$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft File: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft (raw, json) Hash identifier: 5nIaxJTri1h09juznaNj/b8AKi2FDlPQPKSM3t2osU0= Subject key identifier: 0E:5A:EE:40:DC:7B:EC:64:96:12:DE:0D:C6:4D:C8:F7:93:BB:A1:E2 Authority key identifier: 0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE Certificate issuer: /CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Certificate serial: 1A6CB0997421733132AF81F46FC8AC1750B8E908 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft Manifest number: EC Signing time: Mon 26 Oct 2026 17:47:41 +0000 Manifest this update: Mon 26 Oct 2026 17:42:41 +0000 Manifest next update: Tue 27 Oct 2026 20:54:41 +0000 Files and hashes: 1: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: pcqtzLzNaNYPks2/OHv2K1hXp8EkBWXZ157lBF+eG6I=) 2: 0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl (hash: EF8lbVXV4sr5Py1M7JW02kpKR/MNR8+P7dw3oMrmMuY=) 3: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: Q7IDKK7bd4+D1LbWjZoromCTyfDrru1LNqDTxcv/O1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6c:b0:99:74:21:73:31:32:af:81:f4:6f:c8:ac:17:50:b8:e9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE Validity Not Before: Oct 26 17:42:41 2026 GMT Not After : Oct 27 20:54:41 2026 GMT Subject: CN=0E5AEE40DC7BEC649612DE0DC64DC8F793BBA1E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:7f:d1:c4:0e:31:c0:ac:30:36:cf:fd:4d: a7:5b:01:e1:4f:7e:88:7d:97:05:74:7b:dd:93:08: 8e:40:bf:34:9d:b4:9c:f9:b8:f3:46:b8:ba:8b:ea: a1:69:b0:37:7f:9c:fc:9c:a4:5d:31:cb:81:b4:e3: c5:fb:dc:1a:18:56:57:04:0c:11:ec:d1:15:91:cb: 8f:d8:49:86:5c:72:15:05:60:7b:c9:5a:f4:d9:58: be:5d:57:4f:4a:01:60:79:ab:8c:b1:45:d5:df:d1: 93:cd:c6:5e:14:8f:5e:5d:c5:38:ea:f6:8c:6e:36: a2:62:20:b8:ff:5c:c6:8c:f0:d0:b8:87:c2:ea:ec: 62:45:09:1a:da:dc:e6:70:34:c0:f8:be:a3:d1:6f: 89:be:3f:29:eb:53:56:7c:a7:17:6b:8b:fb:a3:b5: 17:d8:ed:af:de:a8:c0:7d:b1:04:a5:3a:a8:06:ea: 9d:c4:92:b8:77:90:96:0a:44:f8:04:d1:2d:99:e7: 8b:55:81:b6:d5:8d:fe:ef:aa:12:e7:7d:36:a7:17: b6:16:af:af:d4:f2:ac:b2:83:28:9b:f6:79:d0:f2: eb:d8:14:2b:c4:6f:2b:76:e5:98:ee:bd:c7:d9:ba: 2c:f0:a3:9e:7f:91:c5:d0:cd:4b:39:65:61:62:bc: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5A:EE:40:DC:7B:EC:64:96:12:DE:0D:C6:4D:C8:F7:93:BB:A1:E2 X509v3 Authority Key Identifier: keyid:0B:FD:6A:DC:BC:F7:45:7C:05:C7:FA:91:A6:95:87:58:C6:CE:CB:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/0BFD6ADCBCF7457C05C7FA91A6958758C6CECBBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d7:49:62:a5:87:4c:17:df:f0:c9:a0:a5:7c:4a:9d:89:f9: 63:ce:be:42:79:81:29:ef:97:12:5d:80:4e:6d:a8:38:0f:b4: 1b:0a:8f:05:fa:b7:7e:16:76:c0:78:21:8e:19:5b:b0:6a:fa: 1b:20:85:5c:33:49:66:fb:02:60:fc:f1:cc:3b:69:1f:a8:25: 8b:71:33:0c:9c:ff:80:5b:41:cf:b8:9e:ee:4c:fe:f6:ac:53: 9f:94:cd:bf:41:f9:2b:3d:64:8e:08:d1:86:cc:26:e5:39:0c: 5b:2d:da:65:ec:23:be:d0:c0:f0:43:da:d9:7c:e5:e3:de:12: 75:c1:12:39:49:bd:3f:d6:ed:37:d3:06:6f:46:1b:6d:7e:9d: 62:a3:af:bf:7f:6c:da:3f:8a:19:07:50:2d:5f:1f:10:21:76: ab:6f:40:da:72:55:c1:60:bb:fc:5b:20:72:36:0e:ed:0b:23: 12:32:9e:3d:e1:0f:13:91:f1:97:57:8b:8a:a8:c6:10:76:09: 2b:3a:51:a7:62:31:47:53:97:f2:5d:1c:1b:0a:89:f4:6e:fd: d4:b0:db:14:7e:a8:29:a4:84:c6:d1:71:dd:c4:10:5a:5a:c7: f4:d4:b1:db:f6:ca:ad:15:54:8a:7f:e4:65:4b:38:2a:51:a2: 3b:9e:25:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmywmXQhczEyr4H0b8isF1C46QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThD NkNFQ0JCRTAeFw0yNjEwMjYxNzQyNDFaFw0yNjEwMjcyMDU0NDFaMDMxMTAvBgNV BAMTKDBFNUFFRTQwREM3QkVDNjQ5NjEyREUwREM2NERDOEY3OTNCQkExRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC203/RxA4xwKwwNs/9TadbAeFP foh9lwV0e92TCI5AvzSdtJz5uPNGuLqL6qFpsDd/nPycpF0xy4G048X73BoYVlcE DBHs0RWRy4/YSYZcchUFYHvJWvTZWL5dV09KAWB5q4yxRdXf0ZPNxl4Uj15dxTjq 9oxuNqJiILj/XMaM8NC4h8Lq7GJFCRra3OZwNMD4vqPRb4m+PynrU1Z8pxdri/uj tRfY7a/eqMB9sQSlOqgG6p3Ekrh3kJYKRPgE0S2Z54tVgbbVjf7vqhLnfTanF7YW r6/U8qyygyib9nnQ8uvYFCvEbyt25ZjuvcfZuizwo55/kcXQzUs5ZWFivFBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDlruQNx77GSWEt4Nxk3I95O7oeIwHwYDVR0j BBgwFoAUC/1q3Lz3RXwFx/qRppWHWMbOy74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmYyNTA2YjEtMzk2ZC00OTllLWI3ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENC Q0Y3NDU3QzA1QzdGQTkxQTY5NTg3NThDNkNFQ0JCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkZENkFEQ0JDRjc0NTdDMDVDN0ZBOTFBNjk1ODc1OEM2Q0VD QkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvMEJGRDZBRENCQ0Y3NDU3QzA1QzdGQTkxQTY5NTg3 NThDNkNFQ0JCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7XSWKlh0wX3/DJoKV8Sp2J+WPOvkJ5gSnv lxJdgE5tqDgPtBsKjwX6t34WdsB4IY4ZW7Bq+hsghVwzSWb7AmD88cw7aR+oJYtx Mwyc/4BbQc+4nu5M/vasU5+Uzb9B+Ss9ZI4I0YbMJuU5DFst2mXsI77QwPBD2tl8 5ePeEnXBEjlJvT/W7TfTBm9GG21+nWKjr79/bNo/ihkHUC1fHxAhdqtvQNpyVcFg u/xbIHI2Du0LIxIynj3hDxOR8ZdXi4qoxhB2CSs6UadiMUdTl/JdHBsKifRu/dSw 2xR+qCmkhMbRcd3EEFpax/TUsdv2yq0VVIp/5GVLOCpRojueJZM= -----END CERTIFICATE-----Generated at Tue Oct 27 05:14:05 2026 by rpki-client