$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft File: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft (raw, json) Hash identifier: NQ170zaMkxOASMp89iQNpww9OcBiZsZ4Luf7T64rp30= Subject key identifier: 4E:02:B1:83:2C:FE:CC:EE:7D:DF:8B:7F:FC:2E:7C:14:32:C0:1B:CF Authority key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 Certificate issuer: /CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Certificate serial: 0AAFF72CA39370908E57B7096378B0FBEB30C0A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft Manifest number: BF Signing time: Mon 21 Sep 2026 14:24:24 +0000 Manifest this update: Mon 21 Sep 2026 14:19:24 +0000 Manifest next update: Tue 22 Sep 2026 14:33:24 +0000 Files and hashes: 1: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: G626nf3IkAH7IIThn3UlVRBOX9wH92EFofVHExk6vxQ=) 2: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl (hash: D0bNkVvSu/f7LzU9g13tX6ZT8quF/X8ePZiGaoGfrH4=) 3: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: 0KpGk+Me0s5mBlSvDHCHu9w7qKthN0KZwNcXUygtBFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:af:f7:2c:a3:93:70:90:8e:57:b7:09:63:78:b0:fb:eb:30:c0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Validity Not Before: Sep 21 14:19:24 2026 GMT Not After : Sep 22 14:33:24 2026 GMT Subject: CN=4E02B1832CFECCEE7DDF8B7FFC2E7C1432C01BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:3c:bc:0f:18:a2:5b:d9:83:37:ca:9b:a9: 84:4d:bb:af:4c:3a:a7:f3:a0:0d:01:e5:ef:4b:48: 3b:f9:eb:ff:cd:c6:3b:b6:b9:e2:d1:eb:b0:f0:6b: c4:26:40:c7:af:5e:36:18:fc:65:36:d4:65:6f:e3: 4f:61:a1:7d:3a:95:28:ba:e7:60:ba:f5:de:a0:8c: 34:b0:ba:33:3d:a4:b0:51:40:7a:2a:6f:77:95:d9: a2:80:06:c7:0f:ae:d8:7f:8a:6e:5f:38:a4:db:06: a2:7e:df:a4:b8:50:8d:99:df:aa:e6:1f:ea:34:fa: df:59:d2:5e:74:f8:a4:90:22:d3:c1:6a:64:ad:39: ee:0d:15:98:5a:70:73:f3:fe:aa:36:45:75:36:9e: 68:6a:d0:8a:17:da:bc:9e:6a:e4:3b:f0:b5:46:8f: a7:da:58:6a:05:ee:23:6d:45:69:b4:d6:05:18:ee: 7c:6b:05:97:b9:99:c7:5b:76:01:f1:0d:8a:1c:ea: 87:c4:65:37:f0:ee:fc:68:23:be:76:c2:f5:85:d5: ed:b2:f5:91:d1:b0:84:07:85:ef:4e:0f:65:2f:19: 05:6d:87:14:c3:4b:6d:79:10:44:69:b4:2b:3f:ba: 4b:07:7b:d4:b7:37:ee:c1:27:04:93:58:06:f9:3c: 3b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:02:B1:83:2C:FE:CC:EE:7D:DF:8B:7F:FC:2E:7C:14:32:C0:1B:CF X509v3 Authority Key Identifier: keyid:B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:17:24:c6:3d:51:6d:70:87:56:70:50:85:7d:58:05:d4:44: 27:55:73:db:50:ee:61:86:fe:11:35:9a:14:62:29:46:cc:e3: 3e:d4:71:b0:02:d7:3c:6d:a2:0e:6b:d4:d3:09:c9:81:32:4e: 3d:53:10:43:75:ac:d2:64:45:45:7a:fa:1d:38:29:10:ad:d7: e3:64:9c:e2:64:13:a9:36:dd:40:54:b6:a7:8a:4f:33:3b:fe: 44:34:e3:51:39:ad:d1:1d:38:45:f9:80:d0:78:fa:e3:b4:99: 8f:b7:e0:fe:4a:c0:bf:59:54:c5:8b:86:7c:c9:1c:0c:d4:7f: 10:24:80:37:39:0d:d0:63:78:a3:5a:e8:12:d0:e5:e9:8d:44: b7:15:e2:cb:ad:97:67:fe:90:47:8f:0b:1a:41:2c:cc:a4:62: 5a:ef:68:d8:26:1a:ec:8b:e4:c1:37:42:d0:10:2e:c1:cc:f4: ab:65:47:22:b9:80:c5:14:d6:90:d6:81:05:26:69:be:59:01: 0e:98:7c:0d:87:8b:6d:7c:7c:88:38:c3:73:96:5e:c4:2a:28: 80:3a:0c:d7:2e:d0:69:f5:a8:81:28:a7:7f:b7:3e:64:1b:f3: 4b:5a:84:39:a4:57:ba:43:b0:ba:87:94:ca:b6:9f:3c:bf:79: fc:01:f5:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCq/3LKOTcJCOV7cJY3iw++swwKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDQjJFOUY2NTEzQjBBQkQ2OUNEMkEyQ0M2MDRENjFD MTVEQUNBNTAeFw0yNjA5MjExNDE5MjRaFw0yNjA5MjIxNDMzMjRaMDMxMTAvBgNV BAMTKDRFMDJCMTgzMkNGRUNDRUU3RERGOEI3RkZDMkU3QzE0MzJDMDFCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePzy8DxiiW9mDN8qbqYRNu69M OqfzoA0B5e9LSDv56//Nxju2ueLR67Dwa8QmQMevXjYY/GU21GVv409hoX06lSi6 52C69d6gjDSwujM9pLBRQHoqb3eV2aKABscPrth/im5fOKTbBqJ+36S4UI2Z36rm H+o0+t9Z0l50+KSQItPBamStOe4NFZhacHPz/qo2RXU2nmhq0IoX2ryeauQ78LVG j6faWGoF7iNtRWm01gUY7nxrBZe5mcdbdgHxDYoc6ofEZTfw7vxoI752wvWF1e2y 9ZHRsIQHhe9OD2UvGQVthxTDS215EERptCs/uksHe9S3N+7BJwSTWAb5PDu9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTgKxgyz+zO5934t//C58FDLAG88wHwYDVR0j BBgwFoAUt8sun2UTsKvWnNKizGBNYcFdrKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMzNzBlNmYtZjBjNy00ZjQwLThiYTQtYTAxZTVkMGM3NGU0LzAvQjdDQjJFOUY2 NTEzQjBBQkQ2OUNEMkEyQ0M2MDRENjFDMTVEQUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0NCMkU5RjY1MTNCMEFCRDY5Q0QyQTJDQzYwNEQ2MUMxNURB Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvQjdDQjJFOUY2NTEzQjBBQkQ2OUNEMkEyQ0M2MDRE NjFDMTVEQUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAXJMY9UW1wh1ZwUIV9WAXURCdVc9tQ7mGG /hE1mhRiKUbM4z7UcbAC1zxtog5r1NMJyYEyTj1TEEN1rNJkRUV6+h04KRCt1+Nk nOJkE6k23UBUtqeKTzM7/kQ041E5rdEdOEX5gNB4+uO0mY+34P5KwL9ZVMWLhnzJ HAzUfxAkgDc5DdBjeKNa6BLQ5emNRLcV4sutl2f+kEePCxpBLMykYlrvaNgmGuyL 5ME3QtAQLsHM9KtlRyK5gMUU1pDWgQUmab5ZAQ6YfA2Hi218fIg4w3OWXsQqKIA6 DNcu0Gn1qIEop3+3PmQb80tahDmkV7pDsLqHlMq2nzy/efwB9Sg= -----END CERTIFICATE-----Generated at Mon Sep 21 22:00:11 2026 by rpki-client