$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft File: B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft (raw, json) Hash identifier: Xgx6nAROVdsIDJcepsFLxexFyz8PkSnlt+636d80qlo= Subject key identifier: EC:20:32:BE:AB:DD:38:BE:D3:87:FE:AB:5F:AB:F6:7F:DC:22:E1:48 Authority key identifier: B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9 Certificate issuer: /CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9 Certificate serial: 7A7DAE93257D1A21E6767B82A36C3B18ECCCA8BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 05:36:59 +0000 Manifest this update: Sat 26 Sep 2026 05:31:59 +0000 Manifest next update: Sun 27 Sep 2026 07:01:59 +0000 Files and hashes: 1: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: 2jTqkZUMM6RgBn0H5+b2a8SLrtyFxeMaWfySgcjTtJg=) 2: B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl (hash: d2L6fTlsEIoPsHPWxqaxgvPdKuM9lZYg67Nu5ytpWI4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:7d:ae:93:25:7d:1a:21:e6:76:7b:82:a3:6c:3b:18:ec:cc:a8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9 Validity Not Before: Sep 26 05:31:59 2026 GMT Not After : Sep 27 07:01:59 2026 GMT Subject: CN=EC2032BEABDD38BED387FEAB5FABF67FDC22E148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1c:68:22:79:9e:fe:09:1d:ea:72:e8:76:bd: 64:fd:af:c8:44:96:6d:9a:09:c8:63:57:28:48:b1: 07:af:8c:ed:5c:68:fe:aa:97:53:10:b3:df:24:d6: d5:c5:4f:9b:f5:48:e4:7c:3a:5a:e5:87:e6:97:a4: e0:04:3c:e1:18:ac:51:be:ae:ae:05:8b:60:13:5f: 3e:00:cb:ec:96:de:77:13:0a:09:04:01:0c:4d:c7: 8d:c3:90:94:2a:ab:c7:d9:94:e6:1c:f8:88:62:b8: 51:19:c9:12:68:a9:1f:2d:0f:0e:54:68:8b:54:09: 03:67:4b:72:38:00:db:75:f3:13:a8:f3:4b:b5:71: 79:08:aa:12:ff:44:a1:e6:2e:61:0d:14:0c:76:84: 62:c1:eb:b4:bc:c8:7e:d2:aa:28:db:e5:77:78:06: bb:57:91:c9:ef:a2:77:e3:59:1c:69:a6:a9:9f:a4: eb:32:ac:08:47:69:d7:4f:93:3b:c3:a7:8a:8e:ee: fb:7a:51:96:a5:01:34:8c:5f:ef:40:0c:ab:e3:6a: 79:9b:f2:65:e3:a2:e9:d9:a0:a2:78:f1:63:ad:5f: c6:a7:76:ba:ed:86:d5:4a:39:65:05:7e:1e:35:9b: 0a:e6:00:76:10:af:62:4b:3d:50:ec:bc:01:0f:a2: 72:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:20:32:BE:AB:DD:38:BE:D3:87:FE:AB:5F:AB:F6:7F:DC:22:E1:48 X509v3 Authority Key Identifier: keyid:B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:12:33:72:83:c0:89:79:5e:77:4a:59:9f:c7:97:e1:bd:54: d6:ea:12:0b:31:ba:14:12:bd:fe:62:19:e5:4b:e7:00:01:21: a4:09:bb:20:41:0f:9d:e7:14:49:16:ed:8d:0a:ab:6d:3b:b8: a5:1c:0b:2d:6b:40:a8:65:c7:92:ab:49:01:d9:7f:ab:d2:39: 8d:99:41:4c:72:82:b0:26:0a:dc:dd:02:3b:38:de:4f:d8:f8: b5:65:1c:78:7c:58:90:96:3d:56:1e:3a:83:93:65:83:43:f8: 62:79:bb:00:9b:d8:3a:d6:6d:71:26:3f:08:33:a6:f5:03:43: f5:75:a3:09:ee:9e:a1:ae:c3:3a:80:1d:0d:99:0c:75:68:e4: 42:ca:80:87:85:aa:3c:83:da:9a:2a:68:3a:da:bd:02:a4:53: ab:6c:2e:22:99:1b:bc:a1:0a:11:0e:28:8e:9e:e2:5e:1a:29: 74:45:1e:7c:07:15:a4:3f:6b:14:f7:ee:27:a1:e8:4e:f0:4f: 89:9d:9e:41:93:d9:75:d1:df:f2:36:31:10:c2:a9:22:20:61: 74:f1:fb:f7:40:b2:92:8c:fd:ea:0e:09:20:e0:63:66:79:a9: 82:ad:36:de:94:0e:e1:41:72:55:c0:90:55:91:33:83:27:99: 62:ed:99:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUen2ukyV9GiHmdnuCo2w7GOzMqL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUwNjdFNzgwMkQ3QjE5OTI4QkRGQTkzRTZENUJBNTY2 MTQxOEFGOTAeFw0yNjA5MjYwNTMxNTlaFw0yNjA5MjcwNzAxNTlaMDMxMTAvBgNV BAMTKEVDMjAzMkJFQUJERDM4QkVEMzg3RkVBQjVGQUJGNjdGREMyMkUxNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHGgieZ7+CR3qcuh2vWT9r8hE lm2aCchjVyhIsQevjO1caP6ql1MQs98k1tXFT5v1SOR8Olrlh+aXpOAEPOEYrFG+ rq4Fi2ATXz4Ay+yW3ncTCgkEAQxNx43DkJQqq8fZlOYc+IhiuFEZyRJoqR8tDw5U aItUCQNnS3I4ANt18xOo80u1cXkIqhL/RKHmLmENFAx2hGLB67S8yH7Sqijb5Xd4 BrtXkcnvonfjWRxppqmfpOsyrAhHaddPkzvDp4qO7vt6UZalATSMX+9ADKvjanmb 8mXjounZoKJ48WOtX8andrrthtVKOWUFfh41mwrmAHYQr2JLPVDsvAEPonKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7CAyvqvdOL7Th/6rX6v2f9wi4UgwHwYDVR0j BBgwFoAUtQZ+eALXsZkovfqT5tW6VmFBivkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmYwYzdhMzctNWQxOS00YzVjLTkzMDEtYTE0YTdmMTg1YzkyLzAvQjUwNjdFNzgw MkQ3QjE5OTI4QkRGQTkzRTZENUJBNTY2MTQxOEFGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNTA2N0U3ODAyRDdCMTk5MjhCREZBOTNFNkQ1QkE1NjYxNDE4 QUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQjUwNjdFNzgwMkQ3QjE5OTI4QkRGQTkzRTZENUJB NTY2MTQxOEFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcSM3KDwIl5XndKWZ/Hl+G9VNbqEgsxuhQS vf5iGeVL5wABIaQJuyBBD53nFEkW7Y0Kq207uKUcCy1rQKhlx5KrSQHZf6vSOY2Z QUxygrAmCtzdAjs43k/Y+LVlHHh8WJCWPVYeOoOTZYND+GJ5uwCb2DrWbXEmPwgz pvUDQ/V1ownunqGuwzqAHQ2ZDHVo5ELKgIeFqjyD2poqaDravQKkU6tsLiKZG7yh ChEOKI6e4l4aKXRFHnwHFaQ/axT37ieh6E7wT4mdnkGT2XXR3/I2MRDCqSIgYXTx +/dAspKM/eoOCSDgY2Z5qYKtNt6UDuFBclXAkFWRM4MnmWLtmTo= -----END CERTIFICATE-----Generated at Sat Sep 26 09:21:16 2026 by rpki-client