$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft File: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft (raw, json) Hash identifier: OoqssFvjd4TyTFViWim7Hyxeg2xHzHeCEdPtiEf0hn0= Subject key identifier: 02:3B:6E:7D:F0:C0:0E:6B:AF:36:49:3D:6F:2E:0C:77:92:B1:BD:B4 Authority key identifier: B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB Certificate issuer: /CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Certificate serial: 2B2922FA013D67F3B7B575E4EB51268AA54D38F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:28:47 +0000 Manifest this update: Thu 24 Sep 2026 06:23:47 +0000 Manifest next update: Fri 25 Sep 2026 06:55:47 +0000 Files and hashes: 1: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl (hash: raQSynR9kxHUnBkHT6XYTBtcVg/LfEDG+te1EFTE9p0=) 2: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: lfMuEG6m1w+3L6wzJesoEfOVGjLJIPXAAFywmq7MUaw=) 3: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: 8GvfzVduMFTtGlADd061A8wAjIa0JhN238PnLdk7UyA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:29:22:fa:01:3d:67:f3:b7:b5:75:e4:eb:51:26:8a:a5:4d:38:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Validity Not Before: Sep 24 06:23:47 2026 GMT Not After : Sep 25 06:55:47 2026 GMT Subject: CN=023B6E7DF0C00E6BAF36493D6F2E0C7792B1BDB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d0:95:1c:94:2b:be:d2:d1:49:5d:29:14:98: fb:f9:6b:b9:f7:c5:b8:f4:ad:26:59:fa:0e:1a:7e: e0:bb:2f:54:cc:5d:33:49:e0:f7:bf:42:27:9f:73: 2d:06:a8:d2:8a:59:15:87:d8:44:84:7a:13:e9:45: 1e:2d:c3:54:6e:d5:fe:e0:ce:18:4f:1f:62:89:6f: 94:c1:f6:8d:56:1c:cb:9d:47:27:2c:07:12:e7:e9: 6a:cd:85:a1:37:44:32:2d:22:72:6a:be:80:ce:00: 8a:af:7f:5f:f4:66:a8:45:12:74:54:d1:74:91:bf: a9:60:60:89:0b:d5:11:25:0c:15:5d:98:1f:a2:91: 87:3e:af:31:f2:16:53:fd:4e:09:dc:7e:c9:8b:bf: 4c:65:bc:b3:6f:c2:32:79:60:84:19:ce:ac:b3:80: d6:26:49:a6:f3:29:8b:e6:d7:da:50:b3:31:04:04: 6c:7a:a9:35:71:23:0c:c2:bc:15:29:18:b5:27:e3: 9a:ed:2c:19:61:41:9c:e9:4c:1c:6c:05:1a:55:7e: f9:d5:9c:a6:6d:ba:da:3e:f0:c8:ce:22:0b:84:b1: 82:24:bf:4d:de:8f:9b:0c:0e:5b:7b:48:41:dd:2f: fa:c6:39:5f:ba:8c:7e:2c:ea:09:1b:0e:6a:e1:19: 14:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3B:6E:7D:F0:C0:0E:6B:AF:36:49:3D:6F:2E:0C:77:92:B1:BD:B4 X509v3 Authority Key Identifier: keyid:B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c9:04:ed:f2:2f:d6:3d:eb:58:77:c2:e7:66:50:21:1f:35: 21:d8:65:f2:87:70:1c:44:5a:50:1c:ad:4c:e0:18:1a:79:c3: c2:e1:78:e6:70:f3:eb:2b:98:e9:66:0c:4e:42:e3:6f:39:d9: 97:c2:7e:8a:2d:cd:7b:8c:85:f3:d7:2d:b4:65:41:33:42:c8: fd:fa:c9:df:4c:89:c1:40:18:14:c4:45:64:b3:d0:71:50:c2: a6:75:34:ec:19:39:b9:e5:b0:35:0b:2a:69:8d:8d:41:2b:a4: 68:55:72:0b:03:c0:4b:ed:1f:16:7a:56:c3:5d:6d:c2:28:c4: 2a:94:23:4c:58:e1:7e:d6:01:f4:8f:eb:8c:bc:83:59:db:b8: c1:b5:d7:c2:8d:12:3c:9d:c6:e2:59:b7:e8:d2:d5:85:cd:24: 81:f9:59:0f:a8:7e:33:9e:19:68:3d:2e:fe:60:cd:21:7b:2c: 63:45:e2:d8:3a:77:fc:70:dc:42:d7:8e:63:3a:cf:71:90:b6: 4a:ed:c1:35:f0:ff:10:12:8f:35:45:d0:3e:3a:ed:52:ff:76: 20:c6:ae:df:28:9b:fc:a4:9b:0e:d6:83:e5:9b:64:85:93:2e: 4e:c3:a8:6c:87:a3:f5:57:bd:47:8e:94:ff:19:4f:bd:2a:7f: d7:85:69:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKyki+gE9Z/O3tXXk61EmiqVNOPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3 M0I4MDJCQjAeFw0yNjA5MjQwNjIzNDdaFw0yNjA5MjUwNjU1NDdaMDMxMTAvBgNV BAMTKDAyM0I2RTdERjBDMDBFNkJBRjM2NDkzRDZGMkUwQzc3OTJCMUJEQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv0JUclCu+0tFJXSkUmPv5a7n3 xbj0rSZZ+g4afuC7L1TMXTNJ4Pe/Qiefcy0GqNKKWRWH2ESEehPpRR4tw1Ru1f7g zhhPH2KJb5TB9o1WHMudRycsBxLn6WrNhaE3RDItInJqvoDOAIqvf1/0ZqhFEnRU 0XSRv6lgYIkL1RElDBVdmB+ikYc+rzHyFlP9TgncfsmLv0xlvLNvwjJ5YIQZzqyz gNYmSabzKYvm19pQszEEBGx6qTVxIwzCvBUpGLUn45rtLBlhQZzpTBxsBRpVfvnV nKZtuto+8MjOIguEsYIkv03ej5sMDlt7SEHdL/rGOV+6jH4s6gkbDmrhGRR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAjtuffDADmuvNkk9by4Md5KxvbQwHwYDVR0j BBgwFoAUsR1SY33Mtn+OmdrYDYLF4nO4ArswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZhM2NmZjctMmFhMS00NGRmLTkxNGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3 RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3M0I4MDJCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTFENTI2MzdEQ0NCNjdGOEU5OURBRDgwRDgyQzVFMjczQjgw MkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1 RTI3M0I4MDJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzJBO3yL9Y961h3wudmUCEfNSHYZfKHcBxE WlAcrUzgGBp5w8LheOZw8+srmOlmDE5C42852ZfCfootzXuMhfPXLbRlQTNCyP36 yd9MicFAGBTERWSz0HFQwqZ1NOwZObnlsDULKmmNjUErpGhVcgsDwEvtHxZ6VsNd bcIoxCqUI0xY4X7WAfSP64y8g1nbuMG118KNEjydxuJZt+jS1YXNJIH5WQ+ofjOe GWg9Lv5gzSF7LGNF4tg6d/xw3ELXjmM6z3GQtkrtwTXw/xASjzVF0D467VL/diDG rt8om/ykmw7Wg+WbZIWTLk7DqGyHo/VXvUeOlP8ZT70qf9eFaec= -----END CERTIFICATE-----Generated at Thu Sep 24 17:58:01 2026 by rpki-client