$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft File: 8100B25D994714EDA24AA78389FB6369505FB6A1.mft (raw, json) Hash identifier: B3U/VaZe3EJOi92/lcyCIcx0OM8w4iFtpz6SxA4olnQ= Subject key identifier: 79:1D:E4:B4:45:B2:BA:5D:B5:DF:43:26:FB:0A:CC:AA:7F:A1:F7:17 Authority key identifier: 81:00:B2:5D:99:47:14:ED:A2:4A:A7:83:89:FB:63:69:50:5F:B6:A1 Certificate issuer: /CN=8100B25D994714EDA24AA78389FB6369505FB6A1 Certificate serial: 28D8C2EA3F6EEB1CB3593C9D6D8320DB940E2673 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft Manifest number: BF Signing time: Sun 20 Sep 2026 20:57:47 +0000 Manifest this update: Sun 20 Sep 2026 20:52:47 +0000 Manifest next update: Mon 21 Sep 2026 20:58:47 +0000 Files and hashes: 1: 8100B25D994714EDA24AA78389FB6369505FB6A1.crl (hash: D0I6+pEqDBv1xItmAePZ8nmS+ARUG2tY2q+ifF2APUU=) 2: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (hash: Lkb66D/b6HHbDg6MW2ra2IYcOlvwvMwBNjyaQ7Wpqq4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.crl rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d8:c2:ea:3f:6e:eb:1c:b3:59:3c:9d:6d:83:20:db:94:0e:26:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8100B25D994714EDA24AA78389FB6369505FB6A1 Validity Not Before: Sep 20 20:52:47 2026 GMT Not After : Sep 21 20:58:47 2026 GMT Subject: CN=791DE4B445B2BA5DB5DF4326FB0ACCAA7FA1F717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8b:dd:c8:9b:31:2d:91:1d:42:c4:1e:20:11: f0:4c:34:3c:0c:6d:de:fd:a1:ff:ba:50:f7:79:6b: 04:8e:74:a9:93:70:eb:bb:34:ff:88:fe:02:7c:56: f3:52:d5:e4:7c:09:71:91:e3:71:e8:b2:02:21:35: 27:3a:f1:81:1a:af:96:b8:a2:c9:5d:e2:de:a0:f5: 80:15:5a:50:40:bd:be:cd:fb:62:11:f2:2a:dc:65: 80:69:14:80:42:91:4a:2d:bf:ba:7d:0d:7c:c5:56: 15:7e:9d:cb:d1:0b:9f:cf:d5:d5:9c:41:e0:80:cc: 6a:58:07:7f:37:ad:89:09:fe:52:0a:67:3b:fa:5f: 0b:27:3d:80:27:39:33:91:0d:c7:d9:0f:8f:44:17: dc:00:03:a9:76:a7:a9:cf:bd:93:c9:a4:85:c7:87: 6c:06:6b:ef:71:ef:b5:a1:56:cb:0d:43:cf:e1:6d: c6:9f:39:d8:f3:73:87:bd:ad:5f:10:7a:9a:23:1e: ab:19:db:20:e0:3c:4f:f1:ea:8b:8c:8f:7f:de:08: 9f:85:1b:9d:bf:bf:de:23:43:57:a6:24:1b:79:4f: c4:5e:25:37:5d:64:3d:2f:af:b7:69:d4:bd:41:1c: b9:3c:08:28:53:d2:43:2f:b3:3f:42:0b:07:50:1f: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1D:E4:B4:45:B2:BA:5D:B5:DF:43:26:FB:0A:CC:AA:7F:A1:F7:17 X509v3 Authority Key Identifier: keyid:81:00:B2:5D:99:47:14:ED:A2:4A:A7:83:89:FB:63:69:50:5F:B6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3a:7e:66:e3:2b:c7:a2:e2:97:6c:28:d8:5c:1e:09:62:30: 58:fe:db:57:38:84:b1:b2:73:09:a6:d8:e1:9b:32:1b:68:7c: df:b0:28:cc:ff:00:4b:a9:65:9d:be:b6:8f:8c:d8:59:02:e9: 46:cb:e9:22:78:9a:b9:c2:f6:a3:b6:29:83:43:8d:44:fb:5a: 4d:d2:d1:c5:76:7a:61:0d:ff:3e:4c:96:d9:1d:b5:47:ec:c8: ca:3d:1c:2d:32:34:cd:d7:6a:3e:18:b3:28:1d:98:1b:bf:e4: 36:4d:0a:12:3a:65:0f:94:73:0b:84:e8:3a:af:09:a2:73:58: d3:e8:02:df:e9:39:78:40:29:f1:b3:ba:f1:70:5a:a8:40:71: 44:42:ac:47:d2:18:39:08:b7:c5:4d:c2:be:64:32:64:58:52: 5a:ea:81:10:a2:1d:f6:f5:0c:78:17:f1:af:9b:ce:8a:f9:05: 46:86:67:2f:48:98:41:6e:d4:70:be:64:98:30:07:61:7b:cd: 69:8a:02:3a:f5:eb:c5:20:26:50:d9:16:c3:34:52:91:53:74: 0e:8f:e3:80:c7:3b:6c:01:b6:4f:30:67:67:c1:82:ba:b3:d4: 20:02:0a:50:a7:99:7f:2b:c6:1d:66:37:ee:85:f7:6a:2e:62: 4e:10:de:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKNjC6j9u6xyzWTydbYMg25QOJnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwMEIyNUQ5OTQ3MTRFREEyNEFBNzgzODlGQjYzNjk1 MDVGQjZBMTAeFw0yNjA5MjAyMDUyNDdaFw0yNjA5MjEyMDU4NDdaMDMxMTAvBgNV BAMTKDc5MURFNEI0NDVCMkJBNURCNURGNDMyNkZCMEFDQ0FBN0ZBMUY3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZi93ImzEtkR1CxB4gEfBMNDwM bd79of+6UPd5awSOdKmTcOu7NP+I/gJ8VvNS1eR8CXGR43HosgIhNSc68YEar5a4 osld4t6g9YAVWlBAvb7N+2IR8ircZYBpFIBCkUotv7p9DXzFVhV+ncvRC5/P1dWc QeCAzGpYB383rYkJ/lIKZzv6XwsnPYAnOTORDcfZD49EF9wAA6l2p6nPvZPJpIXH h2wGa+9x77WhVssNQ8/hbcafOdjzc4e9rV8QepojHqsZ2yDgPE/x6ouMj3/eCJ+F G52/v94jQ1emJBt5T8ReJTddZD0vr7dp1L1BHLk8CChT0kMvsz9CCwdQH+CZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeR3ktEWyul2130Mm+wrMqn+h9xcwHwYDVR0j BBgwFoAUgQCyXZlHFO2iSqeDiftjaVBftqEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFiNDMzYTUtNzJiMS00NjUzLTk5ZDMtOTQ2OWM4YjhiNzYyLzAvODEwMEIyNUQ5 OTQ3MTRFREEyNEFBNzgzODlGQjYzNjk1MDVGQjZBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MTAwQjI1RDk5NDcxNEVEQTI0QUE3ODM4OUZCNjM2OTUwNUZC NkExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFiNDMzYTUtNzJiMS00NjUzLTk5 ZDMtOTQ2OWM4YjhiNzYyLzAvODEwMEIyNUQ5OTQ3MTRFREEyNEFBNzgzODlGQjYz Njk1MDVGQjZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEk6fmbjK8ei4pdsKNhcHgliMFj+21c4hLGy cwmm2OGbMhtofN+wKMz/AEupZZ2+to+M2FkC6UbL6SJ4mrnC9qO2KYNDjUT7Wk3S 0cV2emEN/z5MltkdtUfsyMo9HC0yNM3Xaj4YsygdmBu/5DZNChI6ZQ+UcwuE6Dqv CaJzWNPoAt/pOXhAKfGzuvFwWqhAcURCrEfSGDkIt8VNwr5kMmRYUlrqgRCiHfb1 DHgX8a+bzor5BUaGZy9ImEFu1HC+ZJgwB2F7zWmKAjr168UgJlDZFsM0UpFTdA6P 44DHO2wBtk8wZ2fBgrqz1CACClCnmX8rxh1mN+6F92ouYk4Q3m0= -----END CERTIFICATE-----Generated at Mon Sep 21 04:57:38 2026 by rpki-client