$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft File: 12215616BDEA90F45AB43FFCB676AA254601358F.mft (raw, json) Hash identifier: d4qSCEvSjPPnZ7O9Sc2mZxd3Auju+ufEL6Zm4lKNNUc= Subject key identifier: 05:BE:D2:21:34:A6:28:AE:4F:46:51:51:A0:DC:8A:7B:83:EB:D1:DC Authority key identifier: 12:21:56:16:BD:EA:90:F4:5A:B4:3F:FC:B6:76:AA:25:46:01:35:8F Certificate issuer: /CN=12215616BDEA90F45AB43FFCB676AA254601358F Certificate serial: 069C66753F5AECC3407E4D7FCA5EC990CE30BF4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft Manifest number: BD Signing time: Tue 22 Sep 2026 02:09:03 +0000 Manifest this update: Tue 22 Sep 2026 02:04:03 +0000 Manifest next update: Wed 23 Sep 2026 05:04:03 +0000 Files and hashes: 1: 3130332e3137342e3132322e302f32332d3233203d3e20313437303936.roa (hash: gTzJVLzwHZfB2XlD0ZDAGkf7sC4mGSUZJV6Nnni5S1g=) 2: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: BIL+aGZm0f2cNvuuhG7zFnc4Iz00ZUgKA3IGqeW+Vp0=) 3: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: 19Gxe0C+BqrJZYT7+O9ydX/09JgmXPG6bcNyUMxys/Q=) 4: 12215616BDEA90F45AB43FFCB676AA254601358F.crl (hash: +7LUya74MbC1qBlqvK1SOAiqjAc2J5zCsvB2eyePnBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.crl rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:9c:66:75:3f:5a:ec:c3:40:7e:4d:7f:ca:5e:c9:90:ce:30:bf:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12215616BDEA90F45AB43FFCB676AA254601358F Validity Not Before: Sep 22 02:04:03 2026 GMT Not After : Sep 23 05:04:03 2026 GMT Subject: CN=05BED22134A628AE4F465151A0DC8A7B83EBD1DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8a:79:d1:9f:01:c9:24:d2:94:49:c5:c5:15: 75:0a:fe:3e:e9:89:c2:01:06:d5:84:60:5b:a9:d3: 85:4a:db:5e:98:93:91:85:7e:fa:87:c9:77:f7:9a: b7:b3:9d:ec:17:ea:d7:a7:f3:7e:e0:13:68:af:32: 02:b7:0b:2f:ba:32:cd:95:c9:9e:6f:92:b6:f5:44: 2a:48:a5:61:2e:be:6f:1a:84:96:50:9f:e6:71:a2: f0:a9:8d:b0:2e:60:9e:3b:9e:30:da:2c:b8:f0:5f: b1:85:39:24:f6:5c:6f:ca:fd:03:f0:d5:dd:90:d7: 69:96:75:4e:bf:93:2e:d3:02:46:79:3a:98:72:dd: 06:39:c4:9a:e6:fb:eb:36:70:58:78:5c:72:09:11: 32:03:06:cb:30:b2:cf:8d:c9:58:8a:98:11:80:19: b0:25:5e:d6:ed:d6:c1:c9:ac:f7:fb:4d:8d:cf:50: 61:d5:a8:ca:0c:85:ec:6d:2f:21:e2:e9:c2:68:98: e7:5f:79:df:b5:6a:46:45:e3:3d:a4:98:2e:42:43: 3c:7c:4b:f8:ec:bb:2d:c0:02:0b:b2:92:4a:5f:9c: f0:8a:71:f8:17:f5:f0:bf:f6:90:c1:d3:ba:e5:3b: c0:8f:6f:6a:36:e2:f9:2e:22:49:95:03:c0:32:33: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BE:D2:21:34:A6:28:AE:4F:46:51:51:A0:DC:8A:7B:83:EB:D1:DC X509v3 Authority Key Identifier: keyid:12:21:56:16:BD:EA:90:F4:5A:B4:3F:FC:B6:76:AA:25:46:01:35:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12215616BDEA90F45AB43FFCB676AA254601358F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/12215616BDEA90F45AB43FFCB676AA254601358F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:28:dc:cf:83:46:3c:fe:b8:16:2b:c5:5d:6e:84:b8:df:7c: 93:46:b4:7b:41:7a:e9:13:8f:4a:2c:7a:10:cc:a3:91:5b:c3: 20:9b:f1:49:04:99:51:47:38:cb:1b:77:ed:b2:4f:ae:80:cf: fd:84:8f:48:d6:d4:1e:cd:05:25:5e:02:59:04:38:a0:6c:94: 74:4a:0e:ef:63:c8:08:4f:00:c5:c7:49:96:4e:cd:78:86:d6: 39:84:4b:72:c2:e9:b5:79:cb:7c:3f:a4:13:43:2c:3b:27:70: 87:cb:20:31:4c:4a:ba:d2:4d:2f:44:ca:c8:94:cb:03:b4:92: 84:94:86:38:a3:c6:7f:30:ee:08:b0:04:06:1d:6c:90:a5:84: 85:b3:a6:e7:fc:95:5c:83:99:db:16:f0:f5:17:bd:a6:a3:3f: cf:f3:22:8a:41:4b:60:51:cc:dc:ac:f8:c5:ea:27:0b:7a:ad: 75:b2:b6:7c:cf:32:75:d1:5b:fe:0d:96:d5:a1:25:96:18:9c: 16:79:a1:72:34:35:31:4c:67:67:fb:d3:2b:ac:86:97:dc:04: b7:c8:9f:81:9b:04:ae:59:31:98:d9:ec:ad:0f:63:89:f1:f7: 45:36:a0:83:03:08:80:72:d4:93:15:ee:44:94:0a:60:34:41: 80:44:76:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBpxmdT9a7MNAfk1/yl7JkM4wv00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyMTU2MTZCREVBOTBGNDVBQjQzRkZDQjY3NkFBMjU0 NjAxMzU4RjAeFw0yNjA5MjIwMjA0MDNaFw0yNjA5MjMwNTA0MDNaMDMxMTAvBgNV BAMTKDA1QkVEMjIxMzRBNjI4QUU0RjQ2NTE1MUEwREM4QTdCODNFQkQxREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUinnRnwHJJNKUScXFFXUK/j7p icIBBtWEYFup04VK216Yk5GFfvqHyXf3mreznewX6ten837gE2ivMgK3Cy+6Ms2V yZ5vkrb1RCpIpWEuvm8ahJZQn+ZxovCpjbAuYJ47njDaLLjwX7GFOST2XG/K/QPw 1d2Q12mWdU6/ky7TAkZ5Ophy3QY5xJrm++s2cFh4XHIJETIDBsswss+NyViKmBGA GbAlXtbt1sHJrPf7TY3PUGHVqMoMhextLyHi6cJomOdfed+1akZF4z2kmC5CQzx8 S/jsuy3AAguykkpfnPCKcfgX9fC/9pDB07rlO8CPb2o24vkuIkmVA8AyM/cbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBb7SITSmKK5PRlFRoNyKe4Pr0dwwHwYDVR0j BBgwFoAUEiFWFr3qkPRatD/8tnaqJUYBNY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjI3MzAyN2EtMDk2Yi00ZTk1LWE2NTYtZGFiZTk4YWM2ZjZkLzAvMTIyMTU2MTZC REVBOTBGNDVBQjQzRkZDQjY3NkFBMjU0NjAxMzU4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjIxNTYxNkJERUE5MEY0NUFCNDNGRkNCNjc2QUEyNTQ2MDEz NThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMTIyMTU2MTZCREVBOTBGNDVBQjQzRkZDQjY3NkFB MjU0NjAxMzU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgo3M+DRjz+uBYrxV1uhLjffJNGtHtBeukT j0osehDMo5FbwyCb8UkEmVFHOMsbd+2yT66Az/2Ej0jW1B7NBSVeAlkEOKBslHRK Du9jyAhPAMXHSZZOzXiG1jmES3LC6bV5y3w/pBNDLDsncIfLIDFMSrrSTS9EysiU ywO0koSUhjijxn8w7giwBAYdbJClhIWzpuf8lVyDmdsW8PUXvaajP8/zIopBS2BR zNys+MXqJwt6rXWytnzPMnXRW/4NltWhJZYYnBZ5oXI0NTFMZ2f70yushpfcBLfI n4GbBK5ZMZjZ7K0PY4nx90U2oIMDCIBy1JMV7kSUCmA0QYBEdhM= -----END CERTIFICATE-----Generated at Tue Sep 22 21:49:35 2026 by rpki-client