$ rpki-client -vvvf rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft File: 0BA4160695EA940C660FFE532DE277E48EEAA80C.mft (raw, json) Hash identifier: c+xnSwQC8sMXMS0CwjVSIStCOTyWdeB8Mlz1WBCb2mo= Subject key identifier: 84:87:32:17:47:4E:B0:F6:0C:29:59:47:0C:AC:5A:29:A8:2C:55:CD Authority key identifier: 0B:A4:16:06:95:EA:94:0C:66:0F:FE:53:2D:E2:77:E4:8E:EA:A8:0C Certificate issuer: /CN=0BA4160695EA940C660FFE532DE277E48EEAA80C Certificate serial: 7E3C99FD6FEC8EBB2DF91F4C8567EEC3480C70AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 00:34:14 +0000 Manifest this update: Thu 17 Sep 2026 00:29:14 +0000 Manifest next update: Fri 18 Sep 2026 01:47:14 +0000 Files and hashes: 1: 0BA4160695EA940C660FFE532DE277E48EEAA80C.crl (hash: iNR53AfC6axmHGaOS8xpYN5ng1hgkqHQqrxXlha3g40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.crl rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3c:99:fd:6f:ec:8e:bb:2d:f9:1f:4c:85:67:ee:c3:48:0c:70:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BA4160695EA940C660FFE532DE277E48EEAA80C Validity Not Before: Sep 17 00:29:14 2026 GMT Not After : Sep 18 01:47:14 2026 GMT Subject: CN=84873217474EB0F60C2959470CAC5A29A82C55CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:15:b1:9d:b7:bd:d6:31:3e:23:82:90:66: f2:3e:fb:4d:ae:3c:9e:fb:f8:f6:ed:e1:a7:57:f8: 60:00:4a:22:fa:d2:e0:ef:32:b8:23:28:a8:85:29: dc:3f:85:fd:f8:37:0e:d9:84:d7:57:fe:77:03:43: 1b:57:ce:66:d4:c7:b6:f5:26:d2:2b:38:aa:32:bf: b0:90:65:bf:b4:c7:f5:6e:b7:3e:55:99:d4:69:4d: 48:d5:1e:65:0c:b2:fb:cd:24:3f:95:d4:3e:69:cf: 45:d2:10:00:2a:5f:c2:9d:63:31:92:09:bb:45:b5: fe:52:8d:59:8a:d8:2b:5f:c3:65:73:7a:7a:bf:51: e9:9f:31:12:8f:44:a7:53:ae:64:40:c8:af:63:7e: 99:6d:30:4d:cb:ed:40:06:35:99:21:22:1a:fd:2e: c8:3b:e9:be:88:71:e8:9c:f3:bf:6f:e4:03:bc:c8: 9d:3d:db:80:46:bd:c1:04:63:25:60:c7:a9:49:1c: 3d:4c:fc:8e:9b:62:29:2f:66:9a:2b:24:be:98:dd: dc:7f:b3:1f:6d:39:ea:2a:4d:fd:ce:fe:d0:1f:34: 8e:43:ab:dd:1f:9e:54:00:28:5d:ff:85:c6:14:df: 14:60:80:8a:44:cb:34:b1:b2:d1:53:ac:1d:40:a0: 9f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:87:32:17:47:4E:B0:F6:0C:29:59:47:0C:AC:5A:29:A8:2C:55:CD X509v3 Authority Key Identifier: keyid:0B:A4:16:06:95:EA:94:0C:66:0F:FE:53:2D:E2:77:E4:8E:EA:A8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/0BA4160695EA940C660FFE532DE277E48EEAA80C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cc:5d:e9:ac:2f:15:7f:f2:f3:73:32:e2:41:08:7d:4c:3b: 14:72:9e:4d:d1:94:9c:86:fb:88:7e:32:83:68:6b:8e:52:32: 6e:09:7f:33:16:3d:9e:68:42:67:2d:b3:53:19:98:cf:3e:00: 12:86:6a:db:bc:40:59:3b:6b:ac:37:dc:8c:1a:bf:ee:b7:3f: f0:7e:ed:c7:e4:91:a1:4f:4d:7b:4c:b5:e7:c1:52:95:e0:64: 50:fd:fe:6a:9a:f7:90:dc:39:c3:48:6f:6d:7f:3e:24:9f:1f: ec:fa:72:12:96:fb:37:8a:48:39:09:09:67:e1:ca:87:2e:3f: bb:9b:9c:98:9c:b0:a9:38:ca:75:9f:37:cc:00:0d:92:d6:db: 55:4f:c0:8d:3b:3d:41:24:be:c2:16:13:65:66:62:8f:ee:17: 57:0c:c7:ee:ae:62:ae:e8:bb:b1:71:4f:65:31:76:4f:74:ce: e3:4a:c4:5e:ae:89:2e:e8:cd:01:4c:1a:e8:ed:cf:a0:4f:74: 36:cd:44:54:57:e5:e9:02:8e:19:4e:fe:57:f9:4d:65:be:f4: 3d:85:c7:63:6d:0b:a9:ea:66:b8:9d:b0:2b:a2:c4:a0:c8:f6: 80:73:ba:25:73:a7:43:8f:22:d9:70:3c:03:52:ec:82:8f:86: eb:ff:86:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfjyZ/W/sjrst+R9MhWfuw0gMcK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBNDE2MDY5NUVBOTQwQzY2MEZGRTUzMkRFMjc3RTQ4 RUVBQTgwQzAeFw0yNjA5MTcwMDI5MTRaFw0yNjA5MTgwMTQ3MTRaMDMxMTAvBgNV BAMTKDg0ODczMjE3NDc0RUIwRjYwQzI5NTk0NzBDQUM1QTI5QTgyQzU1Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KhWxnbe91jE+I4KQZvI++02u PJ77+Pbt4adX+GAASiL60uDvMrgjKKiFKdw/hf34Nw7ZhNdX/ncDQxtXzmbUx7b1 JtIrOKoyv7CQZb+0x/Vutz5VmdRpTUjVHmUMsvvNJD+V1D5pz0XSEAAqX8KdYzGS CbtFtf5SjVmK2Ctfw2Vzenq/UemfMRKPRKdTrmRAyK9jfpltME3L7UAGNZkhIhr9 Lsg76b6Iceic879v5AO8yJ0924BGvcEEYyVgx6lJHD1M/I6bYikvZporJL6Y3dx/ sx9tOeoqTf3O/tAfNI5Dq90fnlQAKF3/hcYU3xRggIpEyzSxstFTrB1AoJ8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhIcyF0dOsPYMKVlHDKxaKagsVc0wHwYDVR0j BBgwFoAUC6QWBpXqlAxmD/5TLeJ35I7qqAwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM3ZjE5NWEtMzY5ZS00NGJhLTgwY2UtNzIxNzNkNTFhMzcyLzEvMEJBNDE2MDY5 NUVBOTQwQzY2MEZGRTUzMkRFMjc3RTQ4RUVBQTgwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkE0MTYwNjk1RUE5NDBDNjYwRkZFNTMyREUyNzdFNDhFRUFB ODBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzEvMEJBNDE2MDY5NUVBOTQwQzY2MEZGRTUzMkRFMjc3 RTQ4RUVBQTgwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvMXemsLxV/8vNzMuJBCH1MOxRynk3RlJyG +4h+MoNoa45SMm4JfzMWPZ5oQmcts1MZmM8+ABKGatu8QFk7a6w33Iwav+63P/B+ 7cfkkaFPTXtMtefBUpXgZFD9/mqa95DcOcNIb21/PiSfH+z6chKW+zeKSDkJCWfh yocuP7ubnJicsKk4ynWfN8wADZLW21VPwI07PUEkvsIWE2VmYo/uF1cMx+6uYq7o u7FxT2Uxdk90zuNKxF6uiS7ozQFMGujtz6BPdDbNRFRX5ekCjhlO/lf5TWW+9D2F x2NtC6nqZridsCuixKDI9oBzuiVzp0OPItlwPANS7IKPhuv/hno= -----END CERTIFICATE-----Generated at Thu Sep 17 18:26:16 2026 by rpki-client