$ rpki-client -vvvf rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft File: B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft (raw, json) Hash identifier: VrcR9E9ud7b8xWUGiQxiv/Mzzhu/FYtJ+E/LC6ENveA= Subject key identifier: 54:14:8F:99:27:44:B1:7A:93:45:95:71:C5:28:70:DB:34:10:EA:76 Authority key identifier: B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A Certificate issuer: /CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Certificate serial: 24244AABBE831DC962F53F091BE102B45C139D28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 14:24:23 +0000 Manifest this update: Mon 21 Sep 2026 14:19:23 +0000 Manifest next update: Tue 22 Sep 2026 14:35:23 +0000 Files and hashes: 1: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (hash: K9ZXJ5o5f3vYvyXmfnPwnT8NeUbIoGsEKpT0pUSErho=) 2: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: 437bd6cfCi4QfkyxcuG38VNcn0yO3ZKj6CESWVC/jyw=) 3: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: ahISTiCVoc+28My7h8uDRC0QvRMDpO2sYZ/b3hjHSLM=) 4: B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl (hash: lyg4tS+rffcVL5IU+ZhtL6zts3enYHAi/kyJLlXt+Pk=) 5: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: F/oy8su27rCM1WBmuMCn8wfDlNFF1ZO6cFWNdzyAW6M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:24:4a:ab:be:83:1d:c9:62:f5:3f:09:1b:e1:02:b4:5c:13:9d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Validity Not Before: Sep 21 14:19:23 2026 GMT Not After : Sep 22 14:35:23 2026 GMT Subject: CN=54148F992744B17A93459571C52870DB3410EA76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:03:af:72:2d:69:9f:e1:28:bb:2a:88:1a: 05:d8:11:06:c3:20:44:c4:98:42:0c:b5:83:f3:8f: 94:b4:55:4b:78:47:27:1a:a2:77:9e:03:5e:79:cd: 57:2a:b0:47:32:8a:2c:bc:4f:f1:96:9c:e2:c0:aa: fe:88:93:30:fe:cd:36:66:91:01:f5:42:cb:6a:d7: 5c:98:cf:65:2d:14:79:45:4f:a0:f1:dc:2e:8c:cb: c5:00:63:4d:cf:0b:a9:79:77:39:97:2d:af:3c:ef: 38:8d:a2:b1:df:b2:9b:97:f2:95:84:27:dc:6c:f1: 67:ea:6f:8b:85:eb:c1:cc:6c:2c:97:11:e9:67:17: f8:a9:b4:4f:96:f1:b6:73:6d:36:3d:3c:ed:f1:67: d5:76:1f:82:8c:b3:ab:fa:fd:85:ad:28:88:f9:c8: 88:6a:5a:83:d5:8d:8a:4a:57:74:c5:23:ef:52:21: 23:64:13:fd:d4:16:47:e6:d9:6a:9e:e5:97:33:13: 30:0b:27:b1:4b:a9:56:bd:64:fb:bc:d0:cd:f6:08: 57:a8:c2:b0:c2:9d:d9:06:3b:a8:9c:56:18:4d:81: d0:17:ef:cf:26:87:61:94:2f:8d:ad:27:10:1f:2f: e1:8e:3c:50:5e:fc:ee:fc:87:13:68:1d:e6:69:33: c3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:14:8F:99:27:44:B1:7A:93:45:95:71:C5:28:70:DB:34:10:EA:76 X509v3 Authority Key Identifier: keyid:B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d1:9e:63:01:0e:59:4c:07:58:9a:bd:5d:20:9f:30:e9:a3: 33:76:55:8b:b0:4f:8a:64:b0:63:28:4d:ea:0d:16:87:90:51: 62:5b:47:5e:f6:9f:82:03:48:a8:8b:8e:76:9d:35:b2:c1:6e: 44:8f:61:37:b2:aa:3c:a0:30:e7:c4:a7:11:bf:e5:4c:94:fb: ae:71:5e:33:91:cf:01:53:ab:a4:23:fe:c3:64:bf:fc:a6:09: c6:96:b7:e4:29:2e:b9:ca:fb:b2:9b:7a:d2:60:12:f3:33:48: c3:b6:29:93:59:ad:79:3a:e4:f3:ca:6f:26:04:d5:70:86:26: 9f:65:f6:15:8a:e1:1e:94:af:05:66:07:87:2a:bd:6f:ef:c4: 99:cb:b1:f4:be:e1:a6:b1:2d:65:9b:2b:13:e5:34:64:88:22: ae:7d:e0:14:c0:22:58:56:05:a3:c0:30:8e:8c:fa:2d:f5:7f: b4:4b:d7:05:1f:ff:92:92:7b:d1:8d:a4:bf:14:73:c6:df:60: ec:bf:53:14:4b:b7:3a:ee:24:d4:35:7e:9f:ef:41:53:33:ee: 83:32:fe:59:58:b8:f5:e3:54:41:77:cc:bd:bd:b8:0a:c4:9b: 0e:98:56:8f:9c:1c:19:6a:71:21:f4:9f:2f:07:e0:9c:ea:64: 02:00:1c:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJCRKq76DHcli9T8JG+ECtFwTnSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJG MTMzNzE2QTAeFw0yNjA5MjExNDE5MjNaFw0yNjA5MjIxNDM1MjNaMDMxMTAvBgNV BAMTKDU0MTQ4Rjk5Mjc0NEIxN0E5MzQ1OTU3MUM1Mjg3MERCMzQxMEVBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyygOvci1pn+EouyqIGgXYEQbD IETEmEIMtYPzj5S0VUt4RycaoneeA155zVcqsEcyiiy8T/GWnOLAqv6IkzD+zTZm kQH1Qstq11yYz2UtFHlFT6Dx3C6My8UAY03PC6l5dzmXLa887ziNorHfspuX8pWE J9xs8Wfqb4uF68HMbCyXEelnF/iptE+W8bZzbTY9PO3xZ9V2H4KMs6v6/YWtKIj5 yIhqWoPVjYpKV3TFI+9SISNkE/3UFkfm2Wqe5ZczEzALJ7FLqVa9ZPu80M32CFeo wrDCndkGO6icVhhNgdAX788mh2GUL42tJxAfL+GOPFBe/O78hxNoHeZpM8MFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVBSPmSdEsXqTRZVxxShw2zQQ6nYwHwYDVR0j BBgwFoAUuDWodGOEdJvzuae67DCh6/EzcWowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDZiZWRmM2EtZDdkMS00OWE2LTkzZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2 Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJGMTMzNzE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODM1QTg3NDYzODQ3NDlCRjNCOUE3QkFFQzMwQTFFQkYxMzM3 MTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEEx RUJGMTMzNzE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDRnmMBDllMB1iavV0gnzDpozN2VYuwT4pk sGMoTeoNFoeQUWJbR172n4IDSKiLjnadNbLBbkSPYTeyqjygMOfEpxG/5UyU+65x XjORzwFTq6Qj/sNkv/ymCcaWt+QpLrnK+7KbetJgEvMzSMO2KZNZrXk65PPKbyYE 1XCGJp9l9hWK4R6UrwVmB4cqvW/vxJnLsfS+4aaxLWWbKxPlNGSIIq594BTAIlhW BaPAMI6M+i31f7RL1wUf/5KSe9GNpL8Uc8bfYOy/UxRLtzruJNQ1fp/vQVMz7oMy /llYuPXjVEF3zL29uArEmw6YVo+cHBlqcSH0ny8H4JzqZAIAHMk= -----END CERTIFICATE-----Generated at Tue Sep 22 01:13:21 2026 by rpki-client