$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft File: 0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft (raw, json) Hash identifier: RBC1k7aqf2OmBxJQgLNu907h2CnwRQpoFMAoBupPnW8= Subject key identifier: D6:27:F3:76:02:D7:45:4E:94:B2:49:85:39:99:2E:7A:BE:8D:6E:21 Authority key identifier: 0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70 Certificate issuer: /CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870 Certificate serial: 5984EE1DF982AF69D721EC01D217F782D5591BAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 05:09:50 +0000 Manifest this update: Thu 17 Sep 2026 05:04:50 +0000 Manifest next update: Fri 18 Sep 2026 08:55:50 +0000 Files and hashes: 1: 3136302e32322e36362e302f32332d3233203d3e20313534343130.roa (hash: x+Zmass52e0XiEEcxmz35DHW32ZXdCP/lp7OD4a3w4Y=) 2: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: DVbfArMTlg+UHrMZklDTYc3fTbYxFUjdyjuDCut72nE=) 3: 0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl (hash: /CGTgN7n3fHdlO/wh3yxc0dlkF6+WtdTWZu6xTeRMwY=) 4: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: ChO0wv9yKUM7ukCp9cBiuF/qy0Q/8i0Sz7WEvpLu0oo=) 5: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: 4TAm+Tq7VEmBP4/ZDSMoQRtNl/2F8B0387VCKH9srzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:84:ee:1d:f9:82:af:69:d7:21:ec:01:d2:17:f7:82:d5:59:1b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870 Validity Not Before: Sep 17 05:04:50 2026 GMT Not After : Sep 18 08:55:50 2026 GMT Subject: CN=D627F37602D7454E94B2498539992E7ABE8D6E21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ed:19:67:2c:57:44:04:33:ee:ad:43:2d:ad: c5:f8:16:8d:85:52:bc:43:5b:00:51:84:4d:9a:25: da:53:9d:19:de:43:e6:42:ae:2d:92:00:6a:00:a8: 60:aa:15:ee:8c:4a:50:4e:34:1b:87:55:9a:fa:40: f7:6b:6f:b9:5c:ab:d9:53:3e:c8:72:19:61:9d:2e: d2:78:21:eb:40:82:df:9a:1f:f9:a8:b6:c9:35:e6: 9c:df:ae:3c:ca:fc:19:66:22:51:f6:05:86:f6:f3: 86:28:9f:09:e6:1e:95:35:9f:4f:45:1c:48:38:12: 61:86:36:9e:be:5f:d4:74:7f:3a:75:bc:0d:fd:a8: cb:ad:90:9d:6e:d8:d1:ac:f5:39:60:d1:c6:a4:4c: 88:9d:fe:cf:41:57:f9:dd:35:5e:18:87:c7:b2:e4: 7a:2f:0a:2c:9b:27:0c:c3:41:e1:1f:02:de:bb:d7: bd:4c:a4:51:f6:8e:91:08:cc:c5:42:49:fd:7a:ac: f5:b6:12:64:5d:77:fc:56:3e:93:32:4f:2d:d1:f1: 05:e9:41:3c:ef:07:7a:b4:66:05:4e:83:4a:6a:dd: 1f:60:01:cc:b9:5e:20:13:28:dc:9d:34:20:36:b6: d8:d9:a2:09:4f:7e:fa:f3:ea:2b:01:2b:24:79:4d: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:27:F3:76:02:D7:45:4E:94:B2:49:85:39:99:2E:7A:BE:8D:6E:21 X509v3 Authority Key Identifier: keyid:0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:40:cd:99:86:2a:2b:5e:3a:08:f3:09:43:fb:9a:c6:2e:8b: 5d:b3:17:7d:99:a2:27:e1:e2:06:9e:84:a0:c5:aa:c7:1d:5f: 2a:27:69:c5:4c:dd:42:fb:7c:04:eb:ff:5f:39:f4:ea:98:ee: d4:50:79:c8:5d:84:2b:b3:64:3d:e0:75:81:29:e0:1c:b6:03: 99:ab:20:77:81:ec:41:46:c8:76:20:26:17:5b:0f:35:8d:0a: b1:b1:25:e4:a5:49:6f:3c:be:5e:4a:d9:02:75:ef:12:e5:22: fc:8f:8a:70:d0:61:61:f9:41:01:3a:73:6d:30:6e:63:a5:47: 82:82:88:e0:fd:3b:13:12:2b:77:36:e6:50:c9:cc:56:59:a4: d5:db:5f:b2:49:40:e1:3a:95:cc:a4:01:1e:20:f9:ea:2b:51: 92:c3:ab:95:aa:0a:b2:04:06:b0:65:d4:e9:31:a9:d9:c0:f6: 4c:30:1e:6b:c7:3e:54:22:ef:06:6f:06:cc:77:1c:83:4f:85: c7:47:63:a1:a9:01:7d:3f:04:26:79:bf:e7:7a:9f:a6:1b:ec: 9f:c9:ba:c7:f3:0e:3a:cf:6e:24:0c:b2:78:6f:e2:1b:fd:0d: 6b:ba:2f:79:dc:d5:23:0f:c9:c0:0a:00:96:9b:06:9a:04:63: e9:cd:59:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYTuHfmCr2nXIewB0hf3gtVZG6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCNjJGMUYwRDEwQzVFQzdENzI0MTBFNTYzNzUyNUI2 MjFDNDg3MDAeFw0yNjA5MTcwNTA0NTBaFw0yNjA5MTgwODU1NTBaMDMxMTAvBgNV BAMTKEQ2MjdGMzc2MDJENzQ1NEU5NEIyNDk4NTM5OTkyRTdBQkU4RDZFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU7RlnLFdEBDPurUMtrcX4Fo2F UrxDWwBRhE2aJdpTnRneQ+ZCri2SAGoAqGCqFe6MSlBONBuHVZr6QPdrb7lcq9lT PshyGWGdLtJ4IetAgt+aH/motsk15pzfrjzK/BlmIlH2BYb284YonwnmHpU1n09F HEg4EmGGNp6+X9R0fzp1vA39qMutkJ1u2NGs9Tlg0cakTIid/s9BV/ndNV4Yh8ey 5HovCiybJwzDQeEfAt67171MpFH2jpEIzMVCSf16rPW2EmRdd/xWPpMyTy3R8QXp QTzvB3q0ZgVOg0pq3R9gAcy5XiATKNydNCA2ttjZoglPfvrz6isBKyR5TZi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ifzdgLXRU6UskmFOZkuer6NbiEwHwYDVR0j BBgwFoAUD7YvHw0Qxex9ckEOVjdSW2IcSHAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWRiOTI3ZGYtYmM5Yy00YmU2LWExZmEtMmUxMjVjNDY5ZjcxLzAvMEZCNjJGMUYw RDEwQzVFQzdENzI0MTBFNTYzNzUyNUI2MjFDNDg3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRkI2MkYxRjBEMTBDNUVDN0Q3MjQxMEU1NjM3NTI1QjYyMUM0 ODcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvMEZCNjJGMUYwRDEwQzVFQzdENzI0MTBFNTYzNzUy NUI2MjFDNDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpAzZmGKiteOgjzCUP7msYui12zF32Zoifh 4gaehKDFqscdXyonacVM3UL7fATr/1859OqY7tRQechdhCuzZD3gdYEp4By2A5mr IHeB7EFGyHYgJhdbDzWNCrGxJeSlSW88vl5K2QJ17xLlIvyPinDQYWH5QQE6c20w bmOlR4KCiOD9OxMSK3c25lDJzFZZpNXbX7JJQOE6lcykAR4g+eorUZLDq5WqCrIE BrBl1OkxqdnA9kwwHmvHPlQi7wZvBsx3HINPhcdHY6GpAX0/BCZ5v+d6n6Yb7J/J usfzDjrPbiQMsnhv4hv9DWu6L3nc1SMPycAKAJabBpoEY+nNWTU= -----END CERTIFICATE-----Generated at Thu Sep 17 13:50:11 2026 by rpki-client