$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft File: 0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft (raw, json) Hash identifier: SNhu5V7KODg4XycdxrMTdFwjXooRb4+P/iBMjpUTj4k= Subject key identifier: 1B:0A:2E:46:72:DE:CE:8D:F8:D7:C1:81:68:B9:5C:AA:6E:9D:CC:E3 Authority key identifier: 0E:74:6D:06:BB:B2:B4:2B:9F:3E:3A:27:40:69:ED:D4:02:6E:09:81 Certificate issuer: /CN=0E746D06BBB2B42B9F3E3A274069EDD4026E0981 Certificate serial: 10C649B03E230F8772288255911B7CCA983C57F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft Manifest number: EC Signing time: Sun 25 Oct 2026 15:56:33 +0000 Manifest this update: Sun 25 Oct 2026 15:51:33 +0000 Manifest next update: Mon 26 Oct 2026 17:46:33 +0000 Files and hashes: 1: 3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa (hash: wIhuFppqnRJ2JAAzZM7TLO4GkOIRzd4QY75tQeCzgTM=) 2: 3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa (hash: lDpAk861UziVhV+qZdtOx0oy+hY07fnOS3IwX22akHw=) 3: 0E746D06BBB2B42B9F3E3A274069EDD4026E0981.crl (hash: F3hPzs3/dt440+5L3Z3Ru8228/ykuZ3YKMT8mfCfLTo=) 4: 3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (hash: bzbQyehOXR0BUaS8fMBWL/AuVpFlX4q7jGyljHVAKoE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.crl rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c6:49:b0:3e:23:0f:87:72:28:82:55:91:1b:7c:ca:98:3c:57:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E746D06BBB2B42B9F3E3A274069EDD4026E0981 Validity Not Before: Oct 25 15:51:33 2026 GMT Not After : Oct 26 17:46:33 2026 GMT Subject: CN=1B0A2E4672DECE8DF8D7C18168B95CAA6E9DCCE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:30:d4:42:7a:ab:70:53:6f:cd:b0:90:1d:c1: 11:26:2e:41:7f:97:d1:a4:30:ed:81:25:7f:45:fe: 7b:d4:5d:14:88:be:cf:f7:7d:d0:c9:6e:5a:2e:86: 80:7e:23:a9:6c:0c:2a:6f:48:3c:40:80:b3:8f:34: 6f:db:30:fc:fe:2b:fb:95:b8:cf:86:c6:b2:ad:2b: 47:2b:ff:06:e1:a2:1d:1b:9b:71:16:b3:c7:25:66: 2f:b2:2f:9f:17:fa:94:00:e2:3f:d4:2c:34:1d:c3: ad:ca:89:fa:73:94:4a:d7:7a:94:a0:ca:bb:ea:22: 04:25:5a:83:1a:d6:a3:ec:53:f3:98:12:22:a3:e8: fa:3e:09:30:5c:45:a9:69:20:65:1a:ee:8f:14:a8: 61:8d:c3:c9:ab:9d:92:13:99:8d:a6:54:5c:1f:b0: a5:3e:82:1c:fd:ad:26:d9:0e:75:3f:68:8e:53:96: 5b:8e:f1:1a:66:41:20:63:b8:6c:82:ef:31:fa:b6: 30:95:77:ee:6e:67:99:14:08:c5:d8:8f:7f:90:43: 30:b6:ed:95:46:83:97:87:9a:39:9d:2c:49:2f:fa: e3:ec:22:05:5e:88:3a:38:75:51:d1:e4:83:4c:06: cd:b4:db:46:60:ca:46:e1:5a:0d:58:9e:1d:82:37: a3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0A:2E:46:72:DE:CE:8D:F8:D7:C1:81:68:B9:5C:AA:6E:9D:CC:E3 X509v3 Authority Key Identifier: keyid:0E:74:6D:06:BB:B2:B4:2B:9F:3E:3A:27:40:69:ED:D4:02:6E:09:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/0E746D06BBB2B42B9F3E3A274069EDD4026E0981.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bf:0e:d0:a6:a8:db:56:e0:48:90:c6:94:d5:c3:58:51:61: b8:0e:61:b8:ca:fd:64:2e:fc:2f:f9:e9:4e:0b:c4:b6:a0:d2: 87:ee:76:7b:a1:8a:80:ee:fd:a1:67:c6:0b:a4:14:84:1d:41: e6:03:c5:83:de:fe:3b:d3:82:b9:85:5d:7b:ca:d9:89:9e:6c: 2e:50:2b:b0:0b:f3:21:30:6c:b2:1f:e0:6b:fc:f7:0a:2e:22: bb:eb:cd:a7:21:9a:74:10:95:09:6a:b3:39:04:78:09:47:8a: c1:d9:27:65:2a:a5:b0:b0:c6:cd:11:9f:16:4d:de:38:b2:0c: 56:4a:b9:c1:30:28:80:28:32:08:68:19:2f:8e:0c:ef:16:a5: c2:18:6c:68:ac:f1:7d:df:e3:cf:25:72:58:7e:f9:00:89:b5: a2:b1:4d:de:6f:52:c5:db:26:ce:2e:de:4a:78:ba:61:94:ef: 9d:3d:9a:12:8b:b6:bf:57:c6:d4:af:77:ed:56:32:3e:82:21: 01:0c:2f:73:6d:17:2e:0c:37:f4:87:65:e7:fb:a8:8e:07:cb: b6:4d:a3:d0:cd:1d:69:e3:5a:23:5a:17:4d:bc:c3:5f:fa:75: 7a:d8:dc:2b:29:e2:89:aa:a8:98:8b:96:04:4e:20:61:9c:b2: d8:a1:bf:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEMZJsD4jD4dyKIJVkRt8ypg8V/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3NDZEMDZCQkIyQjQyQjlGM0UzQTI3NDA2OUVERDQw MjZFMDk4MTAeFw0yNjEwMjUxNTUxMzNaFw0yNjEwMjYxNzQ2MzNaMDMxMTAvBgNV BAMTKDFCMEEyRTQ2NzJERUNFOERGOEQ3QzE4MTY4Qjk1Q0FBNkU5RENDRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdMNRCeqtwU2/NsJAdwREmLkF/ l9GkMO2BJX9F/nvUXRSIvs/3fdDJblouhoB+I6lsDCpvSDxAgLOPNG/bMPz+K/uV uM+GxrKtK0cr/wbhoh0bm3EWs8clZi+yL58X+pQA4j/ULDQdw63KifpzlErXepSg yrvqIgQlWoMa1qPsU/OYEiKj6Po+CTBcRalpIGUa7o8UqGGNw8mrnZITmY2mVFwf sKU+ghz9rSbZDnU/aI5TlluO8RpmQSBjuGyC7zH6tjCVd+5uZ5kUCMXYj3+QQzC2 7ZVGg5eHmjmdLEkv+uPsIgVeiDo4dVHR5INMBs2020ZgykbhWg1Ynh2CN6PPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGwouRnLezo3418GBaLlcqm6dzOMwHwYDVR0j BBgwFoAUDnRtBruytCufPjonQGnt1AJuCYEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjU2ZDBiNzgtN2U4MS00YThjLWE4NzUtOTU1MjJiNDY3OTM4LzAvMEU3NDZEMDZC QkIyQjQyQjlGM0UzQTI3NDA2OUVERDQwMjZFMDk4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTc0NkQwNkJCQjJCNDJCOUYzRTNBMjc0MDY5RURENDAyNkUw OTgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjU2ZDBiNzgtN2U4MS00YThjLWE4 NzUtOTU1MjJiNDY3OTM4LzAvMEU3NDZEMDZCQkIyQjQyQjlGM0UzQTI3NDA2OUVE RDQwMjZFMDk4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABu/DtCmqNtW4EiQxpTVw1hRYbgOYbjK/WQu /C/56U4LxLag0ofudnuhioDu/aFnxgukFIQdQeYDxYPe/jvTgrmFXXvK2YmebC5Q K7AL8yEwbLIf4Gv89wouIrvrzachmnQQlQlqszkEeAlHisHZJ2UqpbCwxs0RnxZN 3jiyDFZKucEwKIAoMghoGS+ODO8WpcIYbGis8X3f488lclh++QCJtaKxTd5vUsXb Js4u3kp4umGU7509mhKLtr9XxtSvd+1WMj6CIQEML3NtFy4MN/SHZef7qI4Hy7ZN o9DNHWnjWiNaF028w1/6dXrY3Csp4omqqJiLlgROIGGcstihv2Q= -----END CERTIFICATE-----Generated at Sun Oct 25 21:57:23 2026 by rpki-client