$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft File: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft (raw, json) Hash identifier: nHMnO7S9vwakueW5nJrNY0zRSf8BgpiixXBsDEMWRzY= Subject key identifier: 99:0D:9C:CA:10:9A:A7:88:1A:2C:38:78:58:E4:4F:23:62:A7:FF:54 Authority key identifier: 0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 Certificate issuer: /CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Certificate serial: 10C26C7555A6BFDFCD96048E2E0CA7E1E5A829E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 00:56:57 +0000 Manifest this update: Thu 24 Sep 2026 00:51:57 +0000 Manifest next update: Fri 25 Sep 2026 03:25:57 +0000 Files and hashes: 1: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: Gc3lbfky0bPOcbJ53df4bfJv1IIZalpAJC7Z0mwM6C8=) 2: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: Kwk5pernXmim9KIGTT8s13y4BcSyxFt8vOqda3e394A=) 3: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl (hash: zXFEb9C4hgkhX661oY9kdjyz0Nym1vHLvfnBqPURcJw=) 4: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: mwSnVoqEhlM2lDBuSkv9Lk0pH8PdVGL8EzeI43YHgNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c2:6c:75:55:a6:bf:df:cd:96:04:8e:2e:0c:a7:e1:e5:a8:29:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Validity Not Before: Sep 24 00:51:57 2026 GMT Not After : Sep 25 03:25:57 2026 GMT Subject: CN=990D9CCA109AA7881A2C387858E44F2362A7FF54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ea:30:11:53:d6:4d:e1:83:cc:7a:14:f6:0a: 5a:74:36:be:77:7f:ea:a6:48:c5:45:b1:4e:1a:a8: 98:9b:a3:47:e4:a2:d9:90:91:26:38:d8:94:b1:54: d2:0d:64:e8:0a:d4:ec:a9:67:e5:db:0c:c9:80:66: 6d:d1:f3:58:e0:2f:8c:e9:63:e9:75:34:96:06:ee: 23:5f:e9:68:74:69:05:93:27:5e:92:9d:c1:ae:82: 74:21:da:af:3e:02:20:7a:25:8f:c2:ae:ca:0e:fb: 7b:d0:80:77:c0:86:7a:f1:cd:17:cc:ad:5e:cb:32: c9:19:a0:18:e3:2e:9f:48:93:b7:cb:9e:c1:e7:7c: 3b:b2:a2:7f:da:e0:37:3e:b5:b4:d1:35:4d:80:97: 9e:a4:43:c3:fc:04:7f:71:d2:3d:fa:8b:28:44:14: 1d:fd:d1:e7:9b:82:e0:9d:dd:9c:1d:f4:64:4a:15: a3:c4:00:0e:67:90:b7:63:e0:e6:6f:7a:06:1a:3c: 49:59:83:1d:7c:d0:b7:d7:06:22:6a:7d:6c:c2:32: 96:65:e7:6d:ad:a1:2d:53:0c:d5:ec:6e:5c:9b:68: 51:25:fc:81:69:fe:8f:75:02:03:c5:ba:4b:05:7e: 41:29:91:23:61:f7:77:09:63:f5:1e:4a:c1:a8:b6: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0D:9C:CA:10:9A:A7:88:1A:2C:38:78:58:E4:4F:23:62:A7:FF:54 X509v3 Authority Key Identifier: keyid:0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:49:66:9c:70:cd:b8:9b:ad:87:fa:1b:fc:1b:2d:14:c4:59: b8:74:14:82:69:bf:04:aa:a1:2b:59:a4:86:18:a8:ad:b0:67: cd:00:c9:69:0d:56:22:cb:eb:14:2f:8c:00:1f:17:a0:30:77: 48:7b:6b:2d:cc:2c:5d:69:f9:d5:56:42:b2:b1:04:9a:61:fa: bb:c1:0a:a2:6a:49:3e:df:d2:08:77:67:f5:86:c5:43:9b:d0: be:9f:a5:46:16:c0:9f:7f:f1:c0:c8:78:fa:b1:e9:4e:95:f5: f2:af:3f:d0:37:5f:f8:d4:e5:a1:70:1b:63:c5:53:90:4e:ae: 78:c4:af:0d:aa:74:97:4a:a6:1c:ab:08:d9:f8:ce:be:20:ec: 8e:c3:a9:d6:dd:6c:da:02:87:8e:90:0a:15:b8:82:42:e3:6c: 42:a6:03:c4:c0:fa:6a:39:75:fe:78:1f:9a:43:48:a0:8b:15: dd:e6:83:be:5c:48:60:8a:ec:01:89:e1:bd:97:cb:1e:dd:8e: bd:f1:09:1a:61:87:d6:62:4c:0e:77:28:b8:1b:f4:14:64:6d: 0b:66:6b:87:62:81:0d:d7:b8:de:68:9d:90:27:3d:22:eb:73: e3:5f:ef:d6:84:61:8d:07:c9:4c:97:87:11:24:5d:b6:74:b2: 05:88:3f:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEMJsdVWmv9/NlgSOLgyn4eWoKeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4 MjZBREY3MTAeFw0yNjA5MjQwMDUxNTdaFw0yNjA5MjUwMzI1NTdaMDMxMTAvBgNV BAMTKDk5MEQ5Q0NBMTA5QUE3ODgxQTJDMzg3ODU4RTQ0RjIzNjJBN0ZGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46jARU9ZN4YPMehT2Clp0Nr53 f+qmSMVFsU4aqJibo0fkotmQkSY42JSxVNINZOgK1OypZ+XbDMmAZm3R81jgL4zp Y+l1NJYG7iNf6Wh0aQWTJ16SncGugnQh2q8+AiB6JY/CrsoO+3vQgHfAhnrxzRfM rV7LMskZoBjjLp9Ik7fLnsHnfDuyon/a4Dc+tbTRNU2Al56kQ8P8BH9x0j36iyhE FB390eebguCd3Zwd9GRKFaPEAA5nkLdj4OZvegYaPElZgx180LfXBiJqfWzCMpZl 522toS1TDNXsblybaFEl/IFp/o91AgPFuksFfkEpkSNh93cJY/UeSsGotmHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmQ2cyhCap4gaLDh4WORPI2Kn/1QwHwYDVR0j BBgwFoAUDqGuL8wxlYEISWb85yDguYJq33EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdjOGEwYzMtMzdmNS00NjY3LWE0MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZD QzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4MjZBREY3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRUExQUUyRkNDMzE5NTgxMDg0OTY2RkNFNzIwRTBCOTgyNkFE RjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUw Qjk4MjZBREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERJZpxwzbibrYf6G/wbLRTEWbh0FIJpvwSq oStZpIYYqK2wZ80AyWkNViLL6xQvjAAfF6Awd0h7ay3MLF1p+dVWQrKxBJph+rvB CqJqST7f0gh3Z/WGxUOb0L6fpUYWwJ9/8cDIePqx6U6V9fKvP9A3X/jU5aFwG2PF U5BOrnjErw2qdJdKphyrCNn4zr4g7I7DqdbdbNoCh46QChW4gkLjbEKmA8TA+mo5 df54H5pDSKCLFd3mg75cSGCK7AGJ4b2Xyx7djr3xCRphh9ZiTA53KLgb9BRkbQtm a4digQ3XuN5onZAnPSLrc+Nf79aEYY0HyUyXhxEkXbZ0sgWIP/U= -----END CERTIFICATE-----Generated at Thu Sep 24 18:26:27 2026 by rpki-client