$ rpki-client -vvvf rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft File: B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft (raw, json) Hash identifier: pu3DEPpAljGVWYN4cE1eXB+dlvbosz1cqPBHlbiH/ow= Subject key identifier: 48:CF:E9:2B:AD:02:7F:06:A1:4A:8A:1F:25:7E:0E:20:83:D6:07:E9 Authority key identifier: B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC Certificate issuer: /CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Certificate serial: 6FC7CAB299A41A758C9C0ED5A77B70359ED59E72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft Manifest number: BC Signing time: Sun 20 Sep 2026 03:06:00 +0000 Manifest this update: Sun 20 Sep 2026 03:01:00 +0000 Manifest next update: Mon 21 Sep 2026 04:10:00 +0000 Files and hashes: 1: B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl (hash: bs8NwotftMhj4XVrnFqOozpwxmQmTxJgqxLTb9vylGE=) 2: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: c6pFiJSk1UQhVnz9HO0WDm1mZbg2xnGEy69Z/hHQfrI=) 3: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: lh47cqtqX+UfhZbQx7DPwZTGhdNBwMPbLmUFIaoV1ag=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 04:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c7:ca:b2:99:a4:1a:75:8c:9c:0e:d5:a7:7b:70:35:9e:d5:9e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Validity Not Before: Sep 20 03:01:00 2026 GMT Not After : Sep 21 04:10:00 2026 GMT Subject: CN=48CFE92BAD027F06A14A8A1F257E0E2083D607E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1b:a6:a3:11:25:ac:aa:e1:31:a6:1f:75:35: e4:91:93:c8:52:80:8c:79:7b:fc:9b:9a:dc:09:af: 99:76:30:57:90:4c:2d:b7:3a:dc:49:94:e5:45:51: df:5e:60:d3:1b:ce:94:c6:89:8e:b2:d3:74:d0:d7: 95:45:38:5f:34:49:0e:63:33:57:86:cd:82:5b:9b: 75:65:ea:82:21:8b:b8:5e:4a:d8:fc:3b:2a:3d:cb: 58:9c:cf:18:4f:34:97:8d:f3:f6:65:a2:8b:ef:01: 51:ef:3f:36:bb:5b:89:af:96:eb:ff:b1:f1:d5:eb: 46:d9:9e:2a:ea:19:03:cc:94:99:37:6b:30:91:da: 07:43:9b:26:d1:ad:92:80:dd:5a:0e:b4:28:d9:c8: 87:2b:95:48:d5:69:12:a6:73:77:88:89:f9:78:e3: a3:e3:d5:bc:34:af:a9:2b:67:73:e0:56:d9:8f:bd: e4:86:b2:56:4d:bb:30:02:b2:e6:4f:4d:e1:b5:43: c6:61:73:7c:f4:97:22:f3:d1:1e:fc:a6:b6:d0:7e: 6b:6b:2a:f7:59:d1:6c:c6:d8:99:84:50:75:26:9c: a4:7a:6e:90:ac:2a:b6:89:97:b5:3e:41:57:be:75: 30:f3:96:4f:9e:c2:19:9b:af:dc:17:ee:7e:5e:fc: 45:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CF:E9:2B:AD:02:7F:06:A1:4A:8A:1F:25:7E:0E:20:83:D6:07:E9 X509v3 Authority Key Identifier: keyid:B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:0d:98:5c:88:98:4a:32:05:b9:8f:27:61:7d:51:02:85:e5: 8f:c8:32:67:8d:03:74:2b:bc:03:94:f2:ce:ef:d0:a1:13:d5: d2:90:5a:83:a4:dd:8a:31:9b:1b:22:49:c0:98:75:03:36:0b: d4:f3:2d:2f:34:c2:37:01:4e:d4:49:09:d3:51:01:f4:26:cc: 9a:f9:03:30:6b:85:47:9f:b4:08:2b:d4:df:bd:d8:37:61:d2: 5f:01:1b:ed:1f:b1:67:59:b8:e5:71:1c:f0:d2:66:05:77:ad: 83:1b:9a:3e:f9:49:77:e3:39:ea:33:b8:6f:54:fb:17:fb:68: 46:8f:d2:72:d8:83:97:3a:fe:5a:49:d7:32:6a:4b:aa:34:0c: 78:e4:e1:b5:56:cc:48:11:10:64:d6:67:48:f7:91:eb:e0:39: 73:73:b5:a1:4f:73:41:3f:29:a8:c6:8a:fd:0c:e6:bd:54:47: 4c:43:af:a6:5f:ca:12:5a:1c:40:92:f8:61:b1:ca:74:94:28: 08:1f:17:05:b8:44:6a:e6:0d:ad:62:89:97:ed:43:61:58:b3: 9c:b1:b3:58:c5:c6:da:7a:b0:f7:f9:48:7a:cf:2b:41:5b:fa: 26:f1:ce:32:5e:7b:db:62:d1:04:39:dd:ad:94:b4:fd:0b:98: e2:f2:f7:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb8fKspmkGnWMnA7Vp3twNZ7VnnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4 N0FDRURCQzAeFw0yNjA5MjAwMzAxMDBaFw0yNjA5MjEwNDEwMDBaMDMxMTAvBgNV BAMTKDQ4Q0ZFOTJCQUQwMjdGMDZBMTRBOEExRjI1N0UwRTIwODNENjA3RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOG6ajESWsquExph91NeSRk8hS gIx5e/ybmtwJr5l2MFeQTC23OtxJlOVFUd9eYNMbzpTGiY6y03TQ15VFOF80SQ5j M1eGzYJbm3Vl6oIhi7heStj8Oyo9y1iczxhPNJeN8/ZloovvAVHvPza7W4mvluv/ sfHV60bZnirqGQPMlJk3azCR2gdDmybRrZKA3VoOtCjZyIcrlUjVaRKmc3eIifl4 46Pj1bw0r6krZ3PgVtmPveSGslZNuzACsuZPTeG1Q8Zhc3z0lyLz0R78prbQfmtr KvdZ0WzG2JmEUHUmnKR6bpCsKraJl7U+QVe+dTDzlk+ewhmbr9wX7n5e/EW7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSM/pK60CfwahSoofJX4OIIPWB+kwHwYDVR0j BBgwFoAUsukU19QDtFxLvCjjZoR4WIes7bwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVlMjQxNWMtN2Q0Zi00NDI3LTgzMmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdE NDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4N0FDRURCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkU5MTREN0Q0MDNCNDVDNEJCQzI4RTM2Njg0Nzg1ODg3QUNF REJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4 NTg4N0FDRURCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMNmFyImEoyBbmPJ2F9UQKF5Y/IMmeNA3Qr vAOU8s7v0KET1dKQWoOk3YoxmxsiScCYdQM2C9TzLS80wjcBTtRJCdNRAfQmzJr5 AzBrhUeftAgr1N+92Ddh0l8BG+0fsWdZuOVxHPDSZgV3rYMbmj75SXfjOeozuG9U +xf7aEaP0nLYg5c6/lpJ1zJqS6o0DHjk4bVWzEgREGTWZ0j3kevgOXNztaFPc0E/ KajGiv0M5r1UR0xDr6ZfyhJaHECS+GGxynSUKAgfFwW4RGrmDa1iiZftQ2FYs5yx s1jFxtp6sPf5SHrPK0Fb+ibxzjJee9ti0QQ53a2UtP0LmOLy93s= -----END CERTIFICATE-----Generated at Sun Sep 20 21:11:21 2026 by rpki-client