$ rpki-client -vvvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft File: 0A0BE818C9E480D5B3C1387F48406FDF75525054.mft (raw, json) Hash identifier: rhzxblCtKWgHL9iEj/lcmTm/8g8YqBcm4cDXlE0kS80= Subject key identifier: 52:1D:60:86:D6:07:3B:C7:45:F6:47:B1:45:A9:81:21:C5:D2:B3:4C Authority key identifier: 0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54 Certificate issuer: /CN=0A0BE818C9E480D5B3C1387F48406FDF75525054 Certificate serial: 48442CFB5C449E5EDC0C7C711D83612B7ECEF177 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft Manifest number: D0 Signing time: Sat 03 Oct 2026 09:53:02 +0000 Manifest this update: Sat 03 Oct 2026 09:48:02 +0000 Manifest next update: Sun 04 Oct 2026 13:36:02 +0000 Files and hashes: 1: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: ZvHMdtaJZWzSLaq7f17lDIIdd170kCIaPzhP2QwWe1o=) 2: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: d/Fq+IffZJ+OozrZYhdBokPyli+2KVods0E+Vb13ir4=) 3: 0A0BE818C9E480D5B3C1387F48406FDF75525054.crl (hash: 20W1ZH8cVNYjMJ/3HSp9tVDrf/vVF2FvMpOTITwsziI=) 4: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: XruWQQhjREtyk1SmNsMjFRHLoSTVd3r/+m7FYV8d8Kc=) 5: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: +JyCkLsQ3tpHW5cHfUXrYK9OeTIPdF1qJiIUkvR3JIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 13:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:44:2c:fb:5c:44:9e:5e:dc:0c:7c:71:1d:83:61:2b:7e:ce:f1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A0BE818C9E480D5B3C1387F48406FDF75525054 Validity Not Before: Oct 3 09:48:02 2026 GMT Not After : Oct 4 13:36:02 2026 GMT Subject: CN=521D6086D6073BC745F647B145A98121C5D2B34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:24:75:b3:f8:d1:2e:ec:47:9f:8f:6a:ba:f3: a2:7b:00:cb:d7:99:0a:11:b0:d9:0f:65:d2:2d:95: c4:54:ad:86:0c:72:44:4d:e2:d6:e4:66:f5:aa:10: 1f:7b:b4:4a:40:93:6f:02:1f:f2:1d:9f:78:b1:35: 06:11:c9:1b:91:37:8e:73:83:ac:fa:bf:94:10:3c: 03:2e:7c:b8:af:97:6e:20:78:13:be:8c:d2:4d:c7: de:9f:cf:0a:02:e0:05:64:f4:d2:54:de:8d:a2:ea: 35:f9:0b:9b:f4:e1:16:fc:c5:d5:ca:18:46:11:5d: 06:85:50:29:9e:4a:58:df:23:43:c6:5f:09:09:3a: 96:50:81:25:1c:a4:5f:ce:27:df:b1:12:c5:d2:89: e6:61:4a:af:4b:d0:6b:b1:58:09:b2:3b:50:8d:62: 3d:73:8a:66:49:b5:25:af:f1:00:53:e5:15:d3:ba: 60:16:1d:6a:0c:b3:f3:d3:0e:22:e5:c4:6e:9f:37: ea:e0:0c:d9:e0:a5:b5:9e:5f:18:40:86:1e:f8:ed: 96:c9:6a:3f:95:c0:6e:0c:58:0b:fd:af:17:f6:97: 80:d3:f9:ee:d3:8d:20:dd:0c:ab:58:d9:90:d3:0b: 9a:94:59:18:72:52:5a:ed:0c:78:02:c6:34:3f:61: cd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1D:60:86:D6:07:3B:C7:45:F6:47:B1:45:A9:81:21:C5:D2:B3:4C X509v3 Authority Key Identifier: keyid:0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:79:9c:68:1e:85:cc:ec:86:85:0e:0b:f6:20:af:1e:cd:07: aa:58:28:95:01:8b:34:58:de:15:71:3c:74:a0:ff:00:28:d6: c0:55:c1:69:5e:17:53:8b:52:30:dc:95:a8:67:da:e5:d6:56: c6:9c:d6:a3:92:58:ee:20:a7:72:8e:96:15:21:6f:e8:62:af: e5:9c:7b:e7:5b:be:15:4f:f8:f8:81:1b:fc:eb:2e:55:84:92: c4:ec:50:fb:15:00:41:ef:22:28:9c:57:ec:95:e5:06:cf:60: f4:8b:7b:31:3f:62:8b:26:28:a7:fe:55:0a:8b:19:88:86:4b: fa:fb:53:25:22:e4:6f:ff:1e:32:93:a0:25:a8:a3:1b:ac:e0: 07:1f:7d:31:96:ee:34:6e:28:93:bc:fa:71:d1:d4:15:29:2f: ce:9c:6c:e4:52:1a:8b:fa:3a:17:6f:0e:62:03:c6:7d:e1:cf: 1d:e5:11:49:09:0c:80:11:e3:8d:25:c2:89:5d:2f:f1:5f:ea: f9:0d:bb:72:47:cf:0a:e4:4d:5f:01:70:9e:7d:56:18:39:9c: 19:66:2b:f0:d3:b1:f2:f4:a2:80:b7:9a:45:12:61:4d:08:ab: 8a:09:0f:56:4d:30:21:2c:e6:ef:36:4c:2e:8f:80:8c:9c:3c: 6f:fc:f6:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEQs+1xEnl7cDHxxHYNhK37O8XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZGREY3 NTUyNTA1NDAeFw0yNjEwMDMwOTQ4MDJaFw0yNjEwMDQxMzM2MDJaMDMxMTAvBgNV BAMTKDUyMUQ2MDg2RDYwNzNCQzc0NUY2NDdCMTQ1QTk4MTIxQzVEMkIzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnJHWz+NEu7Eefj2q686J7AMvX mQoRsNkPZdItlcRUrYYMckRN4tbkZvWqEB97tEpAk28CH/Idn3ixNQYRyRuRN45z g6z6v5QQPAMufLivl24geBO+jNJNx96fzwoC4AVk9NJU3o2i6jX5C5v04Rb8xdXK GEYRXQaFUCmeSljfI0PGXwkJOpZQgSUcpF/OJ9+xEsXSieZhSq9L0GuxWAmyO1CN Yj1zimZJtSWv8QBT5RXTumAWHWoMs/PTDiLlxG6fN+rgDNngpbWeXxhAhh747ZbJ aj+VwG4MWAv9rxf2l4DT+e7TjSDdDKtY2ZDTC5qUWRhyUlrtDHgCxjQ/Yc3HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUh1ghtYHO8dF9kexRamBIcXSs0wwHwYDVR0j BBgwFoAUCgvoGMnkgNWzwTh/SEBv33VSUFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThD OUU0ODBENUIzQzEzODdGNDg0MDZGREY3NTUyNTA1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTBCRTgxOEM5RTQ4MEQ1QjNDMTM4N0Y0ODQwNkZERjc1NTI1 MDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZG REY3NTUyNTA1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABF5nGgehczshoUOC/Ygrx7NB6pYKJUBizRY 3hVxPHSg/wAo1sBVwWleF1OLUjDclahn2uXWVsac1qOSWO4gp3KOlhUhb+hir+Wc e+dbvhVP+PiBG/zrLlWEksTsUPsVAEHvIiicV+yV5QbPYPSLezE/YosmKKf+VQqL GYiGS/r7UyUi5G//HjKToCWooxus4AcffTGW7jRuKJO8+nHR1BUpL86cbORSGov6 OhdvDmIDxn3hzx3lEUkJDIAR440lwoldL/Ff6vkNu3JHzwrkTV8BcJ59Vhg5nBlm K/DTsfL0ooC3mkUSYU0Iq4oJD1ZNMCEs5u82TC6PgIycPG/89ow= -----END CERTIFICATE-----Generated at Sun Oct 4 06:43:20 2026 by rpki-client