$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft File: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft (raw, json) Hash identifier: E3ZtfxQXaf3bCTqczC7YX/F4cD6J9ANFKZdtyz97TKc= Subject key identifier: 9C:51:2B:0A:B3:C6:7C:69:54:9D:4C:61:B7:41:63:FF:25:1F:A0:6A Authority key identifier: 0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 Certificate issuer: /CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Certificate serial: 40E6F1B7DFA89AE58BFFE6C70B2790B1658689A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft Manifest number: BE Signing time: Tue 22 Sep 2026 02:09:01 +0000 Manifest this update: Tue 22 Sep 2026 02:04:01 +0000 Manifest next update: Wed 23 Sep 2026 04:51:01 +0000 Files and hashes: 1: 0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl (hash: kGZ0gf0MsEdVidm49ifE97gQM3CClx0xAaOrWGSVbl0=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: RKQ6wa1x5VScJTj3fjdeSQ/eUi7ms4u121kFQZr9klo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e6:f1:b7:df:a8:9a:e5:8b:ff:e6:c7:0b:27:90:b1:65:86:89:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B9143CD5D2A8357E2011E7843995E4FB1F95339 Validity Not Before: Sep 22 02:04:01 2026 GMT Not After : Sep 23 04:51:01 2026 GMT Subject: CN=9C512B0AB3C67C69549D4C61B74163FF251FA06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:51:ac:6f:0e:8a:52:bf:aa:c5:87:17:50: 3f:33:40:00:6f:50:ec:23:51:dc:38:f9:b7:bc:c4: 52:8e:fe:2a:eb:52:5a:2d:11:e4:b8:7c:a4:f8:cb: a5:3d:9b:a8:59:c4:c4:8c:91:65:3a:8c:6e:c3:74: 3e:40:3f:3a:ca:e6:60:04:8b:2b:5b:ec:ac:4d:4e: 3d:e9:45:29:ce:36:2b:93:46:1e:49:ab:b8:34:92: c0:de:15:ec:c8:c7:a4:f3:a6:81:06:c8:c6:0e:b8: 7d:15:5a:9a:e4:97:51:d8:62:99:84:35:a9:98:b4: 4c:fb:62:69:7e:5c:8c:f6:6d:7f:70:60:47:03:fb: 69:fe:b9:0d:79:df:da:97:d1:d0:cb:f0:f3:d5:26: 5f:59:ca:66:4c:e4:b4:78:7e:cf:d9:db:72:fd:c0: 07:f4:50:56:bc:30:4e:09:7f:2f:06:65:4a:b6:43: 8f:c4:e8:ac:5f:4a:47:1b:0b:ae:a6:13:85:39:65: 14:c7:36:52:6c:4e:95:3d:39:b2:16:04:82:1f:6c: bf:2d:c8:9f:db:0b:52:57:4b:70:01:e2:60:73:41: 8d:b1:5f:10:c9:25:bd:1c:13:47:44:0d:c9:aa:04: 62:33:a9:cd:72:9d:92:9e:25:71:ad:81:21:98:7b: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:51:2B:0A:B3:C6:7C:69:54:9D:4C:61:B7:41:63:FF:25:1F:A0:6A X509v3 Authority Key Identifier: keyid:0B:91:43:CD:5D:2A:83:57:E2:01:1E:78:43:99:5E:4F:B1:F9:53:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B9143CD5D2A8357E2011E7843995E4FB1F95339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/0B9143CD5D2A8357E2011E7843995E4FB1F95339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7a:d9:5b:f3:9b:79:16:93:45:95:ee:63:b9:d9:28:40:41: 06:43:fb:0c:89:de:1f:21:95:66:b4:8a:ff:42:a8:9e:3d:a4: fe:d6:23:88:d6:a1:c3:dc:39:de:bf:aa:ba:86:d0:58:15:0c: 63:4b:1f:e5:f7:d7:8f:6f:69:d3:0b:0a:93:17:d6:4f:cd:1c: 0f:98:a4:f5:d0:4f:77:02:8d:f5:21:3f:a0:a1:70:60:29:ad: a3:8e:97:9a:39:57:06:f6:9a:52:92:f5:50:4c:ab:bb:08:11: b0:ff:11:f3:7d:eb:ee:30:99:a8:52:7d:c8:04:d0:e0:b1:a7: 4a:37:6c:65:c2:7e:cb:07:e2:63:b3:85:5a:34:5e:fc:98:15: 8e:b6:c8:42:07:68:54:64:64:2b:85:cc:1b:31:a5:ef:46:e4: c0:72:0d:e4:6a:52:18:f9:f0:c9:d4:d3:8e:a3:41:33:dd:d2: b2:c4:4d:50:33:81:c9:e7:a2:19:8d:88:54:6d:f5:6a:c4:08: 2c:9e:50:f7:e8:6f:4c:de:f5:da:8e:f0:fb:8a:fc:97:af:c9: a9:0a:57:45:43:3e:ee:65:f0:14:58:34:27:a3:0c:39:90:1f: 3a:74:30:dd:a4:d4:dd:45:46:5d:51:bc:68:61:1a:ad:fc:71: 3d:ed:fe:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQObxt9+omuWL/+bHCyeQsWWGiaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVFNEZC MUY5NTMzOTAeFw0yNjA5MjIwMjA0MDFaFw0yNjA5MjMwNDUxMDFaMDMxMTAvBgNV BAMTKDlDNTEyQjBBQjNDNjdDNjk1NDlENEM2MUI3NDE2M0ZGMjUxRkEwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4EVGsbw6KUr+qxYcXUD8zQABv UOwjUdw4+be8xFKO/irrUlotEeS4fKT4y6U9m6hZxMSMkWU6jG7DdD5APzrK5mAE iytb7KxNTj3pRSnONiuTRh5Jq7g0ksDeFezIx6TzpoEGyMYOuH0VWprkl1HYYpmE NamYtEz7Yml+XIz2bX9wYEcD+2n+uQ1539qX0dDL8PPVJl9ZymZM5LR4fs/Z23L9 wAf0UFa8ME4Jfy8GZUq2Q4/E6KxfSkcbC66mE4U5ZRTHNlJsTpU9ObIWBIIfbL8t yJ/bC1JXS3AB4mBzQY2xXxDJJb0cE0dEDcmqBGIzqc1ynZKeJXGtgSGYeyAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnFErCrPGfGlUnUxht0Fj/yUfoGowHwYDVR0j BBgwFoAUC5FDzV0qg1fiAR54Q5leT7H5UzkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ0OGJkMDQtZjc4Ny00MTRhLWE1MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1 RDJBODM1N0UyMDExRTc4NDM5OTVFNEZCMUY5NTMzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQjkxNDNDRDVEMkE4MzU3RTIwMTFFNzg0Mzk5NUU0RkIxRjk1 MzM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvMEI5MTQzQ0Q1RDJBODM1N0UyMDExRTc4NDM5OTVF NEZCMUY5NTMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHt62Vvzm3kWk0WV7mO52ShAQQZD+wyJ3h8h lWa0iv9CqJ49pP7WI4jWocPcOd6/qrqG0FgVDGNLH+X3149vadMLCpMX1k/NHA+Y pPXQT3cCjfUhP6ChcGApraOOl5o5Vwb2mlKS9VBMq7sIEbD/EfN96+4wmahSfcgE 0OCxp0o3bGXCfssH4mOzhVo0XvyYFY62yEIHaFRkZCuFzBsxpe9G5MByDeRqUhj5 8MnU046jQTPd0rLETVAzgcnnohmNiFRt9WrECCyeUPfob0ze9dqO8PuK/JevyakK V0VDPu5l8BRYNCejDDmQHzp0MN2k1N1FRl1RvGhhGq38cT3t/ik= -----END CERTIFICATE-----Generated at Tue Sep 22 17:54:14 2026 by rpki-client