$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft File: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft (raw, json) Hash identifier: mQAqKLHI9rS6ZT8z+yaLXYZ/OEauy5WPfmk3Vjw0S8o= Subject key identifier: AF:31:BA:2A:67:5B:3E:79:9E:55:56:38:39:BC:B4:C2:3E:1F:B2:89 Authority key identifier: BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 Certificate issuer: /CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Certificate serial: 4C49581145E7531D77E10578B2C28C09CF524914 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:37:18 +0000 Manifest this update: Mon 21 Sep 2026 00:32:18 +0000 Manifest next update: Tue 22 Sep 2026 04:00:18 +0000 Files and hashes: 1: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: tDYsDAflbcBxokNCYrVdFRBBRfHA9s3JtNKf99TBDJ4=) 2: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl (hash: pBeqlWHUGxiVu188D3G3ifwaLFpdymaKIafQsTgXKiE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:49:58:11:45:e7:53:1d:77:e1:05:78:b2:c2:8c:09:cf:52:49:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Validity Not Before: Sep 21 00:32:18 2026 GMT Not After : Sep 22 04:00:18 2026 GMT Subject: CN=AF31BA2A675B3E799E55563839BCB4C23E1FB289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:09:8b:c6:d5:ef:dc:43:4d:92:00:12:51: d6:98:06:6e:28:f2:2f:0e:0d:2d:e1:40:5b:76:2d: cf:a4:d3:20:82:b8:3b:b1:51:d9:8c:1e:b3:e7:fa: 16:b9:2a:e8:7f:51:a4:62:e7:ed:1e:c2:05:16:8e: 6f:6b:9c:d9:50:71:6a:1c:57:01:bc:ae:20:35:53: b9:26:d6:13:7e:e5:eb:28:39:bf:35:9d:7c:ec:0f: f9:ad:86:5b:d8:56:90:50:c2:f1:e6:d8:bc:c7:91: ac:0f:c5:ac:1b:e3:c8:19:e3:fd:47:d1:28:9a:5f: e1:c0:a0:e1:fd:1a:95:9d:79:79:af:1f:1e:87:5a: 2b:38:21:c9:88:e9:43:9c:08:9c:6f:47:9f:ed:84: 09:0f:12:8f:61:d2:d2:4c:c1:ad:64:c6:b6:2f:4d: d3:a3:c3:80:27:cc:cd:1a:b3:2f:28:88:f5:1c:8a: 76:9e:21:83:82:6d:b1:34:81:04:de:02:7c:8f:f1: 69:61:5e:d0:bf:7e:ab:15:7b:18:ba:6c:50:e8:47: 6e:aa:55:c0:d2:67:d8:7a:ee:48:4a:7d:5b:94:45: 48:20:15:e5:5f:ed:50:ba:1f:3d:d2:5d:eb:cb:c6: f8:c9:64:39:b7:00:59:c4:b1:0a:33:b0:e2:dc:8a: b3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:31:BA:2A:67:5B:3E:79:9E:55:56:38:39:BC:B4:C2:3E:1F:B2:89 X509v3 Authority Key Identifier: keyid:BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4a:45:7e:91:82:07:fe:bb:72:55:74:e1:a3:d6:57:41:7a: 3c:01:12:44:4f:bf:0a:9c:4e:26:5f:9f:56:45:d5:7c:0d:25: 5c:12:7f:89:0b:1e:41:e6:10:41:7b:2a:a2:f7:7e:ce:f4:4c: 5b:11:b9:04:6d:70:84:a9:af:ac:df:51:4e:40:e9:81:14:ae: 72:36:a7:77:83:9e:93:c6:d7:21:53:e4:0b:3e:bb:38:19:da: 78:11:7d:b2:8a:19:e8:81:20:16:09:30:2e:a9:04:46:9c:86: 05:dc:46:53:82:57:f2:51:e2:2f:97:02:af:c3:67:7e:4c:e0: d1:9f:97:fe:b2:28:98:97:c0:89:4b:44:55:45:5d:d0:48:dd: 14:77:98:1a:e1:27:b8:41:2e:f2:43:25:ca:b0:25:e1:39:6b: 10:c6:81:e8:14:6b:0c:8b:2b:d9:17:ba:53:99:77:56:81:38: 05:fe:06:ed:df:83:8f:d0:3b:bf:8f:db:68:a6:cf:40:fd:f7: 96:79:6e:60:c1:15:a0:fd:17:1a:1a:4f:63:04:0a:39:51:39: 69:cd:e3:3c:6a:17:8e:f1:65:86:6d:01:ba:b3:9d:e4:77:c6: 48:13:8b:38:88:c1:30:24:85:e7:11:a2:ab:36:93:21:88:2a: ae:fb:ce:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTElYEUXnUx134QV4ssKMCc9SSRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0NTI4 QTk5RkFGNjAeFw0yNjA5MjEwMDMyMThaFw0yNjA5MjIwNDAwMThaMDMxMTAvBgNV BAMTKEFGMzFCQTJBNjc1QjNFNzk5RTU1NTYzODM5QkNCNEMyM0UxRkIyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5AmLxtXv3ENNkgASUdaYBm4o 8i8ODS3hQFt2Lc+k0yCCuDuxUdmMHrPn+ha5Kuh/UaRi5+0ewgUWjm9rnNlQcWoc VwG8riA1U7km1hN+5esoOb81nXzsD/mthlvYVpBQwvHm2LzHkawPxawb48gZ4/1H 0SiaX+HAoOH9GpWdeXmvHx6HWis4IcmI6UOcCJxvR5/thAkPEo9h0tJMwa1kxrYv TdOjw4AnzM0asy8oiPUcinaeIYOCbbE0gQTeAnyP8WlhXtC/fqsVexi6bFDoR26q VcDSZ9h67khKfVuURUggFeVf7VC6Hz3SXevLxvjJZDm3AFnEsQozsOLcirNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrzG6KmdbPnmeVVY4Oby0wj4fsokwHwYDVR0j BBgwFoAUvJMXgObwnv3tbT/4PJg0UoqZ+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBF NkYwOUVGREVENkQzRkY4M0M5ODM0NTI4QTk5RkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQzkzMTc4MEU2RjA5RUZERUQ2RDNGRjgzQzk4MzQ1MjhBOTlG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0 NTI4QTk5RkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZKRX6Rggf+u3JVdOGj1ldBejwBEkRPvwqc TiZfn1ZF1XwNJVwSf4kLHkHmEEF7KqL3fs70TFsRuQRtcISpr6zfUU5A6YEUrnI2 p3eDnpPG1yFT5As+uzgZ2ngRfbKKGeiBIBYJMC6pBEachgXcRlOCV/JR4i+XAq/D Z35M4NGfl/6yKJiXwIlLRFVFXdBI3RR3mBrhJ7hBLvJDJcqwJeE5axDGgegUawyL K9kXulOZd1aBOAX+Bu3fg4/QO7+P22imz0D995Z5bmDBFaD9FxoaT2MECjlROWnN 4zxqF47xZYZtAbqzneR3xkgTiziIwTAkhecRoqs2kyGIKq77ziY= -----END CERTIFICATE-----Generated at Mon Sep 21 03:31:50 2026 by rpki-client