$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft File: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft (raw, json) Hash identifier: LcIJ0L8H1ERuvyOfKRLvzvGY4L9PYesktOvzMgDtVvk= Subject key identifier: 56:81:B3:39:8D:48:D9:57:1F:5E:FE:09:79:8A:61:E5:D4:E8:52:C7 Authority key identifier: B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC Certificate issuer: /CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Certificate serial: 313564DE685D7B243200AA3D5E5F9428BE03F2AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 15:30:50 +0000 Manifest this update: Mon 21 Sep 2026 15:25:50 +0000 Manifest next update: Tue 22 Sep 2026 17:27:50 +0000 Files and hashes: 1: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl (hash: x6w1yaDBFi+c32y6FnCLkDAPVFa+apjfzXwriicv1pw=) 2: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: DOdXqvIf8YC77FzkFbP1ZhH9lDDTTUCUrQuHHws44kQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:35:64:de:68:5d:7b:24:32:00:aa:3d:5e:5f:94:28:be:03:f2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Validity Not Before: Sep 21 15:25:50 2026 GMT Not After : Sep 22 17:27:50 2026 GMT Subject: CN=5681B3398D48D9571F5EFE09798A61E5D4E852C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cb:0a:c3:50:d0:b0:12:d8:cb:83:99:a6:b2: ad:62:49:ca:1d:f3:c8:55:97:e9:e0:be:00:a6:3d: 25:27:56:7b:68:4a:67:c0:0d:f1:d4:4f:1b:15:e1: 76:6a:a6:26:e3:2e:6b:37:9f:e1:09:b1:4f:dd:02: ad:f0:f2:09:69:88:7b:44:3d:d4:27:fe:22:d4:c6: 32:0d:b0:78:3a:af:a9:b3:75:37:a3:bf:30:76:e3: 46:3e:a2:dc:21:0e:0d:4a:9b:54:68:fe:12:a6:d4: 3b:77:55:30:f4:82:ad:66:3e:a1:5a:19:66:66:07: b1:c8:28:84:ce:7f:41:08:79:75:c7:c5:ac:98:92: 5a:e7:00:f5:90:db:33:5e:c1:44:74:a4:78:f6:70: 99:ce:c5:e2:76:3e:29:6b:7c:e4:ae:88:6a:2a:64: a5:3a:e8:92:75:ac:41:f7:7a:88:8d:6b:9d:af:f3: 5f:15:e2:a7:c0:48:0c:3d:82:07:2c:ab:db:bd:9c: 4c:6e:a3:82:77:79:da:4e:d4:19:cf:69:dc:c8:d9: a8:c4:2f:18:2c:97:ea:04:24:45:19:ae:46:ce:f5: bd:b9:9a:ff:e2:c2:89:9e:9e:50:fd:28:90:c9:a2: 13:90:8b:f9:18:ef:f4:e6:16:34:53:00:0d:8f:37: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:81:B3:39:8D:48:D9:57:1F:5E:FE:09:79:8A:61:E5:D4:E8:52:C7 X509v3 Authority Key Identifier: keyid:B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:66:d6:61:d9:06:1e:99:b5:f1:cf:c3:6c:9d:0e:6d:c4:1a: 55:fd:52:76:90:70:b4:da:21:15:47:68:1c:f6:28:d5:98:8b: a6:9f:27:cb:4e:a1:e6:58:5a:c8:15:fb:ab:c3:37:12:58:8e: 19:e1:3b:67:9e:d3:ea:f8:cd:6e:ff:4e:d3:a4:fb:c9:9e:41: a6:78:fe:4e:4b:19:58:52:2a:cf:98:20:7d:17:80:b8:33:88: 00:0e:a9:4e:14:98:1a:1b:39:7b:c5:34:90:22:83:0f:7a:44: 0e:93:d6:c8:43:c1:d4:1c:2d:d4:b0:c2:f4:2b:37:06:71:72: 30:93:bd:57:51:9c:01:ef:41:33:5b:f6:26:6d:bc:f8:9a:2e: 13:60:7a:60:d5:77:41:c3:af:db:02:48:ec:15:d6:7c:e0:09: 0d:8a:de:a0:d9:c5:65:d8:7b:f2:41:47:62:94:ea:40:af:2d: c7:b9:6e:fe:af:03:26:b3:7f:cb:a0:dd:a1:c0:2b:56:f5:da: 3b:0c:44:af:22:6a:bb:02:90:b9:22:f6:35:4d:8c:5e:0a:fb: 73:0f:22:d4:80:0f:16:d2:54:3f:1b:f1:70:a1:fc:8b:1f:e7: a2:6c:0f:4a:9c:f0:62:e0:a2:e9:7a:bc:3c:3f:18:48:18:d6: 2f:41:fd:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTVk3mhdeyQyAKo9Xl+UKL4D8q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhD RjEyN0NBQzAeFw0yNjA5MjExNTI1NTBaFw0yNjA5MjIxNzI3NTBaMDMxMTAvBgNV BAMTKDU2ODFCMzM5OEQ0OEQ5NTcxRjVFRkUwOTc5OEE2MUU1RDRFODUyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdywrDUNCwEtjLg5mmsq1iScod 88hVl+ngvgCmPSUnVntoSmfADfHUTxsV4XZqpibjLms3n+EJsU/dAq3w8glpiHtE PdQn/iLUxjINsHg6r6mzdTejvzB240Y+otwhDg1Km1Ro/hKm1Dt3VTD0gq1mPqFa GWZmB7HIKITOf0EIeXXHxayYklrnAPWQ2zNewUR0pHj2cJnOxeJ2PilrfOSuiGoq ZKU66JJ1rEH3eoiNa52v818V4qfASAw9ggcsq9u9nExuo4J3edpO1BnPadzI2ajE Lxgsl+oEJEUZrkbO9b25mv/iwomenlD9KJDJohOQi/kY7/TmFjRTAA2PN8x7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVoGzOY1I2VcfXv4JeYph5dToUscwHwYDVR0j BBgwFoAUuZCPWU5jC+oe6g3b9KMNyM8SfKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZlY2M3MmEtZTk1NC00MzAyLTkyYzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0 RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhDRjEyN0NBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTkwOEY1OTRFNjMwQkVBMUVFQTBEREJGNEEzMERDOENGMTI3 Q0FDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBE QzhDRjEyN0NBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1m1mHZBh6ZtfHPw2ydDm3EGlX9UnaQcLTa IRVHaBz2KNWYi6afJ8tOoeZYWsgV+6vDNxJYjhnhO2ee0+r4zW7/TtOk+8meQaZ4 /k5LGVhSKs+YIH0XgLgziAAOqU4UmBobOXvFNJAigw96RA6T1shDwdQcLdSwwvQr NwZxcjCTvVdRnAHvQTNb9iZtvPiaLhNgemDVd0HDr9sCSOwV1nzgCQ2K3qDZxWXY e/JBR2KU6kCvLce5bv6vAyazf8ug3aHAK1b12jsMRK8iarsCkLki9jVNjF4K+3MP ItSADxbSVD8b8XCh/Isf56JsD0qc8GLgoul6vDw/GEgY1i9B/WU= -----END CERTIFICATE-----Generated at Mon Sep 21 17:48:01 2026 by rpki-client