$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft File: B9281144646657214FE1ADE5A3228E100E340E53.mft (raw, json) Hash identifier: 0F+pzFyRgvkK6GTQFCgVx71NJ5+c9dXkYJEXX8uCxH8= Subject key identifier: 62:5B:4C:59:36:42:A4:35:8D:B6:5A:19:E1:24:FE:7D:69:9E:23:D2 Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53 Certificate serial: 7DD633505FA133CED1AE8ADC6A98CA54C69516B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:16:27 +0000 Manifest this update: Mon 21 Sep 2026 12:11:27 +0000 Manifest next update: Tue 22 Sep 2026 13:58:27 +0000 Files and hashes: 1: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: GkX4NBYIJf8jri1lDVBbCRWCXCtYyohsWxcf1tLEKh4=) 2: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: Ve4ocQOUOq8AQ9gpm5lYh6lO9aEe09tZrNXe/azearo=) 3: B9281144646657214FE1ADE5A3228E100E340E53.crl (hash: J0HnyEHV0ue0fMiR/REWA9XUCZ6j7YshL7d2NYt8t28=) 4: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: Tgez0mY6SPOTnuCIKB3HlrvFNAAadTv4QI32lWtN/DI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d6:33:50:5f:a1:33:ce:d1:ae:8a:dc:6a:98:ca:54:c6:95:16:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53 Validity Not Before: Sep 21 12:11:27 2026 GMT Not After : Sep 22 13:58:27 2026 GMT Subject: CN=625B4C593642A4358DB65A19E124FE7D699E23D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e2:5f:94:42:32:0c:b2:87:28:77:5a:43:b0: 41:ce:34:70:14:f2:9c:c4:93:ae:6d:9e:c1:02:b8: 5f:50:47:65:a0:90:a8:2d:b2:3d:cd:8a:a4:03:f3: 5b:78:4b:0c:b9:d3:3d:e5:e5:01:3e:8f:c0:0c:c7: e8:f2:f2:ce:c8:d1:19:2e:c6:87:83:51:17:e3:cb: 6c:d2:01:20:f5:83:1b:11:a4:48:fe:71:19:f4:42: d4:d3:f4:f3:17:32:75:52:2e:29:aa:e8:8a:30:b7: 4c:ff:30:dc:81:31:33:c5:d5:80:28:86:9d:e5:34: e9:54:14:2a:4d:5c:88:28:63:b9:e2:ef:ba:ec:07: 12:e0:39:3a:55:66:ac:3d:d7:5c:29:21:30:64:5f: b5:f7:a6:77:48:ea:7f:98:b3:f2:f6:a3:f4:6e:74: 73:80:00:41:50:30:8d:9e:2d:92:8c:80:ef:4e:c5: 8a:88:77:bd:b6:cb:02:0f:5a:d3:3e:67:94:87:79: ac:6e:77:72:03:af:60:7f:03:1d:82:44:a8:ad:18: 88:e1:51:06:2c:bb:b4:e9:ee:65:1d:50:18:51:ca: 03:c3:0d:a2:2f:9b:b1:b0:87:4f:4c:b1:f2:6e:8c: 84:0f:16:0d:5a:4b:aa:69:ab:78:f7:4a:21:14:ed: 72:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5B:4C:59:36:42:A4:35:8D:B6:5A:19:E1:24:FE:7D:69:9E:23:D2 X509v3 Authority Key Identifier: keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a0:b9:3e:b0:e6:ea:e9:be:8b:ee:0b:e8:4d:c1:4c:f1:b3: 37:d8:09:9d:e7:e8:90:62:b0:b2:05:38:13:be:ac:1d:3e:45: 59:c1:62:54:e1:13:c0:59:82:bf:cc:13:5a:82:e6:45:d3:d9: 0f:d8:68:13:65:74:ff:8f:60:62:0f:3a:6d:a9:2b:51:66:de: f4:64:5f:f2:ea:87:8c:29:66:72:9a:8d:b2:1b:f3:1d:39:b3: 71:e6:5a:02:21:c9:66:9c:12:4d:98:64:39:7b:eb:6b:b4:a0: 9c:88:53:8a:a3:f0:80:6c:67:13:0b:bb:cb:cf:67:b5:2a:85: c9:4e:3a:80:b1:41:73:2d:26:07:e6:c7:68:1a:dd:dd:86:03: ad:a0:4f:ef:4c:cd:dc:5f:b6:ef:bc:8c:eb:da:a5:d6:d2:6f: 54:2f:6d:49:03:de:08:a8:54:f5:2e:a9:a4:9d:35:f5:3b:53: ca:4e:35:d3:76:5d:9a:0f:a5:4b:8e:05:fa:12:ab:12:d4:4d: 8d:0a:ff:4c:78:7b:b2:32:af:4a:c0:12:31:52:7b:2f:c9:65: 71:ae:6b:8d:6b:af:55:6e:7f:a5:95:50:7e:d5:7e:73:ee:ff: 69:28:cd:34:77:26:93:55:f1:89:58:02:0c:24:1a:a1:12:65: 5a:e5:8c:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdYzUF+hM87RrorcapjKVMaVFrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAw RTM0MEU1MzAeFw0yNjA5MjExMjExMjdaFw0yNjA5MjIxMzU4MjdaMDMxMTAvBgNV BAMTKDYyNUI0QzU5MzY0MkE0MzU4REI2NUExOUUxMjRGRTdENjk5RTIzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg4l+UQjIMsocod1pDsEHONHAU 8pzEk65tnsECuF9QR2WgkKgtsj3NiqQD81t4Swy50z3l5QE+j8AMx+jy8s7I0Rku xoeDURfjy2zSASD1gxsRpEj+cRn0QtTT9PMXMnVSLimq6Iowt0z/MNyBMTPF1YAo hp3lNOlUFCpNXIgoY7ni77rsBxLgOTpVZqw911wpITBkX7X3pndI6n+Ys/L2o/Ru dHOAAEFQMI2eLZKMgO9OxYqId722ywIPWtM+Z5SHeaxud3IDr2B/Ax2CRKitGIjh UQYsu7Tp7mUdUBhRygPDDaIvm7Gwh09MsfJujIQPFg1aS6ppq3j3SiEU7XILAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYltMWTZCpDWNtloZ4ST+fWmeI9IwHwYDVR0j BBgwFoAUuSgRRGRmVyFP4a3loyKOEA40DlMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E4YTlhODEtMGE1Mi00YTUwLWI3ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2 NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAwRTM0MEU1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTI4MTE0NDY0NjY1NzIxNEZFMUFERTVBMzIyOEUxMDBFMzQw RTUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhF MTAwRTM0MEU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqguT6w5urpvovuC+hNwUzxszfYCZ3n6JBi sLIFOBO+rB0+RVnBYlThE8BZgr/ME1qC5kXT2Q/YaBNldP+PYGIPOm2pK1Fm3vRk X/Lqh4wpZnKajbIb8x05s3HmWgIhyWacEk2YZDl762u0oJyIU4qj8IBsZxMLu8vP Z7UqhclOOoCxQXMtJgfmx2ga3d2GA62gT+9Mzdxftu+8jOvapdbSb1QvbUkD3gio VPUuqaSdNfU7U8pONdN2XZoPpUuOBfoSqxLUTY0K/0x4e7Iyr0rAEjFSey/JZXGu a41rr1Vuf6WVUH7VfnPu/2kozTR3JpNV8YlYAgwkGqESZVrljKQ= -----END CERTIFICATE-----Generated at Mon Sep 21 19:45:49 2026 by rpki-client