$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft File: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft (raw, json) Hash identifier: 57Zy15gyjqeRnysHIRTuzEG8bWOOw1lriEhO8vyIJlQ= Subject key identifier: 49:B9:96:6F:A6:2A:E1:B6:53:1D:E3:C3:2D:05:04:25:03:90:FB:2A Authority key identifier: 0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 Certificate issuer: /CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Certificate serial: 1BC046C45D36E8DF56F03796B8ED8FB1A995EDB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft Manifest number: 0F Signing time: Wed 13 May 2026 01:45:38 +0000 Manifest this update: Wed 13 May 2026 01:40:38 +0000 Manifest next update: Thu 14 May 2026 03:51:38 +0000 Files and hashes: 1: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl (hash: Ip8FX+9dGtFkV4Y33qaXx4Qcd57NpBj+J9RlK5zNBOk=) 2: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: Pp4p1IAwL6T/SUuRHLsPL1o2X/hw7FiM+dsJ0iekdE8=) 3: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: EdEGFXLSGBP0MFU7fBfQCb+Ije/hW5JPZPkjvdhCXtQ=) 4: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: OsAoJbYittbq+gZll27kuO9hviTpRYTbYAhazIaxU6I=) 5: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: Si+I+kPmeWkzvO8zwLh244+U9aO/cSZUp2EBTlhcW1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c0:46:c4:5d:36:e8:df:56:f0:37:96:b8:ed:8f:b1:a9:95:ed:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Validity Not Before: May 13 01:40:38 2026 GMT Not After : May 14 03:51:38 2026 GMT Subject: CN=49B9966FA62AE1B6531DE3C32D0504250390FB2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8d:3d:7f:6e:36:e9:ea:fa:d8:8c:82:7b:74: 98:07:3b:fa:e4:ae:37:39:a1:0b:b8:78:f9:f6:bf: ee:c9:5a:b8:31:ab:f7:ca:2f:bb:71:ed:5a:7d:31: 79:26:84:9f:c5:95:c3:dd:52:d3:70:e7:03:eb:4a: 83:64:a5:dd:83:ba:8a:30:7b:1e:50:24:57:03:59: 9f:e7:00:ec:5e:a1:d6:92:44:22:f4:07:bb:44:78: ef:ce:f8:47:5e:85:1b:d6:36:98:f4:c6:6e:ca:e5: 6b:65:44:17:de:f0:b6:52:10:b6:b8:23:f1:6f:05: ae:c5:ee:69:56:cc:e3:4c:c7:b1:ce:b6:19:7c:4e: 7e:bf:e4:67:16:c9:57:df:a6:a5:4f:31:b0:6b:40: 1b:72:2c:da:50:86:89:e5:ce:a4:cc:ec:17:31:fd: 30:08:af:9f:50:94:9c:49:cf:86:81:33:ea:ba:8c: af:b3:02:3a:48:fc:0f:8d:08:ec:10:01:58:45:f5: 02:30:00:6d:51:89:8f:fa:c4:b0:4f:58:3c:fb:d1: 61:33:63:1f:cc:5a:5c:d8:68:9d:cb:b6:29:16:a0: 3d:ff:44:55:3e:12:1c:5f:f7:e7:b4:0b:00:25:79: a9:73:5e:61:fe:e6:94:25:dd:7e:0d:91:4e:fe:6a: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B9:96:6F:A6:2A:E1:B6:53:1D:E3:C3:2D:05:04:25:03:90:FB:2A X509v3 Authority Key Identifier: keyid:0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:53:49:87:8c:ad:65:a6:9e:03:1f:3f:b8:76:d3:8c:a6:d3: 6f:2f:fe:97:44:55:3e:1e:6d:8f:e4:db:fe:4d:30:1d:01:02: 75:24:4d:c9:c3:88:9a:4e:88:d3:e3:1f:5b:6b:8b:03:3a:53: 07:86:ba:37:a2:be:e2:7a:ac:ac:89:81:c1:06:d7:11:ed:24: 83:a9:f0:67:b5:ed:22:56:ec:00:77:eb:07:ac:ce:9b:ef:15: 29:ea:c5:ef:82:f5:1d:3d:9d:71:cc:47:88:50:b1:40:cb:96: 6f:8c:31:88:e6:2f:9d:a8:07:3e:b1:bf:25:cf:d7:ef:89:89: 1a:ad:07:84:1d:69:c4:43:95:17:91:3f:ae:13:0b:18:02:91: 0e:42:43:8c:f9:f7:b6:85:f3:9e:f3:33:f1:ce:d0:0e:22:e1: 29:00:26:9b:66:0d:a8:27:4b:fe:10:be:2c:cd:b3:f7:ac:49: bf:33:ca:25:aa:ba:30:86:1b:95:d1:ce:db:e4:56:b2:2c:0f: 39:e4:73:93:91:b3:40:43:c6:e4:24:d9:ca:fd:19:88:ce:7a: f1:b6:86:d9:36:ac:03:a0:f1:b2:00:2f:03:ff:29:b1:df:1a: 66:b1:78:25:e6:11:c8:6d:94:6c:70:92:16:68:f7:f8:d7:80: b8:16:23:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8BGxF026N9W8DeWuO2PsamV7bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUExMDhE OUE2NDBGNjAeFw0yNjA1MTMwMTQwMzhaFw0yNjA1MTQwMzUxMzhaMDMxMTAvBgNV BAMTKDQ5Qjk5NjZGQTYyQUUxQjY1MzFERTNDMzJEMDUwNDI1MDM5MEZCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjT1/bjbp6vrYjIJ7dJgHO/rk rjc5oQu4ePn2v+7JWrgxq/fKL7tx7Vp9MXkmhJ/FlcPdUtNw5wPrSoNkpd2Duoow ex5QJFcDWZ/nAOxeodaSRCL0B7tEeO/O+EdehRvWNpj0xm7K5WtlRBfe8LZSELa4 I/FvBa7F7mlWzONMx7HOthl8Tn6/5GcWyVffpqVPMbBrQBtyLNpQhonlzqTM7Bcx /TAIr59QlJxJz4aBM+q6jK+zAjpI/A+NCOwQAVhF9QIwAG1RiY/6xLBPWDz70WEz Yx/MWlzYaJ3LtikWoD3/RFU+Ehxf9+e0CwAlealzXmH+5pQl3X4NkU7+aiKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSbmWb6Yq4bZTHePDLQUEJQOQ+yowHwYDVR0j BBgwFoAUDpJ86c+uAZWXAdi6oxqhCNmmQPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE0OTNiZTEtZjA2NC00OWU2LTk0OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlD RkFFMDE5NTk3MDFEOEJBQTMxQUExMDhEOUE2NDBGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTkyN0NFOUNGQUUwMTk1OTcwMUQ4QkFBMzFBQTEwOEQ5QTY0 MEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUEx MDhEOUE2NDBGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBTSYeMrWWmngMfP7h204ym028v/pdEVT4e bY/k2/5NMB0BAnUkTcnDiJpOiNPjH1triwM6UweGujeivuJ6rKyJgcEG1xHtJIOp 8Ge17SJW7AB36weszpvvFSnqxe+C9R09nXHMR4hQsUDLlm+MMYjmL52oBz6xvyXP 1++JiRqtB4QdacRDlReRP64TCxgCkQ5CQ4z597aF857zM/HO0A4i4SkAJptmDagn S/4QvizNs/esSb8zyiWqujCGG5XRztvkVrIsDznkc5ORs0BDxuQk2cr9GYjOevG2 htk2rAOg8bIALwP/KbHfGmaxeCXmEchtlGxwkhZo9/jXgLgWI3g= -----END CERTIFICATE-----Generated at Wed May 13 08:24:23 2026 by rpki-client