$ rpki-client -vvvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft File: 0A0BE818C9E480D5B3C1387F48406FDF75525054.mft (raw, json) Hash identifier: Qke4EeHRmpHXlfHjEOSBUB19UsibQypq2/97hDQ/SRk= Subject key identifier: 6C:C9:E4:BA:10:BB:93:39:D0:81:6D:81:00:1E:7F:25:39:4C:FB:B1 Authority key identifier: 0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54 Certificate issuer: /CN=0A0BE818C9E480D5B3C1387F48406FDF75525054 Certificate serial: 47EE56BC75179FD7EFEA4A4CC092206CED673B4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft Manifest number: CC Signing time: Wed 30 Sep 2026 08:16:15 +0000 Manifest this update: Wed 30 Sep 2026 08:11:15 +0000 Manifest next update: Thu 01 Oct 2026 11:44:15 +0000 Files and hashes: 1: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: d/Fq+IffZJ+OozrZYhdBokPyli+2KVods0E+Vb13ir4=) 2: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: +JyCkLsQ3tpHW5cHfUXrYK9OeTIPdF1qJiIUkvR3JIw=) 3: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: ZvHMdtaJZWzSLaq7f17lDIIdd170kCIaPzhP2QwWe1o=) 4: 0A0BE818C9E480D5B3C1387F48406FDF75525054.crl (hash: mJ14bxdNOkPJlMzal0dpEK4SerxByya6SoZumCAW2tU=) 5: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: XruWQQhjREtyk1SmNsMjFRHLoSTVd3r/+m7FYV8d8Kc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 11:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ee:56:bc:75:17:9f:d7:ef:ea:4a:4c:c0:92:20:6c:ed:67:3b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A0BE818C9E480D5B3C1387F48406FDF75525054 Validity Not Before: Sep 30 08:11:15 2026 GMT Not After : Oct 1 11:44:15 2026 GMT Subject: CN=6CC9E4BA10BB9339D0816D81001E7F25394CFBB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:04:0e:4e:fe:15:3b:8f:6c:7a:96:d3:cd:f9: d4:91:2b:99:64:62:a5:18:9d:04:08:32:8a:6a:81: 0a:52:41:15:32:ed:48:02:96:0b:ba:e6:4c:d2:4a: 5c:22:68:1c:8a:02:8a:95:8f:c4:b6:9d:6b:30:2d: 1d:22:f5:9b:cb:df:7b:00:24:7e:27:e0:51:1c:4b: fe:b4:f0:dc:be:cf:df:63:42:b7:cb:d4:6c:ce:ee: 0e:eb:f9:2f:23:69:48:5f:bd:bb:0a:28:a4:31:d7: bc:59:48:c7:01:cb:48:06:a8:c1:1b:85:e8:f1:a2: 9a:e2:a5:60:6b:19:cc:fe:53:a3:fb:6a:95:bd:91: e3:b3:50:74:b6:aa:1b:a2:a3:db:30:f5:e5:c3:eb: b9:b9:5a:de:f8:e1:03:5e:fd:58:bc:f4:aa:b0:c0: 9b:7b:9e:81:34:90:fd:2a:ca:8a:b4:c2:4d:2d:77: 87:9c:05:35:e2:0c:a4:1d:d2:aa:ce:9e:1b:14:3e: 2e:14:c4:ce:20:fb:d7:6f:5a:32:6d:42:17:9a:31: 74:3e:47:95:89:05:74:5e:36:ea:ac:79:ef:af:8c: 87:f9:22:8f:7e:09:ba:1b:9c:00:f3:ed:72:27:9f: 4c:bc:18:db:4b:e7:ec:87:dd:29:32:5a:0a:f7:7d: 56:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C9:E4:BA:10:BB:93:39:D0:81:6D:81:00:1E:7F:25:39:4C:FB:B1 X509v3 Authority Key Identifier: keyid:0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b0:ff:78:3a:36:9b:00:59:7c:78:fb:db:8c:9d:14:33:6a: c1:0c:02:73:6a:bd:a9:66:fc:84:79:f0:8d:14:9c:2b:71:31: 30:f5:b4:fd:eb:eb:b6:62:91:06:3e:46:f5:92:bc:98:47:9f: da:f2:11:00:a4:3c:8e:c7:99:89:9f:36:6c:13:30:cc:93:3a: a0:a4:25:43:a2:27:a9:23:4b:f7:6c:9b:27:c0:db:b4:fb:c7: 7b:18:72:a6:83:8e:fe:d3:6e:b5:e3:67:2b:d9:2e:38:de:6d: a2:ca:9f:88:a9:ab:ea:ca:e0:18:a5:98:ad:8b:84:aa:43:b2: fd:c9:55:fd:00:bd:d1:4a:f0:19:44:00:ba:22:00:10:6b:42: de:69:40:65:2e:38:27:09:8d:e7:24:51:a7:a5:fa:b0:9e:b8: 30:3c:47:63:e3:bf:73:15:48:09:a2:a4:d0:5a:8b:99:f0:76: ad:2a:13:03:4e:a9:b4:65:f3:0c:88:a2:fa:ca:e3:fe:f8:79: 95:22:64:e7:36:c0:87:93:b6:f5:aa:1b:44:3c:37:bb:61:0a: b9:9d:85:4c:89:48:ac:c2:6e:bf:23:ef:29:15:bf:30:ad:e5: c1:22:d5:2f:15:08:7b:2b:79:6b:49:29:c2:69:49:37:37:29: 39:63:50:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR+5WvHUXn9fv6kpMwJIgbO1nO04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZGREY3 NTUyNTA1NDAeFw0yNjA5MzAwODExMTVaFw0yNjEwMDExMTQ0MTVaMDMxMTAvBgNV BAMTKDZDQzlFNEJBMTBCQjkzMzlEMDgxNkQ4MTAwMUU3RjI1Mzk0Q0ZCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvBA5O/hU7j2x6ltPN+dSRK5lk YqUYnQQIMopqgQpSQRUy7UgClgu65kzSSlwiaByKAoqVj8S2nWswLR0i9ZvL33sA JH4n4FEcS/608Ny+z99jQrfL1GzO7g7r+S8jaUhfvbsKKKQx17xZSMcBy0gGqMEb hejxopripWBrGcz+U6P7apW9keOzUHS2qhuio9sw9eXD67m5Wt744QNe/Vi89Kqw wJt7noE0kP0qyoq0wk0td4ecBTXiDKQd0qrOnhsUPi4UxM4g+9dvWjJtQheaMXQ+ R5WJBXReNuqsee+vjIf5Io9+CbobnADz7XInn0y8GNtL5+yH3SkyWgr3fVZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMnkuhC7kznQgW2BAB5/JTlM+7EwHwYDVR0j BBgwFoAUCgvoGMnkgNWzwTh/SEBv33VSUFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThD OUU0ODBENUIzQzEzODdGNDg0MDZGREY3NTUyNTA1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTBCRTgxOEM5RTQ4MEQ1QjNDMTM4N0Y0ODQwNkZERjc1NTI1 MDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZG REY3NTUyNTA1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKw/3g6NpsAWXx4+9uMnRQzasEMAnNqvalm /IR58I0UnCtxMTD1tP3r67ZikQY+RvWSvJhHn9ryEQCkPI7HmYmfNmwTMMyTOqCk JUOiJ6kjS/dsmyfA27T7x3sYcqaDjv7TbrXjZyvZLjjebaLKn4ipq+rK4BilmK2L hKpDsv3JVf0AvdFK8BlEALoiABBrQt5pQGUuOCcJjeckUael+rCeuDA8R2Pjv3MV SAmipNBai5nwdq0qEwNOqbRl8wyIovrK4/74eZUiZOc2wIeTtvWqG0Q8N7thCrmd hUyJSKzCbr8j7ykVvzCt5cEi1S8VCHsreWtJKcJpSTc3KTljUCo= -----END CERTIFICATE-----Generated at Thu Oct 1 08:19:47 2026 by rpki-client