$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft File: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft (raw, json) Hash identifier: 7jkc/2ykhMIg5SrhxfPzeOyhxhWuFBnW2/6gsxw0mmk= Subject key identifier: D9:D2:91:78:25:DF:73:4C:11:27:83:5F:02:91:F4:8E:22:93:3D:8F Authority key identifier: 0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 Certificate issuer: /CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Certificate serial: 63B015B433A6EE9E1601FC94453A2A1CE361321D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:05:53 +0000 Manifest this update: Thu 23 Jul 2026 17:00:53 +0000 Manifest next update: Fri 24 Jul 2026 17:21:53 +0000 Files and hashes: 1: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: Si+I+kPmeWkzvO8zwLh244+U9aO/cSZUp2EBTlhcW1Q=) 2: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl (hash: icF4x8NGnx7pdRbtARoer2CFLTaL77WqXen/dJhaPCk=) 3: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: OsAoJbYittbq+gZll27kuO9hviTpRYTbYAhazIaxU6I=) 4: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: EdEGFXLSGBP0MFU7fBfQCb+Ije/hW5JPZPkjvdhCXtQ=) 5: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: Pp4p1IAwL6T/SUuRHLsPL1o2X/hw7FiM+dsJ0iekdE8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b0:15:b4:33:a6:ee:9e:16:01:fc:94:45:3a:2a:1c:e3:61:32:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Validity Not Before: Jul 23 17:00:53 2026 GMT Not After : Jul 24 17:21:53 2026 GMT Subject: CN=D9D2917825DF734C1127835F0291F48E22933D8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:56:34:81:5e:2d:84:2f:3e:9e:53:a1:52:45: a4:76:d7:4b:d3:bd:39:b8:55:ab:d3:95:00:31:17: 24:5a:3c:78:10:17:85:58:14:6a:34:c8:d5:0f:1e: ce:d9:34:bb:f1:ff:37:5a:f7:e1:f3:f8:f4:66:42: 89:7b:d7:7b:c5:c9:51:41:76:a4:6e:c2:d3:fc:e0: 01:c0:4d:39:6a:45:e0:06:b7:4c:5e:6e:e6:a2:c3: 16:8f:a4:48:e5:5c:f1:9f:a8:59:7e:e7:54:01:1b: 21:d4:c0:2a:0a:90:35:48:fa:2b:d3:23:8b:28:75: e8:ab:f2:0a:24:31:9a:95:65:25:eb:f1:fd:a6:2e: 41:d1:96:48:f0:77:4f:fe:2c:0b:41:cf:53:b6:85: 24:4c:9c:1d:d1:a1:d2:9e:ac:6f:21:99:8f:fd:9a: 4e:32:26:f7:2a:55:cb:51:5e:64:de:00:58:cd:11: 8b:76:b0:54:cc:6c:b2:b1:be:b8:90:48:e1:ed:12: bb:19:f1:d4:af:92:7d:ab:e3:0d:7a:8b:c6:a5:18: df:52:09:ab:3f:d6:9b:f9:37:fc:2e:59:67:07:0a: b5:9e:82:da:11:02:a1:b6:bc:a0:07:14:fb:da:88: 6d:fc:2b:71:a4:a4:e9:84:65:eb:2d:eb:4c:47:b0: 2c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D2:91:78:25:DF:73:4C:11:27:83:5F:02:91:F4:8E:22:93:3D:8F X509v3 Authority Key Identifier: keyid:0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:36:68:1d:73:f8:e2:9c:3a:17:65:5a:76:26:9c:1b:d2:86: 02:bf:22:30:74:8b:47:21:61:a6:b4:b1:d0:fd:a6:3c:58:e5: ce:ad:ef:0a:c6:22:9c:2a:20:32:06:71:8d:a9:03:da:96:66: 39:81:c8:ec:4b:25:85:34:05:3c:83:92:13:4c:94:2a:54:03: 38:ce:24:b4:f5:80:19:a8:8a:22:a0:bb:11:2b:76:a3:f0:6d: 50:55:6e:d6:9d:be:c6:39:9a:ca:60:d1:69:32:28:db:08:c8: 11:fd:04:ad:cf:69:80:6b:0d:b8:97:31:62:2a:aa:7d:92:85: 8a:ad:08:87:d6:d2:28:0f:0c:81:5c:03:22:38:88:4c:78:1e: 76:b6:cf:5e:11:01:24:af:b2:81:56:67:03:4e:1c:03:8e:7c: ed:5c:16:53:13:c4:bc:cf:9e:37:d1:cd:f5:47:a1:13:70:ae: 56:0e:cb:46:7c:70:66:6d:6b:2e:40:c6:66:34:30:e3:c8:ba: 0e:43:29:7b:73:ff:0a:ee:60:7b:8b:49:63:f6:04:d4:97:2b: 6d:8d:5c:4d:14:00:57:c5:64:62:bc:42:52:b1:16:e1:a6:71: ef:02:6e:2f:d9:6c:cd:a6:60:7d:26:f6:67:af:ff:a8:be:e1: 84:d6:79:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7AVtDOm7p4WAfyURToqHONhMh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUExMDhE OUE2NDBGNjAeFw0yNjA3MjMxNzAwNTNaFw0yNjA3MjQxNzIxNTNaMDMxMTAvBgNV BAMTKEQ5RDI5MTc4MjVERjczNEMxMTI3ODM1RjAyOTFGNDhFMjI5MzNEOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHVjSBXi2ELz6eU6FSRaR210vT vTm4VavTlQAxFyRaPHgQF4VYFGo0yNUPHs7ZNLvx/zda9+Hz+PRmQol713vFyVFB dqRuwtP84AHATTlqReAGt0xebuaiwxaPpEjlXPGfqFl+51QBGyHUwCoKkDVI+ivT I4sodeir8gokMZqVZSXr8f2mLkHRlkjwd0/+LAtBz1O2hSRMnB3RodKerG8hmY/9 mk4yJvcqVctRXmTeAFjNEYt2sFTMbLKxvriQSOHtErsZ8dSvkn2r4w16i8alGN9S Cas/1pv5N/wuWWcHCrWegtoRAqG2vKAHFPvaiG38K3GkpOmEZest60xHsCz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2dKReCXfc0wRJ4NfApH0jiKTPY8wHwYDVR0j BBgwFoAUDpJ86c+uAZWXAdi6oxqhCNmmQPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE0OTNiZTEtZjA2NC00OWU2LTk0OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlD RkFFMDE5NTk3MDFEOEJBQTMxQUExMDhEOUE2NDBGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTkyN0NFOUNGQUUwMTk1OTcwMUQ4QkFBMzFBQTEwOEQ5QTY0 MEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUEx MDhEOUE2NDBGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI82aB1z+OKcOhdlWnYmnBvShgK/IjB0i0ch Yaa0sdD9pjxY5c6t7wrGIpwqIDIGcY2pA9qWZjmByOxLJYU0BTyDkhNMlCpUAzjO JLT1gBmoiiKguxErdqPwbVBVbtadvsY5mspg0WkyKNsIyBH9BK3PaYBrDbiXMWIq qn2ShYqtCIfW0igPDIFcAyI4iEx4Hna2z14RASSvsoFWZwNOHAOOfO1cFlMTxLzP njfRzfVHoRNwrlYOy0Z8cGZtay5AxmY0MOPIug5DKXtz/wruYHuLSWP2BNSXK22N XE0UAFfFZGK8QlKxFuGmce8Cbi/ZbM2mYH0m9mev/6i+4YTWeZs= -----END CERTIFICATE-----Generated at Fri Jul 24 09:36:36 2026 by rpki-client