$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft File: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft (raw, json) Hash identifier: +6MNfL5/kcBHaGfTqJaV6Ia4PYTc8Drgoya1ufX3ZBE= Subject key identifier: 20:A5:3D:ED:A4:2A:D9:8A:B6:40:7E:44:55:90:65:6C:E6:F7:EC:72 Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE Certificate issuer: /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Certificate serial: 10536B793118DB27656734DBA4764AD91AB10892 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft Manifest number: AE Signing time: Thu 10 Sep 2026 07:15:46 +0000 Manifest this update: Thu 10 Sep 2026 07:10:46 +0000 Manifest next update: Fri 11 Sep 2026 08:29:46 +0000 Files and hashes: 1: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: Q7IDKK7bd4+D1LbWjZoromCTyfDrru1LNqDTxcv/O1c=) 2: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl (hash: PJTfch6dHL5q9TE2Q+WypCVzp/CzWi+ARq/dBWxbGsA=) 3: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: pcqtzLzNaNYPks2/OHv2K1hXp8EkBWXZ157lBF+eG6I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 08:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:53:6b:79:31:18:db:27:65:67:34:db:a4:76:4a:d9:1a:b1:08:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Validity Not Before: Sep 10 07:10:46 2026 GMT Not After : Sep 11 08:29:46 2026 GMT Subject: CN=20A53DEDA42AD98AB6407E445590656CE6F7EC72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:09:39:d8:38:fc:70:c4:c7:83:5e:f1:7f:6c: a3:fa:79:9b:2c:4c:6c:3b:9e:7d:fc:de:5e:b1:56: 31:fd:b7:02:fe:77:ae:37:19:24:39:44:e2:e2:05: b0:08:21:d0:ae:15:df:3a:3e:8f:20:22:e5:19:51: 4d:2d:b3:31:e1:d2:de:d7:4c:58:73:d8:54:6b:c1: 17:8c:3b:cc:b2:eb:e1:46:2c:da:87:01:da:c0:08: d8:34:2a:b1:c5:31:dc:8e:dc:78:09:7e:fc:d4:3c: af:a2:9d:1e:c7:2c:9a:f8:61:f7:c4:ca:4f:ea:d5: 16:15:3f:d3:23:f3:c1:54:7e:88:0d:8d:44:d0:87: 27:9c:a6:3e:f1:5c:78:a1:f3:e7:45:2d:c8:3f:e4: 2f:b2:27:e9:93:e2:04:bd:04:f6:08:65:ca:01:da: 91:ab:18:70:01:ed:ad:05:b9:7f:3d:38:9a:aa:fc: c8:82:82:5b:10:cd:57:5f:64:f0:ec:35:37:76:2b: c1:0a:1a:0a:1c:5e:a6:59:2e:41:9f:f1:df:ad:b1: 9b:b6:17:39:8f:a2:19:75:a2:26:bd:3b:04:1e:eb: c3:54:ab:70:2a:21:cd:e7:6f:61:3d:50:6d:71:4b: 81:28:d2:1f:d2:66:36:3e:6a:4a:42:57:c9:dd:23: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A5:3D:ED:A4:2A:D9:8A:B6:40:7E:44:55:90:65:6C:E6:F7:EC:72 X509v3 Authority Key Identifier: keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e2:3f:bd:b3:71:82:25:ef:fd:99:96:71:68:b6:06:06:0e: b8:46:ac:c8:80:32:4b:ea:18:5e:d1:d8:0d:51:b3:d0:81:c4: 46:98:52:44:54:45:87:9c:7d:bf:29:7f:c6:c5:e0:73:e6:9b: 78:fd:8e:bc:59:96:79:85:c6:32:84:84:3d:af:24:dc:51:6f: b3:81:03:c4:2b:cf:99:53:23:d1:47:ec:5a:ee:15:55:c5:90: fb:82:e2:5e:47:5d:b2:8a:55:37:75:8e:73:52:07:39:c3:7c: 2e:52:48:4c:bf:08:bf:99:05:86:a4:01:71:7c:be:fa:3f:f9: de:4a:6e:31:51:6c:40:d7:68:55:42:28:45:47:a7:02:eb:ce: 02:73:37:33:45:f8:6d:1a:98:9b:20:45:c9:f1:97:4e:84:62: 30:12:94:df:56:d9:fa:3c:f2:5e:f6:77:0b:bb:84:ed:92:de: cb:b3:cd:56:e7:d9:1f:15:03:e7:7c:43:0a:ce:b7:98:f5:df: 6d:e1:81:68:01:14:ee:a5:dc:5b:44:65:1c:75:7a:04:d0:42: ae:d1:b4:70:fd:37:ad:97:aa:77:b1:5e:fb:3b:ef:a0:c6:17: 5b:9e:77:ef:3c:a0:56:56:c5:0b:ac:73:b0:6f:1a:e3:1f:5d: b7:b9:82:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEFNreTEY2ydlZzTbpHZK2RqxCJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThD NkNFQ0JCRTAeFw0yNjA5MTAwNzEwNDZaFw0yNjA5MTEwODI5NDZaMDMxMTAvBgNV BAMTKDIwQTUzREVEQTQyQUQ5OEFCNjQwN0U0NDU1OTA2NTZDRTZGN0VDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmCTnYOPxwxMeDXvF/bKP6eZss TGw7nn383l6xVjH9twL+d643GSQ5ROLiBbAIIdCuFd86Po8gIuUZUU0tszHh0t7X TFhz2FRrwReMO8yy6+FGLNqHAdrACNg0KrHFMdyO3HgJfvzUPK+inR7HLJr4YffE yk/q1RYVP9Mj88FUfogNjUTQhyecpj7xXHih8+dFLcg/5C+yJ+mT4gS9BPYIZcoB 2pGrGHAB7a0FuX89OJqq/MiCglsQzVdfZPDsNTd2K8EKGgocXqZZLkGf8d+tsZu2 FzmPohl1oia9OwQe68NUq3AqIc3nb2E9UG1xS4Eo0h/SZjY+akpCV8ndI8hVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIKU97aQq2Yq2QH5EVZBlbOb37HIwHwYDVR0j BBgwFoAUC/1q3Lz3RXwFx/qRppWHWMbOy74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmYyNTA2YjEtMzk2ZC00OTllLWI3ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENC Q0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThDNkNFQ0JCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkZENkFEQ0JDRjc0NTdDMDVDN0ZBOTFBNjk1ODc1OEM2Q0VD QkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3 NThDNkNFQ0JCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFriP72zcYIl7/2ZlnFotgYGDrhGrMiAMkvq GF7R2A1Rs9CBxEaYUkRURYecfb8pf8bF4HPmm3j9jrxZlnmFxjKEhD2vJNxRb7OB A8Qrz5lTI9FH7FruFVXFkPuC4l5HXbKKVTd1jnNSBznDfC5SSEy/CL+ZBYakAXF8 vvo/+d5KbjFRbEDXaFVCKEVHpwLrzgJzNzNF+G0amJsgRcnxl06EYjASlN9W2fo8 8l72dwu7hO2S3suzzVbn2R8VA+d8QwrOt5j1323hgWgBFO6l3FtEZRx1egTQQq7R tHD9N62XqnexXvs776DGF1ued+88oFZWxQusc7BvGuMfXbe5grY= -----END CERTIFICATE-----Generated at Thu Sep 10 23:36:44 2026 by rpki-client