$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/0E274BF6680396133EAD61666AD7FF960EAD50D2.mft File: 0E274BF6680396133EAD61666AD7FF960EAD50D2.mft (raw, json) Hash identifier: PRo7G09c/3s/IygvQZWsgZAO3aLQG93LoZ8YbYv0RoI= Subject key identifier: 7D:90:50:D8:D9:80:E2:A5:48:15:92:D2:A6:25:8A:6F:33:44:D7:29 Authority key identifier: 0E:27:4B:F6:68:03:96:13:3E:AD:61:66:6A:D7:FF:96:0E:AD:50:D2 Certificate issuer: /CN=0E274BF6680396133EAD61666AD7FF960EAD50D2 Certificate serial: 5BBC2885020738559639D545E759F3E584688295 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E274BF6680396133EAD61666AD7FF960EAD50D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/0E274BF6680396133EAD61666AD7FF960EAD50D2.mft Manifest number: BF Signing time: Mon 21 Sep 2026 15:15:30 +0000 Manifest this update: Mon 21 Sep 2026 15:10:30 +0000 Manifest next update: Tue 22 Sep 2026 16:26:30 +0000 Files and hashes: 1: 0E274BF6680396133EAD61666AD7FF960EAD50D2.crl (hash: KSGm9DfSVYcSSM0Qw1dSYXKvvlHD+VqbUk/zWlpmmAI=) 2: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: MRHndBBdsLEwG4oog/FBq8u9fiR6vMd07tHXmLMrq4E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/0E274BF6680396133EAD61666AD7FF960EAD50D2.crl rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/0E274BF6680396133EAD61666AD7FF960EAD50D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E274BF6680396133EAD61666AD7FF960EAD50D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:bc:28:85:02:07:38:55:96:39:d5:45:e7:59:f3:e5:84:68:82:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E274BF6680396133EAD61666AD7FF960EAD50D2 Validity Not Before: Sep 21 15:10:30 2026 GMT Not After : Sep 22 16:26:30 2026 GMT Subject: CN=7D9050D8D980E2A5481592D2A6258A6F3344D729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a5:0b:0e:82:08:f1:34:6e:0d:eb:ce:e5:8a: 74:3c:2c:a7:44:3b:f1:14:6a:95:eb:db:cc:5b:8d: 7d:ab:16:10:12:34:7f:8e:a6:fd:37:18:6f:42:fc: ae:a1:67:60:0d:28:54:43:99:87:45:26:d7:7e:4d: be:b4:91:55:77:8c:25:b6:25:5f:1a:5e:1e:36:bc: c7:91:d4:d1:61:61:58:65:7d:3b:4f:06:3f:1f:34: 43:00:87:f8:2c:7a:d8:e6:f7:8a:8b:52:16:5c:78: 6c:20:0e:f8:23:e9:85:e9:cb:1c:f5:6e:cb:17:cf: c3:52:ca:8b:cc:6c:2a:8f:a6:b8:c6:64:97:b9:bd: a8:50:78:15:7b:aa:4b:8f:fb:b9:9c:f8:79:6e:c9: f5:d4:21:1e:de:3c:2f:e5:ec:d2:ab:7a:27:38:71: ad:d6:8c:46:5b:c1:91:02:27:1f:03:eb:9e:78:e8: 23:d6:38:a1:a5:b8:eb:0a:21:f9:1e:da:32:39:fe: f2:9d:d6:c7:f4:5a:c5:75:9e:44:3f:49:45:94:7e: 5a:71:22:c0:99:b0:ef:4c:4c:1f:e5:42:3a:84:b9: 42:ab:4e:e8:88:52:70:26:2b:dc:66:2b:79:c4:f6: 43:ae:8b:2a:04:af:a1:61:e9:de:a2:fb:67:f7:2f: ed:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:90:50:D8:D9:80:E2:A5:48:15:92:D2:A6:25:8A:6F:33:44:D7:29 X509v3 Authority Key Identifier: keyid:0E:27:4B:F6:68:03:96:13:3E:AD:61:66:6A:D7:FF:96:0E:AD:50:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/0E274BF6680396133EAD61666AD7FF960EAD50D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E274BF6680396133EAD61666AD7FF960EAD50D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/0E274BF6680396133EAD61666AD7FF960EAD50D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:a2:ea:c3:40:17:24:91:0b:91:7a:49:d5:0e:4d:ff:46:46: 96:52:4a:e3:16:a5:c6:79:d4:b9:39:41:44:ad:7b:ce:49:2c: e1:c8:91:bc:a5:9f:1f:55:e9:5e:8b:5e:38:ea:8f:3a:56:d3: 9c:b4:69:ae:fc:8d:bd:f5:7e:27:60:ce:cc:7d:83:7c:09:a9: 40:e1:35:a6:e2:98:65:ff:ef:ad:bf:7c:19:2e:f8:a8:bc:e4: f7:99:c9:62:1d:39:a6:81:9d:3b:24:c4:c4:f0:df:5b:1a:08: 29:bb:dc:d9:a9:c9:15:83:2a:1e:ba:9d:36:9f:35:0e:08:9d: 0a:80:33:0c:64:74:e5:1b:c2:3b:e4:7f:46:1b:c2:a3:4d:7a: 93:3e:be:69:f1:ca:62:8c:71:26:81:26:83:22:b1:3b:6c:59: f1:41:35:77:76:ea:4b:c2:e2:f6:ec:26:14:a0:fa:1e:ac:c3: 53:b7:3f:41:e9:b4:28:7d:4f:2a:03:86:21:9d:46:e3:22:f8: 47:e1:f1:2e:17:9b:47:45:ad:9c:9d:b1:2b:1c:9a:dd:f3:ea: 96:d4:2b:f1:97:30:c8:b2:04:eb:dd:e6:31:90:07:57:a3:e0: 10:18:8d:01:13:26:fa:5c:1f:9b:60:9a:79:14:c4:bf:97:92: b2:a0:91:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7wohQIHOFWWOdVF51nz5YRogpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyNzRCRjY2ODAzOTYxMzNFQUQ2MTY2NkFEN0ZGOTYw RUFENTBEMjAeFw0yNjA5MjExNTEwMzBaFw0yNjA5MjIxNjI2MzBaMDMxMTAvBgNV BAMTKDdEOTA1MEQ4RDk4MEUyQTU0ODE1OTJEMkE2MjU4QTZGMzM0NEQ3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdpQsOggjxNG4N687linQ8LKdE O/EUapXr28xbjX2rFhASNH+Opv03GG9C/K6hZ2ANKFRDmYdFJtd+Tb60kVV3jCW2 JV8aXh42vMeR1NFhYVhlfTtPBj8fNEMAh/gsetjm94qLUhZceGwgDvgj6YXpyxz1 bssXz8NSyovMbCqPprjGZJe5vahQeBV7qkuP+7mc+HluyfXUIR7ePC/l7NKreic4 ca3WjEZbwZECJx8D65546CPWOKGluOsKIfke2jI5/vKd1sf0WsV1nkQ/SUWUflpx IsCZsO9MTB/lQjqEuUKrTuiIUnAmK9xmK3nE9kOuiyoEr6Fh6d6i+2f3L+0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfZBQ2NmA4qVIFZLSpiWKbzNE1ykwHwYDVR0j BBgwFoAUDidL9mgDlhM+rWFmatf/lg6tUNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZThmM2IzN2QtZmU0ZC00MzZkLWE5M2ItZTFmNmZjYzlmYzRkLzAvMEUyNzRCRjY2 ODAzOTYxMzNFQUQ2MTY2NkFEN0ZGOTYwRUFENTBEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTI3NEJGNjY4MDM5NjEzM0VBRDYxNjY2QUQ3RkY5NjBFQUQ1 MEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvMEUyNzRCRjY2ODAzOTYxMzNFQUQ2MTY2NkFEN0ZG OTYwRUFENTBEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGi6sNAFySRC5F6SdUOTf9GRpZSSuMWpcZ5 1Lk5QUSte85JLOHIkbylnx9V6V6LXjjqjzpW05y0aa78jb31fidgzsx9g3wJqUDh NabimGX/762/fBku+Ki85PeZyWIdOaaBnTskxMTw31saCCm73NmpyRWDKh66nTaf NQ4InQqAMwxkdOUbwjvkf0YbwqNNepM+vmnxymKMcSaBJoMisTtsWfFBNXd26kvC 4vbsJhSg+h6sw1O3P0HptCh9TyoDhiGdRuMi+Efh8S4Xm0dFrZydsSscmt3z6pbU K/GXMMiyBOvd5jGQB1ej4BAYjQETJvpcH5tgmnkUxL+XkrKgka4= -----END CERTIFICATE-----Generated at Mon Sep 21 22:15:59 2026 by rpki-client