$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft File: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft (raw, json) Hash identifier: lpZztEgI7hJKSYrm1qng45Wec5ZFmXg3Dr4FIT16z3w= Subject key identifier: EA:77:76:69:58:0A:D0:5A:AD:09:80:FF:34:3A:57:41:EC:9F:A1:68 Authority key identifier: B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5 Certificate issuer: /CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5 Certificate serial: 1704E9F5C7E86A660CB0F4495CBEDEF6278FFF41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft Manifest number: BF Signing time: Tue 22 Sep 2026 14:13:50 +0000 Manifest this update: Tue 22 Sep 2026 14:08:50 +0000 Manifest next update: Wed 23 Sep 2026 15:13:50 +0000 Files and hashes: 1: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl (hash: zUw32fpOHgGntpoht2vef//byM37MhKNqHH3PbGK1hY=) 2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: hZL/hi6Qgsw4sgW/mhx3uNInW8MyX4I+jFDzsHcP8Z4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:04:e9:f5:c7:e8:6a:66:0c:b0:f4:49:5c:be:de:f6:27:8f:ff:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5 Validity Not Before: Sep 22 14:08:50 2026 GMT Not After : Sep 23 15:13:50 2026 GMT Subject: CN=EA777669580AD05AAD0980FF343A5741EC9FA168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:11:5c:11:5b:a7:ba:1f:c3:c3:99:96:a4:b8: 25:da:94:43:09:24:62:a7:51:9b:32:e4:21:29:60: d6:0c:02:0a:f5:fb:64:f7:e0:ad:9c:0f:cd:78:6a: b0:a5:38:65:dd:f4:cc:af:f1:eb:30:dc:d2:6f:af: 4a:66:6a:9f:25:4a:8a:71:f7:67:86:5c:1e:c5:d7: 3b:0c:7f:eb:7a:7d:9f:17:42:f8:b9:2c:0b:63:42: 0a:d0:f2:c5:c7:40:47:f2:41:8b:f7:4e:83:91:26: d6:16:40:d6:48:2f:96:40:d2:1c:b8:1c:84:56:9e: 7c:d5:9a:f1:19:6a:30:0c:32:01:28:aa:5d:53:c7: ee:5c:b1:10:90:03:c2:ce:f1:a8:80:29:82:c2:17: 01:53:fc:5b:60:dc:66:42:16:f8:f7:98:5a:2f:b5: 52:ba:fb:eb:a3:47:ac:9c:70:61:39:7c:27:82:66: ac:78:d5:e2:b4:20:a3:33:dc:14:14:08:87:9a:32: af:9f:a2:fc:7f:68:71:a1:73:72:bf:5a:3a:d9:25: 11:8f:8d:dd:37:60:6a:61:ac:3e:eb:bc:94:81:a2: b9:a3:53:20:da:ae:ac:ef:1e:73:31:e9:18:36:0b: f3:29:af:2c:58:e4:db:9b:6b:c9:fd:14:48:73:1c: ee:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:77:76:69:58:0A:D0:5A:AD:09:80:FF:34:3A:57:41:EC:9F:A1:68 X509v3 Authority Key Identifier: keyid:B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:42:bb:dc:cd:2a:ce:7c:91:86:70:08:c4:0d:f5:bb:e5:b3: 23:3a:95:ab:46:43:60:f5:c9:ab:73:cf:25:e9:0d:fd:20:19: ef:7f:6a:b0:e7:7e:25:c4:a1:68:69:a9:c6:33:f9:c1:1c:57: 4c:48:68:1e:39:68:22:85:1c:92:b7:04:cd:72:73:fa:71:86: 34:b9:63:c1:bd:52:9f:aa:99:eb:1c:09:8f:3d:b6:16:25:88: ed:55:45:7a:4f:d3:43:66:03:e0:c7:2e:36:8e:ff:e7:a4:7c: a6:72:dc:6f:a3:c4:97:7d:17:d9:77:74:7c:c8:7a:13:5f:20: c4:0c:2b:98:e6:7b:fe:45:2f:a9:1b:1b:62:dd:ca:42:51:ac: 9c:88:af:b2:ee:d5:6b:0e:8d:ae:9f:e7:32:ce:45:fe:eb:a6: d1:77:cc:99:48:a9:4e:dc:87:4c:82:22:83:51:97:b5:2c:61: 19:45:cf:78:e8:e5:66:f0:56:ac:ea:ba:06:73:14:d9:ed:82: d3:57:b4:19:42:15:0c:52:2d:58:a5:44:8b:aa:25:47:c8:a0: 96:bf:f3:14:21:6a:d9:39:8c:f0:71:c3:92:d7:89:d8:7d:35: 12:58:88:61:36:46:8f:f7:38:51:bf:1d:ee:16:8c:44:71:7b: 8f:cd:19:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwTp9cfoamYMsPRJXL7e9ieP/0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBRTdENzlCMjI5NTY1REI1QTlDNEU3NENEMDM4RTUz Rjk4NEJGNTAeFw0yNjA5MjIxNDA4NTBaFw0yNjA5MjMxNTEzNTBaMDMxMTAvBgNV BAMTKEVBNzc3NjY5NTgwQUQwNUFBRDA5ODBGRjM0M0E1NzQxRUM5RkExNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHEVwRW6e6H8PDmZakuCXalEMJ JGKnUZsy5CEpYNYMAgr1+2T34K2cD814arClOGXd9Myv8esw3NJvr0pmap8lSopx 92eGXB7F1zsMf+t6fZ8XQvi5LAtjQgrQ8sXHQEfyQYv3ToORJtYWQNZIL5ZA0hy4 HIRWnnzVmvEZajAMMgEoql1Tx+5csRCQA8LO8aiAKYLCFwFT/Ftg3GZCFvj3mFov tVK6++ujR6yccGE5fCeCZqx41eK0IKMz3BQUCIeaMq+fovx/aHGhc3K/WjrZJRGP jd03YGphrD7rvJSBormjUyDarqzvHnMx6Rg2C/MpryxY5Nuba8n9FEhzHO6fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6nd2aVgK0FqtCYD/NDpXQeyfoWgwHwYDVR0j BBgwFoAUta59ebIpVl21qcTnTNA45T+YS/UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjNzM5NmMtNGJiZS00YzZlLThmNTAtNDQyYzIwNWUwNzBjLzAvQjVBRTdENzlC MjI5NTY1REI1QTlDNEU3NENEMDM4RTUzRjk4NEJGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUFFN0Q3OUIyMjk1NjVEQjVBOUM0RTc0Q0QwMzhFNTNGOTg0 QkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvQjVBRTdENzlCMjI5NTY1REI1QTlDNEU3NENEMDM4 RTUzRjk4NEJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVCu9zNKs58kYZwCMQN9bvlsyM6latGQ2D1 yatzzyXpDf0gGe9/arDnfiXEoWhpqcYz+cEcV0xIaB45aCKFHJK3BM1yc/pxhjS5 Y8G9Up+qmescCY89thYliO1VRXpP00NmA+DHLjaO/+ekfKZy3G+jxJd9F9l3dHzI ehNfIMQMK5jme/5FL6kbG2LdykJRrJyIr7Lu1WsOja6f5zLORf7rptF3zJlIqU7c h0yCIoNRl7UsYRlFz3jo5WbwVqzqugZzFNntgtNXtBlCFQxSLVilRIuqJUfIoJa/ 8xQhatk5jPBxw5LXidh9NRJYiGE2Ro/3OFG/He4WjERxe4/NGY0= -----END CERTIFICATE-----Generated at Tue Sep 22 17:26:27 2026 by rpki-client