$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft File: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft (raw, json) Hash identifier: 5SU5m52Oqxcac8swBARH+KR5xsn5UtXT5aHremyrhK0= Subject key identifier: 0C:35:BB:28:CF:B3:F0:81:64:21:D9:ED:AA:EA:2C:F6:CE:08:5B:B3 Authority key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 Certificate issuer: /CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Certificate serial: 31EF95ED105DFEC43841EA787F767C7C92861BB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft Manifest number: BD Signing time: Mon 21 Sep 2026 06:09:14 +0000 Manifest this update: Mon 21 Sep 2026 06:04:14 +0000 Manifest next update: Tue 22 Sep 2026 09:38:14 +0000 Files and hashes: 1: 323430313a346661303a3a2f33322d3438203d3e20313431393539.roa (hash: YSkaXkoDpu4xkOc0DMYpS2KAoSxyKN+Gksem+MM/1ic=) 2: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: vGdo0aPhNFfXshch3eNd6YkNvIG8QzHxW2xedSDSTPc=) 3: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: WrcnjDvM2bO2wuu3OCRivgLaRSs+xddaOJ50D9MbO8U=) 4: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: Pavi+Ibkd+bl9I6ebmoiu+/5SxrpK9sFhLxy2ZXQkGw=) 5: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl (hash: vwSsiwDn8yMHqQdFmQ+Oyh89MVUOstA34L22dRYYiIU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ef:95:ed:10:5d:fe:c4:38:41:ea:78:7f:76:7c:7c:92:86:1b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Validity Not Before: Sep 21 06:04:14 2026 GMT Not After : Sep 22 09:38:14 2026 GMT Subject: CN=0C35BB28CFB3F0816421D9EDAAEA2CF6CE085BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a4:4a:e8:5a:f5:da:87:39:10:2a:72:55:c5: 9d:f9:23:9f:67:54:8a:e5:c3:93:e0:8c:13:c2:73: e2:1b:b7:48:7b:37:c6:5d:49:f6:e4:da:a1:aa:78: 88:7d:22:72:be:dd:6a:c4:25:b7:ea:54:dc:e3:9e: b4:15:be:bb:ac:b2:f7:f1:6d:72:f2:d3:77:6d:a6: be:4d:3c:1c:d9:6a:e4:7a:d0:f9:8c:e4:ac:b0:1c: 79:99:ba:83:1b:96:d1:90:74:c7:b7:f9:22:a4:b9: 6f:18:af:54:86:17:cd:76:c4:f1:35:d4:d1:89:e7: 58:c2:ab:32:22:15:b4:c2:ba:d8:56:b6:76:6a:67: 5c:3d:a3:56:85:f6:38:37:25:f2:f8:d3:9f:96:30: 84:b5:b7:ba:d9:92:a7:32:9f:96:6f:3f:ce:6e:39: 01:ef:87:5c:d7:45:c3:29:f6:b6:2a:77:dd:a5:ec: df:51:ae:67:61:09:ba:ad:ed:80:57:aa:6a:79:05: 58:03:6a:91:53:b9:ea:eb:bc:ad:c8:91:78:46:ac: db:09:9f:98:72:ef:0f:90:54:67:c9:c6:a5:e8:3b: 24:43:ec:69:1c:f2:5d:b3:3c:2b:b6:37:04:18:07: 6f:06:09:11:29:db:02:78:9d:ca:3f:72:a3:61:71: 5e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:35:BB:28:CF:B3:F0:81:64:21:D9:ED:AA:EA:2C:F6:CE:08:5B:B3 X509v3 Authority Key Identifier: keyid:B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:84:53:47:24:d5:b0:b9:b8:a3:45:1b:e3:3a:7c:2a:fa:64: 77:4f:8c:23:dd:f5:bf:2d:de:e8:08:c6:b3:0e:86:2e:42:60: 27:a6:87:ab:5e:e6:84:da:06:30:6f:b4:e1:ef:98:fd:94:22: 4e:eb:5b:b4:5f:b3:9a:f4:ae:6e:6e:fa:47:a7:1f:a2:13:ff: 44:12:99:67:af:55:d4:08:d4:c5:1c:a8:27:e5:a4:80:8a:b7: 05:3d:49:aa:4b:46:16:65:45:48:60:b1:d8:e1:cc:32:2f:a9: f7:9b:27:71:7a:d7:38:29:d7:01:e0:5f:c1:6d:a3:17:36:b2: 1f:29:22:43:0a:16:c8:f9:c1:3b:2a:81:fd:27:f5:79:2d:94: ca:56:98:b9:65:10:09:c5:64:64:af:31:e7:70:19:7a:84:40: 99:85:d9:0c:29:89:67:7e:13:7d:97:04:ab:08:4f:ce:64:d8: d2:da:bf:03:ec:0b:04:de:f4:b0:5c:74:66:b6:e9:83:f9:6a: f1:0d:d9:88:84:3d:7f:1a:39:4c:4c:0c:3b:31:14:04:b4:b8: d8:50:6e:ae:68:fa:e6:d8:7f:58:ae:82:94:61:84:5a:f5:7c: 20:9d:eb:a9:e8:70:ce:1f:3e:5a:f1:cd:0d:28:43:d9:9b:7f: 1e:1b:2c:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMe+V7RBd/sQ4Qep4f3Z8fJKGG7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5QzVF Q0QyRDcwOTAeFw0yNjA5MjEwNjA0MTRaFw0yNjA5MjIwOTM4MTRaMDMxMTAvBgNV BAMTKDBDMzVCQjI4Q0ZCM0YwODE2NDIxRDlFREFBRUEyQ0Y2Q0UwODVCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYpEroWvXahzkQKnJVxZ35I59n VIrlw5PgjBPCc+Ibt0h7N8ZdSfbk2qGqeIh9InK+3WrEJbfqVNzjnrQVvrussvfx bXLy03dtpr5NPBzZauR60PmM5KywHHmZuoMbltGQdMe3+SKkuW8Yr1SGF812xPE1 1NGJ51jCqzIiFbTCuthWtnZqZ1w9o1aF9jg3JfL405+WMIS1t7rZkqcyn5ZvP85u OQHvh1zXRcMp9rYqd92l7N9RrmdhCbqt7YBXqmp5BVgDapFTuerrvK3IkXhGrNsJ n5hy7w+QVGfJxqXoOyRD7Gkc8l2zPCu2NwQYB28GCREp2wJ4nco/cqNhcV5xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDDW7KM+z8IFkIdntquos9s4IW7MwHwYDVR0j BBgwFoAUsxbGPS2hOH0ZGn6m3AtZxezS1wkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZmMDk1ODQtOTExMC00YjBkLThmNmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0Qy REExMzg3RDE5MUE3RUE2REMwQjU5QzVFQ0QyRDcwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzE2QzYzRDJEQTEzODdEMTkxQTdFQTZEQzBCNTlDNUVDRDJE NzA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5 QzVFQ0QyRDcwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6EU0ck1bC5uKNFG+M6fCr6ZHdPjCPd9b8t 3ugIxrMOhi5CYCemh6te5oTaBjBvtOHvmP2UIk7rW7Rfs5r0rm5u+kenH6IT/0QS mWevVdQI1MUcqCflpICKtwU9SapLRhZlRUhgsdjhzDIvqfebJ3F61zgp1wHgX8Ft oxc2sh8pIkMKFsj5wTsqgf0n9XktlMpWmLllEAnFZGSvMedwGXqEQJmF2QwpiWd+ E32XBKsIT85k2NLavwPsCwTe9LBcdGa26YP5avEN2YiEPX8aOUxMDDsxFAS0uNhQ bq5o+ubYf1iugpRhhFr1fCCd66nocM4fPlrxzQ0oQ9mbfx4bLEM= -----END CERTIFICATE-----Generated at Mon Sep 21 22:00:53 2026 by rpki-client