$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft File: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft (raw, json) Hash identifier: bVwFAaj/I50J7WxQFrCqk4pwwlgEikhf64EhM6+UbNQ= Subject key identifier: C9:08:1A:12:3F:25:AC:F0:F2:C4:9C:87:4A:5B:38:E0:47:12:C7:6F Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Certificate serial: 2BD3934AEBCEF80DDB30AE5B4D1A0B3BD09687F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft Manifest number: BD Signing time: Mon 21 Sep 2026 08:47:23 +0000 Manifest this update: Mon 21 Sep 2026 08:42:23 +0000 Manifest next update: Tue 22 Sep 2026 10:58:23 +0000 Files and hashes: 1: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=) 2: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl (hash: 9WEqZIvMaDx4xDUgw3CzAvW3haMgvmLDJ9fnxio25Cw=) 3: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: k9hB5TmUACjkJxeE951FHmSf1SEQX33K8sTdpuXO8BI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 10:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d3:93:4a:eb:ce:f8:0d:db:30:ae:5b:4d:1a:0b:3b:d0:96:87:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Validity Not Before: Sep 21 08:42:23 2026 GMT Not After : Sep 22 10:58:23 2026 GMT Subject: CN=C9081A123F25ACF0F2C49C874A5B38E04712C76F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d5:7b:ca:e2:46:7b:72:b5:bf:5e:ff:ea:f0: b7:38:6c:ea:19:1f:e7:e1:3c:97:45:f9:75:c7:e7: 0e:c3:b8:94:a5:2e:0d:6e:54:5a:0a:22:0f:17:7d: 91:17:86:7c:e3:02:53:76:76:35:95:ea:45:a1:29: 1b:bb:58:5c:7d:13:0c:65:33:e8:65:9f:9b:df:10: 73:d4:28:1a:80:d7:1a:06:5e:3a:2d:a1:4d:70:4e: 78:28:c2:18:be:92:2e:93:6e:e7:bd:2a:ff:9f:32: cc:a4:5f:0c:cc:ca:b1:0d:66:ab:15:6d:82:c8:0a: 44:cf:58:03:3c:a7:32:69:ea:5d:e1:61:1e:4d:7d: 37:87:ef:41:d8:2d:23:f2:99:a3:7c:cf:0f:0f:69: 92:b8:01:7e:9e:62:c1:0b:e5:f4:35:63:20:90:40: 8d:6a:c5:47:0c:1a:6f:b2:9d:e3:ce:92:2a:71:4e: 9e:d3:5a:dd:c9:f0:dd:7b:02:9b:d3:b2:25:f0:44: 1e:e5:ce:b5:4b:b2:53:83:d4:bc:ce:1a:31:43:0e: a0:e4:d2:57:51:e6:e8:d0:6b:5d:1e:c1:0f:b9:ba: db:23:f6:8c:48:f3:47:86:2a:fa:40:49:be:98:a4: 7a:32:b4:7f:ed:b4:45:f4:f4:3f:4c:b9:39:2f:69: af:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:08:1A:12:3F:25:AC:F0:F2:C4:9C:87:4A:5B:38:E0:47:12:C7:6F X509v3 Authority Key Identifier: keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:4f:c5:2f:8e:7e:fb:2f:09:8f:61:62:b3:d0:f1:9d:b2:9a: 4e:bd:18:50:48:0c:5e:da:64:7d:7a:0d:60:55:6d:a7:49:b0: cc:92:7b:d8:22:c4:3b:7e:48:75:27:cd:50:23:99:c0:49:ab: 0c:94:6a:7e:c9:28:c7:0e:c2:40:64:f5:59:c0:1e:63:5d:94: 93:1e:7e:a0:74:1b:78:09:2a:6f:66:cf:03:2e:b8:d2:4a:1a: 1e:87:85:2c:0b:76:12:52:77:31:36:f3:35:48:8e:d5:16:e6: 63:1d:45:de:ab:a8:77:0a:14:8d:a3:4c:d7:5e:03:a3:fb:7d: 72:68:ac:03:fa:6b:00:c8:33:90:59:20:31:71:13:11:ba:e6: d2:88:f8:0d:10:fd:53:1b:fc:35:38:d8:62:8a:68:5a:78:21: 31:88:a7:02:e2:86:78:46:32:4f:e9:55:f3:b3:80:0d:ea:e3: c6:fb:27:b4:5a:67:cb:8e:78:93:ae:16:b8:13:8d:58:52:5a: 05:59:32:28:36:f6:8f:cc:cd:4d:4e:7b:7b:28:1d:47:76:08: c2:86:2f:4c:6d:30:91:fd:ab:b8:09:07:f5:c7:06:9a:ae:9c: 40:54:1a:87:c9:50:59:a9:11:04:3f:d8:9c:f9:98:db:89:8f: 95:18:9b:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9OTSuvO+A3bMK5bTRoLO9CWh/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RF RkU5QjVBMzAeFw0yNjA5MjEwODQyMjNaFw0yNjA5MjIxMDU4MjNaMDMxMTAvBgNV BAMTKEM5MDgxQTEyM0YyNUFDRjBGMkM0OUM4NzRBNUIzOEUwNDcxMkM3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa1XvK4kZ7crW/Xv/q8Lc4bOoZ H+fhPJdF+XXH5w7DuJSlLg1uVFoKIg8XfZEXhnzjAlN2djWV6kWhKRu7WFx9Ewxl M+hln5vfEHPUKBqA1xoGXjotoU1wTngowhi+ki6Tbue9Kv+fMsykXwzMyrENZqsV bYLICkTPWAM8pzJp6l3hYR5NfTeH70HYLSPymaN8zw8PaZK4AX6eYsEL5fQ1YyCQ QI1qxUcMGm+ynePOkipxTp7TWt3J8N17ApvTsiXwRB7lzrVLslOD1LzOGjFDDqDk 0ldR5ujQa10ewQ+5utsj9oxI80eGKvpASb6YpHoytH/ttEX09D9MuTkvaa9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyQgaEj8lrPDyxJyHSls44EcSx28wHwYDVR0j BBgwFoAUDyCwYBSdvzFoG0MhuoXWfe/ptaMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4MmJjYTMtZTg1OC00ZDUyLWIxYTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAx NDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RFRkU5QjVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjIwQjA2MDE0OURCRjMxNjgxQjQzMjFCQTg1RDY3REVGRTlC NUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2 N0RFRkU5QjVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNPxS+OfvsvCY9hYrPQ8Z2ymk69GFBIDF7a ZH16DWBVbadJsMySe9gixDt+SHUnzVAjmcBJqwyUan7JKMcOwkBk9VnAHmNdlJMe fqB0G3gJKm9mzwMuuNJKGh6HhSwLdhJSdzE28zVIjtUW5mMdRd6rqHcKFI2jTNde A6P7fXJorAP6awDIM5BZIDFxExG65tKI+A0Q/VMb/DU42GKKaFp4ITGIpwLihnhG Mk/pVfOzgA3q48b7J7RaZ8uOeJOuFrgTjVhSWgVZMig29o/MzU1Oe3soHUd2CMKG L0xtMJH9q7gJB/XHBpqunEBUGofJUFmpEQQ/2Jz5mNuJj5UYm1M= -----END CERTIFICATE-----Generated at Tue Sep 22 02:48:32 2026 by rpki-client