$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft File: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft (raw, json) Hash identifier: XXWO1x9w7o7yza2Ag48x6fmyynPZwA9beYNZheSt5mw= Subject key identifier: B7:4D:02:F9:37:C1:61:4D:79:67:0D:A2:D2:51:5F:CA:AB:A9:6E:39 Authority key identifier: 0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B Certificate issuer: /CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Certificate serial: 220992B5F927AA24914288D2233CA02D009A289D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft Manifest number: BE Signing time: Sun 20 Sep 2026 19:30:53 +0000 Manifest this update: Sun 20 Sep 2026 19:25:53 +0000 Manifest next update: Mon 21 Sep 2026 21:27:53 +0000 Files and hashes: 1: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl (hash: QkTFQ9muHG5Fd62zpJI8izZ2kqqCpLK22DR7p+3AxpM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:09:92:b5:f9:27:aa:24:91:42:88:d2:23:3c:a0:2d:00:9a:28:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Validity Not Before: Sep 20 19:25:53 2026 GMT Not After : Sep 21 21:27:53 2026 GMT Subject: CN=B74D02F937C1614D79670DA2D2515FCAABA96E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:8d:1f:8c:6f:9f:5b:ed:33:5c:64:76:a6: 04:b4:f9:fc:45:e5:c0:54:89:89:15:93:1b:9c:d9: 72:b2:6a:fd:86:3e:c1:a0:bd:51:9a:ce:c8:08:84: c1:49:e9:7e:13:d7:79:4c:22:68:95:1e:29:f1:08: ab:05:36:d9:b6:83:a5:8e:10:08:8a:24:75:9a:45: f7:aa:5a:5d:d7:5a:a5:b1:de:ed:0f:95:17:a1:b6: 08:f8:e8:36:81:15:41:7c:69:4f:47:7d:e4:9b:3e: 5f:c3:37:a0:8b:7e:fe:d5:2f:52:56:0f:3c:d7:83: 36:41:1f:4d:1f:2d:6a:ce:63:39:ca:8c:cb:fc:cc: 34:b6:5f:cf:46:39:fd:91:da:89:72:4f:a2:7d:1b: f8:74:c8:0e:64:fe:7f:21:4c:89:be:bd:d4:27:ea: c3:1a:a7:93:3c:c6:94:33:57:5b:32:7e:4e:2e:65: c7:c3:6e:f9:17:de:d3:df:72:18:93:55:be:4d:d6: 2d:a2:b5:0b:8a:34:27:26:56:b6:87:36:a7:11:e8: f6:99:2b:5e:6f:fc:70:14:67:53:fc:c6:cb:72:58: f0:2e:07:8b:3d:41:75:7b:f5:32:59:67:7c:ac:a7: 6c:62:da:0e:47:59:0f:e6:2d:9a:c2:53:ad:bc:a7: ca:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4D:02:F9:37:C1:61:4D:79:67:0D:A2:D2:51:5F:CA:AB:A9:6E:39 X509v3 Authority Key Identifier: keyid:0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e3:d9:fe:26:f4:4b:d0:33:de:a5:7f:d2:3c:0f:88:26:17: af:96:eb:aa:d4:72:e7:ef:0d:a5:d7:3e:a6:87:71:07:8d:18: 1a:b4:0f:d8:a1:85:93:6f:a7:83:20:26:5b:51:cb:1b:34:d9: 8e:96:c1:fb:06:3b:7c:fe:2d:81:11:82:e5:41:db:3a:ce:35: 34:aa:a5:63:03:1c:51:e5:2c:08:b8:0b:23:26:a3:cb:6e:2f: 10:83:cb:2a:08:c6:32:67:ec:b3:64:06:50:ff:28:1c:ff:5a: b6:54:c5:a6:9b:4d:63:47:4e:ea:8b:6b:a4:8f:4c:bb:9d:f3: 84:eb:23:c2:24:c2:00:00:c7:f6:1d:c5:a5:7c:31:3b:7c:cc: 25:45:18:42:63:47:30:3a:a5:21:f6:45:0c:81:dd:db:23:d6: 5e:43:17:05:d9:32:76:41:55:e5:01:26:3d:1e:20:07:df:fc: f0:48:24:77:ad:00:78:46:7f:13:04:2b:1e:e0:03:83:ae:10: ea:36:a6:fa:4d:77:d9:6c:50:48:a1:5d:b1:e7:1c:e0:3b:e1: 07:c7:de:f6:f9:bc:2e:e6:23:76:83:a4:04:47:af:8e:d7:e5: 17:d7:8e:5f:eb:d9:76:e5:22:0e:b7:d2:63:2d:12:22:6f:4e: 32:94:21:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgmStfknqiSRQojSIzygLQCaKJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0UwOURD RDRDOEM2QjAeFw0yNjA5MjAxOTI1NTNaFw0yNjA5MjEyMTI3NTNaMDMxMTAvBgNV BAMTKEI3NEQwMkY5MzdDMTYxNEQ3OTY3MERBMkQyNTE1RkNBQUJBOTZFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yI0fjG+fW+0zXGR2pgS0+fxF 5cBUiYkVkxuc2XKyav2GPsGgvVGazsgIhMFJ6X4T13lMImiVHinxCKsFNtm2g6WO EAiKJHWaRfeqWl3XWqWx3u0PlRehtgj46DaBFUF8aU9HfeSbPl/DN6CLfv7VL1JW DzzXgzZBH00fLWrOYznKjMv8zDS2X89GOf2R2olyT6J9G/h0yA5k/n8hTIm+vdQn 6sMap5M8xpQzV1syfk4uZcfDbvkX3tPfchiTVb5N1i2itQuKNCcmVraHNqcR6PaZ K15v/HAUZ1P8xstyWPAuB4s9QXV79TJZZ3ysp2xi2g5HWQ/mLZrCU628p8rDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt00C+TfBYU15Zw2i0lFfyqupbjkwHwYDVR0j BBgwFoAUCgU0FL6lscPDZ9X8D6Pgnc1MjGswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRC RUE1QjFDM0MzNjdENUZDMEZBM0UwOURDRDRDOEM2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTA1MzQxNEJFQTVCMUMzQzM2N0Q1RkMwRkEzRTA5RENENEM4 QzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0Uw OURDRDRDOEM2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3j2f4m9EvQM96lf9I8D4gmF6+W66rUcufv DaXXPqaHcQeNGBq0D9ihhZNvp4MgJltRyxs02Y6WwfsGO3z+LYERguVB2zrONTSq pWMDHFHlLAi4CyMmo8tuLxCDyyoIxjJn7LNkBlD/KBz/WrZUxaabTWNHTuqLa6SP TLud84TrI8IkwgAAx/YdxaV8MTt8zCVFGEJjRzA6pSH2RQyB3dsj1l5DFwXZMnZB VeUBJj0eIAff/PBIJHetAHhGfxMEKx7gA4OuEOo2pvpNd9lsUEihXbHnHOA74QfH 3vb5vC7mI3aDpARHr47X5RfXjl/r2XblIg630mMtEiJvTjKUIco= -----END CERTIFICATE-----Generated at Sun Sep 20 23:30:01 2026 by rpki-client