$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft File: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft (raw, json) Hash identifier: xMs0nqhJw5g5nXjwn/iYCXafYpOXlE1731dGdMF17rA= Subject key identifier: E3:86:F2:0D:4B:CD:BD:0F:F5:08:3E:A7:AD:D0:6E:B1:A1:0D:9E:4E Authority key identifier: 0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 Certificate issuer: /CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Certificate serial: 362A5231177942D2B171E53C8AD64B13B837DD4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:50:58 +0000 Manifest this update: Wed 16 Sep 2026 21:45:58 +0000 Manifest next update: Thu 17 Sep 2026 23:00:58 +0000 Files and hashes: 1: 0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl (hash: BtgoXCOM9NhVpiCFLvsy7qD3nLg043dlQf4bcJSV1Kg=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: ccmy2LH8bOvIWU+GPrMO4FL2775rB00lVz7jkl8O1gM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2a:52:31:17:79:42:d2:b1:71:e5:3c:8a:d6:4b:13:b8:37:dd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Validity Not Before: Sep 16 21:45:58 2026 GMT Not After : Sep 17 23:00:58 2026 GMT Subject: CN=E386F20D4BCDBD0FF5083EA7ADD06EB1A10D9E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:46:cb:fa:78:42:f2:ec:34:c3:1c:fe:07:f8: f4:fb:19:c5:01:89:52:6e:44:bc:00:69:f3:11:01: 2f:aa:e8:bb:94:33:73:eb:d8:8b:3a:d9:01:93:24: 44:28:c2:57:94:08:ab:c6:93:58:f1:40:c5:63:6b: 55:9e:0e:6a:c6:2b:fc:19:67:12:e7:8a:ce:72:dd: 94:8e:41:5b:2d:d8:34:ec:b3:30:0f:46:97:bf:54: 93:dd:bc:8e:37:6c:5a:fe:df:fc:00:31:69:0a:00: 15:d2:e9:00:6f:25:10:af:e6:9b:76:17:a7:bb:8f: 1d:32:1f:68:c4:eb:d8:8a:0d:fa:59:77:6a:f4:cc: f8:e0:19:fd:ba:a3:c5:2b:d4:2e:b2:f3:f6:c0:2e: 9a:de:76:6b:a4:b5:15:25:c6:cf:6d:9e:7b:35:04: 3f:61:2e:2f:ee:5d:14:7b:b0:7f:d6:e2:8c:78:70: 58:fc:a5:ee:91:28:b1:9c:1d:ee:af:e6:6d:b3:c4: 62:e0:41:5c:2a:3d:8c:a2:15:4b:bf:6d:15:49:73: 7b:61:27:37:48:7d:4e:d4:ac:00:be:5b:97:bc:11: 09:1b:e8:3d:ab:eb:13:c6:4d:d7:32:0c:41:6b:6f: 29:1d:7e:cd:b9:73:72:fa:08:cb:8c:18:9b:ce:34: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:86:F2:0D:4B:CD:BD:0F:F5:08:3E:A7:AD:D0:6E:B1:A1:0D:9E:4E X509v3 Authority Key Identifier: keyid:0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:4a:93:79:24:c9:0d:51:90:5c:10:b3:d9:47:f7:93:4e:e1: 54:65:1e:fb:ea:63:ac:93:01:f2:8a:f9:57:31:ed:06:1a:35: dc:f7:9e:47:01:34:04:ac:73:fa:de:00:b4:28:9c:d7:92:00: e5:fc:52:c0:5f:59:57:71:aa:f1:30:b7:ad:7e:33:bf:38:c5: f7:3f:eb:8b:ac:1a:5d:39:d8:aa:7c:d0:09:5d:05:c9:f7:56: 1d:7b:18:23:c6:22:0b:75:ad:81:99:f5:0d:14:44:d0:4f:27: 40:9f:86:f8:b6:43:96:97:67:3b:03:cf:dd:8a:79:94:86:aa: a4:dc:9f:d7:8c:65:70:b1:64:68:34:2f:74:00:61:e4:44:80: 8e:95:71:d2:25:39:9c:ef:3d:ef:b1:a6:8e:1e:98:d8:d4:51: c8:33:f4:2e:bd:24:a6:e7:c2:49:99:b4:ae:8a:a2:7a:4d:4a: 22:e2:c3:9c:32:35:cf:fd:f1:96:a1:8a:00:7e:1b:6e:65:a7: 70:af:50:6d:78:1c:44:96:1c:48:8b:32:07:af:cf:e6:b5:e5: be:15:50:cd:6f:87:35:75:33:29:60:eb:31:b8:25:9a:41:34: c1:7b:09:ee:44:fe:d7:b4:ef:b3:26:70:dd:38:f9:4a:7a:25: 45:5d:72:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNipSMRd5QtKxceU8itZLE7g33U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcw QUFDRThGNjAeFw0yNjA5MTYyMTQ1NThaFw0yNjA5MTcyMzAwNThaMDMxMTAvBgNV BAMTKEUzODZGMjBENEJDREJEMEZGNTA4M0VBN0FERDA2RUIxQTEwRDlFNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRsv6eELy7DTDHP4H+PT7GcUB iVJuRLwAafMRAS+q6LuUM3Pr2Is62QGTJEQowleUCKvGk1jxQMVja1WeDmrGK/wZ ZxLnis5y3ZSOQVst2DTsszAPRpe/VJPdvI43bFr+3/wAMWkKABXS6QBvJRCv5pt2 F6e7jx0yH2jE69iKDfpZd2r0zPjgGf26o8Ur1C6y8/bALpredmuktRUlxs9tnns1 BD9hLi/uXRR7sH/W4ox4cFj8pe6RKLGcHe6v5m2zxGLgQVwqPYyiFUu/bRVJc3th JzdIfU7UrAC+W5e8EQkb6D2r6xPGTdcyDEFrbykdfs25c3L6CMuMGJvONLAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU44byDUvNvQ/1CD6nrdBusaENnk4wHwYDVR0j BBgwFoAUCp5g9Kx6xx4kaJNbyl0Nlwqs6PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRB QzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcwQUFDRThGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQTlFNjBGNEFDN0FDNzFFMjQ2ODkzNUJDQTVEMEQ5NzBBQUNF OEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBE OTcwQUFDRThGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFKk3kkyQ1RkFwQs9lH95NO4VRlHvvqY6yT AfKK+Vcx7QYaNdz3nkcBNASsc/reALQonNeSAOX8UsBfWVdxqvEwt61+M784xfc/ 64usGl052Kp80AldBcn3Vh17GCPGIgt1rYGZ9Q0URNBPJ0Cfhvi2Q5aXZzsDz92K eZSGqqTcn9eMZXCxZGg0L3QAYeREgI6VcdIlOZzvPe+xpo4emNjUUcgz9C69JKbn wkmZtK6KonpNSiLiw5wyNc/98ZahigB+G25lp3CvUG14HESWHEiLMgevz+a15b4V UM1vhzV1Mylg6zG4JZpBNMF7Ce5E/te077MmcN04+Up6JUVdcqI= -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:58 2026 by rpki-client