$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft File: B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft (raw, json) Hash identifier: 4mHZFHwu8VkyHxlvOf5tkXTojJgrxWQZZAvkdbndO/M= Subject key identifier: E7:B6:02:B0:DA:7E:F1:39:A1:E0:BA:20:F2:99:82:29:1E:40:77:60 Authority key identifier: B1:03:CB:3C:9F:20:45:BD:47:5A:6F:ED:D2:39:AE:6D:CA:89:A2:9B Certificate issuer: /CN=B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B Certificate serial: 1263836ADC921B20848BBD83E766E537DBE0A4F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft Manifest number: D3 Signing time: Sun 04 Oct 2026 04:25:41 +0000 Manifest this update: Sun 04 Oct 2026 04:20:41 +0000 Manifest next update: Mon 05 Oct 2026 05:10:41 +0000 Files and hashes: 1: 3130332e3231332e3233312e302f32342d3234203d3e20313530313930.roa (hash: h7FSm3T3Y7Y9LQ/IQvlQJK36eyZBE5OovT8kCFxLn8M=) 2: 3130332e3231332e3233302e302f32342d3234203d3e20313530313930.roa (hash: m8VrbDtPRT20emR8kpQQF4DtqtFQAtWzP8f/ZXwm8vM=) 3: B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.crl (hash: xPsMPgjDq1wdCjBfI4LJzq6KnrufYmPf7A9DE+hpqQQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.crl rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 02:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:63:83:6a:dc:92:1b:20:84:8b:bd:83:e7:66:e5:37:db:e0:a4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B Validity Not Before: Oct 4 04:20:41 2026 GMT Not After : Oct 5 05:10:41 2026 GMT Subject: CN=E7B602B0DA7EF139A1E0BA20F29982291E407760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2b:c8:65:50:29:53:3a:f1:4c:76:06:a6:da: 8f:1b:59:a2:a2:42:be:f1:13:90:8f:ec:38:fa:d9: f7:8f:9d:ab:9a:05:30:3b:23:e4:2b:e1:43:7d:e2: e5:36:f6:ff:c3:9d:1e:04:83:0a:fc:ff:f1:2d:09: 59:0b:fe:dd:33:04:70:c2:d7:9c:cd:8d:33:ef:b0: 3b:e8:72:dc:e1:81:56:67:f9:bc:63:d4:d7:35:34: 60:21:8c:a6:a4:b7:3a:7a:d4:4d:b0:97:eb:39:f0: 72:d5:38:2d:c9:57:39:99:5f:85:c0:cc:4b:c6:dd: 23:87:e6:89:e4:95:ed:96:9a:59:95:7d:44:4a:62: 9c:95:ab:77:80:62:f4:b0:89:a5:d6:2a:c1:c6:ae: 66:5e:2a:3a:e3:45:d2:22:a1:4b:ce:9e:e8:f3:09: 1d:3b:18:b0:fc:10:f3:68:4d:b2:21:b6:8d:eb:3c: 8a:e8:00:0b:cd:dc:30:ab:35:05:e7:45:a3:eb:4f: c9:aa:59:b1:eb:ba:58:71:8a:81:8f:a2:d2:b4:a7: 4c:03:01:88:20:1b:b9:51:cd:09:e5:c3:3e:85:03: 83:00:36:60:94:3f:b7:82:e0:90:bb:05:7e:ba:4f: 63:29:7f:a0:a0:7e:80:83:75:e9:5f:6f:3d:aa:b1: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B6:02:B0:DA:7E:F1:39:A1:E0:BA:20:F2:99:82:29:1E:40:77:60 X509v3 Authority Key Identifier: keyid:B1:03:CB:3C:9F:20:45:BD:47:5A:6F:ED:D2:39:AE:6D:CA:89:A2:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/B103CB3C9F2045BD475A6FEDD239AE6DCA89A29B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:2d:aa:dd:44:a7:c8:8f:82:c8:2e:c9:7c:c4:aa:47:66:f0: 7a:ed:e1:94:9f:b9:46:27:ea:52:6b:1b:c9:51:2e:97:1d:a6: d0:1f:d3:f7:52:29:47:e4:b8:66:e9:04:2f:98:4c:1a:60:ef: f8:6b:e6:95:89:1f:b6:ea:24:f4:62:da:da:5e:2a:a4:d2:b1: 32:1a:16:e0:19:98:56:d3:51:f1:e4:83:da:42:9a:cb:21:fe: cb:d2:fe:1b:16:6b:0a:6b:cb:a1:e6:45:13:48:92:90:fb:c3: 5e:a5:da:ea:98:15:0e:6a:ad:ef:64:6f:13:b7:58:4d:68:42: ec:e3:74:5a:5c:e9:1b:a5:96:1c:9b:05:31:f5:87:39:ac:5c: 5a:14:22:de:22:fd:ce:33:68:43:be:d6:71:c6:a3:6b:18:ad: c4:20:a1:fc:45:f1:dd:6a:3e:d8:af:4c:d1:5c:06:ea:ff:61: 30:f3:9c:b7:ca:df:26:1a:8c:35:f5:d4:86:50:5e:41:39:f6: 31:f2:ee:80:67:0a:75:8f:aa:fe:bb:c0:0a:89:c8:5b:89:dd: 4b:9f:ac:de:44:a0:20:df:f9:7e:81:49:fe:61:b2:7b:65:67: 6d:1b:3e:72:73:06:52:01:97:bc:d9:f2:68:83:11:4e:78:e9: 44:6e:90:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmODatySGyCEi72D52blN9vgpPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwM0NCM0M5RjIwNDVCRDQ3NUE2RkVERDIzOUFFNkRD QTg5QTI5QjAeFw0yNjEwMDQwNDIwNDFaFw0yNjEwMDUwNTEwNDFaMDMxMTAvBgNV BAMTKEU3QjYwMkIwREE3RUYxMzlBMUUwQkEyMEYyOTk4MjI5MUU0MDc3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVK8hlUClTOvFMdgam2o8bWaKi Qr7xE5CP7Dj62fePnauaBTA7I+Qr4UN94uU29v/DnR4Egwr8//EtCVkL/t0zBHDC 15zNjTPvsDvoctzhgVZn+bxj1Nc1NGAhjKaktzp61E2wl+s58HLVOC3JVzmZX4XA zEvG3SOH5onkle2WmlmVfURKYpyVq3eAYvSwiaXWKsHGrmZeKjrjRdIioUvOnujz CR07GLD8EPNoTbIhto3rPIroAAvN3DCrNQXnRaPrT8mqWbHrulhxioGPotK0p0wD AYggG7lRzQnlwz6FA4MANmCUP7eC4JC7BX66T2Mpf6CgfoCDdelfbz2qseWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU57YCsNp+8Tmh4Log8pmCKR5Ad2AwHwYDVR0j BBgwFoAUsQPLPJ8gRb1HWm/t0jmubcqJopswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIyOTJiYTgtYWQxYS00MTM5LThjMjAtNWI1MjZkYTk3MGJkLzAvQjEwM0NCM0M5 RjIwNDVCRDQ3NUE2RkVERDIzOUFFNkRDQTg5QTI5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTAzQ0IzQzlGMjA0NUJENDc1QTZGRUREMjM5QUU2RENBODlB MjlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTIyOTJiYTgtYWQxYS00MTM5LThj MjAtNWI1MjZkYTk3MGJkLzAvQjEwM0NCM0M5RjIwNDVCRDQ3NUE2RkVERDIzOUFF NkRDQTg5QTI5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEtqt1Ep8iPgsguyXzEqkdm8Hrt4ZSfuUYn 6lJrG8lRLpcdptAf0/dSKUfkuGbpBC+YTBpg7/hr5pWJH7bqJPRi2tpeKqTSsTIa FuAZmFbTUfHkg9pCmssh/svS/hsWawpry6HmRRNIkpD7w16l2uqYFQ5qre9kbxO3 WE1oQuzjdFpc6RullhybBTH1hzmsXFoUIt4i/c4zaEO+1nHGo2sYrcQgofxF8d1q PtivTNFcBur/YTDznLfK3yYajDX11IZQXkE59jHy7oBnCnWPqv67wAqJyFuJ3Uuf rN5EoCDf+X6BSf5hsntlZ20bPnJzBlIBl7zZ8miDEU546URukCM= -----END CERTIFICATE-----Generated at Sun Oct 4 12:23:28 2026 by rpki-client