$ rpki-client -vvvf rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.mft File: 0ED92E96DB5C94077B124D34469AD1D3208E3189.mft (raw, json) Hash identifier: WHzXVeos4YMrt3XnFYNae3STi0SmTPi4hjtIZ5Khtzk= Subject key identifier: 07:2A:5E:2A:B0:DF:04:C7:36:B6:F3:3A:5B:A4:9E:43:A1:48:C8:3F Authority key identifier: 0E:D9:2E:96:DB:5C:94:07:7B:12:4D:34:46:9A:D1:D3:20:8E:31:89 Certificate issuer: /CN=0ED92E96DB5C94077B124D34469AD1D3208E3189 Certificate serial: 43DF76FA45AF36F1A0119BA57A651FF2A6988384 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0ED92E96DB5C94077B124D34469AD1D3208E3189.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.mft Manifest number: BD Signing time: Sun 20 Sep 2026 23:15:39 +0000 Manifest this update: Sun 20 Sep 2026 23:10:39 +0000 Manifest next update: Mon 21 Sep 2026 23:31:39 +0000 Files and hashes: 1: 0ED92E96DB5C94077B124D34469AD1D3208E3189.crl (hash: w9ezOBHPaMAOdhMUvGn7oALv5rM0cTCIU3lHgUD5Vn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.crl rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0ED92E96DB5C94077B124D34469AD1D3208E3189.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:df:76:fa:45:af:36:f1:a0:11:9b:a5:7a:65:1f:f2:a6:98:83:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ED92E96DB5C94077B124D34469AD1D3208E3189 Validity Not Before: Sep 20 23:10:39 2026 GMT Not After : Sep 21 23:31:39 2026 GMT Subject: CN=072A5E2AB0DF04C736B6F33A5BA49E43A148C83F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:eb:4a:41:72:dd:5b:75:bf:ac:13:61:b8: 7e:0a:1d:6c:06:40:3d:ea:8b:dc:26:34:92:4f:57: 81:f8:dd:a2:26:f7:55:f6:08:b0:02:88:a9:ea:46: 34:04:46:a5:65:02:06:47:83:e6:af:5a:f3:fd:f2: 14:2b:81:2f:67:80:21:be:d9:f3:cd:97:43:56:23: 21:38:2c:b8:3a:b0:dc:c3:e3:0a:4c:b4:cc:bf:d9: 4d:3f:47:24:d7:98:d9:45:f5:d6:c9:e8:27:47:24: a8:29:5f:18:b0:57:f8:4b:7a:c7:62:74:0d:5f:4c: f1:0d:a0:aa:ef:87:e9:44:51:ef:2a:5a:48:49:67: e3:c5:82:df:51:fe:e6:dd:22:f6:dc:2e:bb:12:1c: dd:db:8e:0b:90:3f:a1:4d:a8:28:4e:e1:63:f5:bd: 74:e9:00:18:66:fe:85:0d:7a:8a:7b:e5:d4:d4:7a: ec:b1:b8:e1:95:61:c7:9f:ee:e0:69:ea:e8:7a:23: 66:48:d5:c2:1b:a2:70:3e:3d:0f:3c:ab:e4:eb:b3: 7d:34:4f:9d:2f:cc:00:43:10:6c:91:21:8a:83:a7: 70:71:06:ad:7f:9e:ca:1a:64:82:ea:ff:73:aa:1d: e9:af:26:41:57:f3:23:5c:07:21:b6:63:a6:51:08: a8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2A:5E:2A:B0:DF:04:C7:36:B6:F3:3A:5B:A4:9E:43:A1:48:C8:3F X509v3 Authority Key Identifier: keyid:0E:D9:2E:96:DB:5C:94:07:7B:12:4D:34:46:9A:D1:D3:20:8E:31:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0ED92E96DB5C94077B124D34469AD1D3208E3189.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/0ED92E96DB5C94077B124D34469AD1D3208E3189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:74:c9:43:f1:52:3b:b2:98:89:a1:ad:8a:ba:f9:02:6d:cc: 9e:b5:b3:ab:d9:ef:23:d7:b0:ca:13:a3:23:e3:bb:04:0f:ca: 8e:80:d1:21:db:e3:f2:bf:b4:f9:d4:69:33:4b:fa:5e:ce:06: 24:9b:35:9d:3a:d3:98:ff:97:15:18:4f:fb:2a:0e:2d:47:c9: d7:a8:17:82:73:a1:c8:1d:a2:74:cc:01:ff:11:68:0c:3b:c1: ed:8c:2d:14:13:37:42:b2:4c:a6:dc:10:ef:cb:a8:e6:21:a8: ba:6a:e4:b7:ed:7f:87:42:c7:0a:4f:0e:31:99:2f:65:57:81: c1:3b:51:5d:e5:26:ae:f2:38:e0:36:95:cc:4b:5e:e5:8a:4e: 60:7e:69:16:a0:22:5d:1a:14:a5:00:c0:20:c8:61:95:a3:9b: 1f:ac:92:7e:55:24:c5:0f:51:a3:93:76:0d:b2:81:b0:00:ce: 97:1d:f6:84:6a:09:9b:6f:a5:dc:e5:e3:12:38:65:6d:45:14: 64:25:95:c9:2a:05:3b:82:78:d7:00:5d:68:a4:4d:e4:88:87: 3f:76:d6:10:99:be:de:26:12:f9:d1:f9:d4:5b:6a:4d:95:94: df:d3:bb:89:b5:e4:b8:af:92:ab:fb:1d:0c:e7:35:c4:68:02: 85:7f:c9:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ992+kWvNvGgEZulemUf8qaYg4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVEOTJFOTZEQjVDOTQwNzdCMTI0RDM0NDY5QUQxRDMy MDhFMzE4OTAeFw0yNjA5MjAyMzEwMzlaFw0yNjA5MjEyMzMxMzlaMDMxMTAvBgNV BAMTKDA3MkE1RTJBQjBERjA0QzczNkI2RjMzQTVCQTQ5RTQzQTE0OEM4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKvOtKQXLdW3W/rBNhuH4KHWwG QD3qi9wmNJJPV4H43aIm91X2CLACiKnqRjQERqVlAgZHg+avWvP98hQrgS9ngCG+ 2fPNl0NWIyE4LLg6sNzD4wpMtMy/2U0/RyTXmNlF9dbJ6CdHJKgpXxiwV/hLesdi dA1fTPENoKrvh+lEUe8qWkhJZ+PFgt9R/ubdIvbcLrsSHN3bjguQP6FNqChO4WP1 vXTpABhm/oUNeop75dTUeuyxuOGVYcef7uBp6uh6I2ZI1cIbonA+PQ88q+Trs300 T50vzABDEGyRIYqDp3BxBq1/nsoaZILq/3OqHemvJkFX8yNcByG2Y6ZRCKgzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBypeKrDfBMc2tvM6W6SeQ6FIyD8wHwYDVR0j BBgwFoAUDtkulttclAd7Ek00RprR0yCOMYkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgwYThkZmQtYTY3OS00NDRhLWI5YTgtNmUzY2I0ODFhMDc5LzAvMEVEOTJFOTZE QjVDOTQwNzdCMTI0RDM0NDY5QUQxRDMyMDhFMzE4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRUQ5MkU5NkRCNUM5NDA3N0IxMjREMzQ0NjlBRDFEMzIwOEUz MTg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvMEVEOTJFOTZEQjVDOTQwNzdCMTI0RDM0NDY5QUQx RDMyMDhFMzE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB50yUPxUjuymImhrYq6+QJtzJ61s6vZ7yPX sMoToyPjuwQPyo6A0SHb4/K/tPnUaTNL+l7OBiSbNZ0605j/lxUYT/sqDi1Hydeo F4JzocgdonTMAf8RaAw7we2MLRQTN0KyTKbcEO/LqOYhqLpq5Lftf4dCxwpPDjGZ L2VXgcE7UV3lJq7yOOA2lcxLXuWKTmB+aRagIl0aFKUAwCDIYZWjmx+skn5VJMUP UaOTdg2ygbAAzpcd9oRqCZtvpdzl4xI4ZW1FFGQllckqBTuCeNcAXWikTeSIhz92 1hCZvt4mEvnR+dRbak2VlN/Tu4m15Livkqv7HQznNcRoAoV/yRQ= -----END CERTIFICATE-----Generated at Mon Sep 21 07:19:35 2026 by rpki-client