$ rpki-client -vvvf rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft File: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft (raw, json) Hash identifier: KgQGJKOX/rhnmQAdQLsDn6l3gFmXHetzCw8ixG6ElqE= Subject key identifier: 9F:43:78:5D:D2:15:24:12:9C:8E:C5:47:3D:BF:00:2A:37:CA:3F:44 Authority key identifier: 0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 Certificate issuer: /CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Certificate serial: 3E75AE1E7D45ABBCB3134945D7AC5AEA66665258 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft Manifest number: B3 Signing time: Sat 12 Sep 2026 15:44:54 +0000 Manifest this update: Sat 12 Sep 2026 15:39:54 +0000 Manifest next update: Sun 13 Sep 2026 16:49:54 +0000 Files and hashes: 1: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: aop1U/z5XKpBzcRvoj7W7+/ffJTbEvTMlvj03extEio=) 2: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: t0sQe3wy1nx7fCaoG1vw4eb+2MVxEa2LAolsSj9bAGg=) 3: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: F62HpzCPf0jVzJzqHRtqYgkpCr6Z0Ln+rY5et4Po02Y=) 4: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: j/oR6MYId1xXKHb1Z5SsBRuqUKKVLnH73F7eTR7zcCg=) 5: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: jpiOTHzKh1vGnb3tSE/Xoje7GEL1N7x9x1Df56pKagM=) 6: 0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl (hash: bqql0LArgzrFjghDfo7Vbv6qHRM3hAlH+7W1trNeEK4=) 7: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: iKmDknm+sz9G+4ieO2jOHSbGQz1z9iCG43k/bYAHB3k=) 8: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: fb53zmVp3ZEKD6KlMvVv2uQVwzv7wo/XFESLY4RW+fc=) 9: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: p4ukH1H84E2OXHZ0f+4rfYiVhbuRJ3ak7nrQukeOEIw=) 10: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: zvwgezfW86SlRC31YjwJ71lKNs9pTZisRey08uUZDrw=) 11: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: dDbCFuKbC0+1oibgHS1pBLUQZLf12v2I7Ivqihl/WFA=) 12: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: 5tf246IHwaj7s4oEu9nu0sb2z4yR2BLV01+7PT3/O1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 16:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:75:ae:1e:7d:45:ab:bc:b3:13:49:45:d7:ac:5a:ea:66:66:52:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0 Validity Not Before: Sep 12 15:39:54 2026 GMT Not After : Sep 13 16:49:54 2026 GMT Subject: CN=9F43785DD21524129C8EC5473DBF002A37CA3F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:c3:5c:d5:f2:d0:07:af:80:e2:ce:f4:d0: 96:08:75:89:7f:d4:0f:e4:54:a1:fd:a6:b3:5c:af: 4f:7b:97:60:97:24:f4:67:40:af:22:9c:5b:c0:c7: 1e:24:5b:56:33:bb:00:a2:81:80:1d:d0:45:0f:21: 7d:3d:c2:30:89:fe:b9:8b:bf:4a:d1:47:9b:88:39: c5:66:3c:9f:5b:21:3f:83:be:ad:3e:74:b7:4b:d5: 4a:8b:1e:09:18:60:3f:9b:76:89:d7:56:1f:4f:a6: 16:67:72:02:17:0c:7c:9f:22:0b:7e:bd:a2:c1:7a: 8a:ff:a7:6b:3b:05:56:f5:a5:61:59:f0:c3:3d:85: bd:36:6f:d2:5a:d0:f3:b7:47:38:93:c2:1e:5c:4f: 44:7b:91:27:d5:e4:af:ae:84:36:32:46:78:f5:08: d4:73:95:51:6f:b6:af:bc:b4:4f:8b:c3:83:2c:f2: ea:78:03:9b:89:7d:00:c9:1c:41:73:21:0b:70:12: cd:54:e2:e6:bb:00:59:20:77:eb:35:44:e0:25:f2: ec:44:72:7b:7f:6f:60:97:d4:36:e7:19:4c:e6:e8: 6c:7b:6b:84:f0:f7:10:8d:71:61:6f:94:41:c4:e0: 35:a1:44:fc:d0:e5:36:9b:86:9f:0a:f1:63:73:63: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:43:78:5D:D2:15:24:12:9C:8E:C5:47:3D:BF:00:2A:37:CA:3F:44 X509v3 Authority Key Identifier: keyid:0F:B4:24:B2:0D:6A:45:80:E6:D3:23:3F:CF:2E:B9:F2:BD:A9:9C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/0FB424B20D6A4580E6D3233FCF2EB9F2BDA99CB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:29:d1:8b:f0:6c:f0:51:7c:55:64:13:00:3f:5a:cb:5d:db: f8:df:04:0a:9e:68:81:72:71:ed:5e:f0:7d:41:33:7a:c5:26: e0:96:7e:f4:6e:13:0e:54:fa:ef:55:32:76:44:c1:28:ad:2e: bb:f3:c7:3f:94:cb:68:d4:bb:d6:b8:76:38:61:85:8a:56:07: 8f:10:de:8e:40:c0:b7:5b:aa:8a:95:2e:d8:8f:90:82:e8:d0: 5b:2a:11:8b:3e:27:20:a1:2f:16:59:2c:d8:94:2b:81:1c:1c: 08:4e:b9:f4:18:d7:99:1d:d0:81:99:1a:65:b4:da:fb:86:2e: 46:8d:b2:09:20:f3:7e:fd:d6:73:40:5d:a0:92:fb:8d:22:b0: 78:a7:07:16:e1:e8:7c:67:2e:2e:63:a4:a3:70:70:78:87:a2: b8:ed:ac:88:01:3a:8a:f6:fb:26:21:22:d5:7b:47:04:d2:30: 7d:a4:81:2a:25:00:c9:90:91:b3:70:21:70:01:34:a1:3a:af: 13:fd:95:8f:fb:e7:02:46:3a:71:35:9b:1f:64:6c:83:29:75: 4b:ff:7a:fa:23:24:f0:ee:2d:4f:2a:c6:f3:09:6b:fc:d0:f8: 25:4a:17:25:a1:88:0f:35:24:92:43:ce:a0:a8:9d:51:08:4d: 0f:2f:23:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnWuHn1Fq7yzE0lF16xa6mZmUlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJC REE5OUNCMDAeFw0yNjA5MTIxNTM5NTRaFw0yNjA5MTMxNjQ5NTRaMDMxMTAvBgNV BAMTKDlGNDM3ODVERDIxNTI0MTI5QzhFQzU0NzNEQkYwMDJBMzdDQTNGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NcNc1fLQB6+A4s700JYIdYl/ 1A/kVKH9prNcr097l2CXJPRnQK8inFvAxx4kW1YzuwCigYAd0EUPIX09wjCJ/rmL v0rRR5uIOcVmPJ9bIT+Dvq0+dLdL1UqLHgkYYD+bdonXVh9PphZncgIXDHyfIgt+ vaLBeor/p2s7BVb1pWFZ8MM9hb02b9Ja0PO3RziTwh5cT0R7kSfV5K+uhDYyRnj1 CNRzlVFvtq+8tE+Lw4Ms8up4A5uJfQDJHEFzIQtwEs1U4ua7AFkgd+s1ROAl8uxE cnt/b2CX1DbnGUzm6Gx7a4Tw9xCNcWFvlEHE4DWhRPzQ5Tabhp8K8WNzY4blAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn0N4XdIVJBKcjsVHPb8AKjfKP0QwHwYDVR0j BBgwFoAUD7Qksg1qRYDm0yM/zy658r2pnLAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzM4ZDI3NTUtMzgwZC00NzdlLWJmMjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIw RDZBNDU4MEU2RDMyMzNGQ0YyRUI5RjJCREE5OUNCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI0MjRCMjBENkE0NTgwRTZEMzIzM0ZDRjJFQjlGMkJEQTk5 Q0IwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzM4ZDI3NTUtMzgwZC00NzdlLWJm MjUtMGFmMjkwMjZiZDcwLzAvMEZCNDI0QjIwRDZBNDU4MEU2RDMyMzNGQ0YyRUI5 RjJCREE5OUNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgp0YvwbPBRfFVkEwA/Wstd2/jfBAqeaIFy ce1e8H1BM3rFJuCWfvRuEw5U+u9VMnZEwSitLrvzxz+Uy2jUu9a4djhhhYpWB48Q 3o5AwLdbqoqVLtiPkILo0FsqEYs+JyChLxZZLNiUK4EcHAhOufQY15kd0IGZGmW0 2vuGLkaNsgkg83791nNAXaCS+40isHinBxbh6HxnLi5jpKNwcHiHorjtrIgBOor2 +yYhItV7RwTSMH2kgSolAMmQkbNwIXABNKE6rxP9lY/75wJGOnE1mx9kbIMpdUv/ evojJPDuLU8qxvMJa/zQ+CVKFyWhiA81JJJDzqConVEITQ8vI8U= -----END CERTIFICATE-----Generated at Sun Sep 13 05:10:18 2026 by rpki-client