$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft File: E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft (raw, json) Hash identifier: U3bIGvplZjbKv7qWNDPvELKb5zcKAI0yabrzgdueCd0= Subject key identifier: 6D:DB:64:D8:07:FD:36:42:25:52:48:52:ED:E0:96:52:D3:2F:7F:CC Authority key identifier: E0:96:FE:DB:AF:F2:AD:B7:3C:73:E7:E0:98:CE:49:4B:9C:33:68:17 Certificate issuer: /CN=E096FEDBAFF2ADB73C73E7E098CE494B9C336817 Certificate serial: 7950EBE115CCB5A87CC9E65CF67C0489B06C0078 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft Manifest number: BE Signing time: Mon 21 Sep 2026 10:04:06 +0000 Manifest this update: Mon 21 Sep 2026 09:59:06 +0000 Manifest next update: Tue 22 Sep 2026 13:57:06 +0000 Files and hashes: 1: E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl (hash: keI1X9aTUOIzRvFvQ/QzD3fK+l0g9Ot7m6MYyLDdoVI=) 2: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rkWYYYj/vAK/TOK+jQF6QsvjFqSfb6NPiKItrVefpzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:50:eb:e1:15:cc:b5:a8:7c:c9:e6:5c:f6:7c:04:89:b0:6c:00:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E096FEDBAFF2ADB73C73E7E098CE494B9C336817 Validity Not Before: Sep 21 09:59:06 2026 GMT Not After : Sep 22 13:57:06 2026 GMT Subject: CN=6DDB64D807FD364225524852EDE09652D32F7FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2a:93:1e:cf:a6:41:f0:e7:48:04:bb:df:c2: 63:6d:72:19:6e:e4:49:03:22:e6:42:57:1f:ed:86: 79:6c:b7:fc:1f:a1:8b:6e:2b:e0:0c:90:87:97:f1: 09:87:a9:6b:d9:3d:6e:a4:aa:66:62:4c:fb:c1:5a: c0:04:92:b5:cd:bb:18:18:8f:fe:83:9f:85:c4:1f: c2:59:1c:fc:44:3c:2c:38:d7:78:42:18:f4:96:44: 38:35:2e:80:71:e6:6d:37:15:82:ab:ff:dd:1c:8c: 4e:9d:6d:af:51:fb:83:b0:7b:00:48:7a:d9:b4:3b: f1:71:28:8e:38:89:40:fa:40:cd:a1:07:69:39:43: 8e:a2:51:4c:62:8f:46:74:f7:45:73:fb:51:70:ca: 54:75:a1:3c:9d:01:cc:c5:2f:ec:b3:68:3e:88:57: 70:24:0a:1c:9b:cc:91:9c:8a:64:f5:d7:81:9e:ea: 44:d4:40:43:d4:fd:4b:61:dd:37:a0:8a:49:7a:9e: b0:1a:d1:ab:f9:e7:9e:b0:53:54:79:c4:be:4a:d7: 6d:94:43:55:72:f1:5a:cf:e9:fb:58:37:68:c7:3e: 0a:ab:41:e7:00:5f:4e:a0:e1:48:8c:ce:b5:36:5c: 19:11:32:9b:c8:85:2c:89:36:d3:06:df:4e:43:11: d3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DB:64:D8:07:FD:36:42:25:52:48:52:ED:E0:96:52:D3:2F:7F:CC X509v3 Authority Key Identifier: keyid:E0:96:FE:DB:AF:F2:AD:B7:3C:73:E7:E0:98:CE:49:4B:9C:33:68:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0c:bc:bc:e4:88:af:bf:4a:54:08:44:0a:2b:1e:9c:81:29: fc:d3:bd:07:d2:fe:bc:7c:a3:97:0d:82:ea:0a:4b:25:ae:62: 61:ca:25:c3:40:56:2f:46:71:30:fa:e8:59:a6:bf:11:2a:64: 3c:1f:eb:78:62:4f:13:cb:30:3f:4a:66:51:5e:ed:2e:5f:b8: a0:b0:98:bf:bc:65:9a:dd:02:3e:a8:74:50:1c:d2:40:5a:89: 79:93:3a:c9:c0:be:f0:30:7f:d1:f0:a9:e6:7c:a9:50:d0:d7: ff:a1:b0:88:3e:80:c8:d0:61:ae:03:6d:fd:a1:00:04:c2:9b: e4:4e:bd:ad:fe:90:72:ad:5a:5f:d8:fc:32:60:49:74:cb:aa: bc:1d:fb:f7:bf:d3:af:c9:38:14:fc:f3:ea:45:74:30:38:55: 5b:60:27:35:a9:5a:54:ad:37:5b:c1:81:d4:0f:a7:a8:91:66: c1:10:dd:0f:f8:51:9f:c5:98:68:b8:c8:75:2a:e1:c7:54:d9: 84:88:9c:d3:6a:19:a8:a1:d5:2b:8e:a1:78:33:ab:a7:4b:7c: 23:33:ca:af:7a:61:f7:52:a1:a5:1e:83:a7:93:b6:49:67:1d: bc:8f:76:25:a7:27:dd:89:93:d9:31:54:b6:17:44:26:8c:8d: 81:2e:e5:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeVDr4RXMtah8yeZc9nwEibBsAHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5NkZFREJBRkYyQURCNzNDNzNFN0UwOThDRTQ5NEI5 QzMzNjgxNzAeFw0yNjA5MjEwOTU5MDZaFw0yNjA5MjIxMzU3MDZaMDMxMTAvBgNV BAMTKDZEREI2NEQ4MDdGRDM2NDIyNTUyNDg1MkVERTA5NjUyRDMyRjdGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKpMez6ZB8OdIBLvfwmNtchlu 5EkDIuZCVx/thnlst/wfoYtuK+AMkIeX8QmHqWvZPW6kqmZiTPvBWsAEkrXNuxgY j/6Dn4XEH8JZHPxEPCw413hCGPSWRDg1LoBx5m03FYKr/90cjE6dba9R+4OwewBI etm0O/FxKI44iUD6QM2hB2k5Q46iUUxij0Z090Vz+1FwylR1oTydAczFL+yzaD6I V3AkChybzJGcimT114Ge6kTUQEPU/Uth3Tegikl6nrAa0av5556wU1R5xL5K122U Q1Vy8VrP6ftYN2jHPgqrQecAX06g4UiMzrU2XBkRMpvIhSyJNtMG305DEdO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbdtk2Af9NkIlUkhS7eCWUtMvf8wwHwYDVR0j BBgwFoAU4Jb+26/yrbc8c+fgmM5JS5wzaBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwOWNiYjktMWFhZC00YjFhLWJkNGUtMDZmZDg0NDcyZmQ3LzAvRTA5NkZFREJB RkYyQURCNzNDNzNFN0UwOThDRTQ5NEI5QzMzNjgxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDk2RkVEQkFGRjJBREI3M0M3M0U3RTA5OENFNDk0QjlDMzM2 ODE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvRTA5NkZFREJBRkYyQURCNzNDNzNFN0UwOThDRTQ5 NEI5QzMzNjgxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIMvLzkiK+/SlQIRAorHpyBKfzTvQfS/rx8 o5cNguoKSyWuYmHKJcNAVi9GcTD66FmmvxEqZDwf63hiTxPLMD9KZlFe7S5fuKCw mL+8ZZrdAj6odFAc0kBaiXmTOsnAvvAwf9HwqeZ8qVDQ1/+hsIg+gMjQYa4Dbf2h AATCm+ROva3+kHKtWl/Y/DJgSXTLqrwd+/e/06/JOBT88+pFdDA4VVtgJzWpWlSt N1vBgdQPp6iRZsEQ3Q/4UZ/FmGi4yHUq4cdU2YSInNNqGaih1SuOoXgzq6dLfCMz yq96YfdSoaUeg6eTtklnHbyPdiWnJ92Jk9kxVLYXRCaMjYEu5fc= -----END CERTIFICATE-----Generated at Mon Sep 21 14:02:45 2026 by rpki-client