$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft File: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft (raw, json) Hash identifier: J/llNB83tUL+v1ZsyQ7XvAryLAfvqdhAegHzXLH+BFU= Subject key identifier: 0D:03:1B:59:48:A8:22:CB:D5:E1:19:7A:C0:F8:60:5D:DB:80:9F:5F Authority key identifier: B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65 Certificate issuer: /CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865 Certificate serial: 023C8DB9A7072F5B85477FE69EC9BD3C527EA6EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft Manifest number: BD Signing time: Sun 20 Sep 2026 17:33:44 +0000 Manifest this update: Sun 20 Sep 2026 17:28:44 +0000 Manifest next update: Mon 21 Sep 2026 17:38:44 +0000 Files and hashes: 1: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: +LPJ5wMBOnCiRiVVBw9/f075KEvSA/QkdJARXOeWxBI=) 2: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: 4hL7+e18qobBBQHbTnmFkA+ZM9pKWiAv/aAZLelInyQ=) 3: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl (hash: TwCNWUQqy/e6Eavzrf4YTVn7gmK6lTSVQ4SFgPHrug8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3c:8d:b9:a7:07:2f:5b:85:47:7f:e6:9e:c9:bd:3c:52:7e:a6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865 Validity Not Before: Sep 20 17:28:44 2026 GMT Not After : Sep 21 17:38:44 2026 GMT Subject: CN=0D031B5948A822CBD5E1197AC0F8605DDB809F5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:10:57:a0:20:39:15:12:22:4a:bd:0e:11: 3c:63:a9:05:c1:b8:1c:33:dd:33:78:76:0c:fb:d4: fa:d0:20:3d:c7:a9:98:ba:5e:98:b7:d2:ac:d5:f6: a7:2c:da:73:9c:98:37:52:46:3e:11:56:d7:cc:5d: 52:14:e2:79:01:39:2d:e4:48:9a:1d:10:6b:e6:bb: ea:70:ed:e2:12:df:e3:fa:db:7c:80:80:0a:1f:89: 75:74:10:2b:c6:6d:5b:97:c0:2d:eb:bb:16:6c:2b: a9:84:e8:31:ad:f4:67:9c:19:6e:1e:42:88:97:d3: 45:a3:de:3d:23:07:ce:a5:23:ac:14:12:92:e1:4d: 44:d1:b4:6a:eb:6b:5d:62:ad:cc:ca:3d:fe:ed:a3: b6:e6:26:6a:17:12:61:39:e9:47:e7:b6:15:6f:99: 2c:5a:ef:f4:aa:2a:ed:0a:75:58:9d:19:d5:1f:ea: cf:02:a5:9d:68:93:9c:eb:5d:43:bf:77:19:46:14: e4:ea:0e:1f:cf:94:6b:65:f7:f5:6b:c4:ea:e9:23: 5f:66:00:d6:e4:3a:65:94:74:0f:ea:d7:82:b7:b5: 05:36:1f:94:b2:55:cb:27:33:98:82:bc:f2:aa:da: a2:df:cf:f6:1b:48:6a:33:2c:a3:18:39:85:a8:de: f4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:03:1B:59:48:A8:22:CB:D5:E1:19:7A:C0:F8:60:5D:DB:80:9F:5F X509v3 Authority Key Identifier: keyid:B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a6:e3:15:a7:a1:59:ba:d3:55:7b:c8:20:bc:38:31:c6:57: de:9f:dc:d4:06:32:52:11:6b:12:69:75:19:66:6d:20:cf:85: 81:15:27:eb:3d:1c:6b:68:76:6f:12:0a:a6:ae:66:39:f0:dd: 40:20:a1:09:61:b7:e9:77:7a:f6:cc:0c:3f:a2:21:cd:d4:23: 9c:f8:c2:69:86:0b:d5:dc:f5:f6:27:65:8e:e8:58:58:7d:3a: 16:4b:19:19:f0:61:9b:1e:ae:9b:d0:19:f9:06:bb:97:b5:be: 16:2d:56:dd:68:44:56:eb:ec:02:eb:6c:fb:85:38:6b:32:d9: 77:c4:e9:dd:3d:a4:fb:02:77:23:42:eb:8a:a6:13:5f:75:66: 51:1f:26:93:eb:f7:32:0f:42:87:cd:f6:ba:22:c2:79:ac:6c: 34:9f:c3:21:d1:ee:29:56:76:31:98:a8:15:82:0f:08:0f:b3: 13:04:cf:d6:de:3a:a9:c7:d0:22:1d:84:c7:3e:27:3c:a6:22: e8:97:d8:81:38:29:4e:09:e0:e0:10:6c:aa:ee:6d:d3:02:ae: 2e:ba:98:b4:4e:49:04:ff:e7:60:bc:73:b2:4c:32:14:6c:ea: 71:65:d2:a3:c5:f2:9d:67:b7:90:f2:99:73:a2:43:5b:e9:6a: 84:ac:bc:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAjyNuacHL1uFR3/mnsm9PFJ+pu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCQ0NDQkU4OTI3QTdCQUI3ODUzQzdBQkIwQUYzOTVD RDA0Nzg2NTAeFw0yNjA5MjAxNzI4NDRaFw0yNjA5MjExNzM4NDRaMDMxMTAvBgNV BAMTKDBEMDMxQjU5NDhBODIyQ0JENUUxMTk3QUMwRjg2MDVEREI4MDlGNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBxBXoCA5FRIiSr0OETxjqQXB uBwz3TN4dgz71PrQID3HqZi6Xpi30qzV9qcs2nOcmDdSRj4RVtfMXVIU4nkBOS3k SJodEGvmu+pw7eIS3+P623yAgAofiXV0ECvGbVuXwC3ruxZsK6mE6DGt9GecGW4e QoiX00Wj3j0jB86lI6wUEpLhTUTRtGrra11irczKPf7to7bmJmoXEmE56UfnthVv mSxa7/SqKu0KdVidGdUf6s8CpZ1ok5zrXUO/dxlGFOTqDh/PlGtl9/VrxOrpI19m ANbkOmWUdA/q14K3tQU2H5SyVcsnM5iCvPKq2qLfz/YbSGozLKMYOYWo3vTBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDQMbWUioIsvV4Rl6wPhgXduAn18wHwYDVR0j BBgwFoAUubzMvoknp7q3hTx6uwrzlc0EeGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmZlYmI2OGEtOGE1ZC00MTFjLThiYjMtODMzNDIzMTAwYjZlLzAvQjlCQ0NDQkU4 OTI3QTdCQUI3ODUzQzdBQkIwQUYzOTVDRDA0Nzg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUJDQ0NCRTg5MjdBN0JBQjc4NTNDN0FCQjBBRjM5NUNEMDQ3 ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZlYmI2OGEtOGE1ZC00MTFjLThi YjMtODMzNDIzMTAwYjZlLzAvQjlCQ0NDQkU4OTI3QTdCQUI3ODUzQzdBQkIwQUYz OTVDRDA0Nzg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCm4xWnoVm601V7yCC8ODHGV96f3NQGMlIR axJpdRlmbSDPhYEVJ+s9HGtodm8SCqauZjnw3UAgoQlht+l3evbMDD+iIc3UI5z4 wmmGC9Xc9fYnZY7oWFh9OhZLGRnwYZserpvQGfkGu5e1vhYtVt1oRFbr7ALrbPuF OGsy2XfE6d09pPsCdyNC64qmE191ZlEfJpPr9zIPQofN9roiwnmsbDSfwyHR7ilW djGYqBWCDwgPsxMEz9beOqnH0CIdhMc+JzymIuiX2IE4KU4J4OAQbKrubdMCri66 mLROSQT/52C8c7JMMhRs6nFl0qPF8p1nt5DymXOiQ1vpaoSsvMM= -----END CERTIFICATE-----Generated at Mon Sep 21 10:22:03 2026 by rpki-client