$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft File: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft (raw, json) Hash identifier: TitX+WxLPSnT5v4NCHpDV/boeACvkHUbhROlJXahaqA= Subject key identifier: 50:AB:1E:D0:44:7A:B2:5B:8D:25:6C:5B:F1:A5:78:FB:10:C4:80:B8 Authority key identifier: 0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 Certificate issuer: /CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Certificate serial: 3E0C1B4306117983DFFA14A4F8DC26E6BC622E3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft Manifest number: BD Signing time: Mon 21 Sep 2026 08:06:39 +0000 Manifest this update: Mon 21 Sep 2026 08:01:39 +0000 Manifest next update: Tue 22 Sep 2026 09:51:39 +0000 Files and hashes: 1: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl (hash: j8KJN0nf6z32MDqRGJMFrkNB9P6Od/0+LqF3vFkweJQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0c:1b:43:06:11:79:83:df:fa:14:a4:f8:dc:26:e6:bc:62:2e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Validity Not Before: Sep 21 08:01:39 2026 GMT Not After : Sep 22 09:51:39 2026 GMT Subject: CN=50AB1ED0447AB25B8D256C5BF1A578FB10C480B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:24:93:79:3b:a3:bc:1d:b4:f5:7e:fa:b9: ff:3c:d6:95:50:28:0f:0e:a4:db:f7:fb:da:db:7c: 82:9d:b6:85:2c:bb:b5:9f:59:d8:0d:af:d3:36:e0: aa:96:18:52:5f:32:6b:32:52:d1:7c:7a:71:b8:52: bd:1a:2e:a3:ef:96:c6:36:72:44:70:9c:b3:d7:2b: 75:32:32:0c:ff:06:e2:af:9f:91:7c:d1:76:0b:12: 0a:1e:ac:20:47:33:d2:68:74:0a:35:c1:fa:36:11: f9:90:f0:e1:6a:38:b9:8f:48:26:9d:93:cd:77:69: 97:70:58:46:d2:eb:0c:14:20:b1:03:2c:38:25:51: 7e:5f:25:fa:18:a7:cf:e3:71:8e:fd:22:dd:57:89: 70:44:9e:c0:a0:64:a0:a5:5d:88:26:b6:22:fa:f9: ef:0b:69:c5:70:c1:ad:30:19:ab:4d:6a:a6:8c:2b: 60:10:2d:87:68:44:08:1d:e4:40:ab:a8:aa:93:a7: 42:1e:ed:ce:14:40:bc:5d:23:98:25:dc:8e:3d:1c: cb:15:be:44:0f:f8:66:0b:d1:8a:99:30:a8:74:cd: 5e:0a:d3:91:2b:d8:cd:f1:bf:20:de:ee:3f:04:9f: 14:d0:84:22:a1:0c:3e:70:62:e5:ad:34:4e:fe:c0: c2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AB:1E:D0:44:7A:B2:5B:8D:25:6C:5B:F1:A5:78:FB:10:C4:80:B8 X509v3 Authority Key Identifier: keyid:0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:11:97:02:32:bd:ec:ca:76:04:7b:23:12:a2:f9:b1:80:4a: a3:f6:09:72:76:28:0c:68:46:2d:30:c4:7c:0e:a8:36:6e:66: 36:88:ff:b1:78:af:dc:50:17:e2:77:2a:78:8c:db:6a:8b:d1: 89:6e:26:e6:94:3a:cd:61:cb:12:38:7a:71:31:49:30:3e:60: 32:c4:c2:d9:e8:92:78:f3:5c:7d:45:e6:b0:ca:57:7f:6d:34: 05:96:9a:78:dc:9d:76:9b:0a:f8:ca:ab:48:6f:23:65:18:66: 51:1f:11:1e:9f:68:5e:70:e3:0c:b9:2f:89:2f:fc:a5:7d:e9: 99:76:6b:44:0c:f1:8e:e4:86:98:a3:50:c6:4a:73:f7:be:99: e6:9e:43:6a:91:8c:53:12:c2:d3:b5:8e:84:85:86:1a:11:10: 69:43:b3:ae:43:c2:bb:4c:23:72:2d:72:fb:b9:58:71:a8:32: 16:ba:d6:5a:f3:f9:36:b9:3e:70:9b:75:1a:a4:7e:f5:fb:f3: 0f:be:0c:72:e1:0f:31:c4:02:b0:20:48:21:0d:00:19:ef:cb: b6:05:46:e9:9f:be:53:e7:b9:75:ab:5a:24:ae:4f:57:dd:eb: ff:bd:5f:c5:4c:6a:29:24:16:b5:59:38:b4:8b:a6:4d:91:9a: bf:5a:f2:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgwbQwYReYPf+hSk+Nwm5rxiLj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZBMDND NjBBRUNEMzAeFw0yNjA5MjEwODAxMzlaFw0yNjA5MjIwOTUxMzlaMDMxMTAvBgNV BAMTKDUwQUIxRUQwNDQ3QUIyNUI4RDI1NkM1QkYxQTU3OEZCMTBDNDgwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4aSSTeTujvB209X76uf881pVQ KA8OpNv3+9rbfIKdtoUsu7WfWdgNr9M24KqWGFJfMmsyUtF8enG4Ur0aLqPvlsY2 ckRwnLPXK3UyMgz/BuKvn5F80XYLEgoerCBHM9JodAo1wfo2EfmQ8OFqOLmPSCad k813aZdwWEbS6wwUILEDLDglUX5fJfoYp8/jcY79It1XiXBEnsCgZKClXYgmtiL6 +e8LacVwwa0wGatNaqaMK2AQLYdoRAgd5ECrqKqTp0Ie7c4UQLxdI5gl3I49HMsV vkQP+GYL0YqZMKh0zV4K05Er2M3xvyDe7j8EnxTQhCKhDD5wYuWtNE7+wMKFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUKse0ER6sluNJWxb8aV4+xDEgLgwHwYDVR0j BBgwFoAUDn8cOkEYl0mOGc5kxcJqA8YK7NMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEzZGUzZWMtNGQzYy00NDAyLWE3YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0 MTE4OTc0OThFMTlDRTY0QzVDMjZBMDNDNjBBRUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRTdGMUMzQTQxMTg5NzQ5OEUxOUNFNjRDNUMyNkEwM0M2MEFF Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZB MDNDNjBBRUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIRlwIyvezKdgR7IxKi+bGASqP2CXJ2KAxo Ri0wxHwOqDZuZjaI/7F4r9xQF+J3KniM22qL0YluJuaUOs1hyxI4enExSTA+YDLE wtnoknjzXH1F5rDKV39tNAWWmnjcnXabCvjKq0hvI2UYZlEfER6faF5w4wy5L4kv /KV96Zl2a0QM8Y7khpijUMZKc/e+meaeQ2qRjFMSwtO1joSFhhoREGlDs65DwrtM I3Itcvu5WHGoMha61lrz+Ta5PnCbdRqkfvX78w++DHLhDzHEArAgSCENABnvy7YF RumfvlPnuXWrWiSuT1fd6/+9X8VMaikkFrVZOLSLpk2Rmr9a8k0= -----END CERTIFICATE-----Generated at Mon Sep 21 11:43:41 2026 by rpki-client