$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft File: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft (raw, json) Hash identifier: 3DUUNiw+DpySFAVMYhR0Q3pvCguOdLc2k1QKDeCa75U= Subject key identifier: 46:5E:7A:DC:28:DC:AC:DF:16:31:E7:25:C1:07:F7:C5:53:D0:9C:6F Authority key identifier: 0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 Certificate issuer: /CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Certificate serial: 0B52E4358C11D21C74D4E6C96AC804375C9A7609 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft Manifest number: BD Signing time: Sun 20 Sep 2026 17:38:47 +0000 Manifest this update: Sun 20 Sep 2026 17:33:47 +0000 Manifest next update: Mon 21 Sep 2026 20:44:47 +0000 Files and hashes: 1: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl (hash: S+zpNwZNxt+Untpv+NmEmmuAmmQ8On5Zg7gVFOJw7jw=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: ccmy2LH8bOvIWU+GPrMO4FL2775rB00lVz7jkl8O1gM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:52:e4:35:8c:11:d2:1c:74:d4:e6:c9:6a:c8:04:37:5c:9a:76:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Validity Not Before: Sep 20 17:33:47 2026 GMT Not After : Sep 21 20:44:47 2026 GMT Subject: CN=465E7ADC28DCACDF1631E725C107F7C553D09C6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d5:5f:33:d4:ea:22:1b:f5:6a:c8:75:da:e4: ce:de:f8:85:f8:55:f4:8d:b0:70:61:54:0f:78:8c: 5a:11:bd:6e:29:ae:3b:7e:72:0a:f8:37:6e:08:8d: d8:02:7c:11:75:1d:d1:9c:f9:52:66:f5:19:57:2d: b4:74:c1:1f:85:4e:5f:e3:1b:37:65:45:38:a4:7d: b1:18:58:64:fb:1a:47:ca:59:55:56:7a:27:ed:c7: 44:c3:ea:3c:f4:79:ce:d4:17:13:fa:76:20:7d:75: fe:54:ec:c3:05:bd:f8:40:cc:56:be:ef:50:46:6b: ae:7e:7c:9f:0e:b2:76:93:b1:cc:64:fb:7a:79:c9: 0e:56:6d:2e:da:7f:59:71:2b:a0:ee:b1:f4:86:48: a0:be:b5:76:b5:00:f7:72:08:fc:42:8a:e0:ef:25: 7e:1e:17:d1:b7:86:1b:90:05:96:b3:2e:64:d3:21: d9:47:67:20:15:e4:d6:89:f6:0c:63:a3:57:f5:18: 9d:65:95:41:b8:ef:bf:75:5a:20:3c:9c:86:35:91: 6b:8c:71:ab:b3:42:fa:79:b8:e9:78:c9:46:ce:c0: ad:fd:cb:e3:0f:89:dc:fa:7f:bc:8e:de:66:8f:c6: ba:fe:4a:47:a2:4d:4f:62:e0:44:8b:cb:c2:28:a6: 82:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5E:7A:DC:28:DC:AC:DF:16:31:E7:25:C1:07:F7:C5:53:D0:9C:6F X509v3 Authority Key Identifier: keyid:0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:ae:63:24:45:ca:98:08:e3:ce:0c:33:e1:7a:9d:06:11:99: d1:98:a6:c0:87:c8:23:a7:05:73:59:98:5c:20:dd:1e:a1:82: ef:2b:57:82:7e:4e:0f:52:d1:78:91:56:8d:b2:a9:b9:8d:3e: 27:c9:9a:dc:55:aa:a2:76:0e:39:34:9b:5a:41:b3:f0:29:c5: 06:bd:78:27:1d:64:a2:9a:94:a1:b9:53:67:cf:e4:e9:28:cd: d1:0c:ab:b0:34:46:2a:8a:dc:1b:22:31:e0:4f:e8:14:bb:b4: 4b:cc:da:fa:89:fd:ec:31:8c:fe:bd:7c:2a:b3:04:17:c2:27: 07:4c:9a:ab:32:05:38:1f:05:a1:29:ae:32:7d:52:ce:74:3e: 3d:3e:1d:98:86:91:7b:3f:9b:01:84:7d:0d:b7:e1:a0:31:50: d2:22:d4:a0:62:13:fb:c3:88:90:58:2a:90:a9:71:bd:93:5f: c7:85:a6:78:0a:ec:62:60:a5:a2:aa:36:bc:05:4b:9d:04:e8: 71:3d:f0:5d:5c:77:42:57:cd:aa:ab:c3:d5:8f:ad:a7:8a:af: 7a:b9:ae:48:ff:ce:ea:41:2b:67:00:67:8b:b8:08:a5:f0:21: ed:6d:7c:98:0e:fe:de:71:da:e9:f8:b3:c7:0d:c3:c0:d4:6d: aa:ec:b0:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC1LkNYwR0hx01ObJasgEN1yadgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcw QUFDRThGNjAeFw0yNjA5MjAxNzMzNDdaFw0yNjA5MjEyMDQ0NDdaMDMxMTAvBgNV BAMTKDQ2NUU3QURDMjhEQ0FDREYxNjMxRTcyNUMxMDdGN0M1NTNEMDlDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1V8z1OoiG/VqyHXa5M7e+IX4 VfSNsHBhVA94jFoRvW4prjt+cgr4N24IjdgCfBF1HdGc+VJm9RlXLbR0wR+FTl/j GzdlRTikfbEYWGT7GkfKWVVWeiftx0TD6jz0ec7UFxP6diB9df5U7MMFvfhAzFa+ 71BGa65+fJ8OsnaTscxk+3p5yQ5WbS7af1lxK6DusfSGSKC+tXa1APdyCPxCiuDv JX4eF9G3hhuQBZazLmTTIdlHZyAV5NaJ9gxjo1f1GJ1llUG47791WiA8nIY1kWuM cauzQvp5uOl4yUbOwK39y+MPidz6f7yO3maPxrr+SkeiTU9i4ESLy8IopoIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURl563CjcrN8WMeclwQf3xVPQnG8wHwYDVR0j BBgwFoAUCp5g9Kx6xx4kaJNbyl0Nlwqs6PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRB QzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcwQUFDRThGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQTlFNjBGNEFDN0FDNzFFMjQ2ODkzNUJDQTVEMEQ5NzBBQUNF OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBE OTcwQUFDRThGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuuYyRFypgI484MM+F6nQYRmdGYpsCHyCOn BXNZmFwg3R6hgu8rV4J+Tg9S0XiRVo2yqbmNPifJmtxVqqJ2Djk0m1pBs/ApxQa9 eCcdZKKalKG5U2fP5OkozdEMq7A0RiqK3BsiMeBP6BS7tEvM2vqJ/ewxjP69fCqz BBfCJwdMmqsyBTgfBaEprjJ9Us50Pj0+HZiGkXs/mwGEfQ234aAxUNIi1KBiE/vD iJBYKpCpcb2TX8eFpngK7GJgpaKqNrwFS50E6HE98F1cd0JXzaqrw9WPraeKr3q5 rkj/zupBK2cAZ4u4CKXwIe1tfJgO/t5x2un4s8cNw8DUbarssJ4= -----END CERTIFICATE-----Generated at Mon Sep 21 03:23:34 2026 by rpki-client