$ rpki-client -vvvf rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft File: 0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft (raw, json) Hash identifier: BUswuBESr7N4m2UzolKhpVe//+qyvZhZyWmmbDx7YwM= Subject key identifier: 40:34:8B:4F:4C:1A:9D:69:F3:3B:80:E8:6C:E4:4D:1E:CC:44:0E:BF Authority key identifier: 0F:74:5B:0D:4D:2F:7E:AF:8F:AF:5D:92:00:EE:EC:8E:E1:03:69:58 Certificate issuer: /CN=0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958 Certificate serial: 851A7F091632C0723B40F4FADBA313D9338D07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:37:11 +0000 Manifest this update: Mon 21 Sep 2026 08:32:11 +0000 Manifest next update: Tue 22 Sep 2026 11:42:11 +0000 Files and hashes: 1: 0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl (hash: AGFoDsGxnitL3UhGK43of+YSQr6TDBnW6QOoYAL89b4=) 2: 3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (hash: qMA2mvuDFglgzD+HOLkg38KkeE2E7iG0DYOT5BZeHio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85:1a:7f:09:16:32:c0:72:3b:40:f4:fa:db:a3:13:d9:33:8d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958 Validity Not Before: Sep 21 08:32:11 2026 GMT Not After : Sep 22 11:42:11 2026 GMT Subject: CN=40348B4F4C1A9D69F33B80E86CE44D1ECC440EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f8:67:1d:b8:aa:e3:ba:f8:4d:ff:b9:6c:8d: 8b:16:59:7d:71:74:87:44:dd:7b:b2:56:08:2c:c1: 6a:32:69:5e:a1:fa:f0:5f:9a:53:57:84:fd:c2:25: af:b0:fc:78:49:77:e5:47:66:15:98:b6:fc:e7:d9: ce:25:53:e4:1e:f6:da:ed:25:9d:88:17:fb:d7:15: e5:85:ee:1d:16:75:96:81:0e:e8:b6:5b:27:78:b9: 55:f1:70:79:aa:7b:d2:7d:71:6e:44:ac:c2:e7:e2: 4e:1f:3a:09:8a:92:e0:dd:b6:b7:5d:d0:9c:9d:17: f9:35:cc:22:ac:cd:cd:3b:20:5c:4f:e0:1a:f5:20: a6:1d:77:85:1b:37:5e:33:c0:0e:da:88:11:d0:e7: 58:a5:03:49:f4:03:e4:7f:1e:26:0b:0d:85:3e:0e: 0f:c6:37:0d:aa:7e:c5:e7:be:56:ed:9c:78:e2:a9: 5d:2c:43:75:47:f4:38:54:8b:b4:77:d5:29:d4:f5: f4:d6:2c:20:3e:be:25:78:05:c7:87:f4:56:74:e2: b1:5b:f3:d4:49:d5:2d:82:5b:14:be:4e:4a:de:55: 8b:02:f8:87:4a:e4:40:1a:99:75:d0:b9:b6:d1:18: db:4e:e6:e7:b7:4c:8a:12:38:b1:8f:98:19:99:3f: fd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:34:8B:4F:4C:1A:9D:69:F3:3B:80:E8:6C:E4:4D:1E:CC:44:0E:BF X509v3 Authority Key Identifier: keyid:0F:74:5B:0D:4D:2F:7E:AF:8F:AF:5D:92:00:EE:EC:8E:E1:03:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:8e:2d:60:57:db:3a:ab:d1:59:19:da:44:ef:b0:17:23:08: fa:58:1d:a7:43:01:c6:74:e8:14:ca:d4:c6:7e:e9:ca:67:82: f6:6d:57:2c:3f:57:a8:d1:6e:ef:6c:3d:fe:1e:ba:ca:be:ac: 7b:87:a1:e0:0f:6d:02:c2:cc:f5:3b:84:21:af:28:29:d4:4e: f9:79:f2:9e:5f:b1:68:13:ed:b4:b8:f0:7f:72:d0:b0:b6:5b: 11:01:30:58:40:eb:9d:0f:a3:75:06:60:39:cc:c1:23:47:4e: 33:3e:4f:a5:fb:8e:b5:d7:a3:37:65:51:3a:23:97:7a:df:1b: 9a:29:f8:a3:fe:13:4b:a1:d0:0d:c8:bd:2e:b4:ae:47:cf:b8: 98:d9:72:32:89:35:29:bf:13:4d:c5:51:74:f6:7d:49:c2:1d: 1b:92:8c:d9:97:55:54:1e:65:c9:e8:bf:4b:a4:f5:eb:67:9e: f5:a8:d3:86:b7:d4:aa:d1:cb:66:b6:e7:c9:42:7a:dc:14:32: 80:87:01:e7:a2:d1:4f:e6:f8:04:6e:f2:51:59:dc:50:82:31: d8:4b:3d:bc:7f:30:d0:83:56:b9:71:8f:86:95:66:1c:1f:af: be:e9:ad:fb:eb:4a:86:22:b0:1e:66:a4:9c:db:82:8c:a7:c9: 15:23:ac:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAIUafwkWMsByO0D0+tujE9kzjQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY3NDVCMEQ0RDJGN0VBRjhGQUY1RDkyMDBFRUVDOEVF MTAzNjk1ODAeFw0yNjA5MjEwODMyMTFaFw0yNjA5MjIxMTQyMTFaMDMxMTAvBgNV BAMTKDQwMzQ4QjRGNEMxQTlENjlGMzNCODBFODZDRTQ0RDFFQ0M0NDBFQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV+GcduKrjuvhN/7lsjYsWWX1x dIdE3XuyVggswWoyaV6h+vBfmlNXhP3CJa+w/HhJd+VHZhWYtvzn2c4lU+Qe9trt JZ2IF/vXFeWF7h0WdZaBDui2Wyd4uVXxcHmqe9J9cW5ErMLn4k4fOgmKkuDdtrdd 0JydF/k1zCKszc07IFxP4Br1IKYdd4UbN14zwA7aiBHQ51ilA0n0A+R/HiYLDYU+ Dg/GNw2qfsXnvlbtnHjiqV0sQ3VH9DhUi7R31SnU9fTWLCA+viV4BceH9FZ04rFb 89RJ1S2CWxS+TkreVYsC+IdK5EAamXXQubbRGNtO5ue3TIoSOLGPmBmZP/39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQDSLT0wanWnzO4DobORNHsxEDr8wHwYDVR0j BBgwFoAUD3RbDU0vfq+Pr12SAO7sjuEDaVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTViYTQ3Y2UtMzk5Mi00MzFjLWFiZjEtNjgxYTRjYzhlYzQ4LzAvMEY3NDVCMEQ0 RDJGN0VBRjhGQUY1RDkyMDBFRUVDOEVFMTAzNjk1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjc0NUIwRDREMkY3RUFGOEZBRjVEOTIwMEVFRUM4RUUxMDM2 OTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTViYTQ3Y2UtMzk5Mi00MzFjLWFi ZjEtNjgxYTRjYzhlYzQ4LzAvMEY3NDVCMEQ0RDJGN0VBRjhGQUY1RDkyMDBFRUVD OEVFMTAzNjk1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeOLWBX2zqr0VkZ2kTvsBcjCPpYHadDAcZ0 6BTK1MZ+6cpngvZtVyw/V6jRbu9sPf4eusq+rHuHoeAPbQLCzPU7hCGvKCnUTvl5 8p5fsWgT7bS48H9y0LC2WxEBMFhA650Po3UGYDnMwSNHTjM+T6X7jrXXozdlUToj l3rfG5op+KP+E0uh0A3IvS60rkfPuJjZcjKJNSm/E03FUXT2fUnCHRuSjNmXVVQe Zcnov0uk9etnnvWo04a31KrRy2a258lCetwUMoCHAeei0U/m+ARu8lFZ3FCCMdhL Pbx/MNCDVrlxj4aVZhwfr77prfvrSoYisB5mpJzbgoynyRUjrGY= -----END CERTIFICATE-----Generated at Mon Sep 21 17:42:08 2026 by rpki-client