$ rpki-client -vvvf rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft File: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft (raw, json) Hash identifier: IPEXxQzmp79r29Seeqmd3Fqu+vpeyKf1D4HxWOFAxq0= Subject key identifier: 93:F3:D0:49:6C:B8:51:B8:08:9F:A5:4E:11:A4:A4:AE:D3:9E:32:DF Authority key identifier: 0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F Certificate issuer: /CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F Certificate serial: 4571DB461216562A42DE0C8BFD31C59AE1416787 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft Manifest number: F2 Signing time: Fri 30 Oct 2026 08:05:24 +0000 Manifest this update: Fri 30 Oct 2026 08:00:24 +0000 Manifest next update: Sat 31 Oct 2026 11:01:24 +0000 Files and hashes: 1: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: 6eZrQcS7fk+urKWjqhBrdX4ASTj5STJSLSE2pWSJoPQ=) 2: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl (hash: OaaocV6kUq/CtinIWNM5buTbnChOOT4KL4t8eGwho6s=) 3: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: FeuEPBSyh4088t58wEF7WYPlFCQyhRPORfmVK/BUUf4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:71:db:46:12:16:56:2a:42:de:0c:8b:fd:31:c5:9a:e1:41:67:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F Validity Not Before: Oct 30 08:00:24 2026 GMT Not After : Oct 31 11:01:24 2026 GMT Subject: CN=93F3D0496CB851B8089FA54E11A4A4AED39E32DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:d8:61:0a:cd:ab:cc:6c:05:5f:04:e4:6b: 60:e0:b4:77:b6:d7:64:22:be:4f:3d:8b:2d:2c:4c: ea:dd:d5:de:21:60:a0:58:db:e7:51:c7:81:b9:1b: 28:72:e3:3b:29:f5:55:3f:9e:0e:bb:ca:02:f3:b0: b0:6e:fe:a6:c3:52:11:b3:d0:6f:3d:20:83:6e:10: f9:82:78:44:f5:b9:e1:39:4e:02:4a:db:c3:bf:fe: 5a:a3:eb:c5:be:66:ec:b3:07:2e:f1:37:83:2a:e5: d2:a4:f6:5c:bb:4c:54:6b:e1:35:f5:d1:f9:5c:b5: be:b6:49:96:3a:d4:5c:96:18:da:53:16:8a:28:c5: 35:ac:7e:88:12:d7:18:ae:d0:0b:84:db:ba:3e:f9: 32:81:78:90:59:34:76:fb:99:ef:f5:20:21:c4:a7: 97:d7:82:ea:8c:d5:78:29:8c:19:0b:d6:80:c8:c1: e4:c0:8d:b4:04:8a:de:e6:ef:44:b8:d5:ef:d0:70: b9:fd:36:f1:0c:09:c1:a8:56:16:f3:5c:2a:76:2d: 2d:f7:82:f8:f0:ca:7b:98:6c:ae:60:3f:08:ee:06: 9d:77:35:93:28:d1:23:2c:47:4e:9e:c9:66:b4:b1: 01:26:47:c9:68:6a:94:82:08:18:c0:8f:d7:da:f4: a6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F3:D0:49:6C:B8:51:B8:08:9F:A5:4E:11:A4:A4:AE:D3:9E:32:DF X509v3 Authority Key Identifier: keyid:0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:24:9e:a3:4c:bd:27:9d:d0:10:d8:aa:09:79:86:ec:2a:3a: e5:cd:28:6c:3b:79:d5:97:c2:f3:37:5b:98:aa:d3:01:75:1d: 2f:82:5b:72:66:f8:fb:84:d0:1a:f7:84:82:e5:d9:49:3a:52: 2b:31:74:57:30:50:3e:e2:4b:25:c2:10:27:e6:76:92:8b:59: 84:50:1d:49:30:95:68:ae:99:4f:b3:82:37:2c:79:47:3a:93: 2f:38:a4:0b:52:4c:76:1a:15:fc:61:39:ad:5d:ad:19:c7:9c: 45:48:ee:21:19:a6:5a:b5:98:dc:38:ab:34:82:b8:61:fe:66: ab:d6:78:7d:f3:8e:dc:74:07:87:6b:d9:3d:54:87:f6:62:2c: 66:7e:7a:c1:9e:43:31:cd:61:86:50:90:ec:f3:4e:4b:a8:03: cd:d5:a2:95:6b:bf:de:6c:68:46:0a:9f:d6:02:a6:23:6d:9a: e5:8b:ca:ce:ae:46:25:e2:3f:91:d8:17:07:43:26:34:2d:cd: 28:03:06:3a:4c:d6:30:da:57:9e:5c:b3:18:b6:c2:0c:33:33: 6d:8d:1d:ed:ea:20:dd:91:79:a6:40:7a:82:66:0d:32:63:55: 98:8f:ad:92:2f:ef:5d:56:02:23:91:94:ee:71:46:4e:80:5d: 32:0f:d8:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURXHbRhIWVipC3gyL/THFmuFBZ4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1 QkZCOUEwRjAeFw0yNjEwMzAwODAwMjRaFw0yNjEwMzExMTAxMjRaMDMxMTAvBgNV BAMTKDkzRjNEMDQ5NkNCODUxQjgwODlGQTU0RTExQTRBNEFFRDM5RTMyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5thhCs2rzGwFXwTka2DgtHe2 12Qivk89iy0sTOrd1d4hYKBY2+dRx4G5Gyhy4zsp9VU/ng67ygLzsLBu/qbDUhGz 0G89IINuEPmCeET1ueE5TgJK28O//lqj68W+ZuyzBy7xN4Mq5dKk9ly7TFRr4TX1 0flctb62SZY61FyWGNpTFoooxTWsfogS1xiu0AuE27o++TKBeJBZNHb7me/1ICHE p5fXguqM1XgpjBkL1oDIweTAjbQEit7m70S41e/QcLn9NvEMCcGoVhbzXCp2LS33 gvjwynuYbK5gPwjuBp13NZMo0SMsR06eyWa0sQEmR8loapSCCBjAj9fa9KYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/PQSWy4UbgIn6VOEaSkrtOeMt8wHwYDVR0j BBgwFoAUC9TgBeTZdS+hvE9SrvXIB1v7mg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJiNzE1MzYtNzE3ZS00NWRiLWEwM2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVF NEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1QkZCOUEwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkQ0RTAwNUU0RDk3NTJGQTFCQzRGNTJBRUY1QzgwNzVCRkI5 QTBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4 MDc1QkZCOUEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoknqNMvSed0BDYqgl5huwqOuXNKGw7edWX wvM3W5iq0wF1HS+CW3Jm+PuE0Br3hILl2Uk6UisxdFcwUD7iSyXCECfmdpKLWYRQ HUkwlWiumU+zgjcseUc6ky84pAtSTHYaFfxhOa1drRnHnEVI7iEZplq1mNw4qzSC uGH+ZqvWeH3zjtx0B4dr2T1Uh/ZiLGZ+esGeQzHNYYZQkOzzTkuoA83VopVrv95s aEYKn9YCpiNtmuWLys6uRiXiP5HYFwdDJjQtzSgDBjpM1jDaV55csxi2wgwzM22N He3qIN2ReaZAeoJmDTJjVZiPrZIv711WAiORlO5xRk6AXTIP2Bk= -----END CERTIFICATE-----Generated at Sat Oct 31 03:27:10 2026 by rpki-client