$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft File: B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft (raw, json) Hash identifier: 3tmBmEfzQ39GDH7nk6gGiM6sXj3gUAD+RTqkjjTOr8k= Subject key identifier: AD:8E:2F:EB:2F:B7:B4:C8:DF:87:9F:78:72:46:6F:E9:C6:73:92:D9 Authority key identifier: B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 Certificate issuer: /CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Certificate serial: 5EBE4AE293B2A24D9589D94D5A50C74A484114C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft Manifest number: BF Signing time: Mon 21 Sep 2026 09:28:11 +0000 Manifest this update: Mon 21 Sep 2026 09:23:11 +0000 Manifest next update: Tue 22 Sep 2026 10:36:11 +0000 Files and hashes: 1: 3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa (hash: mPIkuQVE9R3LTUTej85wxcqgd13oKy/e6VbDwXPFIhY=) 2: 3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa (hash: huLq2YMQLck+XmMqgf5+tIkuWDJY1pNSg4kGrXts0QE=) 3: B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl (hash: UC2C59ROr9Bt8TvvNYli9wZiRRW17UReWeh75UVJg6M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 10:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:be:4a:e2:93:b2:a2:4d:95:89:d9:4d:5a:50:c7:4a:48:41:14:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889 Validity Not Before: Sep 21 09:23:11 2026 GMT Not After : Sep 22 10:36:11 2026 GMT Subject: CN=AD8E2FEB2FB7B4C8DF879F7872466FE9C67392D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:a0:9a:fd:db:96:c8:31:d7:47:87:5e:32: 6e:10:5b:04:eb:d5:de:31:4b:d1:7d:e9:c6:7f:4b: 2b:af:95:2c:81:be:64:1e:29:f3:40:96:e6:23:fa: df:15:b8:ec:a7:f6:53:50:34:9c:9f:c8:80:54:66: 0b:03:ff:78:2e:aa:95:7a:36:7f:3d:d7:f9:af:00: 6c:a5:20:af:8a:0e:b6:92:0b:47:c7:10:db:39:4c: 8a:c7:c7:3a:ab:4a:e1:d5:70:26:1a:16:fa:f0:3d: 0d:cf:c0:a4:90:a3:79:17:52:06:37:93:5f:c6:68: b9:42:66:24:75:07:ec:69:a2:3b:bd:02:1f:b1:dc: bb:27:1a:a4:5c:bf:00:d3:b0:27:ea:99:77:88:37: a8:9e:29:d2:88:fe:28:76:14:f5:67:54:34:c4:86: 28:9c:26:cb:52:eb:cf:91:16:6e:7a:28:69:a4:f8: bb:33:90:74:41:80:a2:b0:d5:ea:1d:45:0f:20:a8: f2:47:9d:56:11:53:11:87:1d:64:31:01:1b:b2:d2: ca:12:c3:a6:be:52:fe:7f:c9:96:d5:87:20:3e:53: 14:da:a7:83:24:06:48:5b:a7:62:c9:58:25:10:c4: db:a6:27:83:08:3c:70:0e:9e:c1:04:60:ac:29:db: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8E:2F:EB:2F:B7:B4:C8:DF:87:9F:78:72:46:6F:E9:C6:73:92:D9 X509v3 Authority Key Identifier: keyid:B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:76:b3:01:e6:52:aa:ff:20:88:2c:72:78:b5:58:fa:8e:cb: 6c:71:33:91:bf:eb:c5:63:19:5d:fb:22:bc:36:39:c5:3e:56: cf:ae:2a:a2:da:fc:a6:42:53:13:80:8d:86:84:53:2c:c3:db: 2f:ff:79:21:7a:a7:f0:78:dd:79:ed:cd:78:f4:b7:11:5c:30: b6:3d:50:bd:63:c9:8f:79:53:17:b0:9b:c8:96:36:ac:94:23: b5:84:e8:9c:6e:f2:f0:65:2e:84:5b:4e:35:cc:ac:6a:a9:cb: c2:e8:14:bd:e0:3b:73:87:a7:6d:e3:9b:46:93:f5:c9:9f:ca: 32:09:10:28:a2:31:c4:78:64:47:e6:00:db:5a:6b:aa:b6:3c: f7:fc:bc:b5:b3:7c:ca:ee:f8:2c:3e:af:46:76:98:5c:ce:7b: 15:09:37:11:19:f5:11:8c:16:4f:5a:49:29:d6:a7:4f:97:b3: fb:20:3a:fb:ef:1d:5a:72:b4:f8:43:ee:cd:f4:aa:67:f7:fb: 6f:a6:cc:56:4d:4b:93:35:e8:e4:38:16:93:24:3d:64:b6:0a: 48:2b:46:87:17:21:49:23:78:00:b9:71:8c:dc:bc:3a:cd:4b: 43:bb:7e:c4:95:13:cb:da:05:59:a6:4c:ec:57:a8:e9:1d:26: c9:a8:d8:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXr5K4pOyok2VidlNWlDHSkhBFMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1 MDlBQjg4OTAeFw0yNjA5MjEwOTIzMTFaFw0yNjA5MjIxMDM2MTFaMDMxMTAvBgNV BAMTKEFEOEUyRkVCMkZCN0I0QzhERjg3OUY3ODcyNDY2RkU5QzY3MzkyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3qCa/duWyDHXR4deMm4QWwTr 1d4xS9F96cZ/SyuvlSyBvmQeKfNAluYj+t8VuOyn9lNQNJyfyIBUZgsD/3guqpV6 Nn891/mvAGylIK+KDraSC0fHENs5TIrHxzqrSuHVcCYaFvrwPQ3PwKSQo3kXUgY3 k1/GaLlCZiR1B+xpoju9Ah+x3LsnGqRcvwDTsCfqmXeIN6ieKdKI/ih2FPVnVDTE hiicJstS68+RFm56KGmk+LszkHRBgKKw1eodRQ8gqPJHnVYRUxGHHWQxARuy0soS w6a+Uv5/yZbVhyA+UxTap4MkBkhbp2LJWCUQxNumJ4MIPHAOnsEEYKwp2//fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrY4v6y+3tMjfh594ckZv6cZzktkwHwYDVR0j BBgwFoAUudelpJsyLtmHKBgyq8+13FCauIkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk1MWRmZWUtYTc1Yi00NDIwLWE3NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5 QjMyMkVEOTg3MjgxODMyQUJDRkI1REM1MDlBQjg4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUQ3QTVBNDlCMzIyRUQ5ODcyODE4MzJBQkNGQjVEQzUwOUFC ODg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk1MWRmZWUtYTc1Yi00NDIwLWE3 NTUtMmM3MzU4YmFmN2QzLzAvQjlEN0E1QTQ5QjMyMkVEOTg3MjgxODMyQUJDRkI1 REM1MDlBQjg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA52swHmUqr/IIgscni1WPqOy2xxM5G/68Vj GV37Irw2OcU+Vs+uKqLa/KZCUxOAjYaEUyzD2y//eSF6p/B43XntzXj0txFcMLY9 UL1jyY95Uxewm8iWNqyUI7WE6Jxu8vBlLoRbTjXMrGqpy8LoFL3gO3OHp23jm0aT 9cmfyjIJECiiMcR4ZEfmANtaa6q2PPf8vLWzfMru+Cw+r0Z2mFzOexUJNxEZ9RGM Fk9aSSnWp0+Xs/sgOvvvHVpytPhD7s30qmf3+2+mzFZNS5M16OQ4FpMkPWS2Ckgr RocXIUkjeAC5cYzcvDrNS0O7fsSVE8vaBVmmTOxXqOkdJsmo2Ks= -----END CERTIFICATE-----Generated at Tue Sep 22 01:51:59 2026 by rpki-client