$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft File: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft (raw, json) Hash identifier: uQ46cBFPE2FUhJs5Uxyk0LnHzx5nOJgWMVKZ+HIEa1E= Subject key identifier: 57:5B:13:57:10:33:5E:E2:E7:22:B1:6F:E3:93:88:73:7E:2E:9C:39 Authority key identifier: 0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 Certificate issuer: /CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Certificate serial: 0421D94F854A28357717682D5B0FA690A25DEDBD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 05:27:08 +0000 Manifest this update: Fri 25 Sep 2026 05:22:08 +0000 Manifest next update: Sat 26 Sep 2026 05:58:08 +0000 Files and hashes: 1: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: EdEGFXLSGBP0MFU7fBfQCb+Ije/hW5JPZPkjvdhCXtQ=) 2: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: OsAoJbYittbq+gZll27kuO9hviTpRYTbYAhazIaxU6I=) 3: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: Si+I+kPmeWkzvO8zwLh244+U9aO/cSZUp2EBTlhcW1Q=) 4: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: Pp4p1IAwL6T/SUuRHLsPL1o2X/hw7FiM+dsJ0iekdE8=) 5: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl (hash: mmiLVztlCvzAf6ARKCW8tisynKE10jSaKWmVNQLnpso=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:21:d9:4f:85:4a:28:35:77:17:68:2d:5b:0f:a6:90:a2:5d:ed:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Validity Not Before: Sep 25 05:22:08 2026 GMT Not After : Sep 26 05:58:08 2026 GMT Subject: CN=575B135710335EE2E722B16FE39388737E2E9C39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:38:7c:08:cc:49:80:63:d1:81:5b:85:d8: d6:03:7b:e2:76:d2:85:6a:78:8e:d0:50:74:46:2d: a0:c8:1a:fe:11:28:e2:58:0f:63:3a:0e:8a:9b:9a: 70:6f:d9:bc:29:53:a9:8f:cc:88:37:98:75:aa:2c: 66:57:8d:52:3c:bc:32:9c:e8:7d:48:9b:46:31:aa: e7:8d:83:c0:a4:be:d9:ee:5d:12:6f:02:36:ad:d5: ba:63:4c:37:06:aa:3e:b1:51:03:a2:b7:3f:38:74: 1a:4d:5e:2d:2b:60:91:b7:3e:a4:f7:ca:b4:cb:be: ca:5b:1b:dd:6f:78:27:98:cc:53:20:6b:f8:18:a9: 7d:90:c2:53:85:dc:39:8b:a9:34:f3:5c:33:56:bf: 72:20:7a:72:37:ef:d3:84:57:84:71:ee:28:fb:6c: f1:b8:37:db:e6:41:dd:c1:4e:0f:b9:54:1d:b2:fc: f1:b3:09:81:f5:01:6a:b1:d1:11:e8:c3:d6:9a:c3: df:ad:99:61:86:60:22:2b:27:d5:93:f9:d3:fa:41: b9:32:27:82:96:6d:51:8b:63:1b:d2:51:d5:c6:0a: 07:e5:57:d8:4c:8a:a2:8a:90:95:de:ab:50:3b:cb: cf:83:cb:c7:47:f4:4f:8a:1d:d9:93:0d:72:c9:23: ac:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5B:13:57:10:33:5E:E2:E7:22:B1:6F:E3:93:88:73:7E:2E:9C:39 X509v3 Authority Key Identifier: keyid:0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:13:a1:c0:e6:3b:56:19:55:61:be:5a:f0:99:f9:62:bd:41: 1b:34:ad:e2:5f:29:49:16:c9:3b:ae:a3:57:29:d2:4a:6e:24: 20:e4:32:10:84:b1:f2:88:7b:c2:e3:72:d1:aa:ae:bf:9f:1c: 4b:f2:cc:07:1b:0c:04:f6:fc:b1:0d:ed:05:c9:b6:52:33:1c: 71:7f:ba:e8:fa:76:b7:db:dc:fb:c3:2f:11:f0:82:a7:50:4e: ee:a5:8b:85:d7:f3:c2:8a:e5:97:29:05:3d:2c:3c:b1:72:ae: 11:19:51:d1:27:28:92:dd:19:0c:42:b8:a3:1e:97:f3:61:5c: 65:4e:af:9b:56:96:1f:ec:6b:af:ad:69:3f:a9:46:63:ac:9d: 24:94:15:7e:17:0f:6c:42:6d:29:c6:1f:6d:8c:01:77:a6:60: d3:b3:8d:18:21:c1:7b:47:f3:16:a5:6f:e0:f0:89:0b:0a:af: cc:cb:70:03:e6:c1:1f:e3:4b:2e:a1:19:e9:5e:a3:2d:3e:d3: cc:96:2a:c0:15:d1:87:f9:ef:25:14:74:5f:03:de:df:64:5d: 85:00:b7:a6:fb:ae:4b:93:ad:4d:23:0c:06:38:1a:ef:42:05: 1c:7a:3a:d1:2a:45:fb:04:db:ac:d0:17:31:b5:cc:55:51:07: e7:7e:bf:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCHZT4VKKDV3F2gtWw+mkKJd7b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUExMDhE OUE2NDBGNjAeFw0yNjA5MjUwNTIyMDhaFw0yNjA5MjYwNTU4MDhaMDMxMTAvBgNV BAMTKDU3NUIxMzU3MTAzMzVFRTJFNzIyQjE2RkUzOTM4ODczN0UyRTlDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLzh8CMxJgGPRgVuF2NYDe+J2 0oVqeI7QUHRGLaDIGv4RKOJYD2M6DoqbmnBv2bwpU6mPzIg3mHWqLGZXjVI8vDKc 6H1Im0YxqueNg8CkvtnuXRJvAjat1bpjTDcGqj6xUQOitz84dBpNXi0rYJG3PqT3 yrTLvspbG91veCeYzFMga/gYqX2QwlOF3DmLqTTzXDNWv3IgenI379OEV4Rx7ij7 bPG4N9vmQd3BTg+5VB2y/PGzCYH1AWqx0RHow9aaw9+tmWGGYCIrJ9WT+dP6Qbky J4KWbVGLYxvSUdXGCgflV9hMiqKKkJXeq1A7y8+Dy8dH9E+KHdmTDXLJI6xHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV1sTVxAzXuLnIrFv45OIc34unDkwHwYDVR0j BBgwFoAUDpJ86c+uAZWXAdi6oxqhCNmmQPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE0OTNiZTEtZjA2NC00OWU2LTk0OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlD RkFFMDE5NTk3MDFEOEJBQTMxQUExMDhEOUE2NDBGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTkyN0NFOUNGQUUwMTk1OTcwMUQ4QkFBMzFBQTEwOEQ5QTY0 MEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUEx MDhEOUE2NDBGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkTocDmO1YZVWG+WvCZ+WK9QRs0reJfKUkW yTuuo1cp0kpuJCDkMhCEsfKIe8LjctGqrr+fHEvyzAcbDAT2/LEN7QXJtlIzHHF/ uuj6drfb3PvDLxHwgqdQTu6li4XX88KK5ZcpBT0sPLFyrhEZUdEnKJLdGQxCuKMe l/NhXGVOr5tWlh/sa6+taT+pRmOsnSSUFX4XD2xCbSnGH22MAXemYNOzjRghwXtH 8xalb+DwiQsKr8zLcAPmwR/jSy6hGeleoy0+08yWKsAV0Yf57yUUdF8D3t9kXYUA t6b7rkuTrU0jDAY4Gu9CBRx6OtEqRfsE26zQFzG1zFVRB+d+vx0= -----END CERTIFICATE-----Generated at Fri Sep 25 18:50:19 2026 by rpki-client