$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft File: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft (raw, json) Hash identifier: QAxEnAjk6FiNwSYtDfmqhI2PL3XIgylqgae/pBs2+rQ= Subject key identifier: B2:69:FE:D1:61:01:E7:80:94:26:3F:FD:0D:E5:7C:FF:C2:84:CE:A8 Authority key identifier: 0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 Certificate issuer: /CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Certificate serial: 45F10B3A725A94AD9F44AF2B83F6E5F284FD1589 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft Manifest number: BF Signing time: Mon 21 Sep 2026 04:11:44 +0000 Manifest this update: Mon 21 Sep 2026 04:06:44 +0000 Manifest next update: Tue 22 Sep 2026 06:14:44 +0000 Files and hashes: 1: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: mwSnVoqEhlM2lDBuSkv9Lk0pH8PdVGL8EzeI43YHgNM=) 2: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: Gc3lbfky0bPOcbJ53df4bfJv1IIZalpAJC7Z0mwM6C8=) 3: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: Kwk5pernXmim9KIGTT8s13y4BcSyxFt8vOqda3e394A=) 4: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl (hash: L47cLZSP8wmvNCL/RkjE9R3q3X6Hy+wBlJnSjLQ7jmE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f1:0b:3a:72:5a:94:ad:9f:44:af:2b:83:f6:e5:f2:84:fd:15:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Validity Not Before: Sep 21 04:06:44 2026 GMT Not After : Sep 22 06:14:44 2026 GMT Subject: CN=B269FED16101E78094263FFD0DE57CFFC284CEA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:16:b8:81:e7:06:65:d5:5b:f8:21:f0:6c: 3d:41:a1:55:d2:08:f5:a5:ff:51:30:18:63:cb:9b: 43:fb:cf:ba:b1:ac:7f:73:ba:74:d8:90:cb:2a:91: 1f:10:79:ca:1d:62:3b:5a:79:81:2f:fd:64:18:d7: 24:e6:bf:7a:1e:75:2c:07:a3:93:f8:f4:97:ae:92: 34:7e:0b:a8:95:80:61:ac:4e:d9:81:f1:f6:bb:62: 67:9b:f8:81:03:a3:66:ca:0c:c7:23:bd:8a:a2:31: c7:e1:8c:9f:5c:2d:4b:0b:46:82:f1:46:55:e8:33: f0:75:d4:71:22:4d:c5:ca:43:10:58:f4:31:0f:87: 8d:e9:db:ee:2c:4f:26:51:33:80:a4:aa:d0:bc:14: 8f:1c:53:73:62:23:93:2e:22:92:b7:ec:bb:9b:15: ae:6a:87:bf:44:d0:13:66:51:46:66:14:71:30:32: 62:7e:a9:bb:c9:df:46:f1:7f:33:21:b6:b9:86:ca: c9:45:a0:9a:e2:8b:62:2a:5c:b1:7c:e3:80:98:79: f8:aa:8e:25:05:08:aa:65:c9:95:06:33:71:51:f5: 5e:31:7e:e9:97:c6:76:3b:3d:96:73:fc:37:47:69: 33:cb:f8:cf:d3:cf:61:98:24:15:56:86:32:86:de: f9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:69:FE:D1:61:01:E7:80:94:26:3F:FD:0D:E5:7C:FF:C2:84:CE:A8 X509v3 Authority Key Identifier: keyid:0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:dc:8f:bd:62:73:0c:69:32:46:c8:c9:45:fe:fb:b8:5e:79: a7:ac:72:55:8c:a2:d4:e7:12:c7:0e:f7:cf:a3:7e:b6:19:b7: d5:ae:11:95:ca:10:1d:cf:80:67:b8:74:1d:b3:c6:b0:64:49: 11:f3:cd:26:44:b3:d5:fe:58:a0:fc:ae:d2:8b:86:49:ff:25: 99:89:23:df:be:b7:ee:34:fe:1b:4a:aa:4c:af:ed:46:c1:a1: 78:e7:42:6d:9c:52:6d:9f:ed:cb:a4:f7:3f:f2:cc:dd:75:ba: 73:38:2e:f9:d1:d9:f7:8c:3e:a1:cb:3e:25:85:99:31:3f:03: 8f:03:3a:ea:8b:24:b2:c9:90:3a:89:51:61:0c:bb:95:b1:31: 82:d3:43:08:d9:53:46:63:de:7d:cf:14:46:15:95:2e:59:08: 4a:df:d3:92:44:44:11:77:58:e3:7b:3d:12:2e:68:f3:87:8b: c0:cf:4b:16:c1:36:92:cd:53:a7:c2:9e:c1:20:aa:0f:4e:72: 30:34:5a:9d:39:4f:7d:d1:34:ed:7e:90:47:89:41:9a:32:21: 93:60:a8:68:da:02:d1:ee:03:6c:e4:e3:b0:70:4e:d9:b4:f6: 46:1d:98:e1:17:64:45:0e:7a:5b:e3:a1:be:e4:6b:6f:1a:83: 99:ab:f2:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfELOnJalK2fRK8rg/bl8oT9FYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4 MjZBREY3MTAeFw0yNjA5MjEwNDA2NDRaFw0yNjA5MjIwNjE0NDRaMDMxMTAvBgNV BAMTKEIyNjlGRUQxNjEwMUU3ODA5NDI2M0ZGRDBERTU3Q0ZGQzI4NENFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJha4gecGZdVb+CHwbD1BoVXS CPWl/1EwGGPLm0P7z7qxrH9zunTYkMsqkR8QecodYjtaeYEv/WQY1yTmv3oedSwH o5P49JeukjR+C6iVgGGsTtmB8fa7Ymeb+IEDo2bKDMcjvYqiMcfhjJ9cLUsLRoLx RlXoM/B11HEiTcXKQxBY9DEPh43p2+4sTyZRM4CkqtC8FI8cU3NiI5MuIpK37Lub Fa5qh79E0BNmUUZmFHEwMmJ+qbvJ30bxfzMhtrmGyslFoJrii2IqXLF844CYefiq jiUFCKplyZUGM3FR9V4xfumXxnY7PZZz/DdHaTPL+M/Tz2GYJBVWhjKG3vnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsmn+0WEB54CUJj/9DeV8/8KEzqgwHwYDVR0j BBgwFoAUDqGuL8wxlYEISWb85yDguYJq33EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdjOGEwYzMtMzdmNS00NjY3LWE0MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZD QzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4MjZBREY3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRUExQUUyRkNDMzE5NTgxMDg0OTY2RkNFNzIwRTBCOTgyNkFE RjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUw Qjk4MjZBREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALncj71icwxpMkbIyUX++7heeaesclWMotTn EscO98+jfrYZt9WuEZXKEB3PgGe4dB2zxrBkSRHzzSZEs9X+WKD8rtKLhkn/JZmJ I9++t+40/htKqkyv7UbBoXjnQm2cUm2f7cuk9z/yzN11unM4LvnR2feMPqHLPiWF mTE/A48DOuqLJLLJkDqJUWEMu5WxMYLTQwjZU0Zj3n3PFEYVlS5ZCErf05JERBF3 WON7PRIuaPOHi8DPSxbBNpLNU6fCnsEgqg9OcjA0Wp05T33RNO1+kEeJQZoyIZNg qGjaAtHuA2zk47BwTtm09kYdmOEXZEUOelvjob7ka28ag5mr8io= -----END CERTIFICATE-----Generated at Mon Sep 21 16:21:59 2026 by rpki-client