$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft File: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft (raw, json) Hash identifier: PxGJnIyNyV5uEzTMRob0dfYDtzzGgwK7a3IekDgC2MU= Subject key identifier: E5:F4:6E:00:AC:FB:59:01:EE:BB:85:87:94:04:9F:CD:BF:38:48:2F Authority key identifier: 0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 Certificate issuer: /CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Certificate serial: 4559C1FEA47454F0A679329467083D23BE00A181 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft Manifest number: BF Signing time: Tue 22 Sep 2026 04:31:58 +0000 Manifest this update: Tue 22 Sep 2026 04:26:58 +0000 Manifest next update: Wed 23 Sep 2026 07:15:58 +0000 Files and hashes: 1: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: EdEGFXLSGBP0MFU7fBfQCb+Ije/hW5JPZPkjvdhCXtQ=) 2: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: OsAoJbYittbq+gZll27kuO9hviTpRYTbYAhazIaxU6I=) 3: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl (hash: lWlc9VHxETYSf9NewhUUwuOAXw/yVYncRIYcVUWDVGY=) 4: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: Pp4p1IAwL6T/SUuRHLsPL1o2X/hw7FiM+dsJ0iekdE8=) 5: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: Si+I+kPmeWkzvO8zwLh244+U9aO/cSZUp2EBTlhcW1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:59:c1:fe:a4:74:54:f0:a6:79:32:94:67:08:3d:23:be:00:a1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Validity Not Before: Sep 22 04:26:58 2026 GMT Not After : Sep 23 07:15:58 2026 GMT Subject: CN=E5F46E00ACFB5901EEBB858794049FCDBF38482F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:48:6e:00:9a:83:75:e6:b2:77:ef:01:02:04: 9f:2b:ba:e6:82:25:cf:ac:a7:6a:79:45:0d:29:fd: 35:c3:7e:34:31:2a:8e:01:e7:63:66:62:27:ff:56: 66:b5:56:74:1c:8b:9c:21:dd:a8:99:11:f6:77:cc: 85:ce:e9:4a:ab:5b:12:10:a4:5f:da:c4:07:21:64: 87:bf:40:78:d0:9e:de:97:b8:20:d2:fd:dd:ec:7f: cb:c7:0d:6f:c0:9e:80:a5:26:75:e9:8c:07:9f:d9: 8a:c4:56:b2:8b:6f:b5:16:39:67:ef:17:c3:0c:9c: e3:da:c3:5a:55:b6:89:89:fe:eb:97:a4:49:75:69: 93:31:cc:7c:fb:04:1c:80:2f:91:f2:b6:7d:5a:92: d7:9a:17:a8:b4:49:54:9d:1f:81:5e:de:d6:49:9a: 63:45:c3:c6:45:99:d3:03:74:84:4b:ac:6b:0b:9f: 4f:6a:fa:61:69:24:40:eb:d4:d0:05:ef:07:4e:71: a8:75:2d:fa:61:fc:e9:2e:e0:65:90:3d:8b:70:1f: d5:af:72:50:f6:9a:b4:8e:00:dd:a6:35:0d:21:8e: 27:ad:b9:17:6c:bf:bc:10:ac:61:37:b3:5b:da:e4: 1c:1a:b6:c1:e8:8b:a0:8e:b3:96:8d:15:3f:65:f5: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F4:6E:00:AC:FB:59:01:EE:BB:85:87:94:04:9F:CD:BF:38:48:2F X509v3 Authority Key Identifier: keyid:0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9b:68:75:5d:5b:d9:bf:bf:0f:5a:c2:fe:6a:66:10:d1:49: 21:9c:35:81:74:cf:d8:f9:4f:39:d7:b5:3d:a1:c8:4d:87:0f: 33:46:ee:ec:0d:b7:02:fa:fa:a4:70:a5:b7:ef:fb:31:4d:fd: f6:ef:0c:cb:b1:be:18:12:ba:b2:3f:17:7f:9c:ae:d7:7f:55: 3f:3c:49:5b:d8:35:44:7e:39:81:6d:d9:b8:be:01:99:e6:c8: 84:3f:35:98:f5:b1:b5:b4:25:df:c9:c7:e1:60:9c:86:7d:38: 84:46:6e:70:96:fa:7e:64:38:97:2a:ac:1c:fe:52:5a:49:69: c6:b5:72:a9:30:21:56:fe:a2:92:60:ac:2b:1a:84:86:72:9b: a2:4d:55:05:15:44:17:75:73:c8:ac:3c:47:04:6a:47:d1:2a: 47:a0:c2:26:c0:0e:96:bb:70:08:69:f7:ef:46:06:ff:dc:ac: 48:6c:99:44:31:45:ee:52:e8:a3:ab:8b:b3:16:78:dc:d6:f0: 71:cf:ed:6a:ff:d9:a4:05:aa:df:6e:bf:95:90:80:06:cd:16: af:82:e1:4d:99:83:0c:a4:ed:55:f9:f2:e5:26:b7:97:e6:75: 20:93:52:0f:34:c9:cd:e1:77:59:c4:4a:e3:91:0e:f6:d5:89: 34:80:fe:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVnB/qR0VPCmeTKUZwg9I74AoYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUExMDhE OUE2NDBGNjAeFw0yNjA5MjIwNDI2NThaFw0yNjA5MjMwNzE1NThaMDMxMTAvBgNV BAMTKEU1RjQ2RTAwQUNGQjU5MDFFRUJCODU4Nzk0MDQ5RkNEQkYzODQ4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTSG4AmoN15rJ37wECBJ8ruuaC Jc+sp2p5RQ0p/TXDfjQxKo4B52NmYif/Vma1VnQci5wh3aiZEfZ3zIXO6UqrWxIQ pF/axAchZIe/QHjQnt6XuCDS/d3sf8vHDW/AnoClJnXpjAef2YrEVrKLb7UWOWfv F8MMnOPaw1pVtomJ/uuXpEl1aZMxzHz7BByAL5Hytn1akteaF6i0SVSdH4Fe3tZJ mmNFw8ZFmdMDdIRLrGsLn09q+mFpJEDr1NAF7wdOcah1Lfph/Oku4GWQPYtwH9Wv clD2mrSOAN2mNQ0hjietuRdsv7wQrGE3s1va5BwatsHoi6COs5aNFT9l9VIlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5fRuAKz7WQHuu4WHlASfzb84SC8wHwYDVR0j BBgwFoAUDpJ86c+uAZWXAdi6oxqhCNmmQPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE0OTNiZTEtZjA2NC00OWU2LTk0OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlD RkFFMDE5NTk3MDFEOEJBQTMxQUExMDhEOUE2NDBGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTkyN0NFOUNGQUUwMTk1OTcwMUQ4QkFBMzFBQTEwOEQ5QTY0 MEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUEx MDhEOUE2NDBGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2baHVdW9m/vw9awv5qZhDRSSGcNYF0z9j5 TznXtT2hyE2HDzNG7uwNtwL6+qRwpbfv+zFN/fbvDMuxvhgSurI/F3+crtd/VT88 SVvYNUR+OYFt2bi+AZnmyIQ/NZj1sbW0Jd/Jx+FgnIZ9OIRGbnCW+n5kOJcqrBz+ UlpJaca1cqkwIVb+opJgrCsahIZym6JNVQUVRBd1c8isPEcEakfRKkegwibADpa7 cAhp9+9GBv/crEhsmUQxRe5S6KOri7MWeNzW8HHP7Wr/2aQFqt9uv5WQgAbNFq+C 4U2Zgwyk7VX58uUmt5fmdSCTUg80yc3hd1nESuORDvbViTSA/mQ= -----END CERTIFICATE-----Generated at Tue Sep 22 12:53:16 2026 by rpki-client