$ rpki-client -vvvf rpki-rsync.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/B12169249B2EFCC08412ECEA92F9C497CB56F35C.mft File: B12169249B2EFCC08412ECEA92F9C497CB56F35C.mft (raw, json) Hash identifier: kKTd5fsWULEBMRnUUfVgkXM5jH9ehSbH00JV4bG73jM= Subject key identifier: 5C:A9:58:0E:4C:CE:D8:05:B3:99:8B:38:32:86:2C:59:49:C9:02:47 Authority key identifier: B1:21:69:24:9B:2E:FC:C0:84:12:EC:EA:92:F9:C4:97:CB:56:F3:5C Certificate issuer: /CN=B12169249B2EFCC08412ECEA92F9C497CB56F35C Certificate serial: 09F81D065569B94915B269995C08E917B0032A0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B12169249B2EFCC08412ECEA92F9C497CB56F35C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/B12169249B2EFCC08412ECEA92F9C497CB56F35C.mft Manifest number: BD Signing time: Mon 21 Sep 2026 12:06:16 +0000 Manifest this update: Mon 21 Sep 2026 12:01:16 +0000 Manifest next update: Tue 22 Sep 2026 13:50:16 +0000 Files and hashes: 1: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: a3O9JKAckduwtwUJWUr0Cig3/WsWtdcHloPnetBUJwQ=) 2: B12169249B2EFCC08412ECEA92F9C497CB56F35C.crl (hash: 6Z8jJe0mysDj68G8/mOxsdcFcAUf1FItV3qpe5S08jc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/B12169249B2EFCC08412ECEA92F9C497CB56F35C.crl rsync://rpki-rsync.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/B12169249B2EFCC08412ECEA92F9C497CB56F35C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B12169249B2EFCC08412ECEA92F9C497CB56F35C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f8:1d:06:55:69:b9:49:15:b2:69:99:5c:08:e9:17:b0:03:2a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B12169249B2EFCC08412ECEA92F9C497CB56F35C Validity Not Before: Sep 21 12:01:16 2026 GMT Not After : Sep 22 13:50:16 2026 GMT Subject: CN=5CA9580E4CCED805B3998B3832862C5949C90247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c4:25:24:3d:78:45:03:ab:b4:2e:41:82:1f: 3b:c8:dc:7d:fd:14:05:5b:d4:a2:e6:e9:31:d4:e2: 5b:f1:27:8b:ce:80:68:c7:14:1d:9f:f1:8b:e5:00: c9:8e:ca:66:dd:ff:ed:4d:10:56:c3:00:b0:d3:42: 80:4d:3d:97:a2:1d:6f:48:cb:e9:f3:04:be:53:56: 35:05:32:7d:1d:a2:32:25:e0:c6:78:db:cf:ba:b5: ea:69:62:8f:e8:c8:72:91:63:06:03:e3:d3:9c:4d: f8:0b:23:70:e9:33:d5:a4:06:1a:a6:46:9c:3b:c4: 58:a3:f2:3a:ea:26:41:47:cf:97:84:69:08:7a:38: 42:1c:22:1e:a4:03:f8:ff:cc:d5:01:8a:b3:24:36: 98:5b:c4:56:29:79:d4:13:83:c8:06:18:07:23:3d: ce:82:ff:51:ca:76:90:d8:e8:2e:1d:b4:0f:dd:61: 38:66:a5:a4:d2:0b:6f:fe:ff:74:66:e4:cc:94:23: 03:88:5d:09:c8:ad:3f:5e:64:e7:d2:3d:c6:b2:d4: eb:db:09:49:d6:b0:ff:00:61:c0:56:cf:7d:e0:b0: 2c:21:aa:31:3f:dd:d8:b1:18:96:e8:e1:46:3b:70: 23:dc:76:6c:f8:8f:6d:f9:17:a5:2c:27:86:3e:e2: 66:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A9:58:0E:4C:CE:D8:05:B3:99:8B:38:32:86:2C:59:49:C9:02:47 X509v3 Authority Key Identifier: keyid:B1:21:69:24:9B:2E:FC:C0:84:12:EC:EA:92:F9:C4:97:CB:56:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/B12169249B2EFCC08412ECEA92F9C497CB56F35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B12169249B2EFCC08412ECEA92F9C497CB56F35C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/B12169249B2EFCC08412ECEA92F9C497CB56F35C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9c:e6:06:13:2c:95:fe:f7:c1:f7:66:73:2d:4d:2b:cd:79: e1:52:56:16:26:f5:15:68:18:7f:74:b6:35:c9:0c:3c:4c:1d: 09:9a:d8:13:c9:03:98:24:53:67:9f:73:e2:7f:96:15:18:95: 8c:6d:ac:fa:0a:51:8d:95:50:8e:7d:7e:d5:b8:0f:e2:0a:93: a1:48:55:30:40:50:bd:52:c6:c5:a4:fa:17:d7:fe:2e:26:3b: 96:93:4b:bd:f2:47:ff:de:61:c3:7f:c3:fa:1a:92:8d:a7:dd: 63:ad:fc:24:66:9d:60:17:df:fa:cb:74:2e:1e:20:14:c1:4f: 94:64:bd:19:9e:0d:67:97:9f:e7:c1:e4:95:2a:0e:99:e4:e9: 50:e9:89:7d:cc:87:51:33:80:95:11:90:07:01:83:80:a3:eb: 9f:0f:ac:4c:1c:59:0e:3f:97:8e:04:20:0c:91:4d:8d:69:62: 3b:0b:66:ea:ec:a1:46:f0:35:f1:ce:b4:c9:f4:ba:ae:b4:85: 5c:0c:af:d2:06:e3:0c:06:7c:8c:a2:c0:26:9e:ed:9f:32:54: af:94:4a:62:d8:76:8e:13:01:36:81:73:86:8e:50:b5:bb:df: ea:0e:d6:85:4f:16:24:9f:45:29:7a:43:0b:3e:c3:8d:66:2c: f4:6a:92:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCfgdBlVpuUkVsmmZXAjpF7ADKg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyMTY5MjQ5QjJFRkNDMDg0MTJFQ0VBOTJGOUM0OTdD QjU2RjM1QzAeFw0yNjA5MjExMjAxMTZaFw0yNjA5MjIxMzUwMTZaMDMxMTAvBgNV BAMTKDVDQTk1ODBFNENDRUQ4MDVCMzk5OEIzODMyODYyQzU5NDlDOTAyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxCUkPXhFA6u0LkGCHzvI3H39 FAVb1KLm6THU4lvxJ4vOgGjHFB2f8YvlAMmOymbd/+1NEFbDALDTQoBNPZeiHW9I y+nzBL5TVjUFMn0dojIl4MZ428+6teppYo/oyHKRYwYD49OcTfgLI3DpM9WkBhqm Rpw7xFij8jrqJkFHz5eEaQh6OEIcIh6kA/j/zNUBirMkNphbxFYpedQTg8gGGAcj Pc6C/1HKdpDY6C4dtA/dYThmpaTSC2/+/3Rm5MyUIwOIXQnIrT9eZOfSPcay1Ovb CUnWsP8AYcBWz33gsCwhqjE/3dixGJbo4UY7cCPcdmz4j235F6UsJ4Y+4mZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXKlYDkzO2AWzmYs4MoYsWUnJAkcwHwYDVR0j BBgwFoAUsSFpJJsu/MCEEuzqkvnEl8tW81wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDk1NTkxYjQtMjE5OC00YjQwLWFkZjItMTJjZWYzYmY0M2EyLzAvQjEyMTY5MjQ5 QjJFRkNDMDg0MTJFQ0VBOTJGOUM0OTdDQjU2RjM1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTIxNjkyNDlCMkVGQ0MwODQxMkVDRUE5MkY5QzQ5N0NCNTZG MzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvQjEyMTY5MjQ5QjJFRkNDMDg0MTJFQ0VBOTJGOUM0 OTdDQjU2RjM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2c5gYTLJX+98H3ZnMtTSvNeeFSVhYm9RVo GH90tjXJDDxMHQma2BPJA5gkU2efc+J/lhUYlYxtrPoKUY2VUI59ftW4D+IKk6FI VTBAUL1SxsWk+hfX/i4mO5aTS73yR//eYcN/w/oako2n3WOt/CRmnWAX3/rLdC4e IBTBT5RkvRmeDWeXn+fB5JUqDpnk6VDpiX3Mh1EzgJURkAcBg4Cj658PrEwcWQ4/ l44EIAyRTY1pYjsLZursoUbwNfHOtMn0uq60hVwMr9IG4wwGfIyiwCae7Z8yVK+U SmLYdo4TATaBc4aOULW73+oO1oVPFiSfRSl6Qws+w41mLPRqksA= -----END CERTIFICATE-----Generated at Tue Sep 22 06:32:32 2026 by rpki-client