$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft File: B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft (raw, json) Hash identifier: 0jesdDEU6Bvk+s+qoUDJizCkw7LrX3mJUTlwJ//qktg= Subject key identifier: CF:F6:6D:2A:08:16:A8:C9:C6:8C:36:9C:54:84:31:AD:C2:18:BF:9C Authority key identifier: B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70 Certificate issuer: /CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570 Certificate serial: 68EE4D3F1592F300DE52F28CD0B62751688135CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft Manifest number: BE Signing time: Sun 20 Sep 2026 23:56:26 +0000 Manifest this update: Sun 20 Sep 2026 23:51:26 +0000 Manifest next update: Tue 22 Sep 2026 02:10:26 +0000 Files and hashes: 1: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: BFoAAOYL5cXcuIYHdcG6m2LVE3HWh1vuQutXqW1gBIM=) 2: 323430353a636163303a313a3a2f34382d3438203d3e20313339393832.roa (hash: TOnsrcvIXglIicbrrGOcttljfn+j8zuH56+Uevu2CiA=) 3: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: HJdyg1CH1wYNkX3IJPS7n0ig1ABVkAurwagIizZ3YJY=) 4: B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl (hash: x2DKjtDdpdEvGf+g3i6MUnclCAwaXllZ3DyWZ37PH1w=) 5: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: GK/q1qgmQxfM3voSc0k+YTmkhCDo78ptqyplH6DohgE=) 6: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: 1XW8m/1HHafjwn856SxYeKjsgoK5KYpfAPCW/Yr3PaE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ee:4d:3f:15:92:f3:00:de:52:f2:8c:d0:b6:27:51:68:81:35:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570 Validity Not Before: Sep 20 23:51:26 2026 GMT Not After : Sep 22 02:10:26 2026 GMT Subject: CN=CFF66D2A0816A8C9C68C369C548431ADC218BF9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:39:e2:6f:ed:78:7c:19:ff:dd:5a:f3:15:c8: 51:c9:b2:6f:ec:98:e1:cd:cf:15:fa:75:4b:2c:e5: 7c:39:dd:64:00:ab:c1:cd:ff:fa:79:12:2a:f8:ac: 4d:95:46:b5:5d:38:5d:1a:dc:dc:07:d7:f7:24:c9: c1:88:23:70:4d:4a:4a:a3:77:cc:00:3c:ea:20:57: 85:eb:2d:cf:1a:c5:b2:12:47:28:31:8a:7c:04:ae: 5c:1e:b1:59:94:55:57:2d:aa:4c:5e:e4:c5:cd:82: 74:c7:c2:8c:2d:0a:59:c3:00:bd:50:9e:97:5f:ad: 0a:a0:1b:1f:59:5c:49:6d:d1:de:d6:ab:f4:4d:36: 8e:9e:a3:e6:dd:75:64:4a:7e:3a:33:f6:bb:54:57: e4:19:ab:a0:78:48:4c:88:e3:4e:3c:6d:3f:b2:39: 68:33:c5:27:58:0c:f3:3b:54:f7:2e:ae:f0:1d:4d: 1f:e9:36:7c:47:33:ba:f0:0e:8f:0a:f1:46:67:4f: 5f:2c:c5:b9:83:11:a0:9a:91:e2:e7:68:09:82:45: be:f5:90:d0:5e:be:60:cc:51:af:60:32:bb:a4:ab: f3:14:12:f7:5e:bb:95:ce:6b:cc:8c:1b:c6:96:94: e3:48:06:17:6d:f1:aa:62:ca:07:dc:9b:83:42:08: 04:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F6:6D:2A:08:16:A8:C9:C6:8C:36:9C:54:84:31:AD:C2:18:BF:9C X509v3 Authority Key Identifier: keyid:B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:99:3f:74:88:34:86:3c:c3:fa:4f:10:b5:47:02:ba:bf:72: ad:b6:96:d5:c2:eb:67:cd:4e:23:0f:80:ea:bc:66:2f:9e:b7: 62:81:bb:0d:25:24:ff:10:d7:7a:2e:e0:ae:28:27:5c:e3:1e: f6:9b:22:b2:81:7c:d4:91:0a:41:65:48:83:b3:4f:12:d7:80: 88:f0:9a:88:8d:33:62:41:56:89:d3:a6:3b:9e:fd:bb:6c:9f: 4d:5a:25:d0:59:af:5f:79:5e:b4:7f:8d:06:e3:17:9c:8d:3d: 0d:58:ac:03:18:bf:24:81:02:0c:df:ae:c8:06:bc:de:f1:dd: 1f:3d:90:7c:7d:15:d9:0f:2c:b2:c6:c5:38:0c:60:2d:f0:2a: 7b:08:e5:c7:eb:f2:12:69:c6:93:e1:6b:33:79:82:64:69:7b: b0:f1:80:4e:6c:6f:4b:32:cd:7a:fc:f2:52:c6:d1:8b:c8:c7: d3:4a:5b:60:22:a9:af:a1:07:72:0f:e4:59:b1:fd:ed:ea:bf: ba:68:45:2f:ef:4c:d4:4a:f5:a7:e5:1f:33:30:dc:9d:08:98: f3:06:b3:73:d1:de:e7:20:52:5a:a0:16:6f:0c:aa:63:94:87: fb:d3:34:aa:1b:15:60:78:6d:d5:02:86:5b:78:e3:26:5f:7e: 8b:5a:01:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaO5NPxWS8wDeUvKM0LYnUWiBNc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgyRkRGQzYyNkU3M0NCMjI2OEY1QjFFRkVGNTc2NzE1 RkU1QTU3MDAeFw0yNjA5MjAyMzUxMjZaFw0yNjA5MjIwMjEwMjZaMDMxMTAvBgNV BAMTKENGRjY2RDJBMDgxNkE4QzlDNjhDMzY5QzU0ODQzMUFEQzIxOEJGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZOeJv7Xh8Gf/dWvMVyFHJsm/s mOHNzxX6dUss5Xw53WQAq8HN//p5Eir4rE2VRrVdOF0a3NwH1/ckycGII3BNSkqj d8wAPOogV4XrLc8axbISRygxinwErlwesVmUVVctqkxe5MXNgnTHwowtClnDAL1Q npdfrQqgGx9ZXElt0d7Wq/RNNo6eo+bddWRKfjoz9rtUV+QZq6B4SEyI4048bT+y OWgzxSdYDPM7VPcurvAdTR/pNnxHM7rwDo8K8UZnT18sxbmDEaCakeLnaAmCRb71 kNBevmDMUa9gMrukq/MUEvdeu5XOa8yMG8aWlONIBhdt8apiygfcm4NCCAThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/ZtKggWqMnGjDacVIQxrcIYv5wwHwYDVR0j BBgwFoAUuC/fxibnPLImj1se/vV2cV/lpXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlmMjZmYjgtNzJjNC00OWQ5LTljYmUtODIyNjM5NzI3MWEyLzAvQjgyRkRGQzYy NkU3M0NCMjI2OEY1QjFFRkVGNTc2NzE1RkU1QTU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODJGREZDNjI2RTczQ0IyMjY4RjVCMUVGRUY1NzY3MTVGRTVB NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvQjgyRkRGQzYyNkU3M0NCMjI2OEY1QjFFRkVGNTc2 NzE1RkU1QTU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuZP3SINIY8w/pPELVHArq/cq22ltXC62fN TiMPgOq8Zi+et2KBuw0lJP8Q13ou4K4oJ1zjHvabIrKBfNSRCkFlSIOzTxLXgIjw moiNM2JBVonTpjue/btsn01aJdBZr195XrR/jQbjF5yNPQ1YrAMYvySBAgzfrsgG vN7x3R89kHx9FdkPLLLGxTgMYC3wKnsI5cfr8hJpxpPhazN5gmRpe7DxgE5sb0sy zXr88lLG0YvIx9NKW2Aiqa+hB3IP5Fmx/e3qv7poRS/vTNRK9aflHzMw3J0ImPMG s3PR3ucgUlqgFm8MqmOUh/vTNKobFWB4bdUChlt44yZffotaAZQ= -----END CERTIFICATE-----Generated at Mon Sep 21 19:51:29 2026 by rpki-client