$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft File: B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft (raw, json) Hash identifier: 8cl7Dl3LjoAkTh1CUJQzCFQyjC3iQU62YVxk8FBqZA8= Subject key identifier: 76:D2:8D:E8:DA:13:F8:3D:F0:45:BC:28:6C:72:46:E2:4E:0F:C4:83 Authority key identifier: B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D Certificate issuer: /CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D Certificate serial: 38941C0308B7292E9B36968D7A3EA626451522A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 09:28:15 +0000 Manifest this update: Tue 22 Sep 2026 09:23:15 +0000 Manifest next update: Wed 23 Sep 2026 10:05:15 +0000 Files and hashes: 1: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: JtFDDBHLhFW7JsMlxs4g2eR/5c2AZrAbcpY0KNoiazs=) 2: B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl (hash: LlN6qb9bqDaSNcPa0XI+L9WTlPozr6w8t6CNpD61uTU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 10:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:94:1c:03:08:b7:29:2e:9b:36:96:8d:7a:3e:a6:26:45:15:22:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D Validity Not Before: Sep 22 09:23:15 2026 GMT Not After : Sep 23 10:05:15 2026 GMT Subject: CN=76D28DE8DA13F83DF045BC286C7246E24E0FC483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:2d:44:f8:37:c7:dd:96:b6:31:b1:0f:e4: ca:b1:c9:ce:cf:fc:44:fe:f9:79:e2:c8:5e:18:10: 28:31:47:16:22:e0:1d:08:25:96:51:6b:35:99:0a: cb:8f:ce:b8:1d:b1:41:e2:f1:0f:8e:97:57:d8:c2: 9a:18:f4:81:da:7a:5f:c6:8d:f7:03:5d:98:a2:cd: 38:a1:04:7d:a0:cd:e7:c2:06:56:81:7c:a6:aa:9d: 6a:cd:31:9a:1e:b0:ff:f0:03:37:a8:03:4b:1f:9c: d3:ed:8a:14:a5:a7:fb:20:fc:1a:4d:9f:d6:f3:85: 53:bc:d2:2c:4e:d6:48:f0:1a:23:39:e3:b8:69:d0: 01:c5:f7:0a:59:ee:97:ae:29:f8:d3:07:a2:75:7a: e8:0c:19:4f:e8:45:4f:6e:b5:4d:ed:5e:6c:60:ce: cf:8c:22:41:f4:07:c5:16:e4:a9:a5:5e:58:5c:4e: 79:ba:b8:51:f8:ae:7a:a3:75:6a:7d:ca:a3:4b:be: 2e:32:7e:f2:ad:8f:45:c6:62:29:24:ea:0d:3b:ed: f7:2d:ce:43:7f:48:22:c8:c1:34:fc:42:a5:bb:4a: 66:00:96:7a:ae:21:19:9e:69:07:b6:a8:fa:33:94: 27:15:f9:fc:9b:32:a1:f3:73:e8:12:56:bb:36:f9: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D2:8D:E8:DA:13:F8:3D:F0:45:BC:28:6C:72:46:E2:4E:0F:C4:83 X509v3 Authority Key Identifier: keyid:B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ca:f8:0d:19:aa:f2:7d:f7:67:36:0f:e8:1c:bb:9b:a2:fc: f5:2d:5e:56:28:6a:f0:34:95:52:2d:ce:91:ff:25:4a:11:d1: 9d:b9:7b:a0:7d:d0:66:ad:96:cb:f3:85:bb:40:84:79:27:0b: a7:de:47:ac:16:23:77:82:ce:a8:76:b0:45:da:52:9d:33:f9: 07:af:21:f4:cc:6a:30:53:a7:af:41:f1:45:86:75:42:42:f0: 6d:10:f4:b2:fb:0f:7a:f5:00:ae:c4:1e:35:cc:3e:80:64:32: 2a:df:86:8a:1c:3c:01:fb:f2:19:1d:71:9c:77:8d:a8:fe:44: 83:93:95:fc:f5:63:96:28:e2:8d:a8:c5:95:3a:2a:7e:8b:db: 37:76:a1:d4:f8:78:9a:68:e4:16:33:18:4d:a7:10:97:93:4a: 73:1f:6c:0b:6c:68:b4:28:11:76:60:f5:ff:f1:8f:ec:2a:4f: 20:72:9c:06:80:73:37:32:13:e7:ae:05:4c:3e:86:b9:f0:c5: a1:b6:d9:ef:2d:c4:9f:fc:13:7f:67:2f:1d:58:68:4e:c9:63: cf:2e:bd:47:c1:3c:7a:dc:52:61:c3:3f:12:9b:64:56:55:2c: 23:fa:5e:11:7d:21:9f:1c:bb:22:2d:a4:c5:7c:5b:30:67:68: 2d:ce:6b:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJQcAwi3KS6bNpaNej6mJkUVIqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBMDdGMTc0OEU1NjFCMzNEQjhDNDMyNjk4MUE1NUIy N0NFRTkzRDAeFw0yNjA5MjIwOTIzMTVaFw0yNjA5MjMxMDA1MTVaMDMxMTAvBgNV BAMTKDc2RDI4REU4REExM0Y4M0RGMDQ1QkMyODZDNzI0NkUyNEUwRkM0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrHi1E+DfH3Za2MbEP5Mqxyc7P /ET++XniyF4YECgxRxYi4B0IJZZRazWZCsuPzrgdsUHi8Q+Ol1fYwpoY9IHael/G jfcDXZiizTihBH2gzefCBlaBfKaqnWrNMZoesP/wAzeoA0sfnNPtihSlp/sg/BpN n9bzhVO80ixO1kjwGiM547hp0AHF9wpZ7peuKfjTB6J1eugMGU/oRU9utU3tXmxg zs+MIkH0B8UW5KmlXlhcTnm6uFH4rnqjdWp9yqNLvi4yfvKtj0XGYikk6g077fct zkN/SCLIwTT8QqW7SmYAlnquIRmeaQe2qPozlCcV+fybMqHzc+gSVrs2+bUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdtKN6NoT+D3wRbwobHJG4k4PxIMwHwYDVR0j BBgwFoAUsqB/F0jlYbM9uMQyaYGlWyfO6T0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFlMGQxN2MtZWRkMS00MjAyLWI3MzYtM2I1MjdlZmE2YmEyLzAvQjJBMDdGMTc0 OEU1NjFCMzNEQjhDNDMyNjk4MUE1NUIyN0NFRTkzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkEwN0YxNzQ4RTU2MUIzM0RCOEM0MzI2OTgxQTU1QjI3Q0VF OTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvQjJBMDdGMTc0OEU1NjFCMzNEQjhDNDMyNjk4MUE1 NUIyN0NFRTkzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnK+A0ZqvJ992c2D+gcu5ui/PUtXlYoavA0 lVItzpH/JUoR0Z25e6B90GatlsvzhbtAhHknC6feR6wWI3eCzqh2sEXaUp0z+Qev IfTMajBTp69B8UWGdUJC8G0Q9LL7D3r1AK7EHjXMPoBkMirfhoocPAH78hkdcZx3 jaj+RIOTlfz1Y5Yo4o2oxZU6Kn6L2zd2odT4eJpo5BYzGE2nEJeTSnMfbAtsaLQo EXZg9f/xj+wqTyBynAaAczcyE+euBUw+hrnwxaG22e8txJ/8E39nLx1YaE7JY88u vUfBPHrcUmHDPxKbZFZVLCP6XhF9IZ8cuyItpMV8WzBnaC3Oa2Q= -----END CERTIFICATE-----Generated at Tue Sep 22 14:26:45 2026 by rpki-client