$ rpki-client -vvvf rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft File: 0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft (raw, json) Hash identifier: 11EI71njvpDdxUpVW4NtT7I1gGiAZQGpCJbKwwEsmPs= Subject key identifier: 4F:E9:D6:BC:19:34:D8:CF:71:4D:40:B2:8E:0C:A6:71:9F:09:D1:88 Authority key identifier: 0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5 Certificate issuer: /CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5 Certificate serial: 1DCA395FF7BEA2342BB6D7DAC5120812B49A3F5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 23:30:54 +0000 Manifest this update: Mon 21 Sep 2026 23:25:54 +0000 Manifest next update: Tue 22 Sep 2026 23:32:54 +0000 Files and hashes: 1: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: PLnaEPFMhQC7qrBdYJWogsB9/XputOFqVTt3eZyoCbA=) 2: 0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl (hash: PZScSqDSaIoKuCCrJDgx1ouKtab++hFYspXnM8W+BBo=) 3: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: /DP+cT1aguJf0hhV/U1Fj08oxHTiO4zVC+8+RLVJzSY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ca:39:5f:f7:be:a2:34:2b:b6:d7:da:c5:12:08:12:b4:9a:3f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5 Validity Not Before: Sep 21 23:25:54 2026 GMT Not After : Sep 22 23:32:54 2026 GMT Subject: CN=4FE9D6BC1934D8CF714D40B28E0CA6719F09D188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:65:2a:26:e1:b2:e6:9e:8f:6f:6e:5b:51:f2: b3:42:e0:74:bd:56:e2:3e:6d:96:c4:d9:d2:20:82: b9:cd:03:21:f8:67:60:5b:4b:aa:44:cc:ae:18:1b: b4:2b:21:10:03:a3:ee:9d:b6:af:36:3d:67:c1:6c: 97:6e:bd:62:84:40:5c:95:87:c8:62:7d:b2:54:75: 52:34:b4:03:af:77:51:19:3b:83:4a:d8:7a:cd:f0: da:c7:3e:13:1f:38:18:5f:f2:b7:8a:c0:2d:c8:5f: 57:b2:cc:30:04:e1:b0:66:ac:44:57:1b:7b:6e:be: 4e:e6:f0:b2:e9:aa:61:96:55:bf:fe:d5:e0:3b:bc: e3:c0:ca:83:6e:54:95:8a:80:30:ad:32:7b:af:fa: f6:d4:3a:fa:2f:5e:af:e5:20:f8:6f:9d:8d:b1:a9: 00:e0:b3:41:24:40:ef:ab:0b:d7:ec:5b:50:06:52: fe:b7:54:d5:2a:be:3d:ff:3f:27:09:83:d3:20:a9: df:48:b3:89:ed:93:9f:81:01:c4:af:39:bf:eb:dd: f1:df:81:8a:a5:ca:d5:ff:a9:60:14:49:9c:6a:54: 90:d8:0b:29:c0:f1:b6:02:e1:49:f7:e9:6a:f9:f5: 82:0c:d6:7b:bb:4f:18:3f:fb:13:b8:ec:0d:39:47: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E9:D6:BC:19:34:D8:CF:71:4D:40:B2:8E:0C:A6:71:9F:09:D1:88 X509v3 Authority Key Identifier: keyid:0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:14:21:86:ec:81:c9:25:74:2b:04:13:b5:92:14:2f:6d:ac: 7c:a1:10:d7:ad:99:05:d9:5a:64:5b:1a:04:aa:99:4b:57:e4: a2:18:1d:0b:6d:7b:20:cd:1c:6f:75:6d:08:90:e1:c9:04:92: c8:5b:ef:56:fa:8d:bf:51:75:5f:6c:33:a1:17:0d:98:45:1d: 25:d8:4c:dc:07:d5:ea:54:6d:54:9a:dc:4c:aa:74:aa:62:79: 70:89:ab:d8:18:c8:38:7f:75:70:10:d4:34:13:d2:d8:43:c1: 4c:c8:18:1d:7c:a0:c0:55:03:7c:30:79:87:c2:a9:bb:41:d5: 95:29:cc:ef:4f:95:c8:1f:a7:2c:30:d5:b1:c8:d8:8e:95:80: 92:30:c7:bf:4e:1d:81:b3:0d:e2:1f:36:8c:bb:f3:04:01:8e: 42:b6:4c:1d:7b:c4:cf:25:5f:08:ff:dd:42:d1:07:78:f1:41: 4d:8a:1d:da:e5:d2:cf:e0:db:86:db:62:7f:b9:bf:c3:e5:c7: 5f:e1:eb:02:86:07:e8:d3:79:40:e3:05:fa:eb:34:7f:fd:53: ef:46:16:cf:fc:02:f3:04:69:73:a2:03:34:f2:f1:f7:71:2e: d3:a3:11:86:62:f0:8a:4f:5f:97:5c:1a:44:c2:32:60:25:b2: 17:22:6c:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHco5X/e+ojQrttfaxRIIErSaP10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3MzQ5RkFDRDE3MzMyRTE5M0E0QjZCMzQwRDlFNkEx MTQ4RDVENTAeFw0yNjA5MjEyMzI1NTRaFw0yNjA5MjIyMzMyNTRaMDMxMTAvBgNV BAMTKDRGRTlENkJDMTkzNEQ4Q0Y3MTRENDBCMjhFMENBNjcxOUYwOUQxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZSom4bLmno9vbltR8rNC4HS9 VuI+bZbE2dIggrnNAyH4Z2BbS6pEzK4YG7QrIRADo+6dtq82PWfBbJduvWKEQFyV h8hifbJUdVI0tAOvd1EZO4NK2HrN8NrHPhMfOBhf8reKwC3IX1eyzDAE4bBmrERX G3tuvk7m8LLpqmGWVb/+1eA7vOPAyoNuVJWKgDCtMnuv+vbUOvovXq/lIPhvnY2x qQDgs0EkQO+rC9fsW1AGUv63VNUqvj3/PycJg9Mgqd9Is4ntk5+BAcSvOb/r3fHf gYqlytX/qWAUSZxqVJDYCynA8bYC4Un36Wr59YIM1nu7Txg/+xO47A05RzgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT+nWvBk02M9xTUCyjgymcZ8J0YgwHwYDVR0j BBgwFoAUDnNJ+s0XMy4ZOktrNA2eahFI1dUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE2YThhZDQtMDZlNi00MGMzLTk4ZTQtZmE5M2FmYzRhNzcyLzAvMEU3MzQ5RkFD RDE3MzMyRTE5M0E0QjZCMzQwRDlFNkExMTQ4RDVENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTczNDlGQUNEMTczMzJFMTkzQTRCNkIzNDBEOUU2QTExNDhE NUQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvMEU3MzQ5RkFDRDE3MzMyRTE5M0E0QjZCMzQwRDlF NkExMTQ4RDVENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYUIYbsgckldCsEE7WSFC9trHyhENetmQXZ WmRbGgSqmUtX5KIYHQtteyDNHG91bQiQ4ckEkshb71b6jb9RdV9sM6EXDZhFHSXY TNwH1epUbVSa3EyqdKpieXCJq9gYyDh/dXAQ1DQT0thDwUzIGB18oMBVA3wweYfC qbtB1ZUpzO9Plcgfpyww1bHI2I6VgJIwx79OHYGzDeIfNoy78wQBjkK2TB17xM8l Xwj/3ULRB3jxQU2KHdrl0s/g24bbYn+5v8Plx1/h6wKGB+jTeUDjBfrrNH/9U+9G Fs/8AvMEaXOiAzTy8fdxLtOjEYZi8IpPX5dcGkTCMmAlshcibCM= -----END CERTIFICATE-----Generated at Tue Sep 22 16:35:39 2026 by rpki-client