b:eb:f3:b0:a9:f8:c4: 48:95:9d:08:7a:7b:9b:48:83:d1:6c:52:1d:d1:a0: 1c:ac:ff:b2:b3:11:9d:9e:33:8d:6f:49:b6:5d:80: 46:9d:a5:6e:2b:62:1d:d7:df:ee:68:43:a6:16:ec: e6:68:7e:d0:98:5c:41:2d:18:89:f5:9c:12:ae:8e: b0:a2:fd:ed:9a:52:80:d6:f2:15:5e:46:4b:be:f6: 68:d7:9d:c5:55:d5:c1:70:b9:68:53:79:4f:1d:09: 16:aa:01:a1:a9:65:42:89:4e:ce:59:21:a0:b7:da: 95:33:a7:34:01:1f:c5:2c:5b:ec:15:88:5b:e8:cc: ec:fe:5b:a9:e5:be:cb:aa:c8:07:4c:08:68:ca:94: 53:59:60:0e:93:8e:c4:55:38:3a:9c:c8:61:42:6f: ae:e0:1c:69:2c:5b:ab:67:19:34:e5:4c:94:c1:a5: e5:df:51:1d:c0:f1:5d:0e:46:d1:9c:54:08:97:c1: 29:77:76:68:6e:31:5c:59:cd:ee:99:fe:c5:3e:b5: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:77:9D:F1:67:10:F6:B2:9F:4B:41:48:E8:78:90:25:8D:51:1B:F2 X509v3 Authority Key Identifier: keyid:0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9f:08:31:32:5d:16:53:78:50:f3:c1:33:14:a9:87:9c:9c: ac:7b:ae:b2:db:82:9d:00:94:5d:8f:46:46:3c:e5:97:16:76: e2:f8:77:c1:31:6d:41:42:4f:af:45:36:d2:0e:00:a8:53:ea: b4:7c:d8:d4:42:d0:34:09:5c:98:b5:30:21:d9:f3:bd:c2:6a: 84:2a:37:5f:6c:fd:a4:1f:a2:d1:b2:8a:b5:4f:7e:28:26:d2: 6e:f4:51:90:81:d3:48:a9:87:37:4a:42:3b:8d:44:1f:00:6f: 65:65:b4:61:a4:b4:59:34:7b:fa:b6:f3:27:f0:f9:27:e6:fa: 8c:e7:70:80:cd:5b:2c:e5:ea:77:81:ba:2a:f0:b2:cd:e2:c9: e6:80:8b:a6:03:63:3a:3d:7f:c4:f0:a0:11:44:53:8e:6f:f7: cb:0b:b0:17:79:75:18:ae:f7:2c:28:26:0a:0a:0b:da:e0:c4: 5a:a1:f3:de:38:65:25:2f:80:f4:1a:27:97:3c:af:85:56:d8: b3:81:de:ee:d5:ef:86:e6:73:eb:6a:cc:7c:1b:e1:4c:fa:5d: aa:13:40:e7:e9:f5:19:71:11:5d:e0:54:f0:c7:d0:68:b6:0a: 4a:77:d5:53:5e:55:e7:8d:20:36:9d:77:ba:e0:d8:91:af:3b: e7:6c:b8:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqp2Y0pci52pevkNuKZCxGQ7lqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEIxQTc1NkQ2RjFCMTg4RURFRkE1REQ1Q0MzNDI1RDMz QTIzQUM5RTAeFw0yNjA5MjAxOTA1MzNaFw0yNjA5MjExOTIxMzNaMDMxMTAvBgNV BAMTKDU0Nzc5REYxNjcxMEY2QjI5RjRCNDE0OEU4Nzg5MDI1OEQ1MTFCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYiYgF5ySJCP9zeFf6JBYB1yXc ha7isQU6bo+4mXe3BHUipxrQ+lI62G+NLrKnZflAE6kQm+vzsKn4xEiVnQh6e5tI g9FsUh3RoBys/7KzEZ2eM41vSbZdgEadpW4rYh3X3+5oQ6YW7OZoftCYXEEtGIn1 nBKujrCi/e2aUoDW8hVeRku+9mjXncVV1cFwuWhTeU8dCRaqAaGpZUKJTs5ZIaC3 2pUzpzQBH8UsW+wViFvozOz+W6nlvsuqyAdMCGjKlFNZYA6TjsRVODqcyGFCb67g HGksW6tnGTTlTJTBpeXfUR3A8V0ORtGcVAiXwSl3dmhuMVxZze6Z/sU+tfvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVHed8WcQ9rKfS0FI6HiQJY1RG/IwHwYDVR0j BBgwFoAUCxp1bW8bGI7e+l3VzDQl0zojrJ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2QyNjY1MTEtNjM5ZS00YzJiLTk2MzQtOWNjMWUyMmZhNzA4LzAvMEIxQTc1NkQ2 RjFCMTg4RURFRkE1REQ1Q0MzNDI1RDMzQTIzQUM5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjFBNzU2RDZGMUIxODhFREVGQTVERDVDQzM0MjVEMzNBMjNB QzlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvMEIxQTc1NkQ2RjFCMTg4RURFRkE1REQ1Q0MzNDI1 RDMzQTIzQUM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+fCDEyXRZTeFDzwTMUqYecnKx7rrLbgp0A lF2PRkY85ZcWduL4d8ExbUFCT69FNtIOAKhT6rR82NRC0DQJXJi1MCHZ873CaoQq N19s/aQfotGyirVPfigm0m70UZCB00iphzdKQjuNRB8Ab2VltGGktFk0e/q28yfw +Sfm+ozncIDNWyzl6neBuirwss3iyeaAi6YDYzo9f8TwoBFEU45v98sLsBd5dRiu 9ywoJgoKC9rgxFqh8944ZSUvgPQaJ5c8r4VW2LOB3u7V74bmc+tqzHwb4Uz6XaoT QOfp9RlxEV3gVPDH0Gi2Ckp31VNeVeeNIDadd7rg2JGvO+dsuM8= -----END CERTIFICATE-----Generated at Mon Sep 21 04:55:56 2026 by rpki-client