$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft File: E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft (raw, json) Hash identifier: 3nPoHgMhp4dm40lAh1uVnbvPEm1vstqZdZ9o/hpAe/w= Subject key identifier: 92:C6:0C:AB:C8:70:A0:E6:52:7C:1D:1E:BC:9F:81:E5:2D:72:CE:72 Authority key identifier: E0:96:FE:DB:AF:F2:AD:B7:3C:73:E7:E0:98:CE:49:4B:9C:33:68:17 Certificate issuer: /CN=E096FEDBAFF2ADB73C73E7E098CE494B9C336817 Certificate serial: 123FECA55206668D4C410CD5A26BB4832764363A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:34:28 +0000 Manifest this update: Wed 16 Sep 2026 20:29:28 +0000 Manifest next update: Thu 17 Sep 2026 22:00:28 +0000 Files and hashes: 1: E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl (hash: 1pREE5aQnTeLRe5B1p+YQ3tuLXvnaBriz4qgQ7V9TAY=) 2: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rkWYYYj/vAK/TOK+jQF6QsvjFqSfb6NPiKItrVefpzo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3f:ec:a5:52:06:66:8d:4c:41:0c:d5:a2:6b:b4:83:27:64:36:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E096FEDBAFF2ADB73C73E7E098CE494B9C336817 Validity Not Before: Sep 16 20:29:28 2026 GMT Not After : Sep 17 22:00:28 2026 GMT Subject: CN=92C60CABC870A0E6527C1D1EBC9F81E52D72CE72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:77:98:89:33:1a:43:17:7e:eb:21:64:70:8c: 46:33:ba:ca:1c:b0:0c:46:60:6b:65:2b:7a:4a:73: 8f:83:0d:9d:2c:69:7a:7e:d5:35:59:e6:d3:c5:27: f7:6d:a1:1e:f2:7f:17:8c:b3:21:55:05:24:d2:d8: f5:50:2c:c3:57:29:43:a3:50:90:71:65:d3:42:f3: 8b:88:c3:b7:be:63:f5:17:af:ca:dc:3f:02:b0:a4: 7f:3d:d0:8a:d8:a1:44:4d:fd:45:87:80:a2:e6:85: d3:41:25:bb:a2:86:a9:02:a2:39:3a:30:03:a1:55: 46:2d:50:4e:69:fd:2d:2a:39:fa:03:d4:c6:38:0b: 31:33:b7:1e:4d:ad:26:48:27:e2:e0:50:26:d3:f1: a2:96:f7:0c:20:6b:e9:98:ba:82:10:b1:93:d6:34: 8c:a8:9d:a5:88:0f:86:49:c5:c7:85:16:0b:ce:2a: 40:b3:8c:83:ce:f2:32:2e:53:77:a2:43:7d:e3:82: df:01:ba:77:66:d1:34:9c:a1:9d:e5:1e:f9:79:54: 1c:fe:59:1c:c0:df:9b:60:50:9e:4d:0c:fb:74:68: 9b:7c:ab:8b:8c:ad:8a:d9:16:21:be:f6:3a:f2:3f: c3:09:7f:9c:4b:a9:f6:a6:7f:fe:38:fc:a7:89:1e: a1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C6:0C:AB:C8:70:A0:E6:52:7C:1D:1E:BC:9F:81:E5:2D:72:CE:72 X509v3 Authority Key Identifier: keyid:E0:96:FE:DB:AF:F2:AD:B7:3C:73:E7:E0:98:CE:49:4B:9C:33:68:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/E096FEDBAFF2ADB73C73E7E098CE494B9C336817.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ae:1e:da:d1:f4:b6:a1:15:86:1c:07:f6:b0:27:f9:f6:e4: 3f:ea:63:84:3b:08:69:16:eb:35:6a:da:b8:66:c8:9e:b3:09: 8a:60:d3:47:7c:bf:8c:84:8b:7b:38:54:b9:b9:7c:64:68:52: 08:dc:f0:30:80:9f:21:5d:39:b3:41:bf:fd:2a:98:b0:10:12: d5:21:20:61:98:67:b2:c4:8b:10:a4:13:19:ce:5e:b5:52:36: f4:52:e7:0b:23:45:f9:6c:30:5e:82:bb:01:57:cd:89:7e:41: 14:1d:c4:31:8e:da:9d:39:5f:d1:99:a9:af:ae:d9:d9:e4:27: c1:16:1e:b6:f5:83:d0:22:52:ed:dd:60:5f:c6:a3:42:7f:b6: 93:03:c6:0e:16:9b:13:4d:ac:1b:81:69:29:fe:99:e7:49:92: 7e:69:00:23:2c:80:81:03:01:07:eb:f0:92:63:f2:a7:20:ea: 14:1f:ec:ec:a9:43:09:cb:88:ee:47:2e:97:9b:8f:c8:49:9d: b8:96:90:3b:fc:38:62:3f:f4:3a:8a:dc:93:8b:c9:6d:1e:71: aa:ad:08:5a:6c:ec:a3:94:2b:79:da:84:c6:8a:fd:16:39:64: 72:9b:ba:71:29:e2:7f:15:4c:9b:26:e9:3b:73:5a:c9:08:54: c1:f5:81:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEj/spVIGZo1MQQzVomu0gydkNjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5NkZFREJBRkYyQURCNzNDNzNFN0UwOThDRTQ5NEI5 QzMzNjgxNzAeFw0yNjA5MTYyMDI5MjhaFw0yNjA5MTcyMjAwMjhaMDMxMTAvBgNV BAMTKDkyQzYwQ0FCQzg3MEEwRTY1MjdDMUQxRUJDOUY4MUU1MkQ3MkNFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRd5iJMxpDF37rIWRwjEYzusoc sAxGYGtlK3pKc4+DDZ0saXp+1TVZ5tPFJ/dtoR7yfxeMsyFVBSTS2PVQLMNXKUOj UJBxZdNC84uIw7e+Y/UXr8rcPwKwpH890IrYoURN/UWHgKLmhdNBJbuihqkCojk6 MAOhVUYtUE5p/S0qOfoD1MY4CzEztx5NrSZIJ+LgUCbT8aKW9wwga+mYuoIQsZPW NIyonaWID4ZJxceFFgvOKkCzjIPO8jIuU3eiQ33jgt8Bundm0TScoZ3lHvl5VBz+ WRzA35tgUJ5NDPt0aJt8q4uMrYrZFiG+9jryP8MJf5xLqfamf/44/KeJHqEPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUksYMq8hwoOZSfB0evJ+B5S1yznIwHwYDVR0j BBgwFoAU4Jb+26/yrbc8c+fgmM5JS5wzaBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGYwOWNiYjktMWFhZC00YjFhLWJkNGUtMDZmZDg0NDcyZmQ3LzAvRTA5NkZFREJB RkYyQURCNzNDNzNFN0UwOThDRTQ5NEI5QzMzNjgxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDk2RkVEQkFGRjJBREI3M0M3M0U3RTA5OENFNDk0QjlDMzM2 ODE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvRTA5NkZFREJBRkYyQURCNzNDNzNFN0UwOThDRTQ5 NEI5QzMzNjgxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKuHtrR9LahFYYcB/awJ/n25D/qY4Q7CGkW 6zVq2rhmyJ6zCYpg00d8v4yEi3s4VLm5fGRoUgjc8DCAnyFdObNBv/0qmLAQEtUh IGGYZ7LEixCkExnOXrVSNvRS5wsjRflsMF6CuwFXzYl+QRQdxDGO2p05X9GZqa+u 2dnkJ8EWHrb1g9AiUu3dYF/Go0J/tpMDxg4WmxNNrBuBaSn+medJkn5pACMsgIED AQfr8JJj8qcg6hQf7OypQwnLiO5HLpebj8hJnbiWkDv8OGI/9DqK3JOLyW0ecaqt CFps7KOUK3nahMaK/RY5ZHKbunEp4n8VTJsm6TtzWskIVMH1gSI= -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:36 2026 by rpki-client