$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft File: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft (raw, json) Hash identifier: 1iuIKHUWfkKUmAvJBxJrl9tWqe/b9KLjXRoPPmAQzCc= Subject key identifier: 0E:79:43:CB:24:7A:56:B2:77:75:D8:7C:69:4B:72:A0:26:EF:78:4E Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE Certificate issuer: /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Certificate serial: 7112FE014E6064C8F248BF626B896638876E4F58 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft Manifest number: BD Signing time: Mon 21 Sep 2026 07:05:26 +0000 Manifest this update: Mon 21 Sep 2026 07:00:26 +0000 Manifest next update: Tue 22 Sep 2026 07:49:26 +0000 Files and hashes: 1: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: pcqtzLzNaNYPks2/OHv2K1hXp8EkBWXZ157lBF+eG6I=) 2: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl (hash: Q8Dd48/6q8HSSliLAsNIjtand1DJRQ1WW5gxe9mayUY=) 3: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: Q7IDKK7bd4+D1LbWjZoromCTyfDrru1LNqDTxcv/O1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:12:fe:01:4e:60:64:c8:f2:48:bf:62:6b:89:66:38:87:6e:4f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Validity Not Before: Sep 21 07:00:26 2026 GMT Not After : Sep 22 07:49:26 2026 GMT Subject: CN=0E7943CB247A56B27775D87C694B72A026EF784E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:39:79:a7:fd:1e:e1:d4:e6:7b:3f:7f:12:72: 44:c5:17:47:c3:82:3b:f0:f0:d9:5a:fe:70:83:43: fb:4e:da:ad:a5:31:87:90:24:7f:61:ee:8e:46:c9: db:ef:d5:d9:b1:12:85:3f:c4:3f:4b:79:8e:2e:12: e1:2a:9a:ea:20:dd:b7:3b:7d:f0:bf:ad:5c:85:bf: 2b:fa:1d:7e:63:69:d0:81:e0:42:7c:24:21:46:9f: 99:e5:79:e0:6c:d4:07:23:87:8e:25:05:9a:e4:41: 48:1d:be:4c:97:36:43:6a:ef:72:ab:17:dc:73:4e: 75:c0:55:55:8a:ba:37:9e:7d:87:56:75:73:ec:51: bc:58:7d:8b:e6:1c:c5:cb:2c:4c:6a:98:7f:2e:68: 62:c4:fd:76:8d:44:2f:2e:d5:6f:84:21:1d:39:e8: e4:5e:c7:06:81:5d:d7:74:f0:ba:69:72:f3:0b:6a: 9f:8a:f2:3c:16:15:d1:43:91:69:49:56:9e:1d:8a: 62:77:df:97:e4:80:d3:b8:8d:aa:5a:e7:9b:99:92: 55:00:c1:c0:75:17:01:f0:89:07:66:eb:b7:d6:40: 72:8b:98:7c:ea:6b:be:b6:9c:5a:d9:6c:cb:fc:61: 52:59:a6:18:26:22:bc:42:26:43:d8:77:34:da:0b: 08:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:79:43:CB:24:7A:56:B2:77:75:D8:7C:69:4B:72:A0:26:EF:78:4E X509v3 Authority Key Identifier: keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:67:db:68:37:13:f2:08:c0:bb:87:bf:0a:c5:91:d8:7f:4c: 2a:7b:52:b8:d5:22:7f:c3:d9:13:5b:6f:f2:52:27:8e:45:94: 8a:8f:d9:75:36:b3:4e:81:4c:e9:ee:32:ad:77:e2:bb:c1:f9: 50:ee:f8:12:d8:52:cf:2c:2d:35:d1:5a:ae:8d:be:85:f4:48: 62:50:89:23:90:87:ce:13:1a:09:6d:d2:fe:25:06:c3:38:1b: 45:ea:c4:c1:67:dd:bb:17:fe:a3:88:5c:d2:4c:01:2b:f1:48: 2e:9a:3c:c8:92:c9:7c:a0:ae:d7:04:e0:3d:66:2b:db:86:6a: ed:31:63:5e:89:85:8b:14:99:b2:90:f9:58:9e:0a:e9:f1:02: 33:db:4d:30:9f:56:b9:bd:cf:89:3b:94:fb:16:8c:b4:4a:f2: ff:f1:57:82:10:92:3e:da:d3:85:ac:e2:df:92:b5:7c:2d:bf: 4b:53:0e:8c:c0:93:64:9c:6b:ac:3c:e1:28:7e:a0:aa:5c:a9: e3:04:f0:7f:3f:d8:e4:e0:6d:9c:a9:a3:f7:78:3d:96:99:b6: 55:b5:77:5f:49:14:4a:f5:57:e2:74:b2:22:ed:9f:99:6d:4a: 06:72:55:b9:1c:f7:90:bd:90:e9:c8:19:2b:6b:c3:ca:58:78: c0:e3:cf:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRL+AU5gZMjySL9ia4lmOIduT1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThD NkNFQ0JCRTAeFw0yNjA5MjEwNzAwMjZaFw0yNjA5MjIwNzQ5MjZaMDMxMTAvBgNV BAMTKDBFNzk0M0NCMjQ3QTU2QjI3Nzc1RDg3QzY5NEI3MkEwMjZFRjc4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOXmn/R7h1OZ7P38SckTFF0fD gjvw8Nla/nCDQ/tO2q2lMYeQJH9h7o5Gydvv1dmxEoU/xD9LeY4uEuEqmuog3bc7 ffC/rVyFvyv6HX5jadCB4EJ8JCFGn5nleeBs1Acjh44lBZrkQUgdvkyXNkNq73Kr F9xzTnXAVVWKujeefYdWdXPsUbxYfYvmHMXLLExqmH8uaGLE/XaNRC8u1W+EIR05 6ORexwaBXdd08LppcvMLap+K8jwWFdFDkWlJVp4dimJ335fkgNO4japa55uZklUA wcB1FwHwiQdm67fWQHKLmHzqa762nFrZbMv8YVJZphgmIrxCJkPYdzTaCwj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDnlDyyR6VrJ3ddh8aUtyoCbveE4wHwYDVR0j BBgwFoAUC/1q3Lz3RXwFx/qRppWHWMbOy74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmYyNTA2YjEtMzk2ZC00OTllLWI3ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENC Q0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThDNkNFQ0JCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkZENkFEQ0JDRjc0NTdDMDVDN0ZBOTFBNjk1ODc1OEM2Q0VD QkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3 NThDNkNFQ0JCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBn22g3E/IIwLuHvwrFkdh/TCp7UrjVIn/D 2RNbb/JSJ45FlIqP2XU2s06BTOnuMq134rvB+VDu+BLYUs8sLTXRWq6NvoX0SGJQ iSOQh84TGglt0v4lBsM4G0XqxMFn3bsX/qOIXNJMASvxSC6aPMiSyXygrtcE4D1m K9uGau0xY16JhYsUmbKQ+VieCunxAjPbTTCfVrm9z4k7lPsWjLRK8v/xV4IQkj7a 04Ws4t+StXwtv0tTDozAk2Sca6w84Sh+oKpcqeME8H8/2OTgbZypo/d4PZaZtlW1 d19JFEr1V+J0siLtn5ltSgZyVbkc95C9kOnIGStrw8pYeMDjzwM= -----END CERTIFICATE-----Generated at Mon Sep 21 16:04:14 2026 by rpki-client