$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft File: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft (raw, json) Hash identifier: KE+L3lxp/klrcn8IVPdJMR1uqIUberKSaPDSRyFMgsA= Subject key identifier: 05:58:2D:D4:19:15:EB:D2:C2:0C:63:D4:4C:3C:88:8C:CA:60:07:09 Authority key identifier: B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 Certificate issuer: /CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Certificate serial: 07E555A1F872E84EC10A9D29C5420AE379CBEBF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft Manifest number: BC Signing time: Mon 21 Sep 2026 00:42:25 +0000 Manifest this update: Mon 21 Sep 2026 00:37:25 +0000 Manifest next update: Tue 22 Sep 2026 04:09:25 +0000 Files and hashes: 1: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: XBcafkxD6M3SvFYGO48/RaxEmuX/AwJyNlM1io7xsgc=) 2: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: xM4nPkfrKQ/KWF8+Mu6GtG7DRliUUO1OiNjm+6857dQ=) 3: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl (hash: IIgmL/F87X73jli7u0PaxIn61bUffy58SZi52Xzi4Kw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e5:55:a1:f8:72:e8:4e:c1:0a:9d:29:c5:42:0a:e3:79:cb:eb:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Validity Not Before: Sep 21 00:37:25 2026 GMT Not After : Sep 22 04:09:25 2026 GMT Subject: CN=05582DD41915EBD2C20C63D44C3C888CCA600709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9b:66:13:a2:54:44:ec:c1:ca:70:e6:31:eb: 87:8b:c7:ff:f8:07:31:bf:57:4b:19:1b:70:a9:ef: 0a:67:4f:aa:50:4f:a0:d2:7d:19:ba:45:38:d1:e9: 91:68:53:cf:70:16:e3:84:1a:db:a1:0c:7d:5b:71: 1e:37:aa:05:67:94:f1:09:7a:4e:00:a8:99:97:6f: b4:e0:23:4b:b7:65:f1:ae:34:86:f0:b4:62:e5:d2: 7b:4b:32:9e:8b:94:2a:0f:b7:74:37:e7:b0:a3:eb: 58:1d:2b:6f:27:ec:61:ae:05:b4:34:3b:cd:d1:dc: 43:b5:ce:45:3b:d7:cc:0a:74:b2:09:c7:e1:e4:24: c0:b1:de:9a:f5:8f:ad:93:3c:6c:7e:59:d7:38:98: 9c:66:fe:43:e8:49:a7:90:39:90:8d:78:af:75:04: e7:c2:91:ac:2b:db:19:99:11:31:3c:4d:dc:e7:61: f6:56:b9:ef:5a:92:9e:e5:47:e5:5e:90:d7:e6:19: a9:64:3d:47:17:07:f8:44:4d:87:de:c3:f3:7b:75: e3:ab:52:f0:bf:6c:9e:02:21:8d:b0:50:83:8f:e9: 93:9e:04:14:d4:71:9a:da:7a:62:0b:d0:b8:c3:e9: db:41:b8:2b:af:bb:e6:da:71:c8:62:74:fa:79:dc: 56:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:58:2D:D4:19:15:EB:D2:C2:0C:63:D4:4C:3C:88:8C:CA:60:07:09 X509v3 Authority Key Identifier: keyid:B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d5:ce:d0:e7:ae:f4:0b:0d:72:a3:35:97:f2:6c:1e:01:07: 56:ad:c4:9b:4c:69:00:84:2e:80:dc:a5:a1:e5:91:7d:14:29: 17:c3:98:4c:12:97:8c:36:c7:15:ff:09:7e:2a:5c:0a:52:65: 16:77:c1:01:91:ad:7f:aa:40:a2:c8:41:fc:8e:a7:a7:3c:e3: 6d:f3:19:fe:72:5f:e6:b4:92:70:f9:2c:f7:39:75:c0:f9:56: 53:34:d4:e6:a9:45:5b:64:69:a2:94:58:61:d5:68:18:d1:6d: 07:f8:de:f0:34:f6:35:8d:b9:03:fa:c6:4a:7a:98:b0:6b:36: 21:f4:45:45:6b:71:49:7c:9d:8e:e3:84:99:21:43:e4:e2:ab: 4e:49:7a:e8:63:81:8f:72:d0:e0:49:64:3b:46:6b:08:f9:e7: 20:1e:87:87:13:d0:0d:7c:c9:f2:70:61:b4:aa:95:bf:25:dc: a8:4a:09:2a:49:fd:97:ce:b9:9f:ed:2b:7f:3b:66:b6:ee:ae: 1e:6f:5b:a8:03:e7:8e:6e:ba:5c:2c:37:c1:ce:10:a1:91:89: e8:a8:2c:cb:89:0c:bc:6d:13:1f:c1:20:f1:52:83:60:ff:04: f2:f9:a2:a3:48:a7:fd:6c:14:8c:5b:86:1e:88:72:e7:ed:fc: f5:cc:06:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+VVofhy6E7BCp0pxUIK43nL6/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3 Q0REQTlFNDAeFw0yNjA5MjEwMDM3MjVaFw0yNjA5MjIwNDA5MjVaMDMxMTAvBgNV BAMTKDA1NTgyREQ0MTkxNUVCRDJDMjBDNjNENDRDM0M4ODhDQ0E2MDA3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTm2YTolRE7MHKcOYx64eLx//4 BzG/V0sZG3Cp7wpnT6pQT6DSfRm6RTjR6ZFoU89wFuOEGtuhDH1bcR43qgVnlPEJ ek4AqJmXb7TgI0u3ZfGuNIbwtGLl0ntLMp6LlCoPt3Q357Cj61gdK28n7GGuBbQ0 O83R3EO1zkU718wKdLIJx+HkJMCx3pr1j62TPGx+Wdc4mJxm/kPoSaeQOZCNeK91 BOfCkawr2xmZETE8TdznYfZWue9akp7lR+VekNfmGalkPUcXB/hETYfew/N7deOr UvC/bJ4CIY2wUIOP6ZOeBBTUcZraemIL0LjD6dtBuCuvu+bacchidPp53FbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBVgt1BkV69LCDGPUTDyIjMpgBwkwHwYDVR0j BBgwFoAUsL+2a8Cum6ao+inIsDOMl3zdqeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjc3MjdjM2UtOWMxYS00NmRlLWEyYjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJD MEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3Q0REQTlFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEJGQjY2QkMwQUU5QkE2QThGQTI5QzhCMDMzOEM5NzdDRERB OUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhD OTc3Q0REQTlFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfVztDnrvQLDXKjNZfybB4BB1atxJtMaQCE LoDcpaHlkX0UKRfDmEwSl4w2xxX/CX4qXApSZRZ3wQGRrX+qQKLIQfyOp6c8423z Gf5yX+a0knD5LPc5dcD5VlM01OapRVtkaaKUWGHVaBjRbQf43vA09jWNuQP6xkp6 mLBrNiH0RUVrcUl8nY7jhJkhQ+Tiq05JeuhjgY9y0OBJZDtGawj55yAeh4cT0A18 yfJwYbSqlb8l3KhKCSpJ/ZfOuZ/tK387Zrburh5vW6gD545uulwsN8HOEKGRieio LMuJDLxtEx/BIPFSg2D/BPL5oqNIp/1sFIxbhh6Icuft/PXMBo8= -----END CERTIFICATE-----Generated at Mon Sep 21 10:57:14 2026 by rpki-client