$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft File: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft (raw, json) Hash identifier: AbnKvu5GWSMYSShVYboO2TdY9pTg5nPvzkDJqx6UM5w= Subject key identifier: 50:1F:69:91:16:87:6C:88:9C:45:4B:BF:64:37:5F:30:7C:B7:1D:E6 Authority key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF Certificate issuer: /CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF Certificate serial: 1B0CC33AA51031365B2955545482CB5A81570864 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:43:37 +0000 Manifest this update: Mon 21 Sep 2026 01:38:37 +0000 Manifest next update: Tue 22 Sep 2026 05:26:37 +0000 Files and hashes: 1: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: rh10KjKVWoQwoKdQAU/xuosvzsdN9Rw59HlxfUxCKPU=) 2: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl (hash: bQLT486bUBiArSKfFW2bNMR5LZ0QI3oRnW2CZNlXNXk=) 3: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: vO+Q8HZjgmJonBgHOxFWAnJzI9j2ku3exsOHuLSofhs=) 4: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: JbJvmvToLRsj/pbiH1e96nax2mjHa9GpGHMhuuSXERU=) 5: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: r+nuLztYujAHMA3h3J8e3UnpoppY1KFa5/V4VYVp7Wg=) 6: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: ArAw1U/ObqC6nylMjrPDR+er3LEvT016ghjJZD3baiw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0c:c3:3a:a5:10:31:36:5b:29:55:54:54:82:cb:5a:81:57:08:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF Validity Not Before: Sep 21 01:38:37 2026 GMT Not After : Sep 22 05:26:37 2026 GMT Subject: CN=501F699116876C889C454BBF64375F307CB71DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:22:48:ea:63:74:d9:ff:ee:b3:31:e1:19:20: f4:b7:20:4a:08:27:13:6c:dd:39:0b:43:33:bc:07: 36:38:74:71:de:36:f0:c0:48:2d:5d:37:b9:19:6b: 59:ed:62:3f:1b:b7:42:8f:d6:cf:fa:59:53:55:1f: 7a:d9:9f:4a:22:c4:95:b2:95:fc:93:5a:b0:bf:c5: ba:1b:54:c6:82:d6:6e:58:42:8a:a0:d5:a4:92:d9: 1e:4f:ba:8d:79:b4:05:9a:65:3b:f8:60:fe:8a:bd: 94:69:83:de:2e:8e:1f:ba:01:11:ec:ca:a4:52:2d: 24:c7:3f:f3:e8:fe:23:bf:02:a8:64:42:36:1d:f9: b9:30:50:af:72:db:3b:e6:62:c7:4b:0a:06:89:cf: 59:61:d1:52:9a:0d:d4:c1:66:e2:67:c5:e9:4c:1d: 76:28:28:12:19:e9:0a:de:a1:47:ee:41:8a:46:25: 88:4e:7d:76:79:91:23:a8:8f:84:69:09:3f:ea:57: fd:7b:e0:ea:cf:dd:59:ee:63:3f:3a:c8:3c:24:e8: 5a:8f:a5:76:77:f0:90:47:7c:45:19:c2:21:92:8e: b8:ca:4f:2b:3b:f8:39:38:ae:d9:85:ee:c4:be:09: 17:a4:d2:ab:2d:de:75:ed:ad:10:48:df:31:ae:3a: 1f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1F:69:91:16:87:6C:88:9C:45:4B:BF:64:37:5F:30:7C:B7:1D:E6 X509v3 Authority Key Identifier: keyid:B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e2:f8:49:b7:17:95:42:af:2b:d1:3c:fd:7e:80:88:be:ef: 52:d4:a4:a4:ab:f0:3d:32:b8:c9:5b:8e:75:a5:ab:1d:98:a2: 9f:f2:fd:be:6f:18:7a:fc:59:d4:ac:96:de:dc:2a:d1:5b:91: 60:a7:0e:a7:94:7b:f1:d3:59:4a:87:f3:28:f6:4e:4d:a7:21: d6:8e:bc:1b:93:61:15:b6:2c:62:90:9b:e7:67:c5:ed:7a:d8: 81:31:a7:c5:ed:3e:54:61:f9:48:5b:99:31:14:db:37:de:94: e9:73:66:d5:b4:6d:e4:04:b5:91:b5:a5:a1:ca:a9:ec:9c:aa: 4b:28:bf:47:21:c3:84:8c:cf:a4:14:99:fb:c9:0a:a1:ea:42: 34:78:01:d2:db:d8:ab:60:94:79:05:d8:3c:ca:4e:f3:6e:78: 5c:c9:7a:f3:fc:2e:d7:e2:91:84:7c:8e:f2:1b:f0:b1:16:77: f5:6e:a0:03:e8:a9:74:e8:25:01:53:3e:82:b0:3e:b6:d9:81: d5:17:24:61:27:ee:56:e4:bb:81:7c:4c:ee:58:7e:39:19:c3: a0:f1:a0:56:72:2a:79:10:b6:0a:52:00:d5:48:8d:52:4e:93: a2:42:95:49:5c:fa:0b:0a:be:cf:fd:fe:14:e0:75:e1:70:b6: cf:59:f5:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGwzDOqUQMTZbKVVUVILLWoFXCGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4 MDc3QjRFRjAeFw0yNjA5MjEwMTM4MzdaFw0yNjA5MjIwNTI2MzdaMDMxMTAvBgNV BAMTKDUwMUY2OTkxMTY4NzZDODg5QzQ1NEJCRjY0Mzc1RjMwN0NCNzFERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkIkjqY3TZ/+6zMeEZIPS3IEoI JxNs3TkLQzO8BzY4dHHeNvDASC1dN7kZa1ntYj8bt0KP1s/6WVNVH3rZn0oixJWy lfyTWrC/xbobVMaC1m5YQoqg1aSS2R5Puo15tAWaZTv4YP6KvZRpg94ujh+6ARHs yqRSLSTHP/Po/iO/AqhkQjYd+bkwUK9y2zvmYsdLCgaJz1lh0VKaDdTBZuJnxelM HXYoKBIZ6QreoUfuQYpGJYhOfXZ5kSOoj4RpCT/qV/174OrP3VnuYz86yDwk6FqP pXZ38JBHfEUZwiGSjrjKTys7+Dk4rtmF7sS+CRek0qst3nXtrRBI3zGuOh9dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUB9pkRaHbIicRUu/ZDdfMHy3HeYwHwYDVR0j BBgwFoAUtkqtYtkC9gi7lf0L0/HaioB3tO8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJE OTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4MDc3QjRFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjRBQUQ2MkQ5MDJGNjA4QkI5NUZEMEJEM0YxREE4QTgwNzdC NEVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURB OEE4MDc3QjRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzi+Em3F5VCryvRPP1+gIi+71LUpKSr8D0y uMlbjnWlqx2Yop/y/b5vGHr8WdSslt7cKtFbkWCnDqeUe/HTWUqH8yj2Tk2nIdaO vBuTYRW2LGKQm+dnxe162IExp8XtPlRh+UhbmTEU2zfelOlzZtW0beQEtZG1paHK qeycqksov0chw4SMz6QUmfvJCqHqQjR4AdLb2KtglHkF2DzKTvNueFzJevP8Ltfi kYR8jvIb8LEWd/VuoAPoqXToJQFTPoKwPrbZgdUXJGEn7lbku4F8TO5YfjkZw6Dx oFZyKnkQtgpSANVIjVJOk6JClUlc+gsKvs/9/hTgdeFwts9Z9Ts= -----END CERTIFICATE-----Generated at Mon Sep 21 21:53:05 2026 by rpki-client