$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft File: 0F839E8933417407BE7F5816D8EA6AF790E1362D.mft (raw, json) Hash identifier: 4o2/KBFB58hljPawCOWWiKjWgaujqrL5L3ftDaVp6jw= Subject key identifier: 5C:71:9B:7E:F8:96:DB:8D:06:D6:76:A0:65:3B:6D:5B:EE:E5:A3:F6 Authority key identifier: 0F:83:9E:89:33:41:74:07:BE:7F:58:16:D8:EA:6A:F7:90:E1:36:2D Certificate issuer: /CN=0F839E8933417407BE7F5816D8EA6AF790E1362D Certificate serial: 6E98B297E5FB97EE5C5B2A4F3FE322B387EBFD43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:54:49 +0000 Manifest this update: Wed 16 Sep 2026 20:49:49 +0000 Manifest next update: Fri 18 Sep 2026 00:01:49 +0000 Files and hashes: 1: 0F839E8933417407BE7F5816D8EA6AF790E1362D.crl (hash: cgTtcSCswgZRNDBGufZuBEiVIVcKFT/RoDzJB7gorK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.crl rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:98:b2:97:e5:fb:97:ee:5c:5b:2a:4f:3f:e3:22:b3:87:eb:fd:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F839E8933417407BE7F5816D8EA6AF790E1362D Validity Not Before: Sep 16 20:49:49 2026 GMT Not After : Sep 18 00:01:49 2026 GMT Subject: CN=5C719B7EF896DB8D06D676A0653B6D5BEEE5A3F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:f0:f0:45:20:30:53:4c:0e:1a:cd:15:c8: c0:8e:1e:a4:6e:30:52:36:23:43:36:3c:e9:a0:fa: fd:d3:8e:04:1b:6a:9a:b3:9e:09:6c:c7:36:4c:82: de:62:4b:2b:de:02:bb:d4:af:f4:7e:00:59:0b:66: 49:10:8f:06:6b:1a:86:3c:c4:d5:89:97:68:89:e1: 88:dc:aa:95:b0:37:a0:8a:63:18:f0:22:9b:c2:82: 87:b0:e6:69:75:4e:13:17:77:0d:09:e8:b6:33:49: 81:3e:3e:02:e5:96:1a:d2:8e:55:41:47:b6:cd:b6: 47:16:b3:08:2c:2b:d2:0b:98:2b:b0:d6:21:ea:1e: 39:f9:1a:ca:e4:1d:8d:20:b5:61:88:df:73:60:33: 08:60:d0:8d:b7:18:23:11:cc:26:e2:60:69:f5:a7: 18:88:0d:95:80:47:17:e7:18:f8:0b:49:52:0b:71: 5a:3d:5b:05:21:6e:01:75:87:71:81:f3:9a:06:93: 4c:05:41:ba:4b:78:df:6c:38:3c:df:bc:79:b1:2c: 57:b8:01:9b:01:4e:a4:4c:6e:70:3e:8a:ca:fc:39: 71:65:b3:72:f3:80:26:4f:07:39:5e:2b:89:1e:f4: f9:dc:ff:87:97:60:2b:34:d6:b2:c0:51:b1:f5:2f: 61:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:71:9B:7E:F8:96:DB:8D:06:D6:76:A0:65:3B:6D:5B:EE:E5:A3:F6 X509v3 Authority Key Identifier: keyid:0F:83:9E:89:33:41:74:07:BE:7F:58:16:D8:EA:6A:F7:90:E1:36:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F839E8933417407BE7F5816D8EA6AF790E1362D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/0F839E8933417407BE7F5816D8EA6AF790E1362D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:8c:0e:1a:a9:de:3b:d1:44:30:57:f2:e7:30:d8:58:8a:7f: 17:ff:4f:66:c7:58:71:b8:ec:c7:5b:a5:54:bb:29:cf:7b:be: 18:0e:e9:ee:db:89:0f:2c:2e:be:e5:df:fd:15:20:f9:69:4f: 5c:0b:31:58:a0:90:64:b5:02:20:2f:89:48:3a:13:50:87:4d: 46:da:40:35:84:e5:d5:cb:1c:9d:7b:30:23:b2:f1:d1:00:34: 8d:8d:07:4b:8b:e1:8c:49:60:8b:d3:5b:bc:76:14:da:25:b5: fc:e4:6e:e2:85:ce:fe:13:3d:4a:5b:7f:aa:f0:2d:a4:8c:43: b7:3b:32:af:c5:8f:7f:d9:c8:61:bf:9a:cb:c1:43:31:1a:fe: 48:a4:de:90:cf:79:97:4d:da:27:31:7f:df:a8:bf:73:aa:47: 7f:10:23:9e:da:ff:7e:f3:f5:c4:dd:2e:f9:45:21:7e:f8:5a: f9:3f:b7:47:fc:9e:47:fe:54:71:ce:a1:40:74:f5:9f:c8:dd: 59:38:97:5b:e1:a5:4d:6c:ba:47:1d:f1:4d:aa:3e:73:02:5a: 05:89:30:eb:ce:56:b8:15:5a:70:65:56:ef:6c:42:5f:ab:e8: 47:88:21:8c:cd:4c:ec:31:d2:48:b4:b5:8d:d2:3d:3d:fc:e5: f6:57:c0:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpiyl+X7l+5cWypPP+Mis4fr/UMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY4MzlFODkzMzQxNzQwN0JFN0Y1ODE2RDhFQTZBRjc5 MEUxMzYyRDAeFw0yNjA5MTYyMDQ5NDlaFw0yNjA5MTgwMDAxNDlaMDMxMTAvBgNV BAMTKDVDNzE5QjdFRjg5NkRCOEQwNkQ2NzZBMDY1M0I2RDVCRUVFNUEzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7vDwRSAwU0wOGs0VyMCOHqRu MFI2I0M2POmg+v3TjgQbapqznglsxzZMgt5iSyveArvUr/R+AFkLZkkQjwZrGoY8 xNWJl2iJ4YjcqpWwN6CKYxjwIpvCgoew5ml1ThMXdw0J6LYzSYE+PgLllhrSjlVB R7bNtkcWswgsK9ILmCuw1iHqHjn5GsrkHY0gtWGI33NgMwhg0I23GCMRzCbiYGn1 pxiIDZWARxfnGPgLSVILcVo9WwUhbgF1h3GB85oGk0wFQbpLeN9sODzfvHmxLFe4 AZsBTqRMbnA+isr8OXFls3LzgCZPBzleK4ke9Pnc/4eXYCs01rLAUbH1L2GlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXHGbfviW240G1nagZTttW+7lo/YwHwYDVR0j BBgwFoAUD4OeiTNBdAe+f1gW2Opq95DhNi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTc0ZDIwYTMtM2Q4My00YzRmLTkxMzgtNzZiYzdjNTEwZWI5LzAvMEY4MzlFODkz MzQxNzQwN0JFN0Y1ODE2RDhFQTZBRjc5MEUxMzYyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjgzOUU4OTMzNDE3NDA3QkU3RjU4MTZEOEVBNkFGNzkwRTEz NjJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvMEY4MzlFODkzMzQxNzQwN0JFN0Y1ODE2RDhFQTZB Rjc5MEUxMzYyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGMDhqp3jvRRDBX8ucw2FiKfxf/T2bHWHG4 7MdbpVS7Kc97vhgO6e7biQ8sLr7l3/0VIPlpT1wLMVigkGS1AiAviUg6E1CHTUba QDWE5dXLHJ17MCOy8dEANI2NB0uL4YxJYIvTW7x2FNoltfzkbuKFzv4TPUpbf6rw LaSMQ7c7Mq/Fj3/ZyGG/msvBQzEa/kik3pDPeZdN2icxf9+ov3OqR38QI57a/37z 9cTdLvlFIX74Wvk/t0f8nkf+VHHOoUB09Z/I3Vk4l1vhpU1sukcd8U2qPnMCWgWJ MOvOVrgVWnBlVu9sQl+r6EeIIYzNTOwx0ki0tY3SPT385fZXwLI= -----END CERTIFICATE-----Generated at Thu Sep 17 11:06:06 2026 by rpki-client