$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft File: B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft (raw, json) Hash identifier: XzBQCODO75nHxekzdXSwNniTxoO/OlbtA7usOGaTq4Y= Subject key identifier: 23:60:5C:2F:3A:0D:78:4A:C5:E8:05:A0:63:36:1A:58:D8:81:88:4D Authority key identifier: B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF Certificate issuer: /CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF Certificate serial: 67B9EE1B702D7B220C07B157D31A24A7D887736C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:12:50 +0000 Manifest this update: Mon 21 Sep 2026 09:07:50 +0000 Manifest next update: Tue 22 Sep 2026 12:28:50 +0000 Files and hashes: 1: B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl (hash: XpyX3d2M2/7jSavRC98sPNQTvPCADKZncUEfBGUr6FQ=) 2: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: 7ewRXVv5rl+QG1YNIYilvzKzYUQ3mx2Wk/pMwVKtEKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b9:ee:1b:70:2d:7b:22:0c:07:b1:57:d3:1a:24:a7:d8:87:73:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF Validity Not Before: Sep 21 09:07:50 2026 GMT Not After : Sep 22 12:28:50 2026 GMT Subject: CN=23605C2F3A0D784AC5E805A063361A58D881884D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:7e:0e:49:8f:c9:5f:44:61:ec:a3:44:64: d5:c8:ae:fb:10:27:97:21:d9:53:66:ce:1d:e1:b5: 09:f2:af:eb:9a:77:9b:f8:d0:07:2e:f5:d9:ef:b2: 1d:d9:7c:f0:3a:71:22:7a:f2:1d:ab:fc:1d:02:a2: 98:f9:e3:28:48:93:36:ac:3e:5d:fd:fb:7d:a2:25: 4f:b1:f1:7b:28:93:fb:aa:a8:70:42:cc:82:07:65: 35:4f:a6:38:8f:38:44:84:8e:db:43:93:1c:3c:e2: 14:47:7f:df:e6:9e:07:e6:ae:bb:80:e2:61:24:a0: b3:ee:29:1c:60:2e:29:31:6b:06:39:af:1c:94:15: 68:e4:70:86:92:33:99:a5:d5:29:d2:57:be:d9:7e: 8e:73:b9:b9:68:ba:9a:67:07:3e:b1:91:b4:4b:1f: d2:82:e9:56:a0:93:fc:bb:55:77:2e:a4:cc:2a:41: ca:dc:d4:09:71:c5:59:cf:43:3b:02:bf:6c:35:77: e1:13:00:97:86:da:a7:c4:91:cf:b3:f1:2f:ab:4d: 7b:a8:e9:f1:5b:f9:6e:74:18:ac:8b:b3:2d:a9:31: 4c:ff:93:ba:48:2d:58:7a:96:a5:89:52:78:34:48: ca:29:d3:17:48:d1:b8:59:cb:be:9f:20:7f:ae:0e: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:60:5C:2F:3A:0D:78:4A:C5:E8:05:A0:63:36:1A:58:D8:81:88:4D X509v3 Authority Key Identifier: keyid:B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:af:b3:c2:3c:e4:61:6e:40:96:08:87:87:63:73:4b:93:c2: a2:93:cc:eb:55:de:8a:34:7f:fa:57:80:aa:32:d6:e1:08:ac: cf:cb:3d:41:20:6f:e5:e6:e9:a0:ec:9b:f2:15:10:04:af:a6: e9:0a:4a:0c:82:b4:4c:6c:e9:5f:06:f4:86:de:11:25:ce:d8: 2a:31:c7:47:13:6f:ba:73:85:32:d5:d8:21:aa:20:02:c8:d2: 46:81:3a:a8:f9:5e:6b:09:3b:4c:6f:68:21:3f:42:8f:97:d0: ca:41:1a:68:e2:dc:0e:61:c7:7f:90:27:69:8e:0e:87:bd:d4: ba:66:b9:2e:45:22:c8:fa:06:d3:8e:ce:51:ef:f6:43:44:74: 2e:f5:e1:65:ee:d9:93:45:93:9b:bb:16:6f:9c:ba:ba:14:9c: 45:06:f2:85:a5:d9:59:79:1e:cf:d7:02:cd:10:94:15:a7:a2: 1f:f9:3a:d4:1f:26:0d:63:e0:dd:09:e8:2a:2b:f1:2c:cc:68: cb:fd:4b:bd:68:77:54:6a:b8:47:a8:0c:0c:0a:7c:2b:76:23: c4:02:fc:f2:22:80:4a:49:a4:4d:8e:de:99:3e:ed:fd:76:71: 8b:ba:65:e2:58:31:9a:cf:75:0f:74:69:2a:99:7b:b0:06:aa: ef:31:f5:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ7nuG3AteyIMB7FX0xokp9iHc2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxMTFGQzBEMTgzNkE1NENGRjM1MDlBRkZBODM5MzND MjQ1MUNBRjAeFw0yNjA5MjEwOTA3NTBaFw0yNjA5MjIxMjI4NTBaMDMxMTAvBgNV BAMTKDIzNjA1QzJGM0EwRDc4NEFDNUU4MDVBMDYzMzYxQTU4RDg4MTg4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXn4OSY/JX0Rh7KNEZNXIrvsQ J5ch2VNmzh3htQnyr+uad5v40Acu9dnvsh3ZfPA6cSJ68h2r/B0Copj54yhIkzas Pl39+32iJU+x8Xsok/uqqHBCzIIHZTVPpjiPOESEjttDkxw84hRHf9/mngfmrruA 4mEkoLPuKRxgLikxawY5rxyUFWjkcIaSM5ml1SnSV77Zfo5zublouppnBz6xkbRL H9KC6Vagk/y7VXcupMwqQcrc1AlxxVnPQzsCv2w1d+ETAJeG2qfEkc+z8S+rTXuo 6fFb+W50GKyLsy2pMUz/k7pILVh6lqWJUng0SMop0xdI0bhZy76fIH+uDhYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI2BcLzoNeErF6AWgYzYaWNiBiE0wHwYDVR0j BBgwFoAUtBEfwNGDalTP81Ca/6g5M8JFHK8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ3NThlOGUtNDljOC00OGI4LWJkY2ItMzUzMzllMmFlNjAxLzAvQjQxMTFGQzBE MTgzNkE1NENGRjM1MDlBRkZBODM5MzNDMjQ1MUNBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDExMUZDMEQxODM2QTU0Q0ZGMzUwOUFGRkE4MzkzM0MyNDUx Q0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvQjQxMTFGQzBEMTgzNkE1NENGRjM1MDlBRkZBODM5 MzNDMjQ1MUNBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuvs8I85GFuQJYIh4djc0uTwqKTzOtV3oo0 f/pXgKoy1uEIrM/LPUEgb+Xm6aDsm/IVEASvpukKSgyCtExs6V8G9IbeESXO2Cox x0cTb7pzhTLV2CGqIALI0kaBOqj5XmsJO0xvaCE/Qo+X0MpBGmji3A5hx3+QJ2mO Doe91LpmuS5FIsj6BtOOzlHv9kNEdC714WXu2ZNFk5u7Fm+curoUnEUG8oWl2Vl5 Hs/XAs0QlBWnoh/5OtQfJg1j4N0J6Cor8SzMaMv9S71od1RquEeoDAwKfCt2I8QC /PIigEpJpE2O3pk+7f12cYu6ZeJYMZrPdQ90aSqZe7AGqu8x9R4= -----END CERTIFICATE-----Generated at Tue Sep 22 01:07:02 2026 by rpki-client