$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft File: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft (raw, json) Hash identifier: 7PPsBwG2qm+vnl1tE12XX2BqzSqk2dWR+5wtZ49nmJw= Subject key identifier: 43:92:C9:81:74:21:9B:8F:C9:9C:61:01:F9:BE:74:E1:F2:0D:F3:04 Authority key identifier: B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18 Certificate issuer: /CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718 Certificate serial: 69CE4BBCBD8785CAED692A1AEDC72B6A5FF2701C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 11:35:57 +0000 Manifest this update: Tue 22 Sep 2026 11:30:57 +0000 Manifest next update: Wed 23 Sep 2026 14:55:57 +0000 Files and hashes: 1: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl (hash: uUnwDQAAylEGHakGU9GFYeooKn218mqXswY6mKP1LEk=) 2: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 6QK6aAC3OH45PZDy0os84YcWYINTJWbPpMpi72u5POI=) 3: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: fQwW9jEUlabh0L2NvQSOViFURIlDH59x+g1CS1ccauI=) 4: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: AMAK0g33Kv2aI5QR9+0p9uxKjyyXdje3jg9ykQZ5pUA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ce:4b:bc:bd:87:85:ca:ed:69:2a:1a:ed:c7:2b:6a:5f:f2:70:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718 Validity Not Before: Sep 22 11:30:57 2026 GMT Not After : Sep 23 14:55:57 2026 GMT Subject: CN=4392C98174219B8FC99C6101F9BE74E1F20DF304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:3f:2a:87:08:ce:34:57:90:c6:a7:99:8b: 2e:35:47:77:42:83:61:7e:0b:95:56:b4:4a:31:65: 72:21:89:66:58:d7:1f:44:a1:76:19:00:35:4f:27: 8d:fc:6e:ec:e6:db:ad:3f:af:54:23:35:66:19:87: 11:79:5a:5d:9c:de:db:42:32:85:5f:dd:6a:d7:93: 0a:76:69:4e:29:0b:d9:49:19:31:ec:fc:53:f5:4c: f9:80:fa:dd:bc:b3:65:36:f8:2c:b2:40:f1:54:ac: c0:11:7d:61:fd:58:87:9e:32:a9:30:0a:ab:7d:49: cd:6c:d4:f8:a4:93:12:ad:17:ed:f0:6d:01:78:aa: da:eb:cf:69:c5:82:e7:1f:9c:5a:d3:2a:c8:cd:22: 94:f7:fe:50:37:e8:d9:17:21:4a:6d:8c:62:94:2f: 26:59:d4:e7:78:2f:73:1e:ef:8b:c8:b8:96:cb:cb: 63:a7:3d:69:f2:7f:a7:be:4b:4b:e6:d8:85:77:55: c1:02:6b:48:21:1f:59:2b:3c:8d:bd:66:49:a2:c0: b6:f0:ac:76:be:f6:08:e2:85:8c:c2:7f:88:81:52: 58:0a:c1:d9:d5:c1:59:c3:39:2f:b8:4e:b6:7c:b6: 80:3d:6a:46:e1:9f:f7:f8:23:59:15:85:6a:64:d2: ba:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:92:C9:81:74:21:9B:8F:C9:9C:61:01:F9:BE:74:E1:F2:0D:F3:04 X509v3 Authority Key Identifier: keyid:B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d2:18:91:06:f3:0a:50:0e:b9:aa:10:d8:28:76:5f:fd:19: 86:80:9a:5b:33:77:c2:46:f6:c0:55:b0:ee:e4:bb:1f:cb:60: c1:02:a8:df:2f:14:ab:c3:8d:65:f8:4f:a9:41:82:00:d0:9a: 8f:80:7a:54:ee:d9:d1:ef:f1:b4:da:fe:4e:30:3b:1c:04:d3: 5a:3b:f0:5d:a5:b0:d5:f4:7c:da:92:dc:d9:d5:cb:e7:b1:76: 53:3b:7d:be:4d:c5:62:75:00:05:a4:34:5c:a8:ef:5d:fd:32: 21:ce:7c:03:28:c5:b7:68:62:84:36:e2:8a:00:bc:54:b4:cf: 3e:86:d1:1c:16:91:fd:66:5a:3e:82:20:02:52:ee:23:1e:40: e7:3a:5f:3e:99:45:08:20:d0:65:f2:00:08:96:5a:2b:15:94: ba:f9:d3:b6:e7:51:2b:88:6f:dc:f2:c0:43:3d:fb:5e:e7:1f: 0f:d9:19:58:12:b4:45:b3:89:70:37:5c:e1:99:8f:ce:7f:ca: 06:91:e6:56:8e:40:29:c6:c0:03:58:97:fe:0e:76:7e:e6:bb: 8f:b2:75:f9:92:dd:a6:56:6d:9c:6e:a2:6d:93:30:86:be:36: ad:fd:d7:24:a2:c5:50:d1:07:da:05:28:27:45:43:b3:6c:fb: b4:1b:b0:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUac5LvL2HhcrtaSoa7ccral/ycBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCOENEQ0VFNzQyNkQwMzEwMjBCRUMxRUFEMjMzN0NC NTFEQTcxODAeFw0yNjA5MjIxMTMwNTdaFw0yNjA5MjMxNDU1NTdaMDMxMTAvBgNV BAMTKDQzOTJDOTgxNzQyMTlCOEZDOTlDNjEwMUY5QkU3NEUxRjIwREYzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjNz8qhwjONFeQxqeZiy41R3dC g2F+C5VWtEoxZXIhiWZY1x9EoXYZADVPJ438buzm260/r1QjNWYZhxF5Wl2c3ttC MoVf3WrXkwp2aU4pC9lJGTHs/FP1TPmA+t28s2U2+CyyQPFUrMARfWH9WIeeMqkw Cqt9Sc1s1PikkxKtF+3wbQF4qtrrz2nFgucfnFrTKsjNIpT3/lA36NkXIUptjGKU LyZZ1Od4L3Me74vIuJbLy2OnPWnyf6e+S0vm2IV3VcECa0ghH1krPI29ZkmiwLbw rHa+9gjihYzCf4iBUlgKwdnVwVnDOS+4TrZ8toA9akbhn/f4I1kVhWpk0rpXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ5LJgXQhm4/JnGEB+b504fIN8wQwHwYDVR0j BBgwFoAUsLjNzudCbQMQIL7B6tIzfLUdpxgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZjMTdjYzItZjRhMi00MTVlLThlYTItZjljNDdmNzVjNGNhLzAvQjBCOENEQ0VF NzQyNkQwMzEwMjBCRUMxRUFEMjMzN0NCNTFEQTcxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEI4Q0RDRUU3NDI2RDAzMTAyMEJFQzFFQUQyMzM3Q0I1MURB NzE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQjBCOENEQ0VFNzQyNkQwMzEwMjBCRUMxRUFEMjMz N0NCNTFEQTcxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTSGJEG8wpQDrmqENgodl/9GYaAmlszd8JG 9sBVsO7kux/LYMECqN8vFKvDjWX4T6lBggDQmo+AelTu2dHv8bTa/k4wOxwE01o7 8F2lsNX0fNqS3NnVy+exdlM7fb5NxWJ1AAWkNFyo7139MiHOfAMoxbdoYoQ24ooA vFS0zz6G0RwWkf1mWj6CIAJS7iMeQOc6Xz6ZRQgg0GXyAAiWWisVlLr507bnUSuI b9zywEM9+17nHw/ZGVgStEWziXA3XOGZj85/ygaR5laOQCnGwANYl/4Odn7mu4+y dfmS3aZWbZxuom2TMIa+Nq391ySixVDRB9oFKCdFQ7Ns+7QbsHU= -----END CERTIFICATE-----Generated at Tue Sep 22 16:58:12 2026 by rpki-client