$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft File: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft (raw, json) Hash identifier: r4xHQQY8r9HcBlDLRF3scCMfq0PWX3ZTp1lti3S6I3M= Subject key identifier: 90:3C:8F:82:76:21:4C:75:9C:DB:19:BF:9C:DF:A6:A6:2A:4C:F8:C9 Authority key identifier: 0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B Certificate issuer: /CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Certificate serial: 69EEEC84A539AFF02B53410DCE3866F41A690687 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 13:12:10 +0000 Manifest this update: Thu 24 Sep 2026 13:07:10 +0000 Manifest next update: Fri 25 Sep 2026 15:27:10 +0000 Files and hashes: 1: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl (hash: bhsxx88c+3SD8jZqEk3ftm5hqzFvMioGvplxNyhN0sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ee:ec:84:a5:39:af:f0:2b:53:41:0d:ce:38:66:f4:1a:69:06:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Validity Not Before: Sep 24 13:07:10 2026 GMT Not After : Sep 25 15:27:10 2026 GMT Subject: CN=903C8F8276214C759CDB19BF9CDFA6A62A4CF8C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:48:06:cb:6d:9f:21:65:98:cf:df:63:4e:2c: d0:bf:62:77:5d:62:43:27:50:a7:e1:1a:61:b8:fd: ac:38:d8:0e:a6:2b:dc:a5:d0:4c:f6:62:59:06:e0: 9c:6a:66:2a:8b:5b:d2:93:7d:06:0d:2d:91:fe:d4: e0:b3:cb:8e:ed:7b:61:44:21:1e:b3:01:33:8c:85: 30:3b:81:67:a2:a2:de:03:ee:25:10:4b:18:af:6b: 57:01:41:86:00:33:10:36:31:e4:6d:ad:a0:72:e7: c9:92:79:e9:06:c3:3c:ef:4f:17:c0:dc:e6:bf:06: 4c:b5:79:9f:97:3a:f2:a8:13:e3:7b:f6:95:36:eb: 4c:48:01:bf:d2:dc:bf:96:40:53:94:6a:08:b2:5d: 73:67:09:c3:86:b3:27:ee:22:20:e5:72:65:23:b1: fc:9d:15:65:db:16:06:69:16:85:56:bb:f7:5b:7d: c7:1e:f1:a9:83:17:37:a9:28:02:98:dc:6b:0f:28: 08:cc:fe:c1:77:0e:14:a5:39:c1:47:92:2c:56:81: d0:60:97:d7:fe:10:e2:d9:dd:a6:be:ab:8a:d3:8c: 85:51:90:75:50:01:bb:be:0e:e4:9f:e0:bb:41:5a: fd:c5:5a:9f:4d:03:0d:c0:69:0b:87:a4:c0:11:53: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3C:8F:82:76:21:4C:75:9C:DB:19:BF:9C:DF:A6:A6:2A:4C:F8:C9 X509v3 Authority Key Identifier: keyid:0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:0d:a0:73:e4:64:72:6f:93:ab:44:a4:89:0d:7c:26:ad:28: c7:91:84:68:ac:ec:7b:d9:3d:da:c3:fd:f9:c0:3f:83:f2:33: 1d:4e:ab:90:9b:de:e0:e9:73:28:58:fc:25:32:44:ab:89:4f: cd:17:ca:55:0d:f2:2f:9f:93:22:dc:b2:4d:c2:5b:f3:a6:dc: a5:b8:89:60:4c:42:8b:fd:65:7d:8e:f6:03:64:f2:3b:d6:e3: 76:49:f0:d6:c4:3c:ce:8c:ca:2b:60:23:f8:26:2d:70:38:2e: 2a:d4:30:d7:d1:9c:10:81:03:ac:19:f9:d4:2c:9c:12:f6:74: e0:98:cb:c8:a7:5c:5d:d9:69:65:52:d5:ca:cd:a6:45:cb:8a: c3:de:a4:49:10:9f:a9:c9:8a:bf:b3:98:89:0b:55:e4:0a:a3: 80:86:b0:dd:d5:5b:26:44:47:f5:b8:f4:86:8b:70:d3:0c:3c: a7:65:6c:76:e3:60:7d:d5:ab:38:70:dc:47:6d:64:f9:03:ee: f4:bf:24:a9:fb:4f:12:05:3d:ed:1c:1a:a8:77:c4:13:9c:69: e7:c7:fc:36:13:dc:37:64:10:1d:e2:7b:e7:1a:95:c3:32:ef: 76:56:73:ab:53:2a:2c:8b:ae:1b:a2:0f:60:ed:46:a9:7e:20: 3a:3e:20:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUae7shKU5r/ArU0ENzjhm9BppBocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0UwOURD RDRDOEM2QjAeFw0yNjA5MjQxMzA3MTBaFw0yNjA5MjUxNTI3MTBaMDMxMTAvBgNV BAMTKDkwM0M4RjgyNzYyMTRDNzU5Q0RCMTlCRjlDREZBNkE2MkE0Q0Y4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSAbLbZ8hZZjP32NOLNC/Yndd YkMnUKfhGmG4/aw42A6mK9yl0Ez2YlkG4JxqZiqLW9KTfQYNLZH+1OCzy47te2FE IR6zATOMhTA7gWeiot4D7iUQSxiva1cBQYYAMxA2MeRtraBy58mSeekGwzzvTxfA 3Oa/Bky1eZ+XOvKoE+N79pU260xIAb/S3L+WQFOUagiyXXNnCcOGsyfuIiDlcmUj sfydFWXbFgZpFoVWu/dbfcce8amDFzepKAKY3GsPKAjM/sF3DhSlOcFHkixWgdBg l9f+EOLZ3aa+q4rTjIVRkHVQAbu+DuSf4LtBWv3FWp9NAw3AaQuHpMARU2PpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkDyPgnYhTHWc2xm/nN+mpipM+MkwHwYDVR0j BBgwFoAUCgU0FL6lscPDZ9X8D6Pgnc1MjGswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRC RUE1QjFDM0MzNjdENUZDMEZBM0UwOURDRDRDOEM2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTA1MzQxNEJFQTVCMUMzQzM2N0Q1RkMwRkEzRTA5RENENEM4 QzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0Uw OURDRDRDOEM2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMENoHPkZHJvk6tEpIkNfCatKMeRhGis7HvZ PdrD/fnAP4PyMx1Oq5Cb3uDpcyhY/CUyRKuJT80XylUN8i+fkyLcsk3CW/Om3KW4 iWBMQov9ZX2O9gNk8jvW43ZJ8NbEPM6MyitgI/gmLXA4LirUMNfRnBCBA6wZ+dQs nBL2dOCYy8inXF3ZaWVS1crNpkXLisPepEkQn6nJir+zmIkLVeQKo4CGsN3VWyZE R/W49IaLcNMMPKdlbHbjYH3Vqzhw3EdtZPkD7vS/JKn7TxIFPe0cGqh3xBOcaefH /DYT3DdkEB3ie+calcMy73ZWc6tTKiyLrhuiD2DtRql+IDo+IAQ= -----END CERTIFICATE-----Generated at Fri Sep 25 02:50:58 2026 by rpki-client