$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft File: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft (raw, json) Hash identifier: YFmU/evUmt6DEhuhgu9pq3Tgo6uHWcryX0SbQTSJzjI= Subject key identifier: 56:90:42:05:79:2C:5A:66:55:06:73:5D:80:D2:98:3C:81:43:1D:39 Authority key identifier: 0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 Certificate issuer: /CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Certificate serial: 3289BA9FC0E665C466B648CF73D003672361C211 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft Manifest number: EB Signing time: Sun 25 Oct 2026 13:02:52 +0000 Manifest this update: Sun 25 Oct 2026 12:57:52 +0000 Manifest next update: Mon 26 Oct 2026 16:54:52 +0000 Files and hashes: 1: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl (hash: tSSnEa6JR3hLB6XruP0PmPyi04CNLqQwo1kcOpO0gfY=) 2: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: Si+I+kPmeWkzvO8zwLh244+U9aO/cSZUp2EBTlhcW1Q=) 3: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: EdEGFXLSGBP0MFU7fBfQCb+Ije/hW5JPZPkjvdhCXtQ=) 4: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: Pp4p1IAwL6T/SUuRHLsPL1o2X/hw7FiM+dsJ0iekdE8=) 5: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: OsAoJbYittbq+gZll27kuO9hviTpRYTbYAhazIaxU6I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:89:ba:9f:c0:e6:65:c4:66:b6:48:cf:73:d0:03:67:23:61:c2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Validity Not Before: Oct 25 12:57:52 2026 GMT Not After : Oct 26 16:54:52 2026 GMT Subject: CN=56904205792C5A665506735D80D2983C81431D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:67:ff:f8:30:5c:55:00:43:70:3b:e1:61: 73:d3:7f:db:4c:bc:b8:b7:c3:ac:5f:c1:40:59:70: 3c:c2:c2:ec:0e:50:2c:5d:e5:1f:31:81:7f:0d:33: 86:8a:73:46:45:3b:93:30:8b:46:39:e6:67:fa:31: db:9b:a1:82:54:73:fb:bc:a7:a7:92:9e:9b:0d:40: 42:32:a0:61:2c:51:76:fa:f8:19:a0:a2:42:85:2e: 6a:c8:c9:66:f6:90:72:5e:92:90:de:c4:60:56:5b: dc:b8:2c:84:6a:1f:a5:ab:8a:1e:1b:72:bb:68:19: 61:38:2e:61:97:06:cf:a5:83:7d:5e:98:dd:c8:3b: e4:32:e6:d4:31:e5:4c:38:7b:fb:3a:d5:25:95:c2: 1a:20:cd:3f:e0:fc:28:23:56:8a:4a:9c:51:0e:e8: ec:b1:38:8e:e7:3b:3d:9a:d6:ac:46:38:52:09:19: da:18:c2:61:67:50:b6:0b:56:1d:c7:f7:b5:5e:41: 47:af:c9:1a:38:f9:5e:ec:e0:64:d2:77:26:3a:16: 73:d8:44:8f:55:c4:af:cc:fc:cc:62:05:9a:8a:65: c4:b8:b5:28:4c:f2:50:da:f8:d6:b1:d8:1c:98:5b: 39:f2:b5:dd:1a:ec:5b:b5:af:0f:b4:8b:52:a6:42: f5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:90:42:05:79:2C:5A:66:55:06:73:5D:80:D2:98:3C:81:43:1D:39 X509v3 Authority Key Identifier: keyid:0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:04:63:7f:d4:38:b8:f8:45:83:86:05:68:10:26:c3:94:5e: 18:75:ef:43:20:97:d7:83:9a:3e:fc:8a:9c:be:31:e5:fb:76: 32:70:e3:2c:6e:f1:36:7a:03:25:15:d5:ea:85:4a:5a:39:cb: 12:8c:35:e0:38:8d:15:d8:19:20:8d:5b:6a:ae:57:cf:37:84: 7c:d6:67:96:59:a0:97:df:95:9d:ca:6f:e7:77:6b:68:b1:17: 9f:e3:7c:07:29:93:5d:e3:b4:59:52:df:60:c3:75:af:e1:d2: 4f:d1:3a:d0:6c:a6:f6:da:7e:c3:56:1e:20:47:8a:f7:14:8d: 0c:35:13:ab:92:99:6d:d4:5f:d4:bd:98:8b:da:71:85:17:06: 90:8d:32:43:f1:6b:6e:94:b0:01:0f:d1:1c:d7:d0:37:3e:a8: 95:c3:bb:9d:05:f2:b6:c7:b4:0f:a8:31:e9:b3:0b:86:df:c8: bd:78:9d:20:df:4e:3b:2d:23:e5:17:94:e1:bb:5e:4f:91:99: db:60:af:ea:0b:54:3c:eb:21:10:2a:69:02:d0:2a:e8:d3:6e: 39:d6:78:fc:99:45:2e:19:63:52:1b:8b:f8:2d:af:49:cb:3a: 5e:3e:74:7c:ca:c1:8d:39:7f:64:f9:d1:53:53:3b:3a:8b:00: ca:dc:c9:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMom6n8DmZcRmtkjPc9ADZyNhwhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUExMDhE OUE2NDBGNjAeFw0yNjEwMjUxMjU3NTJaFw0yNjEwMjYxNjU0NTJaMDMxMTAvBgNV BAMTKDU2OTA0MjA1NzkyQzVBNjY1NTA2NzM1RDgwRDI5ODNDODE0MzFEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2w2f/+DBcVQBDcDvhYXPTf9tM vLi3w6xfwUBZcDzCwuwOUCxd5R8xgX8NM4aKc0ZFO5Mwi0Y55mf6MduboYJUc/u8 p6eSnpsNQEIyoGEsUXb6+BmgokKFLmrIyWb2kHJekpDexGBWW9y4LIRqH6Wrih4b crtoGWE4LmGXBs+lg31emN3IO+Qy5tQx5Uw4e/s61SWVwhogzT/g/CgjVopKnFEO 6OyxOI7nOz2a1qxGOFIJGdoYwmFnULYLVh3H97VeQUevyRo4+V7s4GTSdyY6FnPY RI9VxK/M/MxiBZqKZcS4tShM8lDa+Nax2ByYWznytd0a7Fu1rw+0i1KmQvV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVpBCBXksWmZVBnNdgNKYPIFDHTkwHwYDVR0j BBgwFoAUDpJ86c+uAZWXAdi6oxqhCNmmQPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE0OTNiZTEtZjA2NC00OWU2LTk0OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlD RkFFMDE5NTk3MDFEOEJBQTMxQUExMDhEOUE2NDBGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTkyN0NFOUNGQUUwMTk1OTcwMUQ4QkFBMzFBQTEwOEQ5QTY0 MEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUEx MDhEOUE2NDBGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcEY3/UOLj4RYOGBWgQJsOUXhh170Mgl9eD mj78ipy+MeX7djJw4yxu8TZ6AyUV1eqFSlo5yxKMNeA4jRXYGSCNW2quV883hHzW Z5ZZoJfflZ3Kb+d3a2ixF5/jfAcpk13jtFlS32DDda/h0k/ROtBspvbafsNWHiBH ivcUjQw1E6uSmW3UX9S9mIvacYUXBpCNMkPxa26UsAEP0RzX0Dc+qJXDu50F8rbH tA+oMemzC4bfyL14nSDfTjstI+UXlOG7Xk+Rmdtgr+oLVDzrIRAqaQLQKujTbjnW ePyZRS4ZY1Ibi/gtr0nLOl4+dHzKwY05f2T50VNTOzqLAMrcyQw= -----END CERTIFICATE-----Generated at Mon Oct 26 02:27:29 2026 by rpki-client