$ rpki-client -vvvf rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft File: 0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft (raw, json) Hash identifier: OLXOXG3Z/OsJDU62S7TpnpGDjT7HANgGWGdttRc+z50= Subject key identifier: 35:D5:F3:EC:DD:0E:51:2F:49:73:A3:61:94:41:DA:85:AB:7C:5A:AA Authority key identifier: 0F:74:5B:0D:4D:2F:7E:AF:8F:AF:5D:92:00:EE:EC:8E:E1:03:69:58 Certificate issuer: /CN=0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958 Certificate serial: 4B06C2D584C09177343680B8DBA387060169E614 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 12:34:17 +0000 Manifest this update: Thu 17 Sep 2026 12:29:17 +0000 Manifest next update: Fri 18 Sep 2026 16:02:17 +0000 Files and hashes: 1: 0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl (hash: TCBYAfgMrb+Kf/EM1dbin818mjNvE4pe6P/MCN9qCL0=) 2: 3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (hash: qMA2mvuDFglgzD+HOLkg38KkeE2E7iG0DYOT5BZeHio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:06:c2:d5:84:c0:91:77:34:36:80:b8:db:a3:87:06:01:69:e6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958 Validity Not Before: Sep 17 12:29:17 2026 GMT Not After : Sep 18 16:02:17 2026 GMT Subject: CN=35D5F3ECDD0E512F4973A3619441DA85AB7C5AAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:25:87:e4:a6:3d:1e:7e:31:f2:ed:f7:f4: e5:96:2e:92:81:c6:08:ef:31:cb:a9:b8:c6:92:e1: b1:ee:c0:f1:d6:9e:7b:79:ba:08:24:36:87:9f:62: e5:1e:3a:55:60:64:37:6d:b0:20:98:4e:df:ea:aa: 00:2b:9e:90:dd:a3:2b:06:cc:68:09:54:e1:89:27: 37:0e:21:f5:87:75:c6:c3:1c:42:6d:06:e3:c0:f9: c0:a8:01:3c:d1:a4:3b:35:09:b5:58:85:95:ae:f7: a9:09:ad:64:58:51:5c:f1:c2:5b:fb:11:25:fe:aa: e9:75:a0:13:ee:99:3f:c3:9e:9c:2a:06:d3:33:64: 99:fe:ca:86:57:a4:49:69:4c:41:82:aa:03:4b:b9: c1:9d:6c:de:a2:9e:29:4e:ab:ad:bc:10:a2:84:31: fa:23:31:63:5a:bc:33:68:85:38:a3:7f:db:e6:e7: 6a:c0:f1:13:78:1b:61:a8:7c:df:0a:99:e9:54:c0: 64:f5:11:f6:f8:fa:3e:0e:9e:25:17:fe:4c:c2:64: bb:8e:f7:ed:ec:3a:24:27:64:f8:91:df:77:f7:87: c6:bd:36:39:a2:8d:f9:54:87:cc:bf:84:c8:a4:1e: 22:09:b4:d5:73:39:80:72:90:07:1a:ef:a9:52:c8: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D5:F3:EC:DD:0E:51:2F:49:73:A3:61:94:41:DA:85:AB:7C:5A:AA X509v3 Authority Key Identifier: keyid:0F:74:5B:0D:4D:2F:7E:AF:8F:AF:5D:92:00:EE:EC:8E:E1:03:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/0F745B0D4D2F7EAF8FAF5D9200EEEC8EE1036958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ad:68:24:5d:d6:cd:37:bf:88:f8:45:11:44:1c:ee:09:f3: ae:c8:17:6f:21:b1:d0:91:0d:fb:55:82:03:8d:24:05:63:3e: c0:82:03:f4:4a:20:c9:c5:25:8c:d0:c5:37:b3:2d:4a:3b:ba: 82:52:a0:b0:6f:66:43:d9:3e:fa:77:eb:e2:c0:b5:5c:6d:b1: 32:46:0a:96:0f:62:6b:54:52:00:0f:89:f5:e0:0c:64:f0:11: f6:39:55:b3:47:42:5d:cb:c0:c3:47:a2:9d:69:42:27:e4:e3: 72:17:13:7b:fe:2d:e1:94:d1:63:ff:c7:45:1f:e5:95:ae:44: 51:d2:18:62:c2:f3:fb:eb:0c:ad:2f:ef:97:30:4b:eb:0f:c9: bb:cc:5b:94:25:45:61:7b:52:54:5c:4a:f8:41:20:f2:2f:ac: 85:8a:e5:7f:08:ca:be:71:e3:72:0e:ea:86:f1:b6:e1:c5:96: e3:ea:8a:cc:75:e4:ac:8d:e4:2f:df:3a:8d:58:fe:0b:4e:a2: 16:f2:b2:e9:d4:1a:41:0e:a2:f7:39:81:61:e7:f0:f7:a8:5f: 1e:20:c6:a1:76:c1:6a:8c:c2:df:1d:49:ae:bd:c1:42:32:af: d1:c4:8d:44:35:d2:b9:a2:c7:ae:a3:8d:1a:90:92:17:52:a9: f6:c0:9e:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwbC1YTAkXc0NoC426OHBgFp5hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY3NDVCMEQ0RDJGN0VBRjhGQUY1RDkyMDBFRUVDOEVF MTAzNjk1ODAeFw0yNjA5MTcxMjI5MTdaFw0yNjA5MTgxNjAyMTdaMDMxMTAvBgNV BAMTKDM1RDVGM0VDREQwRTUxMkY0OTczQTM2MTk0NDFEQTg1QUI3QzVBQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyECWH5KY9Hn4x8u339OWWLpKB xgjvMcupuMaS4bHuwPHWnnt5uggkNoefYuUeOlVgZDdtsCCYTt/qqgArnpDdoysG zGgJVOGJJzcOIfWHdcbDHEJtBuPA+cCoATzRpDs1CbVYhZWu96kJrWRYUVzxwlv7 ESX+qul1oBPumT/DnpwqBtMzZJn+yoZXpElpTEGCqgNLucGdbN6inilOq628EKKE MfojMWNavDNohTijf9vm52rA8RN4G2GofN8KmelUwGT1Efb4+j4OniUX/kzCZLuO 9+3sOiQnZPiR33f3h8a9NjmijflUh8y/hMikHiIJtNVzOYBykAca76lSyEzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNdXz7N0OUS9Jc6NhlEHahat8WqowHwYDVR0j BBgwFoAUD3RbDU0vfq+Pr12SAO7sjuEDaVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTViYTQ3Y2UtMzk5Mi00MzFjLWFiZjEtNjgxYTRjYzhlYzQ4LzAvMEY3NDVCMEQ0 RDJGN0VBRjhGQUY1RDkyMDBFRUVDOEVFMTAzNjk1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjc0NUIwRDREMkY3RUFGOEZBRjVEOTIwMEVFRUM4RUUxMDM2 OTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTViYTQ3Y2UtMzk5Mi00MzFjLWFi ZjEtNjgxYTRjYzhlYzQ4LzAvMEY3NDVCMEQ0RDJGN0VBRjhGQUY1RDkyMDBFRUVD OEVFMTAzNjk1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKutaCRd1s03v4j4RRFEHO4J867IF28hsdCR DftVggONJAVjPsCCA/RKIMnFJYzQxTezLUo7uoJSoLBvZkPZPvp36+LAtVxtsTJG CpYPYmtUUgAPifXgDGTwEfY5VbNHQl3LwMNHop1pQifk43IXE3v+LeGU0WP/x0Uf 5ZWuRFHSGGLC8/vrDK0v75cwS+sPybvMW5QlRWF7UlRcSvhBIPIvrIWK5X8Iyr5x 43IO6obxtuHFluPqisx15KyN5C/fOo1Y/gtOohbysunUGkEOovc5gWHn8PeoXx4g xqF2wWqMwt8dSa69wUIyr9HEjUQ10rmix66jjRqQkhdSqfbAnnA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:40:05 2026 by rpki-client