$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft File: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft (raw, json) Hash identifier: GlZB1uoYfFYwccbw0KJ2XPsJbmw4COzvAnewklRs7Cw= Subject key identifier: 63:39:F6:20:81:A7:CF:66:0D:B6:80:08:59:49:83:69:DC:07:3B:76 Authority key identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 Certificate issuer: /CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Certificate serial: 1A0723479434435A6E27F4E2DD7369DD0AFFEFFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft Manifest number: BD Signing time: Thu 17 Sep 2026 03:58:25 +0000 Manifest this update: Thu 17 Sep 2026 03:53:25 +0000 Manifest next update: Fri 18 Sep 2026 06:47:25 +0000 Files and hashes: 1: 3130332e3138352e38322e302f32342d3234203d3e20313533363538.roa (hash: 3D6eYWuVv+VfyxKvhmmt+NlubugsC5IamNBQUUTxDDk=) 2: 3130332e3138352e38322e302f32332d3233203d3e203538383230.roa (hash: 5tF4qp3pthDfpaMIBTWAt6J465qcSCrI9I/iywJOOfs=) 3: 0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl (hash: fFicmrcxb1uVSfiJGLWIiiSDnJEeOy/43Us1HF+JLkY=) 4: 3130332e3138352e38332e302f32342d3234203d3e20313533363538.roa (hash: gbvsVbre/1qZHWsiXoi/b+h75ZvQI1fjsMMqGabJRM8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:07:23:47:94:34:43:5a:6e:27:f4:e2:dd:73:69:dd:0a:ff:ef:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1 Validity Not Before: Sep 17 03:53:25 2026 GMT Not After : Sep 18 06:47:25 2026 GMT Subject: CN=6339F62081A7CF660DB6800859498369DC073B76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:0d:c2:37:5b:b7:fa:f4:df:ce:ea:96:a5: 17:aa:c0:4c:ac:65:a1:26:01:fc:9e:ac:23:7a:3f: bc:fc:14:4f:08:56:33:91:86:b2:28:7e:38:f2:8f: fb:b7:d6:bf:53:5d:a2:c8:5b:38:30:da:2f:b0:2d: 61:60:57:8f:e8:d4:5b:c1:b9:3c:13:ba:23:bd:e4: fa:6d:05:67:41:58:c0:76:61:46:a3:62:47:c9:74: 16:f5:b5:ad:ca:18:6b:eb:37:8b:79:83:e0:d9:c2: bb:cc:e5:ac:8e:29:2c:3f:6d:c3:40:f9:b4:fc:71: e1:57:7d:3d:16:d4:5f:77:07:62:c0:15:f2:9e:93: 89:48:31:99:2c:ca:cb:e0:f9:5b:26:22:f1:5d:20: 1a:38:bb:45:d5:69:9a:da:a0:60:da:18:48:9b:35: 15:98:97:e6:67:b5:cd:89:9e:14:e3:e0:26:0e:a6: 50:8a:1d:a4:30:9f:c9:03:f1:79:05:3b:91:a5:a8: 17:29:43:72:75:fe:b7:e3:a7:d2:e0:d7:ac:0d:d6: 91:4d:4a:83:d6:c4:e4:a4:58:84:e3:f5:4c:de:c4: 3b:f1:4d:1d:28:54:5d:f1:ff:4d:b2:26:b6:06:35: 63:8e:bb:50:86:4b:d3:ab:69:20:f3:a8:a3:1e:a3: b6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:39:F6:20:81:A7:CF:66:0D:B6:80:08:59:49:83:69:DC:07:3B:76 X509v3 Authority Key Identifier: keyid:0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e3:b0:b1:6e:87:19:4a:c1:8e:76:c6:db:47:c7:21:44:a4: ab:88:d9:15:1e:e5:90:92:c4:c5:94:d3:33:ac:88:31:a8:1d: 53:03:e1:dc:08:cb:a5:ea:35:97:56:bc:b2:25:f6:28:02:f0: c7:b1:90:42:3b:22:8f:cf:c2:d8:f0:12:82:f1:41:91:36:8a: 28:80:a7:fe:91:f5:48:6b:58:64:5d:40:12:4d:ad:0f:82:08: 88:79:58:46:f0:df:e7:6e:49:19:4c:76:f7:1b:09:9c:64:7a: d9:93:b9:6f:db:4f:40:d9:b8:f1:20:aa:bc:c4:ee:d3:24:50: 9b:54:ef:91:c5:5b:47:ca:10:0b:56:a3:a4:07:93:76:87:f2: ff:e2:54:7f:cf:c5:fe:c7:0f:e3:c8:b3:bd:45:54:8f:d1:6d: 1c:00:1e:01:5a:53:59:80:58:eb:3f:e2:07:a3:74:a7:d0:8a: 77:ae:f7:b7:d5:79:c8:5c:10:ae:7c:69:44:4c:57:7f:04:46: ba:be:2a:eb:46:24:88:31:1e:4d:70:42:5d:ce:9f:07:ed:1e: 0a:51:5c:62:b7:ae:4c:d6:48:b0:e5:2f:01:9a:f2:44:b9:ce: a2:8b:f4:08:b8:4a:90:86:4e:43:db:fe:1f:98:fe:30:10:8d: 56:32:e7:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgcjR5Q0Q1puJ/Ti3XNp3Qr/7/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3 QzM4NEJDMTAeFw0yNjA5MTcwMzUzMjVaFw0yNjA5MTgwNjQ3MjVaMDMxMTAvBgNV BAMTKDYzMzlGNjIwODFBN0NGNjYwREI2ODAwODU5NDk4MzY5REMwNzNCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiQ3CN1u3+vTfzuqWpReqwEys ZaEmAfyerCN6P7z8FE8IVjORhrIofjjyj/u31r9TXaLIWzgw2i+wLWFgV4/o1FvB uTwTuiO95PptBWdBWMB2YUajYkfJdBb1ta3KGGvrN4t5g+DZwrvM5ayOKSw/bcNA +bT8ceFXfT0W1F93B2LAFfKek4lIMZksysvg+VsmIvFdIBo4u0XVaZraoGDaGEib NRWYl+Zntc2JnhTj4CYOplCKHaQwn8kD8XkFO5GlqBcpQ3J1/rfjp9Lg16wN1pFN SoPWxOSkWITj9UzexDvxTR0oVF3x/02yJrYGNWOOu1CGS9OraSDzqKMeo7YNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYzn2IIGnz2YNtoAIWUmDadwHO3YwHwYDVR0j BBgwFoAUDO0e7Q6F4ri6Xv++wCUgPXw4S8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWJmMmNmMDMtZjlmOS00YmNhLThjMmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQw RTg1RTJCOEJBNUVGRkJFQzAyNTIwM0Q3QzM4NEJDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQ0VEMUVFRDBFODVFMkI4QkE1RUZGQkVDMDI1MjAzRDdDMzg0 QkMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvMENFRDFFRUQwRTg1RTJCOEJBNUVGRkJFQzAyNTIw M0Q3QzM4NEJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3jsLFuhxlKwY52xttHxyFEpKuI2RUe5ZCS xMWU0zOsiDGoHVMD4dwIy6XqNZdWvLIl9igC8MexkEI7Io/PwtjwEoLxQZE2iiiA p/6R9UhrWGRdQBJNrQ+CCIh5WEbw3+duSRlMdvcbCZxketmTuW/bT0DZuPEgqrzE 7tMkUJtU75HFW0fKEAtWo6QHk3aH8v/iVH/Pxf7HD+PIs71FVI/RbRwAHgFaU1mA WOs/4gejdKfQineu97fVechcEK58aURMV38ERrq+KutGJIgxHk1wQl3OnwftHgpR XGK3rkzWSLDlLwGa8kS5zqKL9Ai4SpCGTkPb/h+Y/jAQjVYy58s= -----END CERTIFICATE-----Generated at Thu Sep 17 09:19:28 2026 by rpki-client