$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.mft File: 0A81694898CE419119C35D18D0184407C5732E00.mft (raw, json) Hash identifier: b9Qy6lUJTxXFgxcQMreB76PIs0MWUQ4/AwQgKP6A/Cg= Subject key identifier: 2D:D9:CD:43:DA:8B:0F:01:8F:B2:8B:46:C3:F5:F6:8C:4A:FA:12:B9 Authority key identifier: 0A:81:69:48:98:CE:41:91:19:C3:5D:18:D0:18:44:07:C5:73:2E:00 Certificate issuer: /CN=0A81694898CE419119C35D18D0184407C5732E00 Certificate serial: 18ABA05E9ED46435FCE68A67C649AE5E11C5E91F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A81694898CE419119C35D18D0184407C5732E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 23:55:36 +0000 Manifest this update: Wed 23 Sep 2026 23:50:36 +0000 Manifest next update: Fri 25 Sep 2026 03:18:36 +0000 Files and hashes: 1: 3136302e32322e33342e302f32332d3234203d3e20313532383136.roa (hash: mVg+f0GQa8yORXdjVLeija5QuuIpHHtSMRvf8xSLYBY=) 2: 0A81694898CE419119C35D18D0184407C5732E00.crl (hash: nPZjCya3LIR3wEuLv1P9gxPYJiJluyP5NlFpDnLIPdM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.crl rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A81694898CE419119C35D18D0184407C5732E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ab:a0:5e:9e:d4:64:35:fc:e6:8a:67:c6:49:ae:5e:11:c5:e9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A81694898CE419119C35D18D0184407C5732E00 Validity Not Before: Sep 23 23:50:36 2026 GMT Not After : Sep 25 03:18:36 2026 GMT Subject: CN=2DD9CD43DA8B0F018FB28B46C3F5F68C4AFA12B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:77:6f:29:0b:a1:38:67:d8:d2:e9:cd:f6: 3f:7f:42:b5:55:32:54:4f:f2:d2:a4:2c:84:85:df: 7e:ad:7c:ec:67:cc:a9:19:5b:74:f7:07:10:a5:90: a1:81:fb:3a:06:de:a5:ba:0c:3b:22:06:6d:2a:39: dd:45:a5:40:4f:92:09:d2:54:ec:be:4d:7e:b8:d5: e3:7f:45:8d:0e:65:97:b5:04:7e:32:ab:71:02:78: e6:23:29:0a:86:52:d0:69:1d:76:8f:d9:fb:68:ce: 37:5c:d9:ba:a5:e4:f5:08:f4:e4:8c:28:02:ad:db: 06:b2:da:28:bc:cd:e8:cd:3a:81:05:1d:92:5e:a5: d3:85:19:6d:c2:f9:51:9c:de:f9:20:48:bc:25:07: 7d:8e:2e:12:ce:80:85:2b:6d:10:60:c9:53:ff:d5: 73:16:48:37:54:dd:55:1b:9f:a6:15:c5:6b:13:fc: a5:01:d7:70:c9:d6:9d:47:a3:b7:c1:45:e8:db:02: 01:dd:64:00:1f:64:a8:00:97:e5:b2:93:58:5a:a0: b1:64:11:bf:5a:be:f1:5e:f6:75:b6:68:0d:00:d4: a6:f0:dd:02:60:3a:98:29:66:1e:9b:a7:5d:d1:33: a0:74:eb:b8:e0:f4:d1:53:ab:95:7b:67:ac:65:82: e9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D9:CD:43:DA:8B:0F:01:8F:B2:8B:46:C3:F5:F6:8C:4A:FA:12:B9 X509v3 Authority Key Identifier: keyid:0A:81:69:48:98:CE:41:91:19:C3:5D:18:D0:18:44:07:C5:73:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A81694898CE419119C35D18D0184407C5732E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ee:0f:9e:48:3c:9b:69:09:0b:f0:95:e5:d7:f8:52:7d:e9: d9:9a:d4:f0:4b:c8:0d:7c:1f:62:be:2a:00:2d:d9:6a:e5:9d: 8b:fc:5a:12:d2:dc:3c:87:bb:db:85:88:2e:2f:aa:ad:6d:5b: 3b:00:98:55:4c:00:1a:e6:36:c7:52:00:24:4e:84:2b:6b:91: d4:25:27:ca:c0:1c:78:34:8d:22:1e:ef:8d:4e:21:d2:e4:9b: e3:33:62:37:27:30:1a:05:f5:fe:aa:bc:d6:d8:db:98:f3:c0: cc:a0:b8:c6:da:8d:d0:fd:83:6d:02:a4:66:49:e4:0e:b5:0b: 4b:b7:b5:67:69:6d:d3:d7:76:91:d1:36:3b:82:b6:54:10:90: e4:6a:06:b6:47:2c:f9:04:6d:c6:be:8c:cd:2b:70:1d:f4:86: 23:83:1e:38:aa:53:37:b1:d3:1d:fe:df:3a:4d:83:15:51:66: b3:1b:79:83:d1:cf:85:92:f9:c7:b0:f3:46:05:6f:8f:3a:e2: 61:44:5d:bf:f2:6b:1e:38:c4:c5:3e:7a:32:c5:d8:11:92:ed: 1e:3a:2a:b4:20:d5:57:be:f8:b4:9d:c9:e3:bb:dc:25:e2:be: 78:d3:60:2b:d1:d8:cf:b6:c4:0e:bf:08:a7:e9:52:5f:2b:75: e1:22:c5:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGKugXp7UZDX85opnxkmuXhHF6R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4MTY5NDg5OENFNDE5MTE5QzM1RDE4RDAxODQ0MDdD NTczMkUwMDAeFw0yNjA5MjMyMzUwMzZaFw0yNjA5MjUwMzE4MzZaMDMxMTAvBgNV BAMTKDJERDlDRDQzREE4QjBGMDE4RkIyOEI0NkMzRjVGNjhDNEFGQTEyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FXdvKQuhOGfY0unN9j9/QrVV MlRP8tKkLISF336tfOxnzKkZW3T3BxClkKGB+zoG3qW6DDsiBm0qOd1FpUBPkgnS VOy+TX641eN/RY0OZZe1BH4yq3ECeOYjKQqGUtBpHXaP2ftozjdc2bql5PUI9OSM KAKt2way2ii8zejNOoEFHZJepdOFGW3C+VGc3vkgSLwlB32OLhLOgIUrbRBgyVP/ 1XMWSDdU3VUbn6YVxWsT/KUB13DJ1p1Ho7fBRejbAgHdZAAfZKgAl+Wyk1haoLFk Eb9avvFe9nW2aA0A1Kbw3QJgOpgpZh6bp13RM6B067jg9NFTq5V7Z6xlgulnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULdnNQ9qLDwGPsotGw/X2jEr6ErkwHwYDVR0j BBgwFoAUCoFpSJjOQZEZw10Y0BhEB8VzLgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2I4OGE1MTMtZGViZi00ZDVjLTk1MWItZDk3NTlhMDkyZGU3LzAvMEE4MTY5NDg5 OENFNDE5MTE5QzM1RDE4RDAxODQ0MDdDNTczMkUwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQTgxNjk0ODk4Q0U0MTkxMTlDMzVEMThEMDE4NDQwN0M1NzMy RTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2I4OGE1MTMtZGViZi00ZDVjLTk1 MWItZDk3NTlhMDkyZGU3LzAvMEE4MTY5NDg5OENFNDE5MTE5QzM1RDE4RDAxODQ0 MDdDNTczMkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXuD55IPJtpCQvwleXX+FJ96dma1PBLyA18 H2K+KgAt2WrlnYv8WhLS3DyHu9uFiC4vqq1tWzsAmFVMABrmNsdSACROhCtrkdQl J8rAHHg0jSIe741OIdLkm+MzYjcnMBoF9f6qvNbY25jzwMyguMbajdD9g20CpGZJ 5A61C0u3tWdpbdPXdpHRNjuCtlQQkORqBrZHLPkEbca+jM0rcB30hiODHjiqUzex 0x3+3zpNgxVRZrMbeYPRz4WS+cew80YFb4864mFEXb/yax44xMU+ejLF2BGS7R46 KrQg1Ve++LSdyeO73CXivnjTYCvR2M+2xA6/CKfpUl8rdeEixZ0= -----END CERTIFICATE-----Generated at Thu Sep 24 03:59:11 2026 by rpki-client