$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft File: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft (raw, json) Hash identifier: aAnkIndDfSuiyZDQU8SOWUlFlrqtauVzBIqi3IPqMcM= Subject key identifier: C1:C5:D0:ED:E9:E5:FD:48:38:26:0E:A4:05:6B:62:94:C7:54:B3:87 Authority key identifier: 0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 Certificate issuer: /CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Certificate serial: 0A85186B71DF67F5A9B07AA3A218701DF616BA94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:20:40 +0000 Manifest this update: Mon 21 Sep 2026 07:15:40 +0000 Manifest next update: Tue 22 Sep 2026 09:10:40 +0000 Files and hashes: 1: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl (hash: bMClM0bxLOmvLv5yyuG5yxV53pirsRiLRFRgb0PAKDQ=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: jRxu5an33fAHIDK703BGcnxxr2+K2imQoOMYIzAUMUk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:85:18:6b:71:df:67:f5:a9:b0:7a:a3:a2:18:70:1d:f6:16:ba:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Validity Not Before: Sep 21 07:15:40 2026 GMT Not After : Sep 22 09:10:40 2026 GMT Subject: CN=C1C5D0EDE9E5FD4838260EA4056B6294C754B387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:39:2e:b7:50:85:d7:50:c9:08:8b:ce:1d: 7d:b1:13:44:34:c9:53:f9:66:dc:0a:d9:4f:17:6e: f7:60:31:b2:1b:c7:3f:cf:e6:cb:14:cb:97:f9:1c: 1b:c8:b3:1d:f2:02:15:e0:53:4b:d0:80:56:47:3a: e9:81:86:cd:a7:9f:29:71:6a:33:71:7c:bb:0d:9f: 43:70:0e:e2:9e:f1:d2:ca:3a:c7:f4:d1:87:44:7f: ea:b2:15:33:b6:69:a2:29:83:0b:6d:22:dc:fe:93: c2:e9:36:68:38:25:9a:12:55:69:0a:ae:d7:36:af: b8:ce:d2:84:e0:8f:9e:a3:9e:24:9c:bc:49:3b:6c: 74:ea:81:e8:fe:d2:f7:39:b9:1e:6c:fe:22:c9:19: 05:88:97:e1:26:60:fc:bc:2b:ff:40:17:d3:59:19: dc:f1:43:c8:3f:cf:0c:cd:9a:22:d4:ea:b7:93:47: b7:7a:7c:2d:21:ee:01:48:40:e6:16:35:37:a6:93: ef:23:8e:73:e0:43:f1:4f:02:1d:f3:fc:13:96:1e: 14:f5:71:71:24:81:e3:c3:ea:68:91:43:d7:95:e5: 54:f4:a7:f9:48:bf:13:7e:c4:44:8f:7c:d9:dc:c2: ae:fb:bd:b0:16:01:5e:f9:11:f6:86:1d:57:0c:48: ac:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C5:D0:ED:E9:E5:FD:48:38:26:0E:A4:05:6B:62:94:C7:54:B3:87 X509v3 Authority Key Identifier: keyid:0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:8e:6c:0d:5a:05:6d:c5:2f:a8:0a:34:93:ad:ef:73:f3:79: a2:e2:63:45:19:f8:5c:16:69:ab:13:92:b5:08:c2:8f:61:b8: 1b:3b:a5:e8:a3:4f:bb:6a:22:00:d5:fb:e6:eb:10:a7:b4:ba: e6:99:93:bb:d9:42:f3:59:ea:a6:77:66:31:6b:75:dd:e6:94: 51:96:4a:b4:52:48:42:e6:4b:07:b6:bd:15:42:c5:5b:34:70: 33:92:09:d7:3d:6e:1b:5a:6d:ea:a4:64:4d:80:54:80:e1:08: bc:3e:ee:33:b4:f2:e2:1f:57:35:7d:53:97:41:1d:67:52:68: 1e:6e:9d:7f:60:4b:3d:06:17:e5:57:37:78:6c:b9:57:91:ea: d3:ff:b2:68:86:50:d3:b1:9e:24:45:6e:53:f2:c1:03:a9:d4: bf:05:be:89:db:02:dc:cd:be:a0:c8:5a:2f:bc:65:ba:3f:78: fc:83:09:be:39:81:60:5a:62:42:d6:20:b2:f7:83:c2:9f:99: ca:c5:fe:71:72:55:ae:11:e3:51:f8:5b:a8:8d:ba:32:a0:6d: 53:8f:38:c9:d8:74:55:eb:6e:72:ca:73:68:05:1d:5e:ed:97: 14:5f:8b:e0:0b:91:32:1d:c4:33:16:02:57:6d:1f:98:5a:bc: ab:fd:7a:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCoUYa3HfZ/WpsHqjohhwHfYWupQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0 NDc1MjNFNTAeFw0yNjA5MjEwNzE1NDBaFw0yNjA5MjIwOTEwNDBaMDMxMTAvBgNV BAMTKEMxQzVEMEVERTlFNUZENDgzODI2MEVBNDA1NkI2Mjk0Qzc1NEIzODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgDkut1CF11DJCIvOHX2xE0Q0 yVP5ZtwK2U8XbvdgMbIbxz/P5ssUy5f5HBvIsx3yAhXgU0vQgFZHOumBhs2nnylx ajNxfLsNn0NwDuKe8dLKOsf00YdEf+qyFTO2aaIpgwttItz+k8LpNmg4JZoSVWkK rtc2r7jO0oTgj56jniScvEk7bHTqgej+0vc5uR5s/iLJGQWIl+EmYPy8K/9AF9NZ GdzxQ8g/zwzNmiLU6reTR7d6fC0h7gFIQOYWNTemk+8jjnPgQ/FPAh3z/BOWHhT1 cXEkgePD6miRQ9eV5VT0p/lIvxN+xESPfNncwq77vbAWAV75EfaGHVcMSKzjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwcXQ7enl/Ug4Jg6kBWtilMdUs4cwHwYDVR0j BBgwFoAUDz3Nlfw/xtfXs9FodquB4UR1I+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQ0ZGZiNWEtNmUyNC00YTRkLTg5NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVG QzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0NDc1MjNFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjNEQ0Q5NUZDM0ZDNkQ3RDdCM0QxNjg3NkFCODFFMTQ0NzUy M0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgx RTE0NDc1MjNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOObA1aBW3FL6gKNJOt73PzeaLiY0UZ+FwW aasTkrUIwo9huBs7peijT7tqIgDV++brEKe0uuaZk7vZQvNZ6qZ3ZjFrdd3mlFGW SrRSSELmSwe2vRVCxVs0cDOSCdc9bhtabeqkZE2AVIDhCLw+7jO08uIfVzV9U5dB HWdSaB5unX9gSz0GF+VXN3hsuVeR6tP/smiGUNOxniRFblPywQOp1L8FvonbAtzN vqDIWi+8Zbo/ePyDCb45gWBaYkLWILL3g8KfmcrF/nFyVa4R41H4W6iNujKgbVOP OMnYdFXrbnLKc2gFHV7tlxRfi+ALkTIdxDMWAldtH5havKv9en4= -----END CERTIFICATE-----Generated at Mon Sep 21 15:44:32 2026 by rpki-client