$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft File: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft (raw, json) Hash identifier: cSWp6BgCeqfxwVy0peNR2U4XdjrzQGwCVj8WEHYYRd4= Subject key identifier: 54:50:83:E9:33:F2:0D:9A:D1:B8:C1:0A:77:82:74:B3:69:2C:DF:EE Authority key identifier: 0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B Certificate issuer: /CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Certificate serial: 19898BD0D55680E32620125A1C84A36EBBC8CE48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:54:38 +0000 Manifest this update: Thu 17 Sep 2026 00:49:38 +0000 Manifest next update: Fri 18 Sep 2026 01:01:38 +0000 Files and hashes: 1: 0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl (hash: TPucktwCSMaX1C3xR6VNtV6fprB6v+iI0nbCsrJN/3o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:89:8b:d0:d5:56:80:e3:26:20:12:5a:1c:84:a3:6e:bb:c8:ce:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B Validity Not Before: Sep 17 00:49:38 2026 GMT Not After : Sep 18 01:01:38 2026 GMT Subject: CN=545083E933F20D9AD1B8C10A778274B3692CDFEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:48:56:01:86:91:34:c4:91:18:29:d3:67: 58:ab:38:ec:89:f2:d0:df:02:b7:b3:16:32:9a:37: 29:b5:ac:9e:cb:db:34:68:bc:34:a9:43:ce:cb:a1: ef:5a:32:f5:79:9a:07:15:6e:5a:01:71:08:34:83: fe:ce:ea:a8:b5:f2:a4:9d:d7:eb:40:b6:40:75:f5: f3:9a:3e:cc:05:e8:58:b3:45:e0:f3:7d:a6:b0:7d: 1f:2e:41:97:54:59:e7:91:db:e6:d2:af:a2:0e:f1: e0:63:15:96:7e:2e:6b:11:fa:ec:fb:9b:4c:64:d3: 87:aa:6d:9e:a9:0a:21:8a:e8:15:8b:30:c5:0d:76: 0f:d9:f5:ca:83:6c:e3:62:b1:ec:ef:3c:52:0f:9a: 7b:e3:29:9c:48:6e:d9:c7:b9:f5:a7:d2:5c:a8:eb: 17:3b:b3:47:64:ae:15:9f:db:93:ad:b1:8a:db:8a: e3:46:d7:75:38:9e:05:ac:91:ce:fc:0e:c9:09:b9: 20:5a:8a:34:ac:ef:4e:33:e5:6a:53:b8:f2:3d:b4: 87:c9:2e:63:a7:8b:50:84:36:f8:48:8a:7e:bc:a0: e1:01:2d:2b:5b:8a:2f:36:ee:38:b8:d1:be:2e:b0: ad:ec:7a:fd:2f:92:3f:c2:68:67:81:eb:96:8f:b0: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:50:83:E9:33:F2:0D:9A:D1:B8:C1:0A:77:82:74:B3:69:2C:DF:EE X509v3 Authority Key Identifier: keyid:0A:05:34:14:BE:A5:B1:C3:C3:67:D5:FC:0F:A3:E0:9D:CD:4C:8C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/0A053414BEA5B1C3C367D5FC0FA3E09DCD4C8C6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3b:df:39:83:23:99:89:ed:d6:4e:dd:fd:42:af:9c:ec:0f: 8b:b5:91:06:a5:d8:ae:90:4c:b6:5c:c2:63:32:9c:1b:81:e9: 3e:82:be:de:a8:93:9d:89:2f:33:aa:3c:db:31:31:c7:04:a9: 17:6b:a2:12:5f:41:ff:eb:17:81:03:ee:63:25:60:04:96:64: d0:9d:10:71:53:c9:bb:8f:95:19:4c:44:31:dd:5a:c2:89:8b: 97:10:98:ec:55:e8:14:4a:0e:c2:0b:d8:db:a0:31:e1:3c:db: d2:82:99:08:92:01:04:c3:d0:cc:73:19:d2:e7:13:e0:73:a4: c3:fd:30:2f:cd:a3:1c:af:1a:56:bb:fe:d4:03:6c:84:5e:59: b6:20:28:23:cd:f6:01:22:5b:22:0d:80:53:43:e4:6c:93:c0: c4:5b:5b:1d:03:f5:04:83:dd:33:5e:bc:ad:b4:4d:f0:aa:69: 73:3e:de:97:80:5d:c7:13:25:d0:20:ec:e1:82:a3:80:c6:99: df:78:31:24:82:fc:54:f9:ca:5a:42:55:49:ad:3a:9f:13:5d: 96:4c:b1:19:6c:45:33:fb:46:18:dd:e0:f3:d4:f3:67:48:b7: 91:d3:ce:77:b3:9f:08:37:2a:f7:bb:8f:a4:46:15:0c:4e:a8: 54:65:66:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYmL0NVWgOMmIBJaHISjbrvIzkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0UwOURD RDRDOEM2QjAeFw0yNjA5MTcwMDQ5MzhaFw0yNjA5MTgwMTAxMzhaMDMxMTAvBgNV BAMTKDU0NTA4M0U5MzNGMjBEOUFEMUI4QzEwQTc3ODI3NEIzNjkyQ0RGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqW0hWAYaRNMSRGCnTZ1irOOyJ 8tDfArezFjKaNym1rJ7L2zRovDSpQ87Loe9aMvV5mgcVbloBcQg0g/7O6qi18qSd 1+tAtkB19fOaPswF6FizReDzfaawfR8uQZdUWeeR2+bSr6IO8eBjFZZ+LmsR+uz7 m0xk04eqbZ6pCiGK6BWLMMUNdg/Z9cqDbONisezvPFIPmnvjKZxIbtnHufWn0lyo 6xc7s0dkrhWf25OtsYrbiuNG13U4ngWskc78DskJuSBaijSs704z5WpTuPI9tIfJ LmOni1CENvhIin68oOEBLStbii827ji40b4usK3sev0vkj/CaGeB65aPsMRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVFCD6TPyDZrRuMEKd4J0s2ks3+4wHwYDVR0j BBgwFoAUCgU0FL6lscPDZ9X8D6Pgnc1MjGswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRC RUE1QjFDM0MzNjdENUZDMEZBM0UwOURDRDRDOEM2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTA1MzQxNEJFQTVCMUMzQzM2N0Q1RkMwRkEzRTA5RENENEM4 QzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMEEwNTM0MTRCRUE1QjFDM0MzNjdENUZDMEZBM0Uw OURDRDRDOEM2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI73zmDI5mJ7dZO3f1Cr5zsD4u1kQal2K6Q TLZcwmMynBuB6T6Cvt6ok52JLzOqPNsxMccEqRdrohJfQf/rF4ED7mMlYASWZNCd EHFTybuPlRlMRDHdWsKJi5cQmOxV6BRKDsIL2NugMeE829KCmQiSAQTD0MxzGdLn E+BzpMP9MC/NoxyvGla7/tQDbIReWbYgKCPN9gEiWyINgFND5GyTwMRbWx0D9QSD 3TNevK20TfCqaXM+3peAXccTJdAg7OGCo4DGmd94MSSC/FT5ylpCVUmtOp8TXZZM sRlsRTP7Rhjd4PPU82dIt5HTzneznwg3Kve7j6RGFQxOqFRlZr0= -----END CERTIFICATE-----Generated at Thu Sep 17 10:04:35 2026 by rpki-client