$ rpki-client -vvvf rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft File: 0A0BE818C9E480D5B3C1387F48406FDF75525054.mft (raw, json) Hash identifier: WTtieGxbPYzUqRpwliwhJKHJSgxE1PS5xX9Yko/1bgo= Subject key identifier: BB:E2:60:4A:A6:FC:13:B1:A3:BE:9A:54:55:DF:86:1A:07:21:A4:9C Authority key identifier: 0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54 Certificate issuer: /CN=0A0BE818C9E480D5B3C1387F48406FDF75525054 Certificate serial: 1007D9FE895066F35EA5867736945A831DAC5226 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft Manifest number: DF Signing time: Wed 14 Oct 2026 22:17:35 +0000 Manifest this update: Wed 14 Oct 2026 22:12:35 +0000 Manifest next update: Fri 16 Oct 2026 01:39:35 +0000 Files and hashes: 1: 0A0BE818C9E480D5B3C1387F48406FDF75525054.crl (hash: ZYsKaThXo4yHQzVmFXxcnfE0nTVuWs3tI0x98I1Y/0Y=) 2: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: XruWQQhjREtyk1SmNsMjFRHLoSTVd3r/+m7FYV8d8Kc=) 3: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: ZvHMdtaJZWzSLaq7f17lDIIdd170kCIaPzhP2QwWe1o=) 4: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: d/Fq+IffZJ+OozrZYhdBokPyli+2KVods0E+Vb13ir4=) 5: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: +JyCkLsQ3tpHW5cHfUXrYK9OeTIPdF1qJiIUkvR3JIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:07:d9:fe:89:50:66:f3:5e:a5:86:77:36:94:5a:83:1d:ac:52:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A0BE818C9E480D5B3C1387F48406FDF75525054 Validity Not Before: Oct 14 22:12:35 2026 GMT Not After : Oct 16 01:39:35 2026 GMT Subject: CN=BBE2604AA6FC13B1A3BE9A5455DF861A0721A49C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:0a:c4:df:f9:ef:0a:62:0c:1a:1a:7c:8a: da:9a:a3:d1:55:f9:09:5e:72:00:c8:13:62:29:d0: d2:a7:04:32:27:c2:26:2f:e3:36:18:8f:95:32:fd: e3:d7:d5:2e:fd:b0:51:8e:4e:86:2e:85:09:41:ac: df:86:21:ad:eb:8f:72:32:24:0c:2a:18:d3:5f:5d: 27:fa:ee:8c:47:2c:74:ee:a2:c9:ca:72:0f:41:a3: be:c3:46:2c:d7:ab:cd:06:e4:5a:00:53:07:bd:5c: 53:a8:30:25:de:64:49:08:58:43:76:4a:92:4b:b6: fa:ff:d6:22:cd:6e:fc:3d:29:1d:a7:c8:c4:a6:0f: 5c:8f:0d:86:36:df:cd:01:a9:a6:e3:3b:fe:9b:fa: 60:3f:a2:02:22:40:be:b9:5f:a4:5b:4d:d9:8f:10: ce:0a:f3:bf:67:fd:e5:6f:32:4a:e8:52:b1:51:73: 16:59:ed:28:de:bc:d5:d4:3a:22:4b:d0:ce:ba:e2: 08:5e:59:0d:2e:61:b7:07:00:8c:8e:b5:49:40:85: b7:28:b4:7f:93:33:d9:c3:6a:b3:27:6b:70:27:27: 6f:77:21:84:5d:08:10:80:7e:e8:ed:9f:35:83:15: be:2d:fe:c2:9b:6f:e8:aa:36:3e:09:0e:13:de:d5: 61:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E2:60:4A:A6:FC:13:B1:A3:BE:9A:54:55:DF:86:1A:07:21:A4:9C X509v3 Authority Key Identifier: keyid:0A:0B:E8:18:C9:E4:80:D5:B3:C1:38:7F:48:40:6F:DF:75:52:50:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0BE818C9E480D5B3C1387F48406FDF75525054.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/0A0BE818C9E480D5B3C1387F48406FDF75525054.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7a:79:69:a0:1a:8d:1c:ce:56:b7:7a:4c:81:c9:ac:b0:76: 97:2f:2c:f2:6a:6e:69:ae:fa:dd:c0:fd:0c:ca:0a:98:37:34: 3e:71:d3:d1:eb:2d:89:8c:35:fb:94:f1:4a:c7:07:2e:da:e1: 80:bb:18:76:06:22:26:c5:82:66:e1:8f:af:5b:4a:4d:66:02: bf:10:7e:85:05:dd:54:e2:66:0f:9c:9f:16:a8:f5:c1:30:73: 82:ec:4b:d7:3d:64:ba:4c:65:5a:e1:fd:2a:a1:02:84:ac:7e: 2b:72:07:dc:a3:64:b6:f1:4e:b8:52:84:17:cc:66:7b:47:86: b8:6a:2d:2c:65:a2:ce:76:e3:5c:96:de:8f:2c:eb:7b:7d:7d: f1:b8:ca:98:61:fd:f9:d4:46:3e:93:17:d5:a9:cd:22:44:8e: de:f5:56:01:43:99:cb:1b:bd:a4:45:a0:b3:2b:1b:09:b9:bf: 0f:cd:d9:19:ae:ef:b8:26:0f:f8:d7:54:95:52:de:2b:a6:c0: 43:46:31:e2:33:b6:4b:7d:e0:02:e9:f8:7b:01:f2:bf:05:de: 44:da:0b:23:e3:77:48:94:53:98:35:83:1e:1b:17:3c:06:80: ab:32:2a:0c:e1:7f:20:b0:13:11:15:10:1e:9c:6d:4f:15:2b: 64:24:fe:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAfZ/olQZvNepYZ3NpRagx2sUiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZGREY3 NTUyNTA1NDAeFw0yNjEwMTQyMjEyMzVaFw0yNjEwMTYwMTM5MzVaMDMxMTAvBgNV BAMTKEJCRTI2MDRBQTZGQzEzQjFBM0JFOUE1NDU1REY4NjFBMDcyMUE0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4awrE3/nvCmIMGhp8itqao9FV +QlecgDIE2Ip0NKnBDInwiYv4zYYj5Uy/ePX1S79sFGOToYuhQlBrN+GIa3rj3Iy JAwqGNNfXSf67oxHLHTuosnKcg9Bo77DRizXq80G5FoAUwe9XFOoMCXeZEkIWEN2 SpJLtvr/1iLNbvw9KR2nyMSmD1yPDYY2380BqabjO/6b+mA/ogIiQL65X6RbTdmP EM4K879n/eVvMkroUrFRcxZZ7SjevNXUOiJL0M664gheWQ0uYbcHAIyOtUlAhbco tH+TM9nDarMna3AnJ293IYRdCBCAfujtnzWDFb4t/sKbb+iqNj4JDhPe1WEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu+JgSqb8E7GjvppUVd+GGgchpJwwHwYDVR0j BBgwFoAUCgvoGMnkgNWzwTh/SEBv33VSUFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODkxZDNjMzAtOTVkYy00YjcyLWFlMWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThD OUU0ODBENUIzQzEzODdGNDg0MDZGREY3NTUyNTA1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTBCRTgxOEM5RTQ4MEQ1QjNDMTM4N0Y0ODQwNkZERjc1NTI1 MDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvMEEwQkU4MThDOUU0ODBENUIzQzEzODdGNDg0MDZG REY3NTUyNTA1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJV6eWmgGo0czla3ekyByaywdpcvLPJqbmmu +t3A/QzKCpg3ND5x09HrLYmMNfuU8UrHBy7a4YC7GHYGIibFgmbhj69bSk1mAr8Q foUF3VTiZg+cnxao9cEwc4LsS9c9ZLpMZVrh/SqhAoSsfityB9yjZLbxTrhShBfM ZntHhrhqLSxlos5241yW3o8s63t9ffG4yphh/fnURj6TF9WpzSJEjt71VgFDmcsb vaRFoLMrGwm5vw/N2Rmu77gmD/jXVJVS3iumwENGMeIztkt94ALp+HsB8r8F3kTa CyPjd0iUU5g1gx4bFzwGgKsyKgzhfyCwExEVEB6cbU8VK2Qk/hQ= -----END CERTIFICATE-----Generated at Thu Oct 15 06:47:19 2026 by rpki-client