$ rpki-client -vvvf rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft File: B806053521FE6FECB8809B52E561CCCA002004C5.mft (raw, json) Hash identifier: qwFdVq/IfhKH4tT/4VCfRxdPza1dIyQ7vhKjmoDFWnw= Subject key identifier: 7C:64:ED:6B:60:AA:92:84:E4:30:A0:0D:48:63:54:E3:6D:9F:4D:26 Authority key identifier: B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5 Certificate issuer: /CN=B806053521FE6FECB8809B52E561CCCA002004C5 Certificate serial: 650B7E1E922BC018AC7C4608B6EBB997B4137D02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft Manifest number: BD Signing time: Mon 21 Sep 2026 07:05:23 +0000 Manifest this update: Mon 21 Sep 2026 07:00:23 +0000 Manifest next update: Tue 22 Sep 2026 08:39:23 +0000 Files and hashes: 1: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: un5iMbvwLLHgZ/gVlHFbug00/xJXBrdaRm/T/UqWjVI=) 2: B806053521FE6FECB8809B52E561CCCA002004C5.crl (hash: zgWmRCTc3xtaSj8aaFdlFI/Vdjt8gHXa0/ryLsW4bH0=) 3: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: vm98v9W8rSeQ8Av1Tc7EkqP0Z8ZuAgCRGwku9YNKDo0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.crl rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0b:7e:1e:92:2b:c0:18:ac:7c:46:08:b6:eb:b9:97:b4:13:7d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B806053521FE6FECB8809B52E561CCCA002004C5 Validity Not Before: Sep 21 07:00:23 2026 GMT Not After : Sep 22 08:39:23 2026 GMT Subject: CN=7C64ED6B60AA9284E430A00D486354E36D9F4D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e2:a5:31:86:64:45:b4:6e:cd:48:87:1e:69: 98:0d:7b:a2:d7:c8:bb:f2:37:3a:a2:2e:8a:e4:0b: 68:cb:87:01:ef:33:3b:a1:1f:29:b0:8f:7c:6b:98: 60:f6:49:04:91:ca:bb:0f:0b:2a:15:4a:cf:67:28: 63:83:30:a5:e8:28:06:38:8b:ee:70:a2:4f:2b:2a: ad:a5:2a:43:31:ef:79:48:b7:5c:e7:43:49:4d:0e: 24:1c:a8:c7:3f:78:78:42:87:eb:ee:5f:16:84:49: fe:b6:07:10:b7:8d:d0:fd:65:fc:4d:27:23:c2:93: 8d:f3:44:03:65:a3:1c:49:48:06:9f:6d:b4:ac:91: 9f:b7:d2:18:ab:57:21:3e:dd:a3:9c:79:4c:33:69: b8:f4:3c:c3:b4:8f:b7:72:5b:dd:70:91:ad:9c:d8: 8c:61:cc:a7:a5:16:0c:13:fb:c8:8b:14:d5:53:4f: ba:0a:3f:12:4e:99:28:03:50:26:d4:72:7d:1f:9f: bf:60:a4:0f:3d:60:a8:8f:06:e7:ee:f1:dd:98:4b: 6d:31:35:76:58:0f:38:2b:71:38:e2:12:fa:a1:8c: f0:3a:bc:93:cb:27:ca:d6:fe:de:a5:ee:bd:54:8d: 35:a1:8b:cd:be:d1:96:83:f4:00:82:d6:f9:66:0e: c7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:64:ED:6B:60:AA:92:84:E4:30:A0:0D:48:63:54:E3:6D:9F:4D:26 X509v3 Authority Key Identifier: keyid:B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:7b:3f:d7:68:41:26:e0:07:b5:23:1a:64:c7:30:0e:f2:0b: d1:bf:e3:44:a1:95:4c:32:8b:c6:e8:12:5b:74:f9:d0:2d:c3: 8c:c1:4e:80:56:f8:0d:f7:70:b1:ba:af:44:ec:ff:c7:e8:8d: 0d:4d:c4:3d:c4:15:ee:a7:0e:9b:b2:25:77:bb:1c:81:2d:6e: c9:8b:8a:16:5a:79:a3:60:50:77:5a:89:cd:52:13:a7:d9:41: ff:af:33:7b:ea:c9:57:6e:21:0b:c7:62:b1:b5:6a:19:5b:49: 81:6e:a6:52:56:78:52:b6:de:2e:0c:5c:46:f0:87:c3:6f:be: f0:8d:98:ec:53:71:55:d1:2f:09:69:32:37:23:00:a2:fe:aa: d3:a1:79:cf:94:7d:99:e5:40:2a:71:51:cb:d6:5f:bb:59:9a: df:16:00:50:3a:f3:b1:9d:4d:42:50:1e:0a:8a:5b:4a:be:9f: ef:50:69:88:f1:93:9d:62:59:4d:55:5b:c4:70:b5:4a:6d:b4: b2:0a:d5:a6:4d:99:15:7e:34:1f:9d:fd:b4:09:d1:f4:92:f7: a5:bc:4a:44:20:ce:89:0d:cd:53:4a:d8:4b:a9:10:43:82:d9: 78:0b:4b:d9:6e:ab:ad:cb:50:50:ca:3a:ad:93:47:da:81:06: 5f:4b:d9:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQt+HpIrwBisfEYItuu5l7QTfQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgwNjA1MzUyMUZFNkZFQ0I4ODA5QjUyRTU2MUNDQ0Ew MDIwMDRDNTAeFw0yNjA5MjEwNzAwMjNaFw0yNjA5MjIwODM5MjNaMDMxMTAvBgNV BAMTKDdDNjRFRDZCNjBBQTkyODRFNDMwQTAwRDQ4NjM1NEUzNkQ5RjREMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn4qUxhmRFtG7NSIceaZgNe6LX yLvyNzqiLorkC2jLhwHvMzuhHymwj3xrmGD2SQSRyrsPCyoVSs9nKGODMKXoKAY4 i+5wok8rKq2lKkMx73lIt1znQ0lNDiQcqMc/eHhCh+vuXxaESf62BxC3jdD9ZfxN JyPCk43zRANloxxJSAafbbSskZ+30hirVyE+3aOceUwzabj0PMO0j7dyW91wka2c 2IxhzKelFgwT+8iLFNVTT7oKPxJOmSgDUCbUcn0fn79gpA89YKiPBufu8d2YS20x NXZYDzgrcTjiEvqhjPA6vJPLJ8rW/t6l7r1UjTWhi82+0ZaD9ACC1vlmDsd3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfGTta2CqkoTkMKANSGNU422fTSYwHwYDVR0j BBgwFoAUuAYFNSH+b+y4gJtS5WHMygAgBMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODEzNjQ1ZDQtNTQzYi00NDRiLWEzYTUtZmRjZDQxODExYzIxLzAvQjgwNjA1MzUy MUZFNkZFQ0I4ODA5QjUyRTU2MUNDQ0EwMDIwMDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODA2MDUzNTIxRkU2RkVDQjg4MDlCNTJFNTYxQ0NDQTAwMjAw NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvQjgwNjA1MzUyMUZFNkZFQ0I4ODA5QjUyRTU2MUND Q0EwMDIwMDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAV7P9doQSbgB7UjGmTHMA7yC9G/40ShlUwy i8boElt0+dAtw4zBToBW+A33cLG6r0Ts/8fojQ1NxD3EFe6nDpuyJXe7HIEtbsmL ihZaeaNgUHdaic1SE6fZQf+vM3vqyVduIQvHYrG1ahlbSYFuplJWeFK23i4MXEbw h8NvvvCNmOxTcVXRLwlpMjcjAKL+qtOhec+UfZnlQCpxUcvWX7tZmt8WAFA687Gd TUJQHgqKW0q+n+9QaYjxk51iWU1VW8RwtUpttLIK1aZNmRV+NB+d/bQJ0fSS96W8 SkQgzokNzVNK2EupEEOC2XgLS9luq63LUFDKOq2TR9qBBl9L2SU= -----END CERTIFICATE-----Generated at Mon Sep 21 22:17:26 2026 by rpki-client