$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft File: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft (raw, json) Hash identifier: oItNtA0rKrK5ErMSIyRfiUK0//o0Ynwk/qARMMLuJ6Y= Subject key identifier: 8A:22:42:C1:D0:43:B4:11:0C:68:64:2B:24:24:3D:3B:C4:03:95:6C Authority key identifier: 0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 Certificate issuer: /CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Certificate serial: 4AB7FBC777B971E90141625866387A9B01831D13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft Manifest number: BA Signing time: Thu 17 Sep 2026 07:58:19 +0000 Manifest this update: Thu 17 Sep 2026 07:53:19 +0000 Manifest next update: Fri 18 Sep 2026 09:47:19 +0000 Files and hashes: 1: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: mwSnVoqEhlM2lDBuSkv9Lk0pH8PdVGL8EzeI43YHgNM=) 2: 0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl (hash: DyggiWe7KUcktDRMi6gkI6aVRmFf5VHTPoLtxA4EByk=) 3: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: Kwk5pernXmim9KIGTT8s13y4BcSyxFt8vOqda3e394A=) 4: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: Gc3lbfky0bPOcbJ53df4bfJv1IIZalpAJC7Z0mwM6C8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b7:fb:c7:77:b9:71:e9:01:41:62:58:66:38:7a:9b:01:83:1d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EA1AE2FCC319581084966FCE720E0B9826ADF71 Validity Not Before: Sep 17 07:53:19 2026 GMT Not After : Sep 18 09:47:19 2026 GMT Subject: CN=8A2242C1D043B4110C68642B24243D3BC403956C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:b3:f5:64:6f:8e:d3:73:ce:1f:18:47:ed: 02:d9:33:b7:a2:55:a9:37:e2:1b:42:41:5e:e4:77: 35:41:ea:ae:40:fa:96:7c:33:d4:a8:a9:c3:88:b7: b2:11:d6:4a:80:c1:47:69:b5:29:46:fe:e6:be:44: 37:ae:be:75:b3:23:f5:32:cd:cf:cb:aa:84:6f:d4: b4:70:55:68:a0:16:ff:63:2b:97:de:a2:17:18:b0: ca:36:a2:f8:29:4f:6a:7c:9c:4d:d0:e1:1b:5e:06: 6f:14:b6:74:4b:f1:ce:ef:b3:0b:a3:92:86:36:90: 16:16:25:1e:b5:e7:c8:f2:1e:fd:34:c8:66:af:c5: e7:1a:97:40:17:f3:62:24:b8:2b:6f:61:5f:d8:f6: 2c:f3:94:3b:9d:39:ee:38:7f:0f:25:89:8c:db:df: 4a:1a:db:a8:5b:b8:52:3f:70:b5:a6:72:e9:7b:89: 3a:7c:a6:d9:18:29:82:5f:8b:af:9c:6d:5f:8b:62: bf:e7:19:5d:f2:12:d0:9d:23:bf:50:ea:bc:8c:b2: 29:e5:99:0c:7d:62:c6:95:2a:13:be:7e:25:df:09: e7:51:17:04:78:8e:42:64:6f:23:d6:ad:3f:de:8b: d5:c9:ec:af:df:f3:a2:0b:0b:93:78:a3:b4:0d:75: 04:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:22:42:C1:D0:43:B4:11:0C:68:64:2B:24:24:3D:3B:C4:03:95:6C X509v3 Authority Key Identifier: keyid:0E:A1:AE:2F:CC:31:95:81:08:49:66:FC:E7:20:E0:B9:82:6A:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0EA1AE2FCC319581084966FCE720E0B9826ADF71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/0EA1AE2FCC319581084966FCE720E0B9826ADF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5a:ac:79:63:9b:5f:80:81:12:3c:b9:0c:20:7b:f7:9a:42: 26:cb:14:a8:d4:b0:56:4d:66:09:96:dd:f6:67:c4:b7:a6:d8: 0e:5f:80:15:70:bc:f9:a9:3f:cf:d1:ab:8a:15:00:be:82:3a: 81:18:b7:78:dd:0e:1d:f4:33:a3:2b:b1:3a:02:4c:01:fd:02: b3:b6:2b:a8:f8:78:10:c6:30:ec:2d:6e:88:89:2f:1f:9c:90: 18:e4:1a:58:04:e2:4f:2e:8b:47:7d:8a:d9:36:33:d9:43:34: 71:f2:78:ab:52:c2:91:4e:b6:ef:43:3a:8a:be:2d:35:63:91: 64:3c:74:66:08:ea:fe:3d:ea:0c:ba:b3:8d:01:d4:ca:8d:8b: c7:34:43:af:58:6e:a3:bc:9a:d5:7e:76:c6:56:e3:ad:60:12: 1f:6c:35:6d:e2:c5:a1:e5:1d:68:52:96:26:97:1f:74:35:91: ce:df:0c:c0:0f:07:20:93:20:e6:a5:8c:05:54:46:67:1f:1d: 91:6f:51:59:fd:6c:24:af:ac:18:07:ce:16:72:35:a5:23:47: a6:8b:3c:b6:62:3f:45:bf:66:ac:5e:47:54:7f:c4:d9:39:d1: b9:0a:8a:85:8d:d0:41:f8:ad:07:dc:89:8a:db:27:c9:d7:8d: f7:17:7a:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSrf7x3e5cekBQWJYZjh6mwGDHRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4 MjZBREY3MTAeFw0yNjA5MTcwNzUzMTlaFw0yNjA5MTgwOTQ3MTlaMDMxMTAvBgNV BAMTKDhBMjI0MkMxRDA0M0I0MTEwQzY4NjQyQjI0MjQzRDNCQzQwMzk1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0RbP1ZG+O03POHxhH7QLZM7ei Vak34htCQV7kdzVB6q5A+pZ8M9SoqcOIt7IR1kqAwUdptSlG/ua+RDeuvnWzI/Uy zc/LqoRv1LRwVWigFv9jK5feohcYsMo2ovgpT2p8nE3Q4RteBm8UtnRL8c7vswuj koY2kBYWJR6158jyHv00yGavxecal0AX82IkuCtvYV/Y9izzlDudOe44fw8liYzb 30oa26hbuFI/cLWmcul7iTp8ptkYKYJfi6+cbV+LYr/nGV3yEtCdI79Q6ryMsinl mQx9YsaVKhO+fiXfCedRFwR4jkJkbyPWrT/ei9XJ7K/f86ILC5N4o7QNdQQtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiiJCwdBDtBEMaGQrJCQ9O8QDlWwwHwYDVR0j BBgwFoAUDqGuL8wxlYEISWb85yDguYJq33EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdjOGEwYzMtMzdmNS00NjY3LWE0MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZD QzMxOTU4MTA4NDk2NkZDRTcyMEUwQjk4MjZBREY3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRUExQUUyRkNDMzE5NTgxMDg0OTY2RkNFNzIwRTBCOTgyNkFE RjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvMEVBMUFFMkZDQzMxOTU4MTA4NDk2NkZDRTcyMEUw Qjk4MjZBREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdarHljm1+AgRI8uQwge/eaQibLFKjUsFZN ZgmW3fZnxLem2A5fgBVwvPmpP8/Rq4oVAL6COoEYt3jdDh30M6MrsToCTAH9ArO2 K6j4eBDGMOwtboiJLx+ckBjkGlgE4k8ui0d9itk2M9lDNHHyeKtSwpFOtu9DOoq+ LTVjkWQ8dGYI6v496gy6s40B1MqNi8c0Q69YbqO8mtV+dsZW461gEh9sNW3ixaHl HWhSliaXH3Q1kc7fDMAPByCTIOaljAVURmcfHZFvUVn9bCSvrBgHzhZyNaUjR6aL PLZiP0W/ZqxeR1R/xNk50bkKioWN0EH4rQfciYrbJ8nXjfcXenM= -----END CERTIFICATE-----Generated at Thu Sep 17 12:33:33 2026 by rpki-client