$ rpki-client -vvvf rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft File: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft (raw, json) Hash identifier: hZhHazWXmJ50l4fWGqJpdJj2I2FDKIsCxxPdo0w89jU= Subject key identifier: D3:F2:4F:CC:9E:34:19:C1:D7:6B:8D:8B:FF:4F:45:FC:C1:D0:45:49 Authority key identifier: 05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF Certificate issuer: /CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Certificate serial: 6D87D3C2CA53E75C0447F9A1D84E4D964660A3B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 05:09:50 +0000 Manifest this update: Thu 17 Sep 2026 05:04:50 +0000 Manifest next update: Fri 18 Sep 2026 07:27:50 +0000 Files and hashes: 1: 0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl (hash: lQsUhfOnuyf1fSAVMuQldYvu1BRr2g3nFGfT32JRt9o=) 2: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (hash: DKOQH9+FY5KWIJZ/d+jpR5uVEMysXkF+IGiRwUECgAs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:87:d3:c2:ca:53:e7:5c:04:47:f9:a1:d8:4e:4d:96:46:60:a3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Validity Not Before: Sep 17 05:04:50 2026 GMT Not After : Sep 18 07:27:50 2026 GMT Subject: CN=D3F24FCC9E3419C1D76B8D8BFF4F45FCC1D04549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:70:71:67:33:ca:00:32:33:a7:c1:6f:5f: 94:64:23:69:75:e1:fb:1e:d4:6b:23:b3:28:bd:61: 8a:b3:99:fc:8f:c5:36:b7:57:bb:2f:a2:2f:9c:a4: 6c:c8:70:b1:da:4d:9b:f6:a5:46:f1:c7:1c:7e:28: c8:4b:c6:21:58:bf:22:00:3c:9b:ff:ed:b1:a4:8a: fd:b9:bf:7a:5d:28:c3:aa:07:48:4d:4a:2a:b9:bd: 8e:01:fb:c6:02:ba:06:f0:f1:b6:b4:0d:50:a9:98: 18:44:f5:8e:33:62:d7:ec:32:11:79:6b:f5:51:09: f2:11:c0:56:00:9a:15:ad:d2:13:dd:3b:49:9b:5c: ec:d4:7b:ea:22:06:08:79:7e:20:f7:52:a7:75:a9: a2:12:0b:5f:fe:1a:c2:c9:04:e3:83:f5:01:f0:7e: 01:81:78:e9:af:52:63:13:84:d5:d1:42:eb:7a:ef: 4c:9b:5f:91:70:91:0c:f9:e9:7c:67:55:3f:67:d2: 6a:90:f4:bf:c9:7f:ec:5a:2b:c7:53:66:1e:ea:5f: 13:a9:6a:e5:0b:a0:1b:44:52:3b:0a:ba:1a:d4:be: 44:3c:fe:6a:cd:62:9e:8f:c0:10:bb:98:60:9b:d2: 7b:66:8a:b4:ed:fe:33:68:21:e3:ad:b1:60:30:74: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F2:4F:CC:9E:34:19:C1:D7:6B:8D:8B:FF:4F:45:FC:C1:D0:45:49 X509v3 Authority Key Identifier: keyid:05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:59:16:b3:ca:cc:95:ac:63:74:d8:fb:f7:c2:d5:77:cb:e0: d0:47:12:9a:78:9d:62:f3:73:ce:f6:c5:f2:c7:39:74:66:ce: 41:b6:b4:d2:8b:0e:7f:81:ed:3e:93:4f:c4:fa:26:65:70:ef: b0:05:b8:6b:b2:2b:97:54:0b:f2:75:d5:8b:16:56:ae:06:07: 60:79:7f:0a:d1:56:b0:37:94:fb:d9:65:31:e7:6e:a9:bd:40: 94:a2:50:25:0a:16:28:2c:8d:50:6b:6b:46:9b:85:a1:c2:c6: a5:9a:92:05:25:36:f5:37:9d:63:5b:dd:4a:a7:5b:05:80:ea: f3:c0:ae:e1:62:70:ed:30:8e:14:70:1d:82:a0:c6:c9:a3:60: 24:e1:5a:db:14:21:9a:aa:31:f7:72:15:f4:f3:a9:2b:92:a7: 2a:73:ae:96:44:cc:f9:5e:a0:5e:b7:a4:1b:eb:f2:fc:fd:f8: 3f:5b:b2:ff:11:c8:12:e5:33:a4:c7:63:96:22:90:74:a5:e1: e5:08:15:0d:c1:af:84:46:e0:21:08:d9:17:77:8c:4a:13:89: a9:f3:fc:33:8b:eb:65:44:b7:1a:f3:9a:d9:27:aa:ed:bf:e2: 79:7f:35:8b:c0:d9:9c:14:e0:87:f4:00:e6:dc:12:f2:b8:ad: c4:2a:18:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYfTwspT51wER/mh2E5NlkZgo7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdFRjdD MkY0OURBRjAeFw0yNjA5MTcwNTA0NTBaFw0yNjA5MTgwNzI3NTBaMDMxMTAvBgNV BAMTKEQzRjI0RkNDOUUzNDE5QzFENzZCOEQ4QkZGNEY0NUZDQzFEMDQ1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWpnBxZzPKADIzp8FvX5RkI2l1 4fse1Gsjsyi9YYqzmfyPxTa3V7svoi+cpGzIcLHaTZv2pUbxxxx+KMhLxiFYvyIA PJv/7bGkiv25v3pdKMOqB0hNSiq5vY4B+8YCugbw8ba0DVCpmBhE9Y4zYtfsMhF5 a/VRCfIRwFYAmhWt0hPdO0mbXOzUe+oiBgh5fiD3Uqd1qaISC1/+GsLJBOOD9QHw fgGBeOmvUmMThNXRQut670ybX5FwkQz56XxnVT9n0mqQ9L/Jf+xaK8dTZh7qXxOp auULoBtEUjsKuhrUvkQ8/mrNYp6PwBC7mGCb0ntmirTt/jNoIeOtsWAwdIp7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0/JPzJ40GcHXa42L/09F/MHQRUkwHwYDVR0j BBgwFoAUBWDi/QHG590D5Nf/swt+98L0na8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyZjk4YTAtMDk0Ny00ZjdhLWJlZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQw MUM2RTdERDAzRTREN0ZGQjMwQjdFRjdDMkY0OURBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNTYwRTJGRDAxQzZFN0REMDNFNEQ3RkZCMzBCN0VGN0MyRjQ5 REFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDMyZjk4YTAtMDk0Ny00ZjdhLWJl ZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdF RjdDMkY0OURBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClZFrPKzJWsY3TY+/fC1XfL4NBHEpp4nWLz c872xfLHOXRmzkG2tNKLDn+B7T6TT8T6JmVw77AFuGuyK5dUC/J11YsWVq4GB2B5 fwrRVrA3lPvZZTHnbqm9QJSiUCUKFigsjVBra0abhaHCxqWakgUlNvU3nWNb3Uqn WwWA6vPAruFicO0wjhRwHYKgxsmjYCThWtsUIZqqMfdyFfTzqSuSpypzrpZEzPle oF63pBvr8vz9+D9bsv8RyBLlM6THY5YikHSl4eUIFQ3Br4RG4CEI2Rd3jEoTianz /DOL62VEtxrzmtknqu2/4nl/NYvA2ZwU4If0AObcEvK4rcQqGFs= -----END CERTIFICATE-----Generated at Thu Sep 17 13:04:33 2026 by rpki-client