$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft File: 13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft (raw, json) Hash identifier: wobulkNaTiuKi1lJJrVmePWMpJGNCn5DPFiWZaG+1W0= Subject key identifier: 47:C9:D1:1C:5F:3D:D1:A7:0A:7D:46:21:18:67:D6:D1:39:0B:46:CA Authority key identifier: 13:A9:3A:BF:25:B2:9F:4F:42:FB:71:8C:CE:18:1B:65:D3:B5:4B:CB Certificate issuer: /CN=13A93ABF25B29F4F42FB718CCE181B65D3B54BCB Certificate serial: 3D49D2065FA24A95BCC24156903B90BF30F0D2CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft Manifest number: BF Signing time: Mon 21 Sep 2026 10:24:25 +0000 Manifest this update: Mon 21 Sep 2026 10:19:25 +0000 Manifest next update: Tue 22 Sep 2026 12:06:25 +0000 Files and hashes: 1: 13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.crl (hash: ctuxbDziRgI6xrraj+YDs0DX4C/6fofd+dfS2s7Tlrs=) 2: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: NfZdw40oScaqtlsI5RivrkI1xwgmIqaZHKCKotkz/8w=) 3: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: S2eBAP9psfFve56U+XIjYmGJD4nxxtKRtJXVgPJ07vw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.crl rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:49:d2:06:5f:a2:4a:95:bc:c2:41:56:90:3b:90:bf:30:f0:d2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13A93ABF25B29F4F42FB718CCE181B65D3B54BCB Validity Not Before: Sep 21 10:19:25 2026 GMT Not After : Sep 22 12:06:25 2026 GMT Subject: CN=47C9D11C5F3DD1A70A7D46211867D6D1390B46CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5c:98:71:c0:87:50:b9:e4:04:4b:38:cc:0a: ba:fa:9d:5a:10:f2:18:c1:64:ef:76:56:b7:bf:e8: a8:bd:c8:44:f7:57:46:72:6a:b2:38:64:39:4c:aa: e1:16:d5:f3:c6:9e:cf:07:19:eb:b8:61:b6:b5:77: 35:1b:b9:ca:38:58:f5:d8:dc:7f:17:28:6e:46:51: 61:7c:39:a6:b5:3e:a9:bb:c0:cf:88:4f:0f:12:3f: 6a:9b:22:8a:1a:72:f1:9b:ab:86:a1:01:8c:87:9f: dc:64:12:d2:34:f9:81:d0:43:97:40:71:05:1d:cd: 8a:e3:2c:b9:54:e7:72:d1:38:81:1d:db:69:6a:c3: 03:86:b8:95:d1:5e:a4:2f:ab:44:df:aa:b5:2c:a0: b4:d6:d6:8c:a7:0e:f3:ee:2b:ec:0b:34:9b:ca:8f: 12:15:8b:f2:15:e8:8e:d3:4a:37:02:fa:3e:78:ae: 36:31:50:af:44:3c:60:7a:6a:ce:c6:4c:eb:87:72: a5:f7:4c:ef:85:1a:04:36:20:8b:f3:b0:ad:12:49: c7:91:ea:67:8c:9f:c0:c9:46:bf:81:88:c7:6e:e2: 65:8e:04:da:4f:a8:09:da:55:8c:71:63:ae:08:3a: 04:78:be:e8:e8:da:d3:22:7d:d1:76:65:60:8a:58: 93:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C9:D1:1C:5F:3D:D1:A7:0A:7D:46:21:18:67:D6:D1:39:0B:46:CA X509v3 Authority Key Identifier: keyid:13:A9:3A:BF:25:B2:9F:4F:42:FB:71:8C:CE:18:1B:65:D3:B5:4B:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/13A93ABF25B29F4F42FB718CCE181B65D3B54BCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b5:03:06:c2:86:eb:5f:40:e8:be:22:cc:1b:f4:0b:6d:f8: 6a:4f:2b:9a:8f:59:66:ca:0d:5d:67:f2:6e:d5:b0:ef:d1:9f: 4e:fa:2a:6c:5e:62:66:28:bc:43:eb:cb:16:cb:12:6d:f2:53: d3:09:ce:24:b7:b0:3b:79:75:2c:4e:34:36:01:dc:28:5d:9d: 59:76:25:f0:5c:7c:79:5d:21:2f:ba:de:1f:44:89:81:b6:08: 0a:c6:26:fc:41:91:b7:01:24:40:64:6f:19:69:59:1a:c8:32: 23:d1:2f:8c:60:ef:55:96:0e:61:80:2c:67:2d:83:fa:0a:71: 7a:0b:f5:3f:32:82:26:10:6b:a4:4a:51:e4:42:30:f6:86:55: 30:b0:39:98:2f:34:25:c2:3b:0f:25:8b:5d:02:c3:ee:e0:c7: fa:10:50:29:4b:6d:f7:6d:f3:a9:b9:31:32:cd:52:eb:d8:7f: 0e:07:71:ed:ac:83:10:91:c2:9d:e1:e2:ed:1b:1a:f7:34:90: f0:10:17:be:14:05:e9:b0:7c:90:a4:ff:ef:59:e3:b8:5e:a6: 9c:79:32:73:5d:fd:9f:9c:8a:68:4c:a0:bf:92:bb:d9:23:d2: f2:27:d5:1c:c8:fb:0f:90:2c:66:81:db:e7:bb:0f:d7:8c:3f: d7:f3:d6:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUnSBl+iSpW8wkFWkDuQvzDw0sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNBOTNBQkYyNUIyOUY0RjQyRkI3MThDQ0UxODFCNjVE M0I1NEJDQjAeFw0yNjA5MjExMDE5MjVaFw0yNjA5MjIxMjA2MjVaMDMxMTAvBgNV BAMTKDQ3QzlEMTFDNUYzREQxQTcwQTdENDYyMTE4NjdENkQxMzkwQjQ2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrXJhxwIdQueQESzjMCrr6nVoQ 8hjBZO92Vre/6Ki9yET3V0ZyarI4ZDlMquEW1fPGns8HGeu4Yba1dzUbuco4WPXY 3H8XKG5GUWF8Oaa1Pqm7wM+ITw8SP2qbIooacvGbq4ahAYyHn9xkEtI0+YHQQ5dA cQUdzYrjLLlU53LROIEd22lqwwOGuJXRXqQvq0TfqrUsoLTW1oynDvPuK+wLNJvK jxIVi/IV6I7TSjcC+j54rjYxUK9EPGB6as7GTOuHcqX3TO+FGgQ2IIvzsK0SSceR 6meMn8DJRr+BiMdu4mWOBNpPqAnaVYxxY64IOgR4vujo2tMifdF2ZWCKWJMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR8nRHF890acKfUYhGGfW0TkLRsowHwYDVR0j BBgwFoAUE6k6vyWyn09C+3GMzhgbZdO1S8swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU1YWY4YWYtYTQwZi00MmM3LTlmNGMtMThlMGNhNWNkNDdlLzAvMTNBOTNBQkYy NUIyOUY0RjQyRkI3MThDQ0UxODFCNjVEM0I1NEJDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xM0E5M0FCRjI1QjI5RjRGNDJGQjcxOENDRTE4MUI2NUQzQjU0 QkNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvMTNBOTNBQkYyNUIyOUY0RjQyRkI3MThDQ0UxODFC NjVEM0I1NEJDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFm1AwbChutfQOi+Iswb9Att+GpPK5qPWWbK DV1n8m7VsO/Rn076KmxeYmYovEPryxbLEm3yU9MJziS3sDt5dSxONDYB3ChdnVl2 JfBcfHldIS+63h9EiYG2CArGJvxBkbcBJEBkbxlpWRrIMiPRL4xg71WWDmGALGct g/oKcXoL9T8ygiYQa6RKUeRCMPaGVTCwOZgvNCXCOw8li10Cw+7gx/oQUClLbfdt 86m5MTLNUuvYfw4Hce2sgxCRwp3h4u0bGvc0kPAQF74UBemwfJCk/+9Z47heppx5 MnNd/Z+cimhMoL+Su9kj0vIn1RzI+w+QLGaB2+e7D9eMP9fz1qs= -----END CERTIFICATE-----Generated at Mon Sep 21 19:51:56 2026 by rpki-client