$ rpki-client -vvvf rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft File: 0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft (raw, json) Hash identifier: naZHDRuobx8pDUkOC+awbPA+RUlU3RkaMHJkvZSGfL4= Subject key identifier: 15:5A:9A:17:F3:1E:DC:97:AB:0F:49:EE:6A:33:53:F7:41:4F:B9:18 Authority key identifier: 0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5 Certificate issuer: /CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5 Certificate serial: 3A6B189E2054692691CA26938B61D26ED217A9A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 09:32:59 +0000 Manifest this update: Wed 23 Sep 2026 09:27:59 +0000 Manifest next update: Thu 24 Sep 2026 13:23:59 +0000 Files and hashes: 1: 0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl (hash: Aj9ah9ZSg2TI0FbGaXDnb1Fu7RZQjspa3cdAEg30dG8=) 2: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (hash: PLnaEPFMhQC7qrBdYJWogsB9/XputOFqVTt3eZyoCbA=) 3: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (hash: /DP+cT1aguJf0hhV/U1Fj08oxHTiO4zVC+8+RLVJzSY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6b:18:9e:20:54:69:26:91:ca:26:93:8b:61:d2:6e:d2:17:a9:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7349FACD17332E193A4B6B340D9E6A1148D5D5 Validity Not Before: Sep 23 09:27:59 2026 GMT Not After : Sep 24 13:23:59 2026 GMT Subject: CN=155A9A17F31EDC97AB0F49EE6A3353F7414FB918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:37:7f:db:2e:c3:1e:62:f7:79:38:de:9a: de:fb:ad:54:41:1f:d0:f3:44:cd:11:71:bf:df:4f: 98:54:90:55:21:90:80:5a:b6:1f:3f:7d:6f:de:b0: e1:e9:a5:bf:45:fb:58:99:3c:a3:55:4f:0c:06:30: 2a:2a:cf:11:e4:b0:74:a3:70:d8:19:78:df:84:69: 93:6f:86:a2:10:11:b4:a7:da:b5:e9:95:d9:0c:23: e3:5e:4d:0c:6e:e8:4e:70:8c:30:5f:3a:0a:f8:f5: 66:31:74:24:93:b5:cf:f0:fd:6b:67:5b:b0:67:80: 6f:ef:13:35:5f:6e:cc:7c:e5:e6:55:36:7f:25:e2: 43:68:4b:75:73:5e:dd:7d:fa:79:41:7a:b2:57:56: 38:2f:47:8d:b6:07:0b:1a:a2:0e:ca:36:1c:8b:48: 50:d5:1c:a6:66:fd:da:a9:79:f2:5b:64:4c:9a:1e: e0:38:6b:ed:cd:2a:7b:5a:17:d4:5a:76:e0:b8:62: 5f:93:1c:06:bc:f2:f8:8e:3c:f7:d2:89:2f:5a:98: 4d:55:ea:63:ee:f7:5b:25:9a:df:ab:41:af:cd:db: ea:4f:db:21:b1:fa:63:07:09:05:2e:f2:c5:0e:44: 59:fa:de:bc:62:f9:f7:ad:cd:32:8d:35:c1:3a:49: ec:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5A:9A:17:F3:1E:DC:97:AB:0F:49:EE:6A:33:53:F7:41:4F:B9:18 X509v3 Authority Key Identifier: keyid:0E:73:49:FA:CD:17:33:2E:19:3A:4B:6B:34:0D:9E:6A:11:48:D5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/0E7349FACD17332E193A4B6B340D9E6A1148D5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:72:0d:6a:4a:55:98:e7:b4:68:ee:d7:16:68:ad:54:7f:f2: 84:87:8e:c9:1b:8c:03:07:77:cf:5f:bc:7f:7b:18:c6:2c:d3: e8:00:05:54:3b:c2:0f:35:b7:23:96:05:0e:6d:ac:63:55:ab: d2:36:44:be:97:0c:11:c1:10:47:d9:e4:7b:0a:4d:35:19:77: a0:07:a3:1c:3c:61:e3:01:57:e4:15:16:f3:a6:c9:7a:c3:b1: 7a:14:9e:ef:b3:d2:3a:ba:a8:a2:c7:7f:99:a9:e6:c4:82:13: 52:e3:5f:ad:25:66:57:33:1d:7e:10:4a:00:6b:ca:a2:08:a7: bf:03:ea:e4:28:ed:53:e6:f1:8f:5d:0c:87:87:cb:b9:f4:0d: 4f:54:58:a2:2d:e2:32:32:4a:24:d6:83:e5:33:56:46:6f:61: 42:e6:15:fb:ef:8e:ab:d7:17:b1:eb:ef:ab:bf:7a:30:29:71: df:28:e9:b5:8b:0d:98:7e:88:79:be:e6:8f:64:86:c4:47:7f: 11:fe:73:90:44:ba:be:0d:98:8c:9d:c5:3a:4c:72:6a:c3:77: dc:4f:9f:c2:9e:47:44:ca:7a:38:77:4c:0e:ec:24:7a:0a:66: 29:9a:58:d2:39:d8:52:a4:12:c6:58:ff:75:c9:8e:1c:ef:b7: fa:ed:48:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOmsYniBUaSaRyiaTi2HSbtIXqaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3MzQ5RkFDRDE3MzMyRTE5M0E0QjZCMzQwRDlFNkEx MTQ4RDVENTAeFw0yNjA5MjMwOTI3NTlaFw0yNjA5MjQxMzIzNTlaMDMxMTAvBgNV BAMTKDE1NUE5QTE3RjMxRURDOTdBQjBGNDlFRTZBMzM1M0Y3NDE0RkI5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFATd/2y7DHmL3eTjemt77rVRB H9DzRM0Rcb/fT5hUkFUhkIBath8/fW/esOHppb9F+1iZPKNVTwwGMCoqzxHksHSj cNgZeN+EaZNvhqIQEbSn2rXpldkMI+NeTQxu6E5wjDBfOgr49WYxdCSTtc/w/Wtn W7BngG/vEzVfbsx85eZVNn8l4kNoS3VzXt19+nlBerJXVjgvR422Bwsaog7KNhyL SFDVHKZm/dqpefJbZEyaHuA4a+3NKntaF9RaduC4Yl+THAa88viOPPfSiS9amE1V 6mPu91slmt+rQa/N2+pP2yGx+mMHCQUu8sUORFn63rxi+fetzTKNNcE6SezzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFVqaF/Me3JerD0nuajNT90FPuRgwHwYDVR0j BBgwFoAUDnNJ+s0XMy4ZOktrNA2eahFI1dUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTE2YThhZDQtMDZlNi00MGMzLTk4ZTQtZmE5M2FmYzRhNzcyLzAvMEU3MzQ5RkFD RDE3MzMyRTE5M0E0QjZCMzQwRDlFNkExMTQ4RDVENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTczNDlGQUNEMTczMzJFMTkzQTRCNkIzNDBEOUU2QTExNDhE NUQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTE2YThhZDQtMDZlNi00MGMzLTk4 ZTQtZmE5M2FmYzRhNzcyLzAvMEU3MzQ5RkFDRDE3MzMyRTE5M0E0QjZCMzQwRDlF NkExMTQ4RDVENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtyDWpKVZjntGju1xZorVR/8oSHjskbjAMH d89fvH97GMYs0+gABVQ7wg81tyOWBQ5trGNVq9I2RL6XDBHBEEfZ5HsKTTUZd6AH oxw8YeMBV+QVFvOmyXrDsXoUnu+z0jq6qKLHf5mp5sSCE1LjX60lZlczHX4QSgBr yqIIp78D6uQo7VPm8Y9dDIeHy7n0DU9UWKIt4jIySiTWg+UzVkZvYULmFfvvjqvX F7Hr76u/ejApcd8o6bWLDZh+iHm+5o9khsRHfxH+c5BEur4NmIydxTpMcmrDd9xP n8KeR0TKejh3TA7sJHoKZimaWNI52FKkEsZY/3XJjhzvt/rtSGI= -----END CERTIFICATE-----Generated at Thu Sep 24 01:50:36 2026 by rpki-client