$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft File: 0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft (raw, json) Hash identifier: wgrrHBc7H78v2FWS5coaSkOEENDIbJDoxJXcoGpTdQY= Subject key identifier: 6D:5C:79:BB:78:98:E5:42:2D:F4:2D:C5:80:D6:A1:E1:FC:AC:10:3D Authority key identifier: 0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70 Certificate issuer: /CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870 Certificate serial: 1D5552761739C91A3471878258BF3E83F80D08A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft Manifest number: BF Signing time: Wed 23 Sep 2026 03:25:19 +0000 Manifest this update: Wed 23 Sep 2026 03:20:19 +0000 Manifest next update: Thu 24 Sep 2026 06:12:19 +0000 Files and hashes: 1: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: ChO0wv9yKUM7ukCp9cBiuF/qy0Q/8i0Sz7WEvpLu0oo=) 2: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: 4TAm+Tq7VEmBP4/ZDSMoQRtNl/2F8B0387VCKH9srzE=) 3: 0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl (hash: 84vUTXtcFdZjussFi+1lsWWGuIwXFVovT1625Z5W5Gk=) 4: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: DVbfArMTlg+UHrMZklDTYc3fTbYxFUjdyjuDCut72nE=) 5: 3136302e32322e36362e302f32332d3233203d3e20313534343130.roa (hash: x+Zmass52e0XiEEcxmz35DHW32ZXdCP/lp7OD4a3w4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:55:52:76:17:39:c9:1a:34:71:87:82:58:bf:3e:83:f8:0d:08:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870 Validity Not Before: Sep 23 03:20:19 2026 GMT Not After : Sep 24 06:12:19 2026 GMT Subject: CN=6D5C79BB7898E5422DF42DC580D6A1E1FCAC103D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:46:63:74:1b:be:9e:86:7f:0a:a6:a8:6b: e7:02:fb:7a:ba:d0:37:a6:42:f9:a2:b5:2b:91:cd: 78:5c:fe:a0:67:76:03:e2:07:8e:b0:5b:b8:0c:80: 85:af:53:62:e7:a9:23:46:d7:fa:5d:23:17:18:6f: db:68:b3:dd:35:68:df:32:b4:67:21:8b:7e:06:fb: 76:e7:98:c5:09:4e:4c:6c:b2:1d:ac:ad:d3:0c:ed: fb:27:bd:6c:fa:c0:ed:89:05:4a:09:fd:de:27:56: c8:ec:49:7d:33:6a:bb:87:d7:e3:fc:6b:55:f8:4b: ec:95:f6:de:ea:1a:3f:d3:1a:5a:06:1b:70:78:80: f3:b2:00:9e:8c:c4:a9:bc:36:78:88:2c:83:02:ce: 14:c8:02:33:64:d9:89:58:d6:4d:5a:95:25:1b:97: 75:59:d5:70:72:ca:58:2e:14:90:76:d2:a8:24:09: 01:0c:70:e7:4c:f6:d0:55:07:cb:c3:e6:76:d6:29: 91:bc:cc:12:32:0d:38:6c:e3:78:9e:3c:7f:1f:60: 3d:86:6d:ec:1a:13:c8:22:f8:12:97:b0:a6:04:b3: 12:6c:66:b8:10:fc:19:f7:93:f2:93:e5:0d:4a:17: d2:51:1e:55:ee:be:06:30:2f:ff:7f:bb:b2:07:c4: 7d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5C:79:BB:78:98:E5:42:2D:F4:2D:C5:80:D6:A1:E1:FC:AC:10:3D X509v3 Authority Key Identifier: keyid:0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d6:9f:57:68:26:a9:c2:a1:e6:77:fd:7a:af:06:9f:07:32: c9:78:2f:cd:32:ae:c0:3c:eb:4e:0d:4d:76:d3:be:39:cc:88: 0c:5c:93:02:e9:ee:c8:6d:8f:03:59:2f:3b:b9:14:93:f8:74: 71:ca:73:b9:17:88:c2:bc:35:40:c9:01:5a:13:93:8c:29:ba: cd:c7:e2:67:e6:b1:e0:b1:b7:9e:e8:48:99:4d:ee:18:42:ef: e2:73:48:15:5c:ac:ad:35:d3:ba:b2:91:de:dc:60:58:65:85: bb:94:07:fb:2f:59:21:d8:bc:b7:5d:5a:a6:bd:ae:fd:55:cd: 3f:16:38:a0:2a:4d:a9:9e:2d:84:18:ee:f3:4d:23:27:3a:72: 73:46:0f:19:7d:f1:da:a2:c1:74:9f:4e:d2:6e:9a:69:2f:64: 2f:5c:97:10:6b:ec:0a:f1:d9:a1:8e:bb:a1:20:2b:f3:5d:2e: 46:78:7e:1a:b1:b9:b0:cc:36:07:4d:39:94:22:12:7e:8f:d8: 40:17:bf:09:86:d3:70:14:2a:d4:d0:aa:ff:29:7a:9c:db:55: 7a:4e:42:c2:d8:4f:50:51:9c:27:ff:0f:d1:50:d9:61:47:46: d9:39:cc:e2:eb:b9:7e:45:e1:b2:6e:6e:a4:ac:d4:3b:fa:e0: 4a:6c:e4:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHVVSdhc5yRo0cYeCWL8+g/gNCKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjJGMUYwRDEwQzVFQzdENzI0MTBFNTYzNzUyNUI2 MjFDNDg3MDAeFw0yNjA5MjMwMzIwMTlaFw0yNjA5MjQwNjEyMTlaMDMxMTAvBgNV BAMTKDZENUM3OUJCNzg5OEU1NDIyREY0MkRDNTgwRDZBMUUxRkNBQzEwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zkZjdBu+noZ/Cqaoa+cC+3q6 0DemQvmitSuRzXhc/qBndgPiB46wW7gMgIWvU2LnqSNG1/pdIxcYb9tos901aN8y tGchi34G+3bnmMUJTkxssh2srdMM7fsnvWz6wO2JBUoJ/d4nVsjsSX0zaruH1+P8 a1X4S+yV9t7qGj/TGloGG3B4gPOyAJ6MxKm8NniILIMCzhTIAjNk2YlY1k1alSUb l3VZ1XByylguFJB20qgkCQEMcOdM9tBVB8vD5nbWKZG8zBIyDThs43iePH8fYD2G bewaE8gi+BKXsKYEsxJsZrgQ/Bn3k/KT5Q1KF9JRHlXuvgYwL/9/u7IHxH11AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbVx5u3iY5UIt9C3FgNah4fysED0wHwYDVR0j BBgwFoAUD7YvHw0Qxex9ckEOVjdSW2IcSHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRiOTI3ZGYtYmM5Yy00YmU2LWExZmEtMmUxMjVjNDY5ZjcxLzAvMEZCNjJGMUYw RDEwQzVFQzdENzI0MTBFNTYzNzUyNUI2MjFDNDg3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRkI2MkYxRjBEMTBDNUVDN0Q3MjQxMEU1NjM3NTI1QjYyMUM0 ODcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvMEZCNjJGMUYwRDEwQzVFQzdENzI0MTBFNTYzNzUy NUI2MjFDNDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfWn1doJqnCoeZ3/XqvBp8HMsl4L80yrsA8 604NTXbTvjnMiAxckwLp7shtjwNZLzu5FJP4dHHKc7kXiMK8NUDJAVoTk4wpus3H 4mfmseCxt57oSJlN7hhC7+JzSBVcrK0107qykd7cYFhlhbuUB/svWSHYvLddWqa9 rv1VzT8WOKAqTameLYQY7vNNIyc6cnNGDxl98dqiwXSfTtJummkvZC9clxBr7Arx 2aGOu6EgK/NdLkZ4fhqxubDMNgdNOZQiEn6P2EAXvwmG03AUKtTQqv8pepzbVXpO QsLYT1BRnCf/D9FQ2WFHRtk5zOLruX5F4bJubqSs1Dv64Eps5E0= -----END CERTIFICATE-----Generated at Wed Sep 23 09:23:35 2026 by rpki-client