$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft File: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft (raw, json) Hash identifier: SM3tVDxdC2L667I796oZQb2Htv9bG6WCKNxFUJAhdjo= Subject key identifier: 51:6A:69:47:97:41:42:BA:A5:30:29:77:B4:20:88:BC:7A:5D:BE:92 Authority key identifier: 0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 Certificate issuer: /CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Certificate serial: 14EA1E75E1B0C567204D75AC177117FF9278B131 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 01:52:32 +0000 Manifest this update: Fri 25 Sep 2026 01:47:32 +0000 Manifest next update: Sat 26 Sep 2026 02:26:32 +0000 Files and hashes: 1: 0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl (hash: OUPE2X+hLmLL7Hl3moELLewQ4IswHAtNCbphwlb54r0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ea:1e:75:e1:b0:c5:67:20:4d:75:ac:17:71:17:ff:92:78:b1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7F1C3A411897498E19CE64C5C26A03C60AECD3 Validity Not Before: Sep 25 01:47:32 2026 GMT Not After : Sep 26 02:26:32 2026 GMT Subject: CN=516A6947974142BAA5302977B42088BC7A5DBE92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1c:3e:5f:cf:e9:ee:b5:82:17:d4:51:77:21: 1e:50:e2:4d:5e:b6:b8:38:6b:03:ae:2a:5c:0a:7d: d7:04:ab:64:b9:4a:c3:ea:12:51:16:67:dd:27:bb: 6b:01:75:17:67:a3:41:c2:34:c1:30:c9:9a:4b:f0: 95:e8:da:2b:e3:0e:f3:66:dd:4d:2e:f0:12:29:ba: 8d:53:b9:b9:4e:05:27:eb:96:70:51:86:a6:37:b3: d4:ec:09:5a:a1:63:92:00:ae:d4:19:c6:89:47:40: ed:da:2a:ad:bb:90:b6:46:cb:6c:fa:78:2b:5d:92: 41:1a:12:2f:f8:ec:7c:d6:cd:3a:34:0f:56:d8:93: 4c:4e:fe:26:9c:c9:a3:f9:2a:37:c6:92:9e:99:c7: 75:99:c0:e8:18:e3:4a:9e:a3:3e:fd:be:8d:22:8c: e9:17:8c:9e:91:2b:04:15:2d:48:31:ef:e8:6b:bb: 09:e1:6c:75:02:cb:dc:af:c5:88:2b:75:47:71:19: 80:4d:f8:89:0c:f4:b4:df:7f:3e:6c:cd:fa:ae:6d: ba:26:96:59:8d:aa:32:29:e8:ce:63:30:cb:8c:f3: c9:b4:15:26:71:d0:22:bc:db:2e:fd:b9:9f:20:93: ec:cf:ef:d2:08:95:be:e0:5f:ee:40:a1:53:81:34: 23:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6A:69:47:97:41:42:BA:A5:30:29:77:B4:20:88:BC:7A:5D:BE:92 X509v3 Authority Key Identifier: keyid:0E:7F:1C:3A:41:18:97:49:8E:19:CE:64:C5:C2:6A:03:C6:0A:EC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0E7F1C3A411897498E19CE64C5C26A03C60AECD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:5d:16:97:8e:88:81:73:2f:a6:b1:96:b9:41:7e:40:ba:1c: df:47:90:6f:c9:e3:cb:eb:1e:97:ea:39:22:cd:c3:d4:ed:71: 09:e5:31:01:fd:61:8e:6f:fb:4c:17:e5:22:e5:80:e7:e1:42: e3:d1:20:8f:92:1a:a5:2f:e9:0f:88:de:0c:5c:78:c5:5d:09: b6:4c:21:7c:c4:85:3f:b6:bc:a2:7f:9e:ee:a6:49:b6:76:75: a4:cd:13:79:1d:97:9f:d6:54:98:36:32:3c:96:03:aa:ef:0a: d3:1c:9c:a9:f0:32:4b:94:85:cf:ea:52:e3:93:24:45:a3:e6: 46:12:b4:5e:4b:83:45:80:b2:43:9d:8b:dd:e7:37:fb:78:db: 15:23:ad:65:54:d5:ea:e1:d2:6d:c8:8b:02:fe:0c:6d:89:e2: 08:6a:09:f6:18:f5:67:e1:33:8e:27:5b:d6:4b:5b:6d:ba:fe: cf:c3:4d:ca:5b:eb:00:bf:ab:01:df:5f:b7:52:06:c0:31:c6: d9:f4:f6:8f:5e:f8:14:ef:c4:ef:8d:13:98:fa:65:c7:17:5f: 55:73:ce:6a:a8:d9:87:a1:1f:00:6c:77:60:a6:fe:f1:e9:45: 2f:a7:b2:14:57:90:28:f3:f2:91:45:7c:e4:02:63:ad:23:b2: a6:99:bf:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOoedeGwxWcgTXWsF3EX/5J4sTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZBMDND NjBBRUNEMzAeFw0yNjA5MjUwMTQ3MzJaFw0yNjA5MjYwMjI2MzJaMDMxMTAvBgNV BAMTKDUxNkE2OTQ3OTc0MTQyQkFBNTMwMjk3N0I0MjA4OEJDN0E1REJFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdHD5fz+nutYIX1FF3IR5Q4k1e trg4awOuKlwKfdcEq2S5SsPqElEWZ90nu2sBdRdno0HCNMEwyZpL8JXo2ivjDvNm 3U0u8BIpuo1TublOBSfrlnBRhqY3s9TsCVqhY5IArtQZxolHQO3aKq27kLZGy2z6 eCtdkkEaEi/47HzWzTo0D1bYk0xO/iacyaP5KjfGkp6Zx3WZwOgY40qeoz79vo0i jOkXjJ6RKwQVLUgx7+hruwnhbHUCy9yvxYgrdUdxGYBN+IkM9LTffz5szfqubbom llmNqjIp6M5jMMuM88m0FSZx0CK82y79uZ8gk+zP79IIlb7gX+5AoVOBNCNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUWppR5dBQrqlMCl3tCCIvHpdvpIwHwYDVR0j BBgwFoAUDn8cOkEYl0mOGc5kxcJqA8YK7NMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTEzZGUzZWMtNGQzYy00NDAyLWE3YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0 MTE4OTc0OThFMTlDRTY0QzVDMjZBMDNDNjBBRUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wRTdGMUMzQTQxMTg5NzQ5OEUxOUNFNjRDNUMyNkEwM0M2MEFF Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEU3RjFDM0E0MTE4OTc0OThFMTlDRTY0QzVDMjZB MDNDNjBBRUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBdFpeOiIFzL6axlrlBfkC6HN9HkG/J48vr HpfqOSLNw9TtcQnlMQH9YY5v+0wX5SLlgOfhQuPRII+SGqUv6Q+I3gxceMVdCbZM IXzEhT+2vKJ/nu6mSbZ2daTNE3kdl5/WVJg2MjyWA6rvCtMcnKnwMkuUhc/qUuOT JEWj5kYStF5Lg0WAskOdi93nN/t42xUjrWVU1erh0m3IiwL+DG2J4ghqCfYY9Wfh M44nW9ZLW226/s/DTcpb6wC/qwHfX7dSBsAxxtn09o9e+BTvxO+NE5j6ZccXX1Vz zmqo2YehHwBsd2Cm/vHpRS+nshRXkCjz8pFFfOQCY60jsqaZv2k= -----END CERTIFICATE-----Generated at Fri Sep 25 17:35:37 2026 by rpki-client