$ rpki-client -vvvf rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft File: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft (raw, json) Hash identifier: bTHO/oLtSNL+91iZLMV1MqV+4tLZLcCgJX9/7WCt4Co= Subject key identifier: 4D:AC:84:AA:0A:4E:89:05:B0:03:C1:08:FA:1E:AB:83:C8:26:A7:20 Authority key identifier: 0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F Certificate issuer: /CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F Certificate serial: 7438D447959B506DC0AADACA4B39499791D2D22E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft Manifest number: B0 Signing time: Fri 11 Sep 2026 03:40:44 +0000 Manifest this update: Fri 11 Sep 2026 03:35:44 +0000 Manifest next update: Sat 12 Sep 2026 03:53:44 +0000 Files and hashes: 1: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl (hash: arl6f1fh1Y02olp/y0Jk5Z72n0WBoHDeny9mZfJ7BOc=) 2: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: FeuEPBSyh4088t58wEF7WYPlFCQyhRPORfmVK/BUUf4=) 3: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: 6eZrQcS7fk+urKWjqhBrdX4ASTj5STJSLSE2pWSJoPQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 03:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:38:d4:47:95:9b:50:6d:c0:aa:da:ca:4b:39:49:97:91:d2:d2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F Validity Not Before: Sep 11 03:35:44 2026 GMT Not After : Sep 12 03:53:44 2026 GMT Subject: CN=4DAC84AA0A4E8905B003C108FA1EAB83C826A720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:84:5e:e1:fe:0b:94:b5:e3:ee:3d:d8:b9: f5:f8:c9:ff:ee:c4:17:db:1b:d0:dd:6b:86:0f:3e: d1:9f:3f:a9:ad:9f:35:e6:46:c5:fb:c9:35:2d:bd: 00:f7:57:75:84:27:5a:ea:57:e7:a7:7b:08:7b:39: b5:47:63:29:42:bc:78:3b:2d:5e:73:d7:60:af:49: 2c:83:bc:4e:e8:56:d3:08:ee:22:1f:3b:30:05:bc: d1:10:39:54:f4:81:b4:05:2f:6f:2a:93:bc:ab:f9: 8e:73:f1:09:f3:4c:cd:22:d0:dc:92:71:d8:80:1e: 42:ce:75:17:ff:a5:d2:9f:93:e7:5c:e7:6a:4f:a3: f2:07:ca:07:9a:a5:56:54:ac:eb:41:02:f4:ff:80: f9:fb:04:ec:c4:65:fb:b2:e8:6e:31:52:60:60:8c: 11:e4:ad:7e:c6:1b:35:41:1d:73:38:15:e6:c0:8e: 03:1a:5e:d3:ec:ef:02:99:f3:53:33:f8:6f:c9:7d: 70:08:0a:08:a3:ae:6a:eb:a0:f2:0e:c2:5f:95:ea: bc:38:17:a7:60:49:46:08:3c:23:d2:36:2a:be:db: 6d:ae:b5:81:b4:c3:c1:1b:57:0c:0b:12:2f:49:58: bf:a5:90:79:05:ab:f9:1c:93:61:5f:72:96:7b:be: 00:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AC:84:AA:0A:4E:89:05:B0:03:C1:08:FA:1E:AB:83:C8:26:A7:20 X509v3 Authority Key Identifier: keyid:0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7c:c9:33:73:56:40:db:61:e3:f9:ba:71:b6:d8:b8:b9:4f: 22:8f:39:64:ad:2f:21:20:c0:26:e7:8b:2d:9a:84:a4:5a:0b: ab:ee:f7:f6:ed:aa:1b:ce:44:ab:e2:e9:47:b6:83:11:30:74: d9:ee:92:d6:95:1f:3e:ca:a9:c7:a1:28:48:21:ea:f0:a8:a2: 54:57:b0:b7:da:db:61:4f:04:6f:51:ec:e1:64:7a:a1:75:54: 64:d3:8d:74:f6:ce:e7:99:3b:29:2e:c6:36:3d:ba:ee:87:13: 8e:35:08:eb:2d:88:47:40:b8:5c:ae:ce:0d:2c:06:07:10:8b: e5:fe:f0:3a:c5:93:8a:13:d6:52:3b:16:d3:e0:57:31:01:cb: 23:14:ac:cf:5b:95:1c:6e:41:8a:89:dc:2d:d7:d0:82:99:fc: a5:a2:d6:69:96:fc:64:46:05:18:96:75:e2:87:42:ed:03:92: da:4a:04:1a:c8:54:71:be:0a:a5:e8:79:92:d6:df:4e:a7:fe: de:ca:5d:ac:2b:07:01:80:bb:27:8f:06:1e:3f:18:c9:ff:30: b2:a3:37:26:f4:ab:5c:13:99:2d:74:47:de:cb:7d:d6:27:e7: 2d:33:77:b1:f7:21:4b:0e:95:b2:ff:8d:55:fe:f9:8b:6e:8d: 05:ac:62:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDjUR5WbUG3AqtrKSzlJl5HS0i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1 QkZCOUEwRjAeFw0yNjA5MTEwMzM1NDRaFw0yNjA5MTIwMzUzNDRaMDMxMTAvBgNV BAMTKDREQUM4NEFBMEE0RTg5MDVCMDAzQzEwOEZBMUVBQjgzQzgyNkE3MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf64Re4f4LlLXj7j3YufX4yf/u xBfbG9Dda4YPPtGfP6mtnzXmRsX7yTUtvQD3V3WEJ1rqV+enewh7ObVHYylCvHg7 LV5z12CvSSyDvE7oVtMI7iIfOzAFvNEQOVT0gbQFL28qk7yr+Y5z8QnzTM0i0NyS cdiAHkLOdRf/pdKfk+dc52pPo/IHygeapVZUrOtBAvT/gPn7BOzEZfuy6G4xUmBg jBHkrX7GGzVBHXM4FebAjgMaXtPs7wKZ81Mz+G/JfXAICgijrmrroPIOwl+V6rw4 F6dgSUYIPCPSNiq+222utYG0w8EbVwwLEi9JWL+lkHkFq/kck2FfcpZ7vgCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTayEqgpOiQWwA8EI+h6rg8gmpyAwHwYDVR0j BBgwFoAUC9TgBeTZdS+hvE9SrvXIB1v7mg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJiNzE1MzYtNzE3ZS00NWRiLWEwM2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVF NEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1QkZCOUEwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkQ0RTAwNUU0RDk3NTJGQTFCQzRGNTJBRUY1QzgwNzVCRkI5 QTBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4 MDc1QkZCOUEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGt8yTNzVkDbYeP5unG22Li5TyKPOWStLyEg wCbniy2ahKRaC6vu9/btqhvORKvi6Ue2gxEwdNnuktaVHz7KqcehKEgh6vCoolRX sLfa22FPBG9R7OFkeqF1VGTTjXT2zueZOykuxjY9uu6HE441COstiEdAuFyuzg0s BgcQi+X+8DrFk4oT1lI7FtPgVzEByyMUrM9blRxuQYqJ3C3X0IKZ/KWi1mmW/GRG BRiWdeKHQu0DktpKBBrIVHG+CqXoeZLW306n/t7KXawrBwGAuyePBh4/GMn/MLKj Nyb0q1wTmS10R97LfdYn5y0zd7H3IUsOlbL/jVX++YtujQWsYuM= -----END CERTIFICATE-----Generated at Fri Sep 11 15:42:12 2026 by rpki-client