$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft File: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft (raw, json) Hash identifier: jzHUiA/cqB9AYBPAQFN/5I9KOL4Aw8B6c9c+0PRxlw4= Subject key identifier: F8:5E:55:B6:0B:09:15:98:E8:06:B8:AE:C0:89:B8:AC:F6:5A:B1:8A Authority key identifier: 0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 Certificate issuer: /CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Certificate serial: 55F4099AACF9416BAE07425A1B7795193F07A20F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:41:02 +0000 Manifest this update: Tue 12 May 2026 09:36:02 +0000 Manifest next update: Wed 13 May 2026 12:43:02 +0000 Files and hashes: 1: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl (hash: ifUHtTwGSypnpS+hv+9dmR8TGqlonlMCLBAh9ZY7xBM=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: ccmy2LH8bOvIWU+GPrMO4FL2775rB00lVz7jkl8O1gM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f4:09:9a:ac:f9:41:6b:ae:07:42:5a:1b:77:95:19:3f:07:a2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Validity Not Before: May 12 09:36:02 2026 GMT Not After : May 13 12:43:02 2026 GMT Subject: CN=F85E55B60B091598E806B8AEC089B8ACF65AB18A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:97:23:c3:10:78:6b:27:03:ce:33:60:02: f8:56:53:c0:e4:43:f0:ad:0f:dc:c1:d1:1f:7f:da: 0b:ff:ef:59:e6:ca:34:78:f1:6b:a2:d0:f3:19:99: ad:6c:27:1c:7d:35:ad:2b:50:a4:ce:4a:23:de:d4: 09:8d:99:1f:d1:57:a4:4a:e2:df:27:dd:fc:7e:4e: b9:83:de:92:3a:0b:62:40:f8:dd:44:ec:0e:99:75: 91:4e:dd:41:6d:a0:6f:3c:9f:72:2e:49:7f:11:21: 51:bd:89:e8:86:de:05:61:76:34:c1:be:f5:a6:bf: 40:ab:d3:a2:b0:f5:d5:f6:f7:8d:54:5f:b9:4f:a1: 21:7d:ac:d7:57:77:57:fa:1e:c6:7d:b9:da:98:27: 5e:b2:30:02:bc:5a:4f:71:55:35:ee:a4:4b:64:27: 72:2e:12:23:c5:e5:35:82:75:4d:7d:d5:a4:44:e9: 0a:26:99:21:20:c7:17:9f:d9:e2:b6:c8:6b:be:c8: 62:0f:34:ad:33:74:ec:10:1a:16:0b:97:74:e8:75: f6:a9:17:c7:d5:e5:d9:a1:92:09:d0:04:02:74:55: 70:75:99:68:7d:31:71:82:c7:10:06:d8:7b:20:e2: 68:fc:6f:00:01:dc:67:cb:e3:04:57:5c:b8:b3:ee: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5E:55:B6:0B:09:15:98:E8:06:B8:AE:C0:89:B8:AC:F6:5A:B1:8A X509v3 Authority Key Identifier: keyid:0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:92:79:2a:a2:35:e2:4d:24:99:aa:17:6b:a0:b8:0a:32:d1: 69:59:90:44:d3:9b:a5:b3:49:f2:ea:55:f7:c8:36:f9:34:42: c5:54:6c:88:ed:09:f3:cf:52:7f:af:a3:72:40:0b:4b:9b:89: 18:05:06:63:e7:ce:6e:fc:73:e4:36:79:88:c5:b6:68:73:3d: bf:65:6c:8c:22:bf:37:a0:45:d6:2b:3a:82:00:54:f0:30:07: 9c:75:41:b0:1b:90:4a:77:92:f7:17:e2:b8:7a:bd:ed:ef:c2: 65:2d:fb:4b:8a:10:dd:1f:69:41:a8:dc:73:dc:a4:37:c5:a7: b5:72:58:63:9f:aa:6f:b6:95:a3:81:a6:a6:e7:f2:8a:5f:d4: fa:c8:f3:57:c9:b6:6d:ea:58:1e:92:0f:af:54:82:79:06:b4: d3:e7:4b:10:dc:b0:bb:68:86:22:cf:c3:44:5f:f5:55:3b:ec: d3:60:3c:a0:ef:ed:92:67:e4:7b:56:f5:e4:76:2a:2a:14:b2: c7:b9:fb:e4:8b:31:fd:2e:93:be:0e:b8:34:eb:b0:a4:28:3a: b7:fd:30:09:92:52:e4:f4:49:c3:bc:54:2a:15:15:78:da:da: 5b:be:98:56:dd:15:7d:81:7f:3f:18:f1:79:4c:1b:cc:c0:ff: 0f:2f:ad:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVfQJmqz5QWuuB0JaG3eVGT8Hog8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcw QUFDRThGNjAeFw0yNjA1MTIwOTM2MDJaFw0yNjA1MTMxMjQzMDJaMDMxMTAvBgNV BAMTKEY4NUU1NUI2MEIwOTE1OThFODA2QjhBRUMwODlCOEFDRjY1QUIxOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIh5cjwxB4aycDzjNgAvhWU8Dk Q/CtD9zB0R9/2gv/71nmyjR48Wui0PMZma1sJxx9Na0rUKTOSiPe1AmNmR/RV6RK 4t8n3fx+TrmD3pI6C2JA+N1E7A6ZdZFO3UFtoG88n3IuSX8RIVG9ieiG3gVhdjTB vvWmv0Cr06Kw9dX2941UX7lPoSF9rNdXd1f6HsZ9udqYJ16yMAK8Wk9xVTXupEtk J3IuEiPF5TWCdU191aRE6QommSEgxxef2eK2yGu+yGIPNK0zdOwQGhYLl3Todfap F8fV5dmhkgnQBAJ0VXB1mWh9MXGCxxAG2Hsg4mj8bwAB3GfL4wRXXLiz7pRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+F5VtgsJFZjoBriuwIm4rPZasYowHwYDVR0j BBgwFoAUCp5g9Kx6xx4kaJNbyl0Nlwqs6PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRB QzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcwQUFDRThGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQTlFNjBGNEFDN0FDNzFFMjQ2ODkzNUJDQTVEMEQ5NzBBQUNF OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBE OTcwQUFDRThGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWSeSqiNeJNJJmqF2uguAoy0WlZkETTm6Wz SfLqVffINvk0QsVUbIjtCfPPUn+vo3JAC0ubiRgFBmPnzm78c+Q2eYjFtmhzPb9l bIwivzegRdYrOoIAVPAwB5x1QbAbkEp3kvcX4rh6ve3vwmUt+0uKEN0faUGo3HPc pDfFp7VyWGOfqm+2laOBpqbn8opf1PrI81fJtm3qWB6SD69UgnkGtNPnSxDcsLto hiLPw0Rf9VU77NNgPKDv7ZJn5HtW9eR2KioUsse5++SLMf0uk74OuDTrsKQoOrf9 MAmSUuT0ScO8VCoVFXja2lu+mFbdFX2Bfz8Y8XlMG8zA/w8vrfg= -----END CERTIFICATE-----Generated at Tue May 12 23:27:51 2026 by rpki-client