$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft File: 0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft (raw, json) Hash identifier: R482kV2qe3Gyl8cSCy1gWsd6DOVJeQ6o3KrL90nDZUM= Subject key identifier: 40:05:A6:0D:83:47:AA:97:37:4E:3F:4C:9F:4B:CF:57:40:15:24:57 Authority key identifier: 0D:C6:61:9B:D5:EE:04:1C:F9:43:A5:C6:0A:14:AA:09:A7:E1:E0:8C Certificate issuer: /CN=0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C Certificate serial: 2B626CFBC2889F6E46206A052D28256767459FF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:06:05 +0000 Manifest this update: Thu 17 Sep 2026 02:01:05 +0000 Manifest next update: Fri 18 Sep 2026 04:50:05 +0000 Files and hashes: 1: 0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.crl (hash: l5lou7q2jg29Zsfs+Wm6a2o3/+wlWcjGAIvn+9KUhYA=) 2: 3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (hash: fn14xb7Fet3D9STECs6nLsztZDz4SqE0tmJcaxx1cKk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.crl rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:62:6c:fb:c2:88:9f:6e:46:20:6a:05:2d:28:25:67:67:45:9f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C Validity Not Before: Sep 17 02:01:05 2026 GMT Not After : Sep 18 04:50:05 2026 GMT Subject: CN=4005A60D8347AA97374E3F4C9F4BCF5740152457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:e4:f5:5c:56:28:d0:1f:25:fd:08:76:1c: 6c:a8:3a:69:3b:28:17:54:e6:dc:61:74:70:a0:2e: 93:22:35:13:3e:c4:e0:01:fa:f5:11:80:fd:ce:6d: ed:0d:72:79:a1:db:32:17:10:32:a3:b8:8b:5c:c9: 2f:d0:3a:ad:5f:42:57:a3:fa:8f:c9:5f:90:0e:1e: 85:e7:c6:5b:64:e8:20:e0:7e:fe:2e:60:83:be:47: 8e:07:49:5b:dc:52:ea:e2:c1:06:9a:39:bb:88:7f: 2f:3f:8b:65:11:04:8c:74:17:60:9e:ba:7c:ce:5f: d1:45:ae:f7:c7:a0:2b:a4:6e:32:50:f1:4c:b1:42: 91:ee:be:43:30:ee:aa:94:ee:01:13:de:bb:62:b3: c8:86:03:74:ba:06:0f:28:0c:00:a5:5c:f1:bf:d7: 79:80:66:0f:04:f9:ed:75:eb:df:68:ed:db:84:77: f7:46:2a:ef:24:f2:27:3a:d8:e0:77:c1:80:17:2f: 4c:82:ba:9b:b9:53:5f:fd:c0:6a:ac:a5:3f:f2:2b: 5b:9c:e9:ba:0b:1b:eb:ba:2c:df:e2:e4:26:77:64: ca:db:c8:35:9d:28:da:2d:d6:eb:49:c4:9a:a0:52: d8:a6:35:37:f1:ea:a1:04:a6:4e:60:7e:1f:66:9e: 8c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:05:A6:0D:83:47:AA:97:37:4E:3F:4C:9F:4B:CF:57:40:15:24:57 X509v3 Authority Key Identifier: keyid:0D:C6:61:9B:D5:EE:04:1C:F9:43:A5:C6:0A:14:AA:09:A7:E1:E0:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/0DC6619BD5EE041CF943A5C60A14AA09A7E1E08C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:40:bf:97:9d:60:b7:36:fa:5f:f7:fc:51:d4:4b:68:a6:48: e5:cf:9c:61:77:ea:b9:96:71:42:0a:31:31:80:61:65:ba:88: 51:d0:66:b1:22:b4:8c:42:6b:2f:02:a6:a0:96:e3:35:3e:00: 22:cb:f0:df:71:b9:77:01:6e:77:35:e3:21:5a:5e:6a:37:3b: a3:a7:96:24:4c:18:a4:29:34:95:4b:83:8a:28:49:b5:68:34: f8:f6:87:aa:29:b0:81:33:72:20:82:90:28:62:69:6d:03:6a: 4f:de:77:0c:63:c2:c1:ca:ee:e5:b8:c7:d5:57:75:48:56:dd: ad:d4:a1:5c:16:3f:ac:a8:ec:3f:1b:d1:57:16:06:60:7b:ed: f2:07:53:67:8e:c8:90:13:b7:ab:cd:c2:d7:88:4d:5c:39:67: 66:3e:fb:6a:02:5e:c8:1c:17:1d:ef:16:9e:68:19:a4:70:a2: e2:f1:c5:94:10:0d:6a:56:a6:8d:22:de:98:99:ed:fc:6a:42: 9c:c5:c1:5a:dc:75:2f:22:f4:ff:53:2f:27:f6:08:89:e6:2e: 36:0c:bb:d9:bf:d7:0c:5c:48:c3:e7:5a:2f:e8:81:db:8c:74: 9f:83:ff:c9:f2:87:0d:24:bb:49:a9:5c:48:cd:1b:e4:bc:78: 43:ef:89:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK2Js+8KIn25GIGoFLSglZ2dFn/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERDNjYxOUJENUVFMDQxQ0Y5NDNBNUM2MEExNEFBMDlB N0UxRTA4QzAeFw0yNjA5MTcwMjAxMDVaFw0yNjA5MTgwNDUwMDVaMDMxMTAvBgNV BAMTKDQwMDVBNjBEODM0N0FBOTczNzRFM0Y0QzlGNEJDRjU3NDAxNTI0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGEeT1XFYo0B8l/Qh2HGyoOmk7 KBdU5txhdHCgLpMiNRM+xOAB+vURgP3Obe0Ncnmh2zIXEDKjuItcyS/QOq1fQlej +o/JX5AOHoXnxltk6CDgfv4uYIO+R44HSVvcUuriwQaaObuIfy8/i2URBIx0F2Ce unzOX9FFrvfHoCukbjJQ8UyxQpHuvkMw7qqU7gET3rtis8iGA3S6Bg8oDAClXPG/ 13mAZg8E+e11699o7duEd/dGKu8k8ic62OB3wYAXL0yCupu5U1/9wGqspT/yK1uc 6boLG+u6LN/i5CZ3ZMrbyDWdKNot1utJxJqgUtimNTfx6qEEpk5gfh9mnox1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQAWmDYNHqpc3Tj9Mn0vPV0AVJFcwHwYDVR0j BBgwFoAUDcZhm9XuBBz5Q6XGChSqCafh4IwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDYxMThmMmItOWY5NC00MTk5LWEyNDEtOGZjNTFkMTdlMGM1LzAvMERDNjYxOUJE NUVFMDQxQ0Y5NDNBNUM2MEExNEFBMDlBN0UxRTA4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wREM2NjE5QkQ1RUUwNDFDRjk0M0E1QzYwQTE0QUEwOUE3RTFF MDhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDYxMThmMmItOWY5NC00MTk5LWEy NDEtOGZjNTFkMTdlMGM1LzAvMERDNjYxOUJENUVFMDQxQ0Y5NDNBNUM2MEExNEFB MDlBN0UxRTA4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJAv5edYLc2+l/3/FHUS2imSOXPnGF36rmW cUIKMTGAYWW6iFHQZrEitIxCay8CpqCW4zU+ACLL8N9xuXcBbnc14yFaXmo3O6On liRMGKQpNJVLg4ooSbVoNPj2h6opsIEzciCCkChiaW0Dak/edwxjwsHK7uW4x9VX dUhW3a3UoVwWP6yo7D8b0VcWBmB77fIHU2eOyJATt6vNwteITVw5Z2Y++2oCXsgc Fx3vFp5oGaRwouLxxZQQDWpWpo0i3piZ7fxqQpzFwVrcdS8i9P9TLyf2CInmLjYM u9m/1wxcSMPnWi/ogduMdJ+D/8nyhw0ku0mpXEjNG+S8eEPviYc= -----END CERTIFICATE-----Generated at Thu Sep 17 14:47:52 2026 by rpki-client