$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft File: 0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft (raw, json) Hash identifier: qBu9ADHVCikFTvTmiQDQx6wGSEN2p8jHeH0tEg/2hmk= Subject key identifier: 8F:80:D4:7F:3E:27:0C:E4:D5:F6:B4:3A:84:CF:A8:7E:5B:D1:54:0A Authority key identifier: 0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C Certificate issuer: /CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C Certificate serial: 4E007B9AFE5AE823C3893EAAE80BC8A75FF1DE7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 00:13:57 +0000 Manifest this update: Thu 17 Sep 2026 00:08:57 +0000 Manifest next update: Fri 18 Sep 2026 03:16:57 +0000 Files and hashes: 1: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: FtAyLFgcPcOrwdeATSorkqQ+qnS6UD5lf+AdbVbITfE=) 2: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: E4KMhggOb7nlhIiO3VBqj+3GAnMNf5AMaTtZTYutCpg=) 3: 0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl (hash: cHIAn6Zu/3AGFfiUtEhKbXOvMqHGEe8GDZQC9X3zEHY=) 4: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: mZ4ni8RZ+trHAYAq+YWcBinFPw6rEt7xuDt1TTSRtHw=) 5: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: 1ahR27z0iK0sLUuSdSvJqFvWkpicPRlm9gEDg/UGewo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:00:7b:9a:fe:5a:e8:23:c3:89:3e:aa:e8:0b:c8:a7:5f:f1:de:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C Validity Not Before: Sep 17 00:08:57 2026 GMT Not After : Sep 18 03:16:57 2026 GMT Subject: CN=8F80D47F3E270CE4D5F6B43A84CFA87E5BD1540A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:6a:a0:47:da:92:58:cd:81:06:cb:46:20: ec:d6:6c:cc:60:5e:48:02:a7:ac:cb:be:5e:63:c7: a8:a6:5d:8c:91:c4:cd:e1:33:31:ba:05:86:c4:8f: af:58:1c:6f:e0:05:34:6d:2a:a0:64:b8:65:c8:17: d0:e8:73:db:43:5f:1e:00:c2:d8:80:d6:2f:74:cb: dc:e1:02:9c:cf:db:ce:30:13:32:62:57:30:f3:34: d1:bd:66:26:b7:13:f8:e3:40:d5:dd:4d:52:ad:cb: c6:02:cd:d4:1d:ed:41:e4:9e:fc:b5:f0:d9:a7:df: a8:e5:dc:e8:3e:65:a3:c9:ac:a9:d9:75:49:e6:fa: 0d:c5:c0:1d:ff:10:f0:0f:f6:a3:8e:b2:d5:0d:39: 69:26:7f:28:97:10:9d:a4:95:05:d2:d8:07:a2:cb: 66:e1:fd:a5:5d:c8:45:92:ba:0d:38:0d:21:0a:5b: 63:3f:20:5c:e2:4e:11:27:69:b3:1a:30:c9:24:54: 87:a5:05:e0:a1:50:8f:c8:70:73:23:dc:7a:b0:9e: 1b:42:11:ea:58:b5:3e:06:9c:56:27:fc:c5:93:9f: 69:07:05:a6:86:46:f1:15:7c:cf:33:d5:6f:a3:1d: f4:6f:66:90:66:30:43:10:b8:e7:9b:ab:d9:29:0c: fd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:80:D4:7F:3E:27:0C:E4:D5:F6:B4:3A:84:CF:A8:7E:5B:D1:54:0A X509v3 Authority Key Identifier: keyid:0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:23:90:dd:e5:1b:6f:d4:32:eb:e9:68:18:64:1e:ca:a7:3c: 26:c3:52:80:d2:51:ce:ad:06:fe:bc:32:6e:d9:39:92:14:8a: 16:e0:90:cc:02:2a:6b:61:21:0e:48:f8:57:b0:46:39:76:0b: 9f:b9:b2:3c:44:2c:20:1a:c2:f6:49:3d:0c:0a:a6:0c:ef:c3: 51:fd:3a:e3:04:91:d8:dd:57:0a:e1:33:a4:7c:d2:1f:f5:9f: 06:a9:ca:5f:5c:d8:8a:b1:24:48:a2:6e:1d:a8:68:9e:db:1f: 06:0e:0b:2c:fd:21:e5:d5:e6:b8:49:82:2d:28:12:33:1f:59: 4b:db:e0:29:ae:b0:ae:11:4f:f4:d7:8d:b6:00:a9:fb:9b:d4: bc:48:de:91:34:56:df:28:d2:b7:35:ed:e1:4c:f9:c2:28:d0: 9e:e9:d2:53:ab:af:56:94:08:c9:eb:58:df:a8:dc:09:1d:55: 46:9b:ef:2c:32:27:ac:48:08:34:9b:af:8c:39:6e:41:1a:7a: 83:70:f1:fc:35:ae:34:81:48:93:be:10:66:02:f9:bb:62:ad: 12:58:a2:f6:d2:dd:e3:ea:66:b7:36:73:2f:55:73:fc:90:b4: f6:f2:5d:07:4b:29:f7:48:f5:d6:21:71:52:aa:bf:7f:42:6f: 1f:d4:27:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgB7mv5a6CPDiT6q6AvIp1/x3nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERDRUYyMTBFNkIyRDlDNTVDRkZEM0IxNUU1RTk0MEMz QUZFN0EzQzAeFw0yNjA5MTcwMDA4NTdaFw0yNjA5MTgwMzE2NTdaMDMxMTAvBgNV BAMTKDhGODBENDdGM0UyNzBDRTRENUY2QjQzQTg0Q0ZBODdFNUJEMTU0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGvWqgR9qSWM2BBstGIOzWbMxg XkgCp6zLvl5jx6imXYyRxM3hMzG6BYbEj69YHG/gBTRtKqBkuGXIF9Doc9tDXx4A wtiA1i90y9zhApzP284wEzJiVzDzNNG9Zia3E/jjQNXdTVKty8YCzdQd7UHknvy1 8Nmn36jl3Og+ZaPJrKnZdUnm+g3FwB3/EPAP9qOOstUNOWkmfyiXEJ2klQXS2Aei y2bh/aVdyEWSug04DSEKW2M/IFziThEnabMaMMkkVIelBeChUI/IcHMj3HqwnhtC EepYtT4GnFYn/MWTn2kHBaaGRvEVfM8z1W+jHfRvZpBmMEMQuOebq9kpDP3RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj4DUfz4nDOTV9rQ6hM+oflvRVAowHwYDVR0j BBgwFoAUDc7yEOay2cVc/9OxXl6UDDr+ejwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2ZGYtYjI0M2M1MTY0ZDIyLzAvMERDRUYyMTBF NkIyRDlDNTVDRkZEM0IxNUU1RTk0MEMzQUZFN0EzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRENFRjIxMEU2QjJEOUM1NUNGRkQzQjE1RTVFOTQwQzNBRkU3 QTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvMERDRUYyMTBFNkIyRDlDNTVDRkZEM0IxNUU1RTk0 MEMzQUZFN0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEjkN3lG2/UMuvpaBhkHsqnPCbDUoDSUc6t Bv68Mm7ZOZIUihbgkMwCKmthIQ5I+FewRjl2C5+5sjxELCAawvZJPQwKpgzvw1H9 OuMEkdjdVwrhM6R80h/1nwapyl9c2IqxJEiibh2oaJ7bHwYOCyz9IeXV5rhJgi0o EjMfWUvb4CmusK4RT/TXjbYAqfub1LxI3pE0Vt8o0rc17eFM+cIo0J7p0lOrr1aU CMnrWN+o3AkdVUab7ywyJ6xICDSbr4w5bkEaeoNw8fw1rjSBSJO+EGYC+btirRJY ovbS3ePqZrc2cy9Vc/yQtPbyXQdLKfdI9dYhcVKqv39Cbx/UJ38= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:41 2026 by rpki-client