$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft File: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft (raw, json) Hash identifier: qCpXADPmL+3vO5nqvQ6Ancc4z0S3SXuiO72aB9o4D3Y= Subject key identifier: 1E:77:87:B3:52:0D:9A:C4:CA:EF:AA:8D:23:F3:6A:9D:7C:E9:79:F8 Authority key identifier: 0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 Certificate issuer: /CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Certificate serial: 27B5865882C3592FEA093EE95F72D0EF90C40509 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft Manifest number: C1 Signing time: Mon 21 Sep 2026 06:14:20 +0000 Manifest this update: Mon 21 Sep 2026 06:09:20 +0000 Manifest next update: Tue 22 Sep 2026 09:42:20 +0000 Files and hashes: 1: 3130332e3137322e3139372e302f32342d3234203d3e20313336343435.roa (hash: tb675eaiEkDHOnmcu1KovtY2QzQr8ZannoNpqOhzL8A=) 2: 0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl (hash: 5LZzykqE+80ymhhJmIrMQr2nGVYk2+Lw/vx8GjrO+NQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b5:86:58:82:c3:59:2f:ea:09:3e:e9:5f:72:d0:ef:90:c4:05:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9 Validity Not Before: Sep 21 06:09:20 2026 GMT Not After : Sep 22 09:42:20 2026 GMT Subject: CN=1E7787B3520D9AC4CAEFAA8D23F36A9D7CE979F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:92:b7:39:2a:9a:30:d5:83:ee:07:38:7a:b0: 26:d0:07:db:7d:88:0b:aa:8c:70:3d:f9:72:03:de: 70:01:20:65:0d:64:34:4f:21:9c:6a:d4:29:e3:bd: 04:c9:29:70:0a:91:50:cc:d7:c9:72:26:ef:c5:d6: 08:19:55:fd:fd:57:b4:79:44:34:c6:6a:f3:22:e5: 14:5a:80:5b:9e:6e:76:48:de:7a:60:1c:a8:31:97: 28:24:f3:45:c9:0a:8c:21:ee:6a:09:b5:29:59:a8: a5:57:fc:55:b7:7e:3e:61:89:d9:49:b9:7c:58:a2: 71:79:db:5d:1e:ca:7d:38:94:0a:65:74:8b:cd:38: a9:97:43:d3:da:06:14:be:b0:bd:22:ae:15:65:4c: ec:5a:27:aa:94:c4:ac:08:1a:43:90:13:0b:df:eb: 95:39:07:1a:d2:28:e7:48:ad:8f:e0:00:4f:2c:a2: 8c:ac:be:dd:ed:e4:c3:c1:77:19:e6:cb:e4:08:d0: 55:18:84:8e:b3:95:72:48:8d:29:cc:7f:5a:d2:ae: 50:9e:41:d4:20:5d:c6:a1:7f:20:af:f7:11:8f:63: df:c9:97:e2:4c:a0:f5:fc:e0:db:37:f0:1c:de:e2: f4:fb:6d:99:b3:c2:8e:e6:53:71:8e:f1:07:8b:24: ca:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:77:87:B3:52:0D:9A:C4:CA:EF:AA:8D:23:F3:6A:9D:7C:E9:79:F8 X509v3 Authority Key Identifier: keyid:0B:BA:1F:CB:8D:97:6D:A2:F1:C2:93:57:FE:77:DE:1F:08:E6:7B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/0BBA1FCB8D976DA2F1C29357FE77DE1F08E67BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:43:50:0a:99:82:c2:f2:e6:eb:18:fa:b9:25:ed:31:cc:2b: 69:94:41:6f:99:12:9a:8b:4b:68:8f:a2:4e:1a:4b:b2:0b:a3: 30:e7:8c:71:0c:0c:0f:10:b9:5b:66:6c:30:bf:d1:7b:ce:08: 82:f5:5c:3b:ab:1a:42:d2:88:f5:00:31:fb:39:d9:79:4f:6e: 95:74:8e:2b:c4:0f:53:d3:a2:b3:44:26:68:ec:c3:f2:54:65: 5f:60:c7:a6:55:70:b2:27:dc:56:d4:75:7b:8c:64:08:db:67: 10:52:01:53:03:b3:bf:3a:02:2c:64:74:c4:83:94:c2:fc:91: 97:14:e4:de:d7:68:75:4c:0f:e9:d7:26:53:e3:27:b9:6b:e3: 4d:5d:43:12:77:52:70:d4:5a:5e:e1:40:fa:da:7f:56:37:9d: f9:b2:ed:da:2c:3a:ed:a1:cc:92:cd:9e:c1:03:b4:16:6f:93: 56:33:56:9b:7c:5c:da:8e:a7:2e:e5:c4:07:77:c0:a2:a1:61: 39:23:04:14:e7:0e:6f:fd:b9:f9:6f:6d:9d:20:b6:d1:f3:d2: d1:3e:bc:83:11:90:e8:e6:5d:5d:c6:aa:21:c5:47:7c:36:62: e5:61:b5:7e:5d:95:ff:22:1a:c7:21:fa:56:c3:96:0b:50:d1: a5:ab:a2:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7WGWILDWS/qCT7pX3LQ75DEBQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYw OEU2N0JCOTAeFw0yNjA5MjEwNjA5MjBaFw0yNjA5MjIwOTQyMjBaMDMxMTAvBgNV BAMTKDFFNzc4N0IzNTIwRDlBQzRDQUVGQUE4RDIzRjM2QTlEN0NFOTc5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnkrc5Kpow1YPuBzh6sCbQB9t9 iAuqjHA9+XID3nABIGUNZDRPIZxq1CnjvQTJKXAKkVDM18lyJu/F1ggZVf39V7R5 RDTGavMi5RRagFuebnZI3npgHKgxlygk80XJCowh7moJtSlZqKVX/FW3fj5hidlJ uXxYonF5210eyn04lApldIvNOKmXQ9PaBhS+sL0irhVlTOxaJ6qUxKwIGkOQEwvf 65U5BxrSKOdIrY/gAE8sooysvt3t5MPBdxnmy+QI0FUYhI6zlXJIjSnMf1rSrlCe QdQgXcahfyCv9xGPY9/Jl+JMoPX84Ns38Bze4vT7bZmzwo7mU3GO8QeLJMqRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHneHs1INmsTK76qNI/NqnXzpefgwHwYDVR0j BBgwFoAUC7ofy42XbaLxwpNX/nfeHwjme7kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzM5N2NmYzUtZTBiMC00ODIwLWI4NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4 RDk3NkRBMkYxQzI5MzU3RkU3N0RFMUYwOEU2N0JCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkJBMUZDQjhEOTc2REEyRjFDMjkzNTdGRTc3REUxRjA4RTY3 QkI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvMEJCQTFGQ0I4RDk3NkRBMkYxQzI5MzU3RkU3N0RF MUYwOEU2N0JCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpDUAqZgsLy5usY+rkl7THMK2mUQW+ZEpqL S2iPok4aS7ILozDnjHEMDA8QuVtmbDC/0XvOCIL1XDurGkLSiPUAMfs52XlPbpV0 jivED1PTorNEJmjsw/JUZV9gx6ZVcLIn3FbUdXuMZAjbZxBSAVMDs786AixkdMSD lML8kZcU5N7XaHVMD+nXJlPjJ7lr401dQxJ3UnDUWl7hQPraf1Y3nfmy7dosOu2h zJLNnsEDtBZvk1YzVpt8XNqOpy7lxAd3wKKhYTkjBBTnDm/9uflvbZ0gttHz0tE+ vIMRkOjmXV3GqiHFR3w2YuVhtX5dlf8iGsch+lbDlgtQ0aWrop8= -----END CERTIFICATE-----Generated at Mon Sep 21 19:44:41 2026 by rpki-client