$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft File: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft (raw, json) Hash identifier: ov/O9omXYmSJx57Phtbgy+5PR1CHtfZcfD+UjL/Egys= Subject key identifier: 00:A3:E5:41:1D:35:BE:92:68:4F:0D:A0:E6:CD:E8:11:47:96:68:44 Authority key identifier: 0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 Certificate issuer: /CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Certificate serial: 791E4A7CAE024F7E3C1BD2E9E23397801964E282 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:49:29 +0000 Manifest this update: Thu 17 Sep 2026 08:44:29 +0000 Manifest next update: Fri 18 Sep 2026 12:30:29 +0000 Files and hashes: 1: 0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl (hash: XtwsmDjU7iTUKJHGo8I0wcOKSk6XsuYjI2tNW8pnQqw=) 2: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: jwkbabyLyV6UKztbR0SZEz5ZRMUHBTd8adRm57dyw+w=) 3: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: nzJ2KTaH0mWJ2JUT7TIQaEIs1V4rS2Hb5qe4oVuW+qY=) 4: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: i6JN3toKQT5i4NNrRSH28JimRYw5XqvDzH+54AyAuPo=) 5: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: cscNYPGsX1ZTL4zXvVeeKicXVJQf2gUl7CaS2wz5lho=) 6: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: /nw/dsQp3nfOBW0Do0NFqr3xduuQUXnkGUlyPsTQV10=) 7: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: wzbhyHWdZFf+4zRG4eljIzSQe2JUQdKqrkpbRniPBU4=) 8: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: 5z0mLNjU28RRuMehTiGd0TZpTvoqOni8uwA3Q/9FXCA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1e:4a:7c:ae:02:4f:7e:3c:1b:d2:e9:e2:33:97:80:19:64:e2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8 Validity Not Before: Sep 17 08:44:29 2026 GMT Not After : Sep 18 12:30:29 2026 GMT Subject: CN=00A3E5411D35BE92684F0DA0E6CDE81147966844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a4:6d:28:24:c8:54:ca:73:f8:c3:5a:eb:23: 61:92:73:b9:ef:6f:3c:33:ba:a3:da:b8:a0:7c:85: d9:19:31:cd:e4:05:b6:3c:93:2c:54:d3:48:a6:2e: 77:26:43:2b:82:04:6f:2c:7b:df:1d:09:08:6e:14: 6a:70:71:12:74:89:2e:7c:c3:d8:32:4d:ad:02:85: f3:1d:96:b2:e3:3d:eb:3b:c6:44:69:31:fc:ce:69: ce:46:31:fe:f3:25:48:bb:ef:60:40:9e:dd:b3:d9: 75:ce:da:69:59:ea:a4:0c:6c:b7:b9:de:fd:d8:28: f0:15:84:d8:00:8c:d5:29:9f:82:d6:b8:92:cf:65: 7e:8e:bf:b3:13:61:85:5a:ac:38:88:a7:6f:f4:b4: 9d:ec:40:51:bc:97:a9:31:44:27:ef:a5:80:fb:9d: 8e:6c:5d:a0:a0:74:82:c7:1f:9a:78:ac:dd:0e:90: ed:6d:3f:55:92:74:67:1e:7d:cc:94:2d:8d:b7:c4: de:c8:22:53:71:d9:78:56:04:80:a7:1a:7e:5d:81: 4f:01:4e:7b:87:da:0c:e1:25:c1:80:17:49:e0:65: 01:0e:19:f9:3e:c3:08:39:29:30:86:84:21:00:99: fa:23:b5:f9:35:29:bd:57:ab:89:9c:14:2a:dd:1d: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A3:E5:41:1D:35:BE:92:68:4F:0D:A0:E6:CD:E8:11:47:96:68:44 X509v3 Authority Key Identifier: keyid:0F:FE:2E:A1:2A:C1:56:AF:78:AC:2D:9A:45:9A:F1:6E:21:76:EE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/0FFE2EA12AC156AF78AC2D9A459AF16E2176EEC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2e:9d:f4:cb:d2:96:5d:cd:3f:96:40:69:16:01:30:4e:66: 54:08:2f:8b:ab:e5:64:4a:8b:67:88:ff:16:c3:c2:57:57:a6: be:b7:0a:6f:59:48:45:15:fc:1c:e1:6d:81:c5:a7:63:29:4a: 29:a2:5c:e7:4e:f8:37:37:97:d2:68:e8:70:0e:22:5d:15:79: cf:78:33:8e:90:5e:08:01:74:02:3a:29:5a:f0:ea:be:ff:e8: f1:dd:e7:a2:a7:37:4c:d5:02:e2:ef:75:e4:e6:7c:27:ae:83: 3d:c5:74:82:2c:9b:a8:3f:e5:07:e1:be:b7:1d:ea:7b:1b:24: 75:7c:aa:c8:b9:5f:81:80:cb:6e:e3:52:8b:89:7b:2d:66:3a: 93:6c:ff:31:67:81:25:53:51:44:a2:98:a9:bf:d9:f8:d3:dc: bf:48:ee:bf:23:c9:8e:ac:30:9b:6d:4a:53:e6:d3:31:a4:38: 94:52:bd:94:c2:a0:9c:2c:00:fb:21:bd:3f:2e:06:2f:cf:63: e7:09:82:bd:db:e7:5e:c9:5f:3c:41:69:d3:ac:3c:a6:13:b1: b7:e7:14:36:3a:93:c0:c1:72:1a:0e:f0:18:b5:da:46:60:4c: 5d:8c:3f:22:fd:14:17:eb:78:68:09:9f:a7:78:97:3d:13:44: 8b:a7:52:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeR5KfK4CT348G9Lp4jOXgBlk4oIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUy MTc2RUVDODAeFw0yNjA5MTcwODQ0MjlaFw0yNjA5MTgxMjMwMjlaMDMxMTAvBgNV BAMTKDAwQTNFNTQxMUQzNUJFOTI2ODRGMERBMEU2Q0RFODExNDc5NjY4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhpG0oJMhUynP4w1rrI2GSc7nv bzwzuqPauKB8hdkZMc3kBbY8kyxU00imLncmQyuCBG8se98dCQhuFGpwcRJ0iS58 w9gyTa0ChfMdlrLjPes7xkRpMfzOac5GMf7zJUi772BAnt2z2XXO2mlZ6qQMbLe5 3v3YKPAVhNgAjNUpn4LWuJLPZX6Ov7MTYYVarDiIp2/0tJ3sQFG8l6kxRCfvpYD7 nY5sXaCgdILHH5p4rN0OkO1tP1WSdGcefcyULY23xN7IIlNx2XhWBICnGn5dgU8B TnuH2gzhJcGAF0ngZQEOGfk+wwg5KTCGhCEAmfojtfk1Kb1Xq4mcFCrdHYMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAKPlQR01vpJoTw2g5s3oEUeWaEQwHwYDVR0j BBgwFoAUD/4uoSrBVq94rC2aRZrxbiF27sgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2NkNTM5NDgtZGRmMy00NDlhLWJmMmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEy QUMxNTZBRjc4QUMyRDlBNDU5QUYxNkUyMTc2RUVDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRkZFMkVBMTJBQzE1NkFGNzhBQzJEOUE0NTlBRjE2RTIxNzZF RUM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvMEZGRTJFQTEyQUMxNTZBRjc4QUMyRDlBNDU5QUYx NkUyMTc2RUVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQunfTL0pZdzT+WQGkWATBOZlQIL4ur5WRK i2eI/xbDwldXpr63Cm9ZSEUV/BzhbYHFp2MpSimiXOdO+Dc3l9Jo6HAOIl0Vec94 M46QXggBdAI6KVrw6r7/6PHd56KnN0zVAuLvdeTmfCeugz3FdIIsm6g/5Qfhvrcd 6nsbJHV8qsi5X4GAy27jUouJey1mOpNs/zFngSVTUUSimKm/2fjT3L9I7r8jyY6s MJttSlPm0zGkOJRSvZTCoJwsAPshvT8uBi/PY+cJgr3b517JXzxBadOsPKYTsbfn FDY6k8DBchoO8Bi12kZgTF2MPyL9FBfreGgJn6d4lz0TRIunUpE= -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:38 2026 by rpki-client