$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft File: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft (raw, json) Hash identifier: /YKtMVizL05x9YjcIHqxxlHm0RFMts0ikZeD3oEecT4= Subject key identifier: 7A:FD:70:34:92:BE:A7:9D:52:0B:D4:D7:37:ED:DA:EE:93:51:E9:7E Authority key identifier: 0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA Certificate issuer: /CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Certificate serial: 717C308B88F1E91B380BF3494E4AEF85039C621B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:48:10 +0000 Manifest this update: Thu 17 Sep 2026 07:43:10 +0000 Manifest next update: Fri 18 Sep 2026 10:07:10 +0000 Files and hashes: 1: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: AfqLgmWvcp/HfbbhsOhmQtK0n/maxUMDksVbAZ7tmAM=) 2: 0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl (hash: AFD0TOY8JisT2Em1eEZHBfkSlnITHWDGX2oFl2EWhFQ=) 3: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: wGWAkljELKeAaAd3PWlxElTnzVBFIyJlkgaeJs8LIbg=) 4: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: dKm4h4htb+xuOuzBD2j/P3WbreIMIoqa9hQCTFJdoG0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7c:30:8b:88:f1:e9:1b:38:0b:f3:49:4e:4a:ef:85:03:9c:62:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA Validity Not Before: Sep 17 07:43:10 2026 GMT Not After : Sep 18 10:07:10 2026 GMT Subject: CN=7AFD703492BEA79D520BD4D737EDDAEE9351E97E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:6b:2d:5a:53:c9:73:a0:ff:e9:da:68:87: 44:ca:0d:9b:d8:13:a5:84:8c:13:98:1f:ad:6a:b0: cb:e8:3e:33:66:04:1c:80:b4:57:6a:13:bb:41:22: 7a:c3:c5:08:6b:03:d9:c1:15:dc:ff:a6:25:5e:7c: 1e:80:1a:e8:51:e6:92:28:43:b5:9a:ec:5a:16:bc: 59:85:b4:55:fb:1f:a2:82:1f:af:70:fa:94:c8:6b: 16:83:16:3e:f9:b1:d2:38:66:c8:4a:99:f5:23:8a: 5a:77:75:39:0e:cf:85:c1:e0:09:ca:f1:0f:2e:fb: da:26:b1:57:2a:0a:87:34:24:c7:d9:94:cf:3b:ca: 7b:97:58:04:04:ea:ac:ba:05:1b:b1:10:53:e2:02: cf:85:ff:e5:3c:6b:c6:b0:91:aa:8c:90:78:c1:ff: c1:6e:cd:b8:44:6c:28:b8:79:d7:0e:58:fd:04:0f: 81:44:88:bb:25:a8:c7:62:1f:92:5c:8f:c6:71:36: f7:f7:d8:bb:eb:65:94:a9:63:c4:c6:e1:b7:9e:ac: 26:13:d8:75:c7:4b:26:e6:3f:71:36:63:e3:02:2b: 68:83:12:b0:c0:76:a0:25:b9:87:ec:98:88:e9:ec: df:ed:70:d5:80:be:b5:f8:5b:8b:c8:ce:98:7d:86: 68:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FD:70:34:92:BE:A7:9D:52:0B:D4:D7:37:ED:DA:EE:93:51:E9:7E X509v3 Authority Key Identifier: keyid:0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:73:f4:cf:e6:16:c3:50:67:3c:3d:c9:78:15:11:9b:63:fd: c9:61:72:c7:22:47:14:3c:5e:25:6a:b3:65:80:fc:a8:85:e7: 5a:0c:60:10:eb:40:92:6e:88:4b:ac:0b:7b:27:ee:70:29:88: 0e:c2:03:0e:c8:b5:91:a7:c7:4b:42:17:20:43:ad:af:5f:9e: c9:6a:f4:70:a4:1b:3a:04:f4:bb:eb:83:0b:17:9f:52:25:c0: 26:3c:f7:56:e1:28:40:4c:8f:51:51:f3:a0:4f:06:0d:16:4b: c7:fd:33:cf:d4:01:73:41:39:6d:32:67:68:b0:9f:b2:fd:e0: 99:3f:c1:d6:70:25:14:8a:05:d6:7a:a7:02:c2:3e:4d:69:ea: 5f:ff:b6:8e:31:65:1f:b8:e5:3d:30:64:dc:0a:51:dc:5d:84: 59:a1:08:f6:05:c0:05:89:b9:e2:ae:0c:1b:98:19:9a:68:ce: 39:be:ea:e8:45:89:68:de:ae:7b:9c:35:3b:5a:af:9b:0d:c7: 9a:c3:ce:df:f0:a7:6b:95:79:94:58:5c:f1:6e:30:15:5d:2d: 4e:84:41:b0:2c:77:b7:e8:6f:65:f9:ba:26:af:85:d9:f3:f8: db:a8:9d:dd:f4:27:dd:0c:61:60:82:3e:ca:ea:bf:37:13:ec: b8:d7:d6:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXwwi4jx6Rs4C/NJTkrvhQOcYhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlC NzU1RTRGQTAeFw0yNjA5MTcwNzQzMTBaFw0yNjA5MTgxMDA3MTBaMDMxMTAvBgNV BAMTKDdBRkQ3MDM0OTJCRUE3OUQ1MjBCRDRENzM3RUREQUVFOTM1MUU5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvWstWlPJc6D/6dpoh0TKDZvY E6WEjBOYH61qsMvoPjNmBByAtFdqE7tBInrDxQhrA9nBFdz/piVefB6AGuhR5pIo Q7Wa7FoWvFmFtFX7H6KCH69w+pTIaxaDFj75sdI4ZshKmfUjilp3dTkOz4XB4AnK 8Q8u+9omsVcqCoc0JMfZlM87ynuXWAQE6qy6BRuxEFPiAs+F/+U8a8awkaqMkHjB /8FuzbhEbCi4edcOWP0ED4FEiLslqMdiH5Jcj8ZxNvf32LvrZZSpY8TG4beerCYT 2HXHSybmP3E2Y+MCK2iDErDAdqAluYfsmIjp7N/tcNWAvrX4W4vIzph9hmhLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUev1wNJK+p51SC9TXN+3a7pNR6X4wHwYDVR0j BBgwFoAUDfaEGkXn9MPozJCvNrv72bdV5PowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGRhZjlmMGYtNGZiMS00MGMwLWIzODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0 NUU3RjRDM0U4Q0M5MEFGMzZCQkZCRDlCNzU1RTRGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wREY2ODQxQTQ1RTdGNEMzRThDQzkwQUYzNkJCRkJEOUI3NTVF NEZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMERGNjg0MUE0NUU3RjRDM0U4Q0M5MEFGMzZCQkZC RDlCNzU1RTRGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtz9M/mFsNQZzw9yXgVEZtj/clhcsciRxQ8 XiVqs2WA/KiF51oMYBDrQJJuiEusC3sn7nApiA7CAw7ItZGnx0tCFyBDra9fnslq 9HCkGzoE9LvrgwsXn1IlwCY891bhKEBMj1FR86BPBg0WS8f9M8/UAXNBOW0yZ2iw n7L94Jk/wdZwJRSKBdZ6pwLCPk1p6l//to4xZR+45T0wZNwKUdxdhFmhCPYFwAWJ ueKuDBuYGZpozjm+6uhFiWjernucNTtar5sNx5rDzt/wp2uVeZRYXPFuMBVdLU6E QbAsd7fob2X5uiavhdnz+Nuond30J90MYWCCPsrqvzcT7LjX1hM= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:43 2026 by rpki-client