$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft File: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft (raw, json) Hash identifier: Wcxnd4Yok+xIK58mqaoSLKpbzVsgqllQTlHdLBcvV7Q= Subject key identifier: 17:BC:B3:10:84:23:F6:67:2C:43:4E:6D:08:3E:01:8A:19:96:D3:0C Authority key identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A Certificate issuer: /CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Certificate serial: 758696660CC07928D4035A5ABE1C4509E8AE44BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft Manifest number: BF Signing time: Tue 22 Sep 2026 05:13:03 +0000 Manifest this update: Tue 22 Sep 2026 05:08:03 +0000 Manifest next update: Wed 23 Sep 2026 06:24:03 +0000 Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: fDnmzf65jBSv74PMDMyNjaHpX/nCsTXRpP2C1qWxmnk=) 2: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl (hash: 3V/EEcbXpA5vczOwIRFeG9gL/dBKW64dwPEIcwREdYs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:86:96:66:0c:c0:79:28:d4:03:5a:5a:be:1c:45:09:e8:ae:44:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Validity Not Before: Sep 22 05:08:03 2026 GMT Not After : Sep 23 06:24:03 2026 GMT Subject: CN=17BCB3108423F6672C434E6D083E018A1996D30C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:24:16:83:61:82:62:a7:3f:7a:73:c2:2c: 6e:7c:84:70:2f:fe:b7:d0:d1:54:68:a5:6c:52:c6: 7d:29:04:d6:69:2c:68:8c:4e:2d:7a:9b:d7:cb:35: 60:6a:87:da:81:46:04:01:0a:e6:3f:b7:6e:4b:7b: 91:10:49:43:0b:29:51:3c:71:3a:70:66:86:05:c4: aa:41:97:e2:9c:e8:39:0d:47:4e:dd:79:7d:3a:8c: bf:2e:87:5e:ce:d8:9b:d6:1f:44:4c:d1:a0:25:67: 9f:95:60:d4:4d:d0:b4:1a:0c:31:22:d1:99:f4:06: b7:18:17:b6:e1:b8:02:36:e5:b2:7a:60:5d:a6:d9: f5:90:64:2c:aa:4b:3c:64:c6:2d:e7:ec:3c:d4:12: 6b:c2:d1:e0:8d:38:62:b7:6d:61:91:e4:ac:9d:64: 84:6f:87:ba:02:7e:9e:a8:55:f6:24:96:75:36:bd: d9:10:d6:3b:54:93:ff:a3:28:29:cb:23:48:8b:a9: fc:0e:e5:cd:c3:8d:a0:86:d0:76:26:0c:b8:d4:f3: 46:20:82:5c:0b:de:7e:39:78:13:a7:e1:3e:23:cc: e1:ae:8b:a6:b1:37:bf:32:29:ba:84:e3:30:01:75: 38:91:95:56:31:01:6d:df:4e:ad:85:c5:d9:45:1b: 4e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BC:B3:10:84:23:F6:67:2C:43:4E:6D:08:3E:01:8A:19:96:D3:0C X509v3 Authority Key Identifier: keyid:B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9a:00:26:32:2b:ab:55:92:9f:4e:a4:61:a3:f6:5c:91:c2: 94:75:4b:01:83:4a:7c:fb:f1:64:00:91:04:9f:45:46:71:9f: 74:f5:f5:25:cc:1b:44:19:f6:d9:63:a6:4c:5c:cc:b0:ba:f3: e5:eb:4c:65:76:45:20:33:1a:16:d5:3d:7d:20:8c:71:22:7c: af:09:24:3d:dd:17:07:2b:81:95:ab:3c:c6:e5:1c:8a:dd:d2: 4e:13:c0:81:fe:62:96:63:df:88:ff:27:38:9d:da:dd:b3:d7: 96:ac:8b:17:74:e4:d4:08:ac:4a:89:72:01:bb:92:fe:49:34: fa:c3:11:c3:a8:f5:34:30:49:28:3c:a3:c5:96:3b:42:34:bc: 3b:e2:07:f9:3d:9f:76:0a:f2:75:02:45:87:90:ca:01:d6:23: 60:0b:6b:4f:3d:a3:05:3b:0c:83:25:b6:07:1d:62:8a:68:bf: cb:44:95:c2:c5:7b:d3:1e:f0:70:2a:9b:33:e5:39:4b:c1:d6: 38:58:a4:b1:cf:46:01:c2:ac:92:45:c3:b7:03:ae:83:1e:c5: ea:d7:5c:83:72:70:e6:df:ec:99:d8:fd:8d:09:d3:d7:df:b4: 59:e3:6b:7f:dc:95:66:fd:07:05:97:8f:0d:b0:5c:d0:f0:3e: 8c:9a:01:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYaWZgzAeSjUA1pavhxFCeiuRL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFD NUZBRDI5QTAeFw0yNjA5MjIwNTA4MDNaFw0yNjA5MjMwNjI0MDNaMDMxMTAvBgNV BAMTKDE3QkNCMzEwODQyM0Y2NjcyQzQzNEU2RDA4M0UwMThBMTk5NkQzMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLFyQWg2GCYqc/enPCLG58hHAv /rfQ0VRopWxSxn0pBNZpLGiMTi16m9fLNWBqh9qBRgQBCuY/t25Le5EQSUMLKVE8 cTpwZoYFxKpBl+Kc6DkNR07deX06jL8uh17O2JvWH0RM0aAlZ5+VYNRN0LQaDDEi 0Zn0BrcYF7bhuAI25bJ6YF2m2fWQZCyqSzxkxi3n7DzUEmvC0eCNOGK3bWGR5Kyd ZIRvh7oCfp6oVfYklnU2vdkQ1jtUk/+jKCnLI0iLqfwO5c3DjaCG0HYmDLjU80Yg glwL3n45eBOn4T4jzOGui6axN78yKbqE4zABdTiRlVYxAW3fTq2FxdlFG04TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF7yzEIQj9mcsQ05tCD4BihmW0wwwHwYDVR0j BBgwFoAUubimHY6lUgzyjo5cJFAXasX60powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MTc2MDgtMTZiOC00NDk3LTgxZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4 RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFDNUZBRDI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9COUI4QTYxRDhFQTU1MjBDRjI4RThFNUMyNDUwMTc2QUM1RkFE MjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3 NkFDNUZBRDI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmaACYyK6tVkp9OpGGj9lyRwpR1SwGDSnz7 8WQAkQSfRUZxn3T19SXMG0QZ9tljpkxczLC68+XrTGV2RSAzGhbVPX0gjHEifK8J JD3dFwcrgZWrPMblHIrd0k4TwIH+YpZj34j/Jzid2t2z15asixd05NQIrEqJcgG7 kv5JNPrDEcOo9TQwSSg8o8WWO0I0vDviB/k9n3YK8nUCRYeQygHWI2ALa089owU7 DIMltgcdYopov8tElcLFe9Me8HAqmzPlOUvB1jhYpLHPRgHCrJJFw7cDroMexerX XINycObf7JnY/Y0J09fftFnja3/clWb9BwWXjw2wXNDwPoyaAdY= -----END CERTIFICATE-----Generated at Tue Sep 22 09:12:11 2026 by rpki-client