$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft File: 0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft (raw, json) Hash identifier: ma1GNFl3u8FzNLNHx11wKHsMtt5TnCrVJRl0NvDrcow= Subject key identifier: 35:52:06:49:9C:AE:6A:C4:21:7C:4C:B9:C5:09:EA:3F:1E:AB:71:B4 Authority key identifier: 0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C Certificate issuer: /CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C Certificate serial: 3CC0E64D935E3A59A0C4A9F5DBFF0D2BDE5562A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft Manifest number: BD Signing time: Mon 21 Sep 2026 12:47:16 +0000 Manifest this update: Mon 21 Sep 2026 12:42:16 +0000 Manifest next update: Tue 22 Sep 2026 16:04:16 +0000 Files and hashes: 1: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: 1ahR27z0iK0sLUuSdSvJqFvWkpicPRlm9gEDg/UGewo=) 2: 0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl (hash: ddm1iW/TwMUpJDaz0zA9o7rt032euBPgegbiihEIB9Y=) 3: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: mZ4ni8RZ+trHAYAq+YWcBinFPw6rEt7xuDt1TTSRtHw=) 4: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: FtAyLFgcPcOrwdeATSorkqQ+qnS6UD5lf+AdbVbITfE=) 5: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: E4KMhggOb7nlhIiO3VBqj+3GAnMNf5AMaTtZTYutCpg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c0:e6:4d:93:5e:3a:59:a0:c4:a9:f5:db:ff:0d:2b:de:55:62:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C Validity Not Before: Sep 21 12:42:16 2026 GMT Not After : Sep 22 16:04:16 2026 GMT Subject: CN=355206499CAE6AC4217C4CB9C509EA3F1EAB71B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:15:cb:26:49:8a:ff:79:71:cb:1b:72:96: 1e:85:3c:89:54:35:08:65:7b:d8:2c:ef:dd:db:d4: 0f:c3:dd:c5:d7:36:74:e8:84:0f:ab:e7:a1:56:d4: cf:5d:af:53:70:94:56:47:6b:5b:36:e9:ab:cd:ed: 84:fd:f8:af:29:a4:90:bb:59:39:67:75:54:da:f5: d8:c4:06:10:de:ff:2d:29:4a:cb:50:52:58:64:5c: 15:30:f4:c6:f7:d0:ab:7f:8c:19:8f:27:25:1e:d4: 75:3a:b2:0f:58:80:f5:4e:1d:13:fb:ff:8d:e7:77: 31:f7:be:5f:ce:be:a3:e8:76:76:8f:f3:66:6e:a4: f7:c0:4d:38:33:03:3f:0c:58:92:09:7e:59:50:66: 17:68:1d:cd:69:60:cd:7e:b3:c1:9c:9f:c8:b4:cf: 3d:4e:bd:83:82:ff:43:28:53:8d:82:b5:30:3b:76: 64:7a:9a:33:31:bb:e6:5c:02:3b:45:d9:7a:68:82: cb:2c:5a:98:ce:ff:2c:8e:16:e6:78:60:01:c9:e8: 2d:69:fe:87:4b:62:b0:65:98:91:74:10:09:d3:40: e3:a7:02:82:13:c8:89:39:69:cc:b5:20:81:00:74: 0a:36:a4:bb:cf:c4:4c:44:bd:c0:dd:47:b9:91:25: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:52:06:49:9C:AE:6A:C4:21:7C:4C:B9:C5:09:EA:3F:1E:AB:71:B4 X509v3 Authority Key Identifier: keyid:0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e4:92:7f:cc:d7:51:42:52:e5:a6:b1:aa:cb:41:fa:b8:eb: 1e:36:10:90:a3:cf:cb:18:ea:c2:07:60:4e:25:fd:04:42:b1: 14:57:9a:da:29:ab:d8:3f:64:a3:21:43:fb:17:61:ea:72:d4: 01:34:bc:7f:6f:f7:38:dc:7b:80:62:69:e0:fb:76:7a:1c:8a: 39:ff:58:94:ad:a2:bd:34:e4:69:ff:23:db:33:2d:47:85:2f: 1b:b7:a0:e6:0b:5e:6b:20:ec:52:ba:b6:f9:4d:bc:2c:ff:28: f1:d0:ec:7c:66:01:14:68:e9:99:5b:3d:07:1e:f5:20:9f:1f: 1a:04:e9:f8:c1:0b:ca:65:fa:78:8f:c8:50:43:4c:ad:4f:5d: 37:50:0a:a8:98:9a:f7:0b:c8:a8:20:a2:91:a2:07:68:9b:96: ca:d6:d7:fd:31:16:f5:34:5d:49:5b:06:18:82:76:53:35:cc: 3f:7b:17:33:13:b6:d4:2b:a9:48:ad:96:cd:f0:63:b2:68:c8: 4b:ae:30:60:65:e9:81:53:e3:ab:c7:7f:2f:ed:62:ed:61:99: 15:02:c3:84:7f:86:ce:6c:c2:9d:ba:cd:33:be:da:d6:10:ba: 0d:52:d9:02:3d:19:e8:5f:f1:bb:96:95:9f:5c:c3:0e:53:b7: 05:0b:3b:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPMDmTZNeOlmgxKn12/8NK95VYqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERDRUYyMTBFNkIyRDlDNTVDRkZEM0IxNUU1RTk0MEMz QUZFN0EzQzAeFw0yNjA5MjExMjQyMTZaFw0yNjA5MjIxNjA0MTZaMDMxMTAvBgNV BAMTKDM1NTIwNjQ5OUNBRTZBQzQyMTdDNENCOUM1MDlFQTNGMUVBQjcxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9AhXLJkmK/3lxyxtylh6FPIlU NQhle9gs793b1A/D3cXXNnTohA+r56FW1M9dr1NwlFZHa1s26avN7YT9+K8ppJC7 WTlndVTa9djEBhDe/y0pSstQUlhkXBUw9Mb30Kt/jBmPJyUe1HU6sg9YgPVOHRP7 /43ndzH3vl/OvqPodnaP82ZupPfATTgzAz8MWJIJfllQZhdoHc1pYM1+s8Gcn8i0 zz1OvYOC/0MoU42CtTA7dmR6mjMxu+ZcAjtF2XpogsssWpjO/yyOFuZ4YAHJ6C1p /odLYrBlmJF0EAnTQOOnAoITyIk5acy1IIEAdAo2pLvPxExEvcDdR7mRJcp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNVIGSZyuasQhfEy5xQnqPx6rcbQwHwYDVR0j BBgwFoAUDc7yEOay2cVc/9OxXl6UDDr+ejwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2ZGYtYjI0M2M1MTY0ZDIyLzAvMERDRUYyMTBF NkIyRDlDNTVDRkZEM0IxNUU1RTk0MEMzQUZFN0EzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRENFRjIxMEU2QjJEOUM1NUNGRkQzQjE1RTVFOTQwQzNBRkU3 QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvMERDRUYyMTBFNkIyRDlDNTVDRkZEM0IxNUU1RTk0 MEMzQUZFN0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjkkn/M11FCUuWmsarLQfq46x42EJCjz8sY 6sIHYE4l/QRCsRRXmtopq9g/ZKMhQ/sXYepy1AE0vH9v9zjce4BiaeD7dnocijn/ WJStor005Gn/I9szLUeFLxu3oOYLXmsg7FK6tvlNvCz/KPHQ7HxmARRo6ZlbPQce 9SCfHxoE6fjBC8pl+niPyFBDTK1PXTdQCqiYmvcLyKggopGiB2iblsrW1/0xFvU0 XUlbBhiCdlM1zD97FzMTttQrqUitls3wY7JoyEuuMGBl6YFT46vHfy/tYu1hmRUC w4R/hs5swp26zTO+2tYQug1S2QI9Gehf8buWlZ9cww5TtwULO7E= -----END CERTIFICATE-----Generated at Mon Sep 21 15:35:55 2026 by rpki-client