$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft File: 0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft (raw, json) Hash identifier: uJnU7ggSnglxUr7p9AwX275fylLDhC1J7sTir9btqtI= Subject key identifier: AC:5D:7D:2F:FE:0A:1B:66:FD:94:12:93:1F:08:75:F9:11:F5:EE:47 Authority key identifier: 0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC Certificate issuer: /CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC Certificate serial: 114CA0B5F5E51D963A714227BD8104F602711B56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:57:37 +0000 Manifest this update: Mon 21 Sep 2026 08:52:37 +0000 Manifest next update: Tue 22 Sep 2026 09:29:37 +0000 Files and hashes: 1: 0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl (hash: +p6zMhMZO4PUGWViJ1kxB9/+53LURmj1FpBmqyc8/js=) 2: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: GvfJPx0m84FZdwqXoN6lWJ86xXd2jONGdjvxcJWy97o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4c:a0:b5:f5:e5:1d:96:3a:71:42:27:bd:81:04:f6:02:71:1b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC Validity Not Before: Sep 21 08:52:37 2026 GMT Not After : Sep 22 09:29:37 2026 GMT Subject: CN=AC5D7D2FFE0A1B66FD9412931F0875F911F5EE47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:9c:15:08:43:5c:1d:62:5d:3d:61:89:54: 77:6a:a7:d2:41:5d:33:38:3a:50:51:b7:2d:d7:90: cc:52:fe:0e:4b:c4:4e:e8:ee:18:17:72:ce:cf:ae: c8:e9:ef:9f:a9:3a:11:da:fb:c5:b9:c3:a0:ac:bc: 33:54:17:41:a8:9c:44:39:4e:e4:24:f7:f5:f7:d5: 9e:23:82:fd:f8:6d:89:5b:8b:dd:29:b4:d6:0c:a8: f6:55:90:51:a6:b7:06:77:69:94:37:1f:52:f8:78: 49:59:bb:8d:14:c9:01:38:9e:b1:0b:a5:de:ba:c2: 47:10:60:be:97:c5:f3:aa:39:d8:18:ec:a1:f3:30: db:1d:68:76:4e:9b:b1:64:1f:a0:90:26:3e:72:00: 40:a2:ac:ac:b0:1c:6b:68:80:0f:be:6f:f3:d5:31: 0e:32:0c:6f:0d:08:73:8a:cb:d7:0a:f2:c8:04:dc: 99:a2:67:1b:41:81:26:24:0c:19:d3:fe:e6:0b:1a: c5:5d:1a:d7:57:66:dc:6e:d8:9c:61:15:18:01:dc: 3d:ff:4c:46:38:58:d8:22:a2:14:02:8a:62:1c:a9: 57:ab:cb:59:2d:43:a5:c8:a4:38:4a:86:12:72:a5: 2e:1e:d7:7c:95:6a:7a:af:08:21:ed:20:01:3c:fd: 89:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5D:7D:2F:FE:0A:1B:66:FD:94:12:93:1F:08:75:F9:11:F5:EE:47 X509v3 Authority Key Identifier: keyid:0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e8:c0:07:b9:c6:ce:e9:17:2d:71:80:60:56:8a:9b:9e:f6: 4e:75:af:86:3a:f0:47:4a:b9:88:d2:e6:e6:23:ac:b6:70:a6: ff:47:1a:c3:15:02:66:ba:49:e4:2c:bc:fe:da:2e:7a:96:31: 52:ae:e7:79:e1:aa:67:23:df:88:e1:30:ce:19:d0:b4:8e:f4: b8:fc:12:be:00:ef:b9:90:a1:8e:81:b7:4f:34:d4:81:a5:16: 7e:43:bf:49:3d:d2:08:3c:f3:38:f7:94:c4:c4:79:fa:f6:7d: 8d:b4:29:82:2c:65:9a:39:6f:e5:31:62:c4:49:80:77:9b:51: db:fa:8c:f7:61:95:b5:ab:fd:b0:f8:23:94:67:81:13:28:4f: ef:cb:20:0e:f6:a5:40:1d:ab:0f:71:05:67:9e:aa:e0:54:62: 20:15:ec:48:eb:a2:ee:fb:1c:72:8b:3e:90:0c:e0:db:ec:d0: a9:d6:4c:55:6d:9c:5b:f0:10:66:c2:c1:d5:ef:c0:35:e5:7b: 50:a1:0f:b5:14:82:b4:31:9a:04:06:31:28:c4:0b:cf:60:35: be:b6:9b:21:8a:ca:43:f8:6d:fc:76:ff:39:1c:90:5c:e5:ad: e8:b8:05:bb:87:1b:61:be:8b:e5:08:ff:d7:32:dd:4f:6d:83: 91:29:52:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEUygtfXlHZY6cUInvYEE9gJxG1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUwRUJCQkE3RTIyQzg1QjM0NzNBMDEzQ0ZERDMyMTI1 NEQ1NjhBQzAeFw0yNjA5MjEwODUyMzdaFw0yNjA5MjIwOTI5MzdaMDMxMTAvBgNV BAMTKEFDNUQ3RDJGRkUwQTFCNjZGRDk0MTI5MzFGMDg3NUY5MTFGNUVFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyd5wVCENcHWJdPWGJVHdqp9JB XTM4OlBRty3XkMxS/g5LxE7o7hgXcs7Prsjp75+pOhHa+8W5w6CsvDNUF0GonEQ5 TuQk9/X31Z4jgv34bYlbi90ptNYMqPZVkFGmtwZ3aZQ3H1L4eElZu40UyQE4nrEL pd66wkcQYL6XxfOqOdgY7KHzMNsdaHZOm7FkH6CQJj5yAECirKywHGtogA++b/PV MQ4yDG8NCHOKy9cK8sgE3JmiZxtBgSYkDBnT/uYLGsVdGtdXZtxu2JxhFRgB3D3/ TEY4WNgiohQCimIcqVery1ktQ6XIpDhKhhJypS4e13yVanqvCCHtIAE8/YkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrF19L/4KG2b9lBKTHwh1+RH17kcwHwYDVR0j BBgwFoAUDg67un4iyFs0c6ATz90yElTVaKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ5YjM1MTktM2RmMy00NDA2LTgyOGYtM2ViYjkxZDkyOTQ0LzAvMEUwRUJCQkE3 RTIyQzg1QjM0NzNBMDEzQ0ZERDMyMTI1NEQ1NjhBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRTBFQkJCQTdFMjJDODVCMzQ3M0EwMTNDRkREMzIxMjU0RDU2 OEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvMEUwRUJCQkE3RTIyQzg1QjM0NzNBMDEzQ0ZERDMy MTI1NEQ1NjhBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvowAe5xs7pFy1xgGBWipue9k51r4Y68EdK uYjS5uYjrLZwpv9HGsMVAma6SeQsvP7aLnqWMVKu53nhqmcj34jhMM4Z0LSO9Lj8 Er4A77mQoY6Bt0801IGlFn5Dv0k90gg88zj3lMTEefr2fY20KYIsZZo5b+UxYsRJ gHebUdv6jPdhlbWr/bD4I5RngRMoT+/LIA72pUAdqw9xBWeequBUYiAV7Ejrou77 HHKLPpAM4Nvs0KnWTFVtnFvwEGbCwdXvwDXle1ChD7UUgrQxmgQGMSjEC89gNb62 myGKykP4bfx2/zkckFzlrei4BbuHG2G+i+UI/9cy3U9tg5EpUl8= -----END CERTIFICATE-----Generated at Mon Sep 21 17:08:26 2026 by rpki-client