$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft File: B486D413919D8F20144DB8254040D1237E34B8AA.mft (raw, json) Hash identifier: wuiyEikaD8juo2JvhLscvQqWjgZduTQ0ywNKZymyJp8= Subject key identifier: F8:DC:21:A0:45:35:CD:0B:43:77:78:9C:D4:0F:E8:C3:60:D9:B0:B8 Authority key identifier: B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA Certificate issuer: /CN=B486D413919D8F20144DB8254040D1237E34B8AA Certificate serial: 0A09C582BD1C92F96E0F22675A0ECFEDA46073D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:06:39 +0000 Manifest this update: Mon 21 Sep 2026 04:01:39 +0000 Manifest next update: Tue 22 Sep 2026 04:53:39 +0000 Files and hashes: 1: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: 7QTUY2NQvJrxF3QQX7LUC6hqv5ttn70Xh40WXHVfruk=) 2: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: I7JOfc7cIihje61qrOhB8mNIVUiXPbuVCLb1xIG81r0=) 3: B486D413919D8F20144DB8254040D1237E34B8AA.crl (hash: O2oVbXMRyMZfjoBhEM5qdZTYsfp1kG+SbA2OqItiC3E=) 4: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: eldG4bxXfHfHBZuQpQd9deqvI4oVqZUOKXxgD57litE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:09:c5:82:bd:1c:92:f9:6e:0f:22:67:5a:0e:cf:ed:a4:60:73:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B486D413919D8F20144DB8254040D1237E34B8AA Validity Not Before: Sep 21 04:01:39 2026 GMT Not After : Sep 22 04:53:39 2026 GMT Subject: CN=F8DC21A04535CD0B4377789CD40FE8C360D9B0B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a5:ed:d1:e1:44:2e:a4:35:d1:df:32:9b:c3: e0:da:dc:5e:10:66:17:67:f1:4f:26:b1:4c:95:7d: e4:49:d8:47:4c:de:1f:c9:e0:7d:70:87:68:fd:55: d5:a0:4d:b1:c1:b1:be:f6:ab:24:ed:b7:b6:22:00: f3:7c:38:9f:a3:c6:64:d6:5a:f5:b2:64:1f:b6:7a: 23:14:a2:f5:5d:04:f4:08:66:ba:49:45:ba:41:88: e3:b6:ce:74:18:28:5f:ca:58:a3:81:ea:06:07:c0: 28:f1:e5:7f:d7:dc:0f:d2:4f:ef:99:05:5f:c4:21: e8:a6:97:74:b0:18:a4:09:97:f8:16:36:19:76:c3: b8:b0:15:63:b9:3b:a9:ce:33:4d:c0:a9:af:42:61: bd:8c:3c:22:f8:ed:8a:74:bc:cb:9b:5c:e5:12:82: 59:1f:61:3a:f5:66:37:14:95:f7:98:fa:06:4f:0f: e9:37:ed:a6:a6:68:64:07:0d:0d:74:9d:f1:64:c7: 5f:47:85:16:99:11:6b:f7:b5:a5:1f:ca:e4:66:7c: a0:53:fc:3e:51:d7:7d:0f:f0:7f:34:1b:c7:ae:08: 7c:c4:11:34:1d:d1:a3:23:84:c2:7f:1a:ea:b2:fc: 25:66:7d:b7:12:32:b7:71:77:62:54:cd:a6:fd:ab: 79:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DC:21:A0:45:35:CD:0B:43:77:78:9C:D4:0F:E8:C3:60:D9:B0:B8 X509v3 Authority Key Identifier: keyid:B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:3d:0b:ce:a4:82:9f:53:80:2a:82:18:67:d8:e8:6f:6f:1a: a2:62:85:76:0c:be:49:eb:cb:50:94:15:37:02:59:3a:5c:4d: f0:10:9f:0d:d0:cf:cc:4f:42:4d:97:22:49:dd:e2:6c:50:79: 92:b2:7f:b9:70:97:c3:6f:08:7f:a5:3c:0b:5a:5e:22:f2:c0: aa:f8:43:47:ba:57:54:db:4f:59:96:24:ff:d4:f5:79:3f:bf: a8:57:82:1e:f3:93:e6:32:37:ac:c0:96:cc:be:c9:48:88:81: 0a:79:b3:c7:07:f1:0f:05:91:a4:b5:f4:85:6f:70:6a:d0:65: 0f:8b:5c:67:ac:e2:95:91:12:52:e2:26:66:bd:87:fb:20:83: 0d:9f:3e:c2:20:1e:aa:f0:3c:b8:35:54:42:eb:93:db:6b:04: e8:27:2a:41:5f:2c:1c:c5:b1:c2:b8:1a:51:83:e1:ed:9e:66: 0e:c7:70:7e:06:0f:16:79:ea:f8:e0:f1:89:78:05:e3:c3:0c: 22:c1:3f:dd:5d:b9:52:58:16:c8:33:b7:ed:e5:95:7a:4a:f5: f7:62:b5:d4:64:df:75:5a:83:46:fd:bf:22:74:78:30:6a:57: fe:cd:bb:87:e3:50:39:75:c6:f8:78:b9:ce:d3:da:05:1f:b5: 71:f6:1f:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgnFgr0ckvluDyJnWg7P7aRgc9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3 RTM0QjhBQTAeFw0yNjA5MjEwNDAxMzlaFw0yNjA5MjIwNDUzMzlaMDMxMTAvBgNV BAMTKEY4REMyMUEwNDUzNUNEMEI0Mzc3Nzg5Q0Q0MEZFOEMzNjBEOUIwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfpe3R4UQupDXR3zKbw+Da3F4Q Zhdn8U8msUyVfeRJ2EdM3h/J4H1wh2j9VdWgTbHBsb72qyTtt7YiAPN8OJ+jxmTW WvWyZB+2eiMUovVdBPQIZrpJRbpBiOO2znQYKF/KWKOB6gYHwCjx5X/X3A/ST++Z BV/EIeiml3SwGKQJl/gWNhl2w7iwFWO5O6nOM03Aqa9CYb2MPCL47Yp0vMubXOUS glkfYTr1ZjcUlfeY+gZPD+k37aamaGQHDQ10nfFkx19HhRaZEWv3taUfyuRmfKBT /D5R130P8H80G8euCHzEETQd0aMjhMJ/Guqy/CVmfbcSMrdxd2JUzab9q3kRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+NwhoEU1zQtDd3ic1A/ow2DZsLgwHwYDVR0j BBgwFoAUtIbUE5GdjyAUTbglQEDRI340uKowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBjMTcxZjQtYmQxMS00OGVkLTg3ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5 MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3RTM0QjhBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDg2RDQxMzkxOUQ4RjIwMTQ0REI4MjU0MDQwRDEyMzdFMzRC OEFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQx MjM3RTM0QjhBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJM9C86kgp9TgCqCGGfY6G9vGqJihXYMvknr y1CUFTcCWTpcTfAQnw3Qz8xPQk2XIknd4mxQeZKyf7lwl8NvCH+lPAtaXiLywKr4 Q0e6V1TbT1mWJP/U9Xk/v6hXgh7zk+YyN6zAlsy+yUiIgQp5s8cH8Q8FkaS19IVv cGrQZQ+LXGes4pWRElLiJma9h/sggw2fPsIgHqrwPLg1VELrk9trBOgnKkFfLBzF scK4GlGD4e2eZg7HcH4GDxZ56vjg8Yl4BePDDCLBP91duVJYFsgzt+3llXpK9fdi tdRk33Vag0b9vyJ0eDBqV/7Nu4fjUDl1xvh4uc7T2gUftXH2H+4= -----END CERTIFICATE-----Generated at Mon Sep 21 22:21:51 2026 by rpki-client