$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft File: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft (raw, json) Hash identifier: 8ck2QWSOSBrjiiuODj6QnBDt27FSwi5sy4BBIXSGb94= Subject key identifier: 19:AF:53:40:DC:5C:C2:7B:82:2D:A1:C2:19:5B:DD:5E:8B:BD:F8:EB Authority key identifier: 0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 Certificate issuer: /CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Certificate serial: 461CB5C22D9E76F8B70311A246985B7BCC2A21DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:36:55 +0000 Manifest this update: Wed 16 Sep 2026 22:31:55 +0000 Manifest next update: Thu 17 Sep 2026 22:45:55 +0000 Files and hashes: 1: 0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl (hash: RTtbwenXil4YWUOU08Srf33bdfpRXVrdqv+bfxEd9Cw=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: jRxu5an33fAHIDK703BGcnxxr2+K2imQoOMYIzAUMUk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:1c:b5:c2:2d:9e:76:f8:b7:03:11:a2:46:98:5b:7b:cc:2a:21:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5 Validity Not Before: Sep 16 22:31:55 2026 GMT Not After : Sep 17 22:45:55 2026 GMT Subject: CN=19AF5340DC5CC27B822DA1C2195BDD5E8BBDF8EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:6f:c5:3d:9d:36:31:62:ee:38:e9:df:a5: 6e:bd:bb:c3:52:df:72:ab:cd:0c:1a:9c:6e:fb:3b: 8b:b2:2c:76:b7:14:c4:97:b3:58:7d:35:ac:ec:3f: ce:57:77:cf:e9:53:4b:94:d9:b1:c8:52:c7:1c:45: bd:a4:1c:93:8c:fe:21:d0:ce:b5:91:77:19:ef:89: 72:85:2e:42:a5:b7:da:1a:46:5d:21:4b:7e:db:d6: b5:6c:34:08:80:98:3e:f4:84:af:c9:a5:95:d8:1f: 0c:71:e3:22:53:21:2e:22:c6:83:23:a5:3f:c5:0b: db:19:4d:78:56:47:a0:04:0b:b8:6b:b1:d7:b9:55: ea:d9:12:13:c0:ed:3a:a6:26:fa:35:39:cb:2d:f6: de:9e:da:ca:3e:15:05:ed:a7:51:a9:08:84:75:c5: 59:00:23:a0:ac:8b:77:1d:67:ee:b4:4d:8e:7a:82: f1:32:93:65:2a:bb:6e:80:1d:8e:4d:cc:81:0d:e8: e4:ab:a7:e3:4d:7d:fc:89:fa:67:21:32:da:39:eb: 9b:ca:27:2b:6c:08:b6:0b:c1:2c:2a:07:cf:d9:f5: 31:65:6b:0b:d8:26:aa:03:45:8b:87:3b:87:a4:49: b1:d0:70:3f:0d:f8:04:56:be:9c:34:1a:b4:28:4b: 59:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AF:53:40:DC:5C:C2:7B:82:2D:A1:C2:19:5B:DD:5E:8B:BD:F8:EB X509v3 Authority Key Identifier: keyid:0F:3D:CD:95:FC:3F:C6:D7:D7:B3:D1:68:76:AB:81:E1:44:75:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/0F3DCD95FC3FC6D7D7B3D16876AB81E1447523E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:47:01:99:c0:8b:e9:ae:6a:03:ba:ae:38:24:28:58:6e:6e: 90:16:4f:a8:58:d6:4a:53:35:a2:4e:b1:ff:c5:76:6b:97:3c: d4:96:97:f8:13:5b:53:47:d4:8e:40:84:51:82:0e:5b:b4:7f: 18:34:ed:3f:4d:e3:0c:ba:b6:95:b0:f8:f6:a8:05:dd:81:82: b6:3f:be:04:f6:53:90:fe:40:57:bc:36:6d:a4:95:c7:83:02: 5e:fb:9d:3c:92:ba:46:8d:76:e0:05:db:ae:ae:00:f8:0d:b7: 00:f2:03:ed:22:06:bb:bd:d3:a8:e4:5f:cd:74:ab:df:41:ff: 2b:23:79:c8:7c:bc:24:5c:14:81:86:74:fe:3a:03:c7:07:30: d2:cb:47:27:cb:7e:95:73:51:fc:14:79:e3:6c:de:80:57:e7: 53:a8:f0:a2:af:48:4d:c1:e3:eb:d1:01:8c:8f:7e:6d:cd:dd: 0b:51:c8:92:16:a1:9e:d0:a8:16:9a:9c:95:94:1b:a4:08:ad: 95:2f:80:08:9b:ee:78:de:31:d8:b8:4d:8e:2b:b3:9d:09:11: 58:1f:e4:5a:60:23:24:ff:f2:8f:83:b2:e7:75:09:24:99:ad: 8b:7a:69:c2:68:d0:22:db:b8:aa:96:38:f5:83:09:b5:e4:e2: 3c:75:01:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURhy1wi2edvi3AxGiRphbe8wqIdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0 NDc1MjNFNTAeFw0yNjA5MTYyMjMxNTVaFw0yNjA5MTcyMjQ1NTVaMDMxMTAvBgNV BAMTKDE5QUY1MzQwREM1Q0MyN0I4MjJEQTFDMjE5NUJERDVFOEJCREY4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopm/FPZ02MWLuOOnfpW69u8NS 33KrzQwanG77O4uyLHa3FMSXs1h9NazsP85Xd8/pU0uU2bHIUsccRb2kHJOM/iHQ zrWRdxnviXKFLkKlt9oaRl0hS37b1rVsNAiAmD70hK/JpZXYHwxx4yJTIS4ixoMj pT/FC9sZTXhWR6AEC7hrsde5VerZEhPA7TqmJvo1Ocst9t6e2so+FQXtp1GpCIR1 xVkAI6Csi3cdZ+60TY56gvEyk2Uqu26AHY5NzIEN6OSrp+NNffyJ+mchMto565vK JytsCLYLwSwqB8/Z9TFlawvYJqoDRYuHO4ekSbHQcD8N+ARWvpw0GrQoS1mNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGa9TQNxcwnuCLaHCGVvdXou9+OswHwYDVR0j BBgwFoAUDz3Nlfw/xtfXs9FodquB4UR1I+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQ0ZGZiNWEtNmUyNC00YTRkLTg5NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVG QzNGQzZEN0Q3QjNEMTY4NzZBQjgxRTE0NDc1MjNFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjNEQ0Q5NUZDM0ZDNkQ3RDdCM0QxNjg3NkFCODFFMTQ0NzUy M0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvMEYzRENEOTVGQzNGQzZEN0Q3QjNEMTY4NzZBQjgx RTE0NDc1MjNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZHAZnAi+muagO6rjgkKFhubpAWT6hY1kpT NaJOsf/FdmuXPNSWl/gTW1NH1I5AhFGCDlu0fxg07T9N4wy6tpWw+PaoBd2BgrY/ vgT2U5D+QFe8Nm2klceDAl77nTySukaNduAF266uAPgNtwDyA+0iBru906jkX810 q99B/ysjech8vCRcFIGGdP46A8cHMNLLRyfLfpVzUfwUeeNs3oBX51Oo8KKvSE3B 4+vRAYyPfm3N3QtRyJIWoZ7QqBaanJWUG6QIrZUvgAib7njeMdi4TY4rs50JEVgf 5FpgIyT/8o+Dsud1CSSZrYt6acJo0CLbuKqWOPWDCbXk4jx1ASQ= -----END CERTIFICATE-----Generated at Thu Sep 17 09:16:39 2026 by rpki-client