$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft File: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft (raw, json) Hash identifier: J7gRZAFEk55rdIZYma29+Q2zJJtwIqE+ax8DYw2TzNo= Subject key identifier: 0B:71:98:B8:4F:DA:31:4E:C8:2E:57:A3:6C:F8:5C:08:26:AE:72:A9 Authority key identifier: 0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F Certificate issuer: /CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Certificate serial: 11E701DA1E20DE150F6CF155627DC3EE6FD79E38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:38:06 +0000 Manifest this update: Wed 16 Sep 2026 23:33:06 +0000 Manifest next update: Fri 18 Sep 2026 02:13:06 +0000 Files and hashes: 1: 0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl (hash: MBq9Zdx4HiH5eb+tdPcJMnhtk+kweG5wdQ8wcReCSR0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e7:01:da:1e:20:de:15:0f:6c:f1:55:62:7d:c3:ee:6f:d7:9e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB61E17DB5C3A7C6BEA080E247E2371F248920F Validity Not Before: Sep 16 23:33:06 2026 GMT Not After : Sep 18 02:13:06 2026 GMT Subject: CN=0B7198B84FDA314EC82E57A36CF85C0826AE72A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:f6:20:64:51:84:2b:70:1f:db:d3:91:f3: fc:6a:e6:d7:42:94:ce:13:2c:3d:00:a1:3a:d2:10: 35:7e:2a:e3:af:51:8b:e8:36:f5:f7:6d:10:e5:12: 4f:f7:f9:2c:5f:45:5f:af:ed:37:e1:29:76:84:ab: 42:90:9d:f6:ef:07:2b:c7:9e:a6:44:f2:a5:9b:d3: d7:74:86:a3:ce:6a:27:66:dd:97:67:37:39:62:3a: 5d:1c:48:4b:1e:0d:8b:b3:1f:3b:09:19:61:00:93: 9b:8a:7a:78:a1:80:07:96:6a:5d:0d:01:f6:06:ab: cc:db:66:24:99:b8:c2:b7:2a:c1:9a:88:f0:be:fe: 46:74:02:14:c5:eb:44:81:83:04:41:ac:1d:5f:6f: 90:a9:81:eb:e1:2f:ea:7e:28:d5:9c:f7:b4:85:93: 2a:58:63:16:e2:18:a1:c4:c0:7a:25:94:09:24:e4: e2:db:4a:0d:c2:6f:cb:f9:59:21:7d:83:02:e1:0e: e8:b4:d9:24:61:b8:ae:77:74:fa:8c:8a:bf:c2:1e: 88:99:e5:16:62:e8:76:45:de:36:60:88:88:bc:6e: 41:b0:5d:ca:de:81:a8:fb:13:30:68:7e:5b:c6:8e: e4:b4:df:d9:a1:99:61:b5:c7:a0:c5:08:6b:34:4c: 4d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:71:98:B8:4F:DA:31:4E:C8:2E:57:A3:6C:F8:5C:08:26:AE:72:A9 X509v3 Authority Key Identifier: keyid:0F:B6:1E:17:DB:5C:3A:7C:6B:EA:08:0E:24:7E:23:71:F2:48:92:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/0FB61E17DB5C3A7C6BEA080E247E2371F248920F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d5:cd:38:da:78:e3:c6:62:76:d4:64:dc:1e:b9:82:d4:42: c7:0e:1e:6d:67:b4:99:6b:e0:c6:43:6a:9d:ba:48:57:54:1d: 2e:66:c2:2d:54:7a:77:6c:16:f0:57:5c:6b:f0:8f:d9:62:57: 77:a2:6d:d0:64:55:e1:31:cd:46:6a:27:04:9a:de:21:15:e8: 64:42:90:0b:37:1c:40:d0:9b:9d:71:5c:a8:91:32:a0:e8:03: 6b:89:f0:b9:e5:c2:0a:94:3e:5b:19:25:d5:cb:b2:5e:f2:04: 9a:8e:11:e8:46:b1:e5:7e:00:8a:15:18:0f:20:84:bf:db:f7: 09:df:4e:3b:32:dc:48:dd:a8:58:82:f4:0d:e8:f2:a3:95:6c: 46:6c:a7:38:9b:37:39:77:bd:41:8c:de:57:04:51:c8:ef:18: 13:55:59:7a:33:f4:b2:4d:5b:75:79:53:5f:73:3a:1b:6c:9f: 1a:5b:51:ce:4a:f0:22:66:10:42:7d:29:af:25:c9:63:83:b2: 22:02:01:c6:ad:68:02:c8:13:d5:31:fa:43:74:d5:3f:f9:46: 7c:15:18:ad:9f:b5:bb:b7:52:a8:ff:1a:f9:df:81:1f:11:76: 36:9a:c5:d7:cf:22:ee:14:9b:2f:06:d1:5c:94:7b:de:5f:10: ed:c3:0d:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEecB2h4g3hUPbPFVYn3D7m/XnjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFG MjQ4OTIwRjAeFw0yNjA5MTYyMzMzMDZaFw0yNjA5MTgwMjEzMDZaMDMxMTAvBgNV BAMTKDBCNzE5OEI4NEZEQTMxNEVDODJFNTdBMzZDRjg1QzA4MjZBRTcyQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLvYgZFGEK3Af29OR8/xq5tdC lM4TLD0AoTrSEDV+KuOvUYvoNvX3bRDlEk/3+SxfRV+v7TfhKXaEq0KQnfbvByvH nqZE8qWb09d0hqPOaidm3ZdnNzliOl0cSEseDYuzHzsJGWEAk5uKenihgAeWal0N AfYGq8zbZiSZuMK3KsGaiPC+/kZ0AhTF60SBgwRBrB1fb5CpgevhL+p+KNWc97SF kypYYxbiGKHEwHollAkk5OLbSg3Cb8v5WSF9gwLhDui02SRhuK53dPqMir/CHoiZ 5RZi6HZF3jZgiIi8bkGwXcregaj7EzBoflvGjuS039mhmWG1x6DFCGs0TE1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC3GYuE/aMU7ILlejbPhcCCaucqkwHwYDVR0j BBgwFoAUD7YeF9tcOnxr6ggOJH4jcfJIkg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ3OGI1MGItNDQ5Yy00NTRiLTg1MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdE QjVDM0E3QzZCRUEwODBFMjQ3RTIzNzFGMjQ4OTIwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkI2MUUxN0RCNUMzQTdDNkJFQTA4MEUyNDdFMjM3MUYyNDg5 MjBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzEvMEZCNjFFMTdEQjVDM0E3QzZCRUEwODBFMjQ3RTIz NzFGMjQ4OTIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjVzTjaeOPGYnbUZNweuYLUQscOHm1ntJlr 4MZDap26SFdUHS5mwi1UendsFvBXXGvwj9liV3eibdBkVeExzUZqJwSa3iEV6GRC kAs3HEDQm51xXKiRMqDoA2uJ8LnlwgqUPlsZJdXLsl7yBJqOEehGseV+AIoVGA8g hL/b9wnfTjsy3EjdqFiC9A3o8qOVbEZspzibNzl3vUGM3lcEUcjvGBNVWXoz9LJN W3V5U19zOhtsnxpbUc5K8CJmEEJ9Ka8lyWODsiICAcataALIE9Ux+kN01T/5RnwV GK2ftbu3Uqj/GvnfgR8RdjaaxdfPIu4Umy8G0VyUe95fEO3DDUg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:47:27 2026 by rpki-client