$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft File: B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft (raw, json) Hash identifier: MczSOm9n3Pxp0RvW6OWzsmNBBQg5my799WRd0mb9l+g= Subject key identifier: D3:7C:4B:8A:D0:D1:12:73:13:26:2E:AD:BE:09:13:8C:37:4C:D9:55 Authority key identifier: B5:E7:F6:FF:0C:34:6A:48:8F:01:A9:EF:AA:BD:E1:51:1D:7E:6C:96 Certificate issuer: /CN=B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96 Certificate serial: 3AA9A03048A8627FF2C3B5EB64D19670FE2753BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft Manifest number: BE Signing time: Tue 22 Sep 2026 08:06:42 +0000 Manifest this update: Tue 22 Sep 2026 08:01:42 +0000 Manifest next update: Wed 23 Sep 2026 11:05:42 +0000 Files and hashes: 1: B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl (hash: zMnEHyv4kneUGPUe+hKo3SCtZ473d/IfarF7dvL6Eww=) 2: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: 80JDffhOqKbZ05eh6nF84ipieFeMFx1jGKSA0CuNti4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a9:a0:30:48:a8:62:7f:f2:c3:b5:eb:64:d1:96:70:fe:27:53:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96 Validity Not Before: Sep 22 08:01:42 2026 GMT Not After : Sep 23 11:05:42 2026 GMT Subject: CN=D37C4B8AD0D1127313262EADBE09138C374CD955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:b2:02:67:05:e9:80:18:47:e8:4b:9a:70: 72:d2:cc:3d:c4:75:47:d7:22:6b:ec:d1:7b:ec:2c: 4b:f2:6b:97:58:17:c9:95:1a:46:69:3b:2c:d2:97: df:ad:eb:6f:e3:ad:b9:21:58:40:53:35:75:1f:41: e9:51:52:2c:6a:31:0a:ca:e1:20:39:8d:7d:05:6e: b2:de:52:c4:53:c1:c0:fb:f0:81:24:ae:a6:6b:82: 7e:a8:46:f0:42:91:bf:3b:6f:90:64:ae:12:45:b0: d8:b8:33:de:9e:80:56:41:bb:45:84:8c:2c:c0:40: 18:e2:b6:c6:9e:8a:20:83:9b:8f:be:86:09:cf:33: 1c:e8:11:4c:d3:44:5c:96:02:92:92:cb:e0:b7:7c: 09:56:c0:f0:77:c9:57:34:63:ce:6f:f9:39:a2:9c: 1e:d4:cb:9f:7c:d9:a1:64:c0:9e:c4:e2:d1:80:78: b8:56:3e:4b:da:89:57:ab:14:e7:27:ee:9d:7d:15: f8:fa:9a:be:62:d5:e8:ee:a0:e9:23:c9:8c:5c:07: 2a:ee:32:41:94:8d:50:26:62:1f:ca:e4:08:47:2d: 36:ba:2c:2e:b6:94:b8:57:b3:d4:5d:ad:64:51:9a: 08:66:f3:6b:c8:d5:40:7c:07:f0:a2:51:61:90:51: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7C:4B:8A:D0:D1:12:73:13:26:2E:AD:BE:09:13:8C:37:4C:D9:55 X509v3 Authority Key Identifier: keyid:B5:E7:F6:FF:0C:34:6A:48:8F:01:A9:EF:AA:BD:E1:51:1D:7E:6C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3b:5a:f8:60:ae:5b:51:42:62:0a:48:cf:9b:42:16:f2:d1: 59:91:da:0e:f3:66:b7:80:9b:a9:dc:20:d3:06:e8:cc:28:90: d2:ca:45:dd:f9:3f:8c:62:41:78:31:f7:51:d4:22:fa:59:61: e7:f0:cc:fe:48:b6:c4:37:53:d8:d6:31:b1:4f:4a:ba:52:92: b0:56:dc:30:6f:ec:06:c5:ba:14:ee:6e:43:47:4f:ca:4c:8c: 8d:64:f9:c2:d0:d2:70:24:93:a0:78:d8:5b:95:98:36:de:4b: 71:af:00:cb:43:e1:c9:98:da:56:90:dd:a0:01:d1:ab:b1:65: 2a:13:cd:78:97:4a:e6:f7:0a:67:bc:3c:88:f7:2a:f0:00:db: 0f:ea:75:64:6e:45:d6:cf:3b:b7:9c:1e:71:d3:e7:08:dc:67: 94:5f:43:ea:d7:b9:ff:79:c2:e1:18:cf:90:22:37:44:4c:40: fd:2e:0e:fb:69:e7:f9:c9:50:ea:82:b3:3b:ce:0b:20:58:d5: 7e:ed:73:c1:0f:ea:d9:e0:cb:33:6b:dc:12:99:d2:e4:86:93: 3a:5f:51:84:50:2e:a1:cf:ab:b1:9a:31:24:d9:05:06:d3:a6: fb:70:f6:66:7c:1b:e3:10:9f:f1:a4:59:0a:b4:36:bc:fd:75: 7c:f9:0a:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqmgMEioYn/yw7XrZNGWcP4nU7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVFN0Y2RkYwQzM0NkE0ODhGMDFBOUVGQUFCREUxNTEx RDdFNkM5NjAeFw0yNjA5MjIwODAxNDJaFw0yNjA5MjMxMTA1NDJaMDMxMTAvBgNV BAMTKEQzN0M0QjhBRDBEMTEyNzMxMzI2MkVBREJFMDkxMzhDMzc0Q0Q5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiLICZwXpgBhH6EuacHLSzD3E dUfXImvs0XvsLEvya5dYF8mVGkZpOyzSl9+t62/jrbkhWEBTNXUfQelRUixqMQrK 4SA5jX0FbrLeUsRTwcD78IEkrqZrgn6oRvBCkb87b5BkrhJFsNi4M96egFZBu0WE jCzAQBjitsaeiiCDm4++hgnPMxzoEUzTRFyWApKSy+C3fAlWwPB3yVc0Y85v+Tmi nB7Uy5982aFkwJ7E4tGAeLhWPkvaiVerFOcn7p19Ffj6mr5i1ejuoOkjyYxcByru MkGUjVAmYh/K5AhHLTa6LC62lLhXs9RdrWRRmghm82vI1UB8B/CiUWGQUcZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU03xLitDREnMTJi6tvgkTjDdM2VUwHwYDVR0j BBgwFoAUtef2/ww0akiPAanvqr3hUR1+bJYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQzNWJmNzktZTg0YS00MGUwLThmZDQtZjE2OWMxODZiZThmLzAvQjVFN0Y2RkYw QzM0NkE0ODhGMDFBOUVGQUFCREUxNTExRDdFNkM5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUU3RjZGRjBDMzQ2QTQ4OEYwMUE5RUZBQUJERTE1MTFEN0U2 Qzk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvQjVFN0Y2RkYwQzM0NkE0ODhGMDFBOUVGQUFCREUx NTExRDdFNkM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ7WvhgrltRQmIKSM+bQhby0VmR2g7zZreA m6ncINMG6MwokNLKRd35P4xiQXgx91HUIvpZYefwzP5ItsQ3U9jWMbFPSrpSkrBW 3DBv7AbFuhTubkNHT8pMjI1k+cLQ0nAkk6B42FuVmDbeS3GvAMtD4cmY2laQ3aAB 0auxZSoTzXiXSub3Cme8PIj3KvAA2w/qdWRuRdbPO7ecHnHT5wjcZ5RfQ+rXuf95 wuEYz5AiN0RMQP0uDvtp5/nJUOqCszvOCyBY1X7tc8EP6tngyzNr3BKZ0uSGkzpf UYRQLqHPq7GaMSTZBQbTpvtw9mZ8G+MQn/GkWQq0Nrz9dXz5CqI= -----END CERTIFICATE-----Generated at Tue Sep 22 13:07:45 2026 by rpki-client