$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft File: 0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft (raw, json) Hash identifier: g4mHX+AuEETSBNn2L5bN7LyqL+fR/i/SRPoxd2HCFxU= Subject key identifier: 37:85:BC:15:C0:16:39:21:F4:7C:3B:EE:1C:B1:CA:6A:A3:EB:38:7A Authority key identifier: 0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC Certificate issuer: /CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC Certificate serial: 7723D444B5033E6E6BB48E0581592525007FD14C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:08:23 +0000 Manifest this update: Thu 24 Sep 2026 06:03:23 +0000 Manifest next update: Fri 25 Sep 2026 09:25:23 +0000 Files and hashes: 1: 0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl (hash: XEBz1PPPqUslurgoP82R/t+jKjgLJK+gewMlYP4Msl4=) 2: 3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (hash: GvfJPx0m84FZdwqXoN6lWJ86xXd2jONGdjvxcJWy97o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:23:d4:44:b5:03:3e:6e:6b:b4:8e:05:81:59:25:25:00:7f:d1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC Validity Not Before: Sep 24 06:03:23 2026 GMT Not After : Sep 25 09:25:23 2026 GMT Subject: CN=3785BC15C0163921F47C3BEE1CB1CA6AA3EB387A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:0f:a7:6f:2c:c7:65:48:00:d0:e2:12:70: 55:4e:97:4c:5a:31:59:26:64:d4:ea:19:74:b3:09: 42:c2:60:5a:76:dd:7b:f1:a1:c6:ad:12:91:6a:ce: c6:7c:5d:3b:be:8d:da:01:ce:a3:0e:af:21:91:60: 93:78:53:39:b8:5b:24:0e:52:9b:86:5c:e5:b6:6e: 17:bf:0f:1c:83:91:05:46:24:18:09:e5:9d:84:3d: 6b:55:06:da:e2:3d:ca:67:31:5b:ac:3a:d7:ab:6d: ec:fb:db:17:3f:ec:3a:13:de:18:e0:74:2f:46:7c: eb:be:60:7b:18:da:6b:27:13:8f:a1:be:79:df:3a: a3:e3:4d:0b:67:59:f8:fb:7e:e3:55:52:c9:f8:d8: 1e:5d:4e:2f:4f:67:32:c2:47:5a:1c:75:13:aa:cc: 26:4f:77:86:dc:02:14:29:be:b0:c7:c5:7d:96:9a: 37:53:d6:4c:52:62:5e:56:a5:d7:c5:d6:cb:82:2f: 42:19:b8:ae:62:0e:02:c6:f4:1a:b9:29:89:83:50: 17:69:5a:87:09:33:8c:ec:05:ac:0e:ef:7a:55:98: 9d:b8:70:7c:33:cd:73:1c:89:2b:00:e0:87:1c:f9: 74:99:19:a8:70:8a:1e:28:49:5c:ff:9f:da:31:a5: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:85:BC:15:C0:16:39:21:F4:7C:3B:EE:1C:B1:CA:6A:A3:EB:38:7A X509v3 Authority Key Identifier: keyid:0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:54:a9:24:c4:f1:1e:d8:bd:a8:f0:2a:f2:a6:9e:af:df:a4: d1:63:f4:73:3c:d1:0b:82:49:94:0e:a6:5c:ff:0d:d2:5c:3e: 70:fb:cb:02:5c:42:f7:e4:94:5f:ea:67:98:5e:67:bd:e0:9c: 25:21:93:37:e6:01:9e:51:80:67:47:25:46:6b:fd:b0:3c:85: 7d:65:64:c1:ab:55:e8:83:83:a3:3d:bf:36:fc:c1:cd:cb:92: 61:6c:e4:24:e1:21:5b:5e:70:de:51:a3:02:e1:36:50:a7:1a: 42:54:70:67:0d:58:d1:da:26:db:2d:78:e3:72:8a:8f:bf:a9: 43:4f:3a:fe:e0:7a:c4:5d:f7:1c:ee:c3:01:60:e2:3d:69:41: 34:a2:69:63:ee:a3:2a:56:75:01:9e:4b:d8:c7:cc:31:1b:8e: 79:5b:0d:a6:0c:1c:62:7f:6d:e1:20:4e:1f:2b:b2:b4:84:74: 90:9b:19:cf:51:17:d1:3c:5a:15:68:dc:94:06:5a:d4:e6:ca: bf:d8:fe:eb:3a:35:c0:b2:dc:c6:23:da:50:41:72:ea:53:3e: e8:0d:80:51:c6:98:dc:d7:ca:fb:7c:7e:08:2f:7d:43:3e:2b: 93:41:e0:39:d3:72:f0:21:48:29:15:00:ff:cf:c4:25:de:8d: 47:54:dd:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyPURLUDPm5rtI4FgVklJQB/0UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUwRUJCQkE3RTIyQzg1QjM0NzNBMDEzQ0ZERDMyMTI1 NEQ1NjhBQzAeFw0yNjA5MjQwNjAzMjNaFw0yNjA5MjUwOTI1MjNaMDMxMTAvBgNV BAMTKDM3ODVCQzE1QzAxNjM5MjFGNDdDM0JFRTFDQjFDQTZBQTNFQjM4N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGw+nbyzHZUgA0OIScFVOl0xa MVkmZNTqGXSzCULCYFp23XvxocatEpFqzsZ8XTu+jdoBzqMOryGRYJN4Uzm4WyQO UpuGXOW2bhe/DxyDkQVGJBgJ5Z2EPWtVBtriPcpnMVusOterbez72xc/7DoT3hjg dC9GfOu+YHsY2msnE4+hvnnfOqPjTQtnWfj7fuNVUsn42B5dTi9PZzLCR1ocdROq zCZPd4bcAhQpvrDHxX2WmjdT1kxSYl5WpdfF1suCL0IZuK5iDgLG9Bq5KYmDUBdp WocJM4zsBawO73pVmJ24cHwzzXMciSsA4Icc+XSZGahwih4oSVz/n9oxpbChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN4W8FcAWOSH0fDvuHLHKaqPrOHowHwYDVR0j BBgwFoAUDg67un4iyFs0c6ATz90yElTVaKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ5YjM1MTktM2RmMy00NDA2LTgyOGYtM2ViYjkxZDkyOTQ0LzAvMEUwRUJCQkE3 RTIyQzg1QjM0NzNBMDEzQ0ZERDMyMTI1NEQ1NjhBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRTBFQkJCQTdFMjJDODVCMzQ3M0EwMTNDRkREMzIxMjU0RDU2 OEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ5YjM1MTktM2RmMy00NDA2LTgy OGYtM2ViYjkxZDkyOTQ0LzAvMEUwRUJCQkE3RTIyQzg1QjM0NzNBMDEzQ0ZERDMy MTI1NEQ1NjhBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1UqSTE8R7YvajwKvKmnq/fpNFj9HM80QuC SZQOplz/DdJcPnD7ywJcQvfklF/qZ5heZ73gnCUhkzfmAZ5RgGdHJUZr/bA8hX1l ZMGrVeiDg6M9vzb8wc3LkmFs5CThIVtecN5RowLhNlCnGkJUcGcNWNHaJtsteONy io+/qUNPOv7gesRd9xzuwwFg4j1pQTSiaWPuoypWdQGeS9jHzDEbjnlbDaYMHGJ/ beEgTh8rsrSEdJCbGc9RF9E8WhVo3JQGWtTmyr/Y/us6NcCy3MYj2lBBcupTPugN gFHGmNzXyvt8fggvfUM+K5NB4DnTcvAhSCkVAP/PxCXejUdU3U8= -----END CERTIFICATE-----Generated at Thu Sep 24 14:16:37 2026 by rpki-client