$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft File: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft (raw, json) Hash identifier: eiJB6UbprOBsd+tNx55gPt0/erVMkf9FIprK1vJ+wZE= Subject key identifier: 14:03:5A:0F:84:6D:9C:FE:41:C0:A0:07:A3:21:79:8A:F7:4A:EE:24 Authority key identifier: 0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 Certificate issuer: /CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Certificate serial: 1E21D94017E251FFE2FF75C1DB5E9397C8750CFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft Manifest number: F9 Signing time: Tue 03 Nov 2026 22:05:21 +0000 Manifest this update: Tue 03 Nov 2026 22:00:21 +0000 Manifest next update: Thu 05 Nov 2026 01:13:21 +0000 Files and hashes: 1: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: mwSnVoqEhlM2lDBuSkv9Lk0pH8PdVGL8EzeI43YHgNM=) 2: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: Gc3lbfky0bPOcbJ53df4bfJv1IIZalpAJC7Z0mwM6C8=) 3: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: Kwk5pernXmim9KIGTT8s13y4BcSyxFt8vOqda3e394A=) 4: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl (hash: 9tMzSE6jCfVgEiluH4wWRjddNy9edqVzzBNi5sJDJJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 01:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:21:d9:40:17:e2:51:ff:e2:ff:75:c1:db:5e:93:97:c8:75:0c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Validity Not Before: Nov 3 22:00:21 2026 GMT Not After : Nov 5 01:13:21 2026 GMT Subject: CN=14035A0F846D9CFE41C0A007A321798AF74AEE24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:26:25:73:2a:d6:c4:f4:9c:09:81:28:11:b8: 02:5b:b2:7d:26:ba:75:ff:b2:b3:e5:4c:8d:aa:5c: eb:d0:57:01:32:24:43:19:65:af:8d:ea:13:a2:56: 4d:92:22:12:d1:38:3e:06:1d:ff:97:c3:90:36:2e: a1:ec:88:97:a9:98:68:ae:09:ce:9d:ed:91:79:a5: 30:74:24:49:c2:91:c4:4b:e5:bb:4a:c7:e7:5f:82: 05:96:ae:7a:12:66:b0:13:9e:15:af:a6:0b:e2:06: 74:7a:e3:57:b3:05:dd:0c:e3:7f:84:14:1a:fc:b3: fc:15:08:21:77:ed:af:fc:16:38:bc:45:cd:e0:b5: 03:ce:d8:3d:9d:9a:8b:b2:cc:b9:04:67:7f:4e:d2: a2:db:4f:a4:36:f0:16:4a:d3:55:37:aa:97:7f:f3: cc:da:1c:38:39:02:c1:53:62:3a:24:1e:9d:7a:33: fc:51:62:fe:13:39:6c:78:3e:5c:66:bb:de:ef:6d: 99:42:0a:77:ea:66:49:dd:b6:dc:5c:55:0f:40:5b: ee:97:50:6d:54:a9:3f:b5:47:96:5b:76:43:8a:3c: f7:52:18:4c:54:9d:b5:10:cf:c4:a7:76:1f:eb:44: 28:25:d6:6a:ff:52:9d:59:4e:ab:11:f8:86:60:56: d2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:03:5A:0F:84:6D:9C:FE:41:C0:A0:07:A3:21:79:8A:F7:4A:EE:24 X509v3 Authority Key Identifier: keyid:0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:65:4b:ea:02:c1:1f:2a:16:6d:ef:63:f6:d7:20:84:65:09: a7:0d:fa:6c:59:9b:42:c8:32:ed:b5:a2:07:17:96:6d:8d:1e: 88:62:62:44:23:30:b0:fc:11:00:34:19:78:7a:e5:f1:3c:83: f0:97:2d:93:cf:d7:32:2e:53:63:fb:19:34:4b:dc:84:09:27: 35:11:e6:b8:1c:27:99:3a:b0:11:a1:81:76:74:14:a2:4f:62: b1:1c:f4:dd:bf:7d:3f:57:95:bc:77:d4:22:8c:9b:82:0b:cf: d3:3c:c2:bd:e0:dd:07:7c:50:ec:ef:5f:69:ea:ae:96:07:83: 1e:54:ce:05:03:a8:d6:5f:0d:ae:16:8c:8c:a4:90:1f:5c:d6: 7c:3d:00:51:1b:91:00:41:89:79:f3:ac:f2:b1:40:3b:15:54: f1:15:a6:22:df:69:17:41:24:c5:68:e7:72:ff:2b:d1:d0:32: d2:40:42:e3:a2:f8:44:1d:13:3c:34:1d:6e:50:9a:0c:9d:47: ab:53:cc:7c:42:66:e1:ca:01:4c:3a:e0:b1:4b:e5:ec:d0:07: 91:71:3b:4c:d1:79:90:8a:45:80:27:48:45:aa:7b:a2:b2:f2: 6d:a0:83:8f:40:2e:39:28:d3:80:2d:0f:d8:c0:5b:86:ad:d7: 64:45:bf:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiHZQBfiUf/i/3XB216Tl8h1DPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4 MjZBREY3MTAeFw0yNjExMDMyMjAwMjFaFw0yNjExMDUwMTEzMjFaMDMxMTAvBgNV BAMTKDE0MDM1QTBGODQ2RDlDRkU0MUMwQTAwN0EzMjE3OThBRjc0QUVFMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVJiVzKtbE9JwJgSgRuAJbsn0m unX/srPlTI2qXOvQVwEyJEMZZa+N6hOiVk2SIhLROD4GHf+Xw5A2LqHsiJepmGiu Cc6d7ZF5pTB0JEnCkcRL5btKx+dfggWWrnoSZrATnhWvpgviBnR641ezBd0M43+E FBr8s/wVCCF37a/8Fji8Rc3gtQPO2D2dmouyzLkEZ39O0qLbT6Q28BZK01U3qpd/ 88zaHDg5AsFTYjokHp16M/xRYv4TOWx4Plxmu97vbZlCCnfqZkndttxcVQ9AW+6X UG1UqT+1R5ZbdkOKPPdSGExUnbUQz8Sndh/rRCgl1mr/Up1ZTqsR+IZgVtL5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFANaD4RtnP5BwKAHoyF5ivdK7iQwHwYDVR0j BBgwFoAUDqGuL8wxlYEISWb85yDguYJq33EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdjOGEwYzMtMzdmNS00NjY3LWE0MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZD QzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4MjZBREY3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRUExQUUyRkNDMzE5NTgxMDg0OTY2RkNFNzIwRTBCOTgyNkFE RjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUw Qjk4MjZBREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZlS+oCwR8qFm3vY/bXIIRlCacN+mxZm0LI Mu21ogcXlm2NHohiYkQjMLD8EQA0GXh65fE8g/CXLZPP1zIuU2P7GTRL3IQJJzUR 5rgcJ5k6sBGhgXZ0FKJPYrEc9N2/fT9Xlbx31CKMm4ILz9M8wr3g3Qd8UOzvX2nq rpYHgx5UzgUDqNZfDa4WjIykkB9c1nw9AFEbkQBBiXnzrPKxQDsVVPEVpiLfaRdB JMVo53L/K9HQMtJAQuOi+EQdEzw0HW5QmgydR6tTzHxCZuHKAUw64LFL5ezQB5Fx O0zReZCKRYAnSEWqe6Ky8m2gg49ALjko04AtD9jAW4at12RFv+s= -----END CERTIFICATE-----Generated at Wed Nov 4 05:29:01 2026 by rpki-client