$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft File: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft (raw, json) Hash identifier: MF1V/RTUDCYMvkM7jWruhn2tCtdmkcBv9+kY85fqVkI= Subject key identifier: F2:B6:18:92:20:20:51:EF:40:57:F3:F3:AD:FB:0B:7A:7F:3A:EA:07 Authority key identifier: B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 Certificate issuer: /CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Certificate serial: 03254479B7F84023A1C1651169B3B2CB722D0C74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 08:52:30 +0000 Manifest this update: Tue 22 Sep 2026 08:47:30 +0000 Manifest next update: Wed 23 Sep 2026 09:02:30 +0000 Files and hashes: 1: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl (hash: G2CYfYUEoVLtbhI/D2ASyFRFY8sca3ec+RU95awuekA=) 2: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: 0dA2mfgVhJxUx/fjGY3+Dm6GSQVEEUHFqlvFJHB2B4M=) 3: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: fnDhoiL+V7XHrTgcb34geX86ATfCep/ePS+vjKoYts4=) 4: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: 4Y1mZB2qJy+rnsbtqPt0mJQCafCDh7l369bEnaFDUds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:25:44:79:b7:f8:40:23:a1:c1:65:11:69:b3:b2:cb:72:2d:0c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Validity Not Before: Sep 22 08:47:30 2026 GMT Not After : Sep 23 09:02:30 2026 GMT Subject: CN=F2B61892202051EF4057F3F3ADFB0B7A7F3AEA07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:6b:fa:be:b9:9c:af:71:4d:e7:9c:24:09: f5:0b:60:6b:25:43:7a:5a:66:2e:8b:3d:f0:a0:e4: 5a:58:6e:5d:06:b8:e9:3c:2c:26:78:ac:69:bb:6a: 30:88:e8:c7:c4:5a:6e:d7:0e:30:ef:cb:e5:f6:56: f3:d4:4c:5c:5e:62:59:c8:84:b3:7f:cb:72:b4:32: c7:4b:a3:e7:fc:2a:5d:f7:d3:43:51:58:7f:ee:4a: e8:ba:a9:e1:03:f8:64:44:98:f0:d7:fb:19:df:d8: 7c:88:7a:6b:59:7f:44:c1:0d:cb:71:0a:11:8c:21: 52:3e:54:95:80:00:f0:b5:8d:e7:97:25:d1:29:51: 84:03:ff:48:94:9b:f8:b7:af:22:d8:b3:28:59:51: 14:1b:ab:33:8d:82:c5:06:2a:4e:ac:de:73:ac:b2: 9b:81:48:50:99:21:9a:3d:43:f7:4b:50:11:a6:73: c6:b1:b8:15:e6:4e:90:89:1b:57:9f:cf:bf:59:2e: df:45:00:7a:10:46:50:47:49:c6:94:cd:12:98:a7: 54:34:ee:3b:ea:63:ae:63:96:8e:1c:e4:46:81:b6: 82:06:77:38:7e:2e:c9:2f:f5:9a:03:ee:39:0c:07: f4:d9:57:fc:71:fa:71:0b:b6:e3:a2:53:23:45:98: 3a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B6:18:92:20:20:51:EF:40:57:F3:F3:AD:FB:0B:7A:7F:3A:EA:07 X509v3 Authority Key Identifier: keyid:B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a5:12:56:b9:fc:e9:f4:41:37:39:80:f4:63:d5:be:83:c5: a5:46:55:64:16:ff:4c:8f:e9:18:4b:94:1b:3a:63:dc:87:b7: 41:04:91:7b:a4:fc:47:66:89:4e:aa:9a:a3:c7:b0:ee:92:20: ec:0e:cb:4a:ad:0e:27:6b:f6:3c:28:c9:11:25:ba:e9:19:a4: aa:ca:05:df:b7:49:25:d2:2a:3f:f1:9a:dc:65:97:63:b6:ca: f1:4f:4b:8b:3d:46:71:77:36:5f:cb:c5:e4:80:af:ee:ae:49: 64:b9:b9:70:8e:fa:bc:46:63:09:32:1e:e0:04:bc:ff:96:ce: 44:02:bd:da:8a:92:b5:5f:c7:05:85:70:c2:d8:58:07:34:86: c4:1c:7e:b1:d2:46:93:37:ec:4b:e4:02:80:43:76:b2:6c:22: fc:b8:c0:ef:bb:ed:f5:32:00:77:e5:5a:a8:4d:40:ea:0d:9e: 5e:fd:50:91:91:41:e8:e0:e3:5b:53:94:f4:6f:01:e8:c2:00: f2:13:7a:72:ea:68:a6:7b:7f:29:2f:e8:13:bc:6f:3f:98:94: 47:16:2a:d4:3b:58:cb:9a:77:f0:09:ea:61:6f:45:06:73:8b: b5:a0:10:3f:22:45:66:1e:0b:a4:f7:03:f8:5d:fc:43:15:87: 70:31:1a:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAyVEebf4QCOhwWURabOyy3ItDHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNUM3RUQzODY2RDNDQUQyNDREQUIzNjRENURFQUIw MUI0MUIyNzAeFw0yNjA5MjIwODQ3MzBaFw0yNjA5MjMwOTAyMzBaMDMxMTAvBgNV BAMTKEYyQjYxODkyMjAyMDUxRUY0MDU3RjNGM0FERkIwQjdBN0YzQUVBMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3b2v6vrmcr3FN55wkCfULYGsl Q3paZi6LPfCg5FpYbl0GuOk8LCZ4rGm7ajCI6MfEWm7XDjDvy+X2VvPUTFxeYlnI hLN/y3K0MsdLo+f8Kl3300NRWH/uSui6qeED+GREmPDX+xnf2HyIemtZf0TBDctx ChGMIVI+VJWAAPC1jeeXJdEpUYQD/0iUm/i3ryLYsyhZURQbqzONgsUGKk6s3nOs spuBSFCZIZo9Q/dLUBGmc8axuBXmTpCJG1efz79ZLt9FAHoQRlBHScaUzRKYp1Q0 7jvqY65jlo4c5EaBtoIGdzh+Lskv9ZoD7jkMB/TZV/xx+nELtuOiUyNFmDr3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8rYYkiAgUe9AV/PzrfsLen866gcwHwYDVR0j BBgwFoAUuaXH7Thm08rSRNqzZNXeqwG0GycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkxMDY4MjctODY2ZS00YWMzLThmNzktYTZlMzIwYjIwZGU3LzAvQjlBNUM3RUQz ODY2RDNDQUQyNDREQUIzNjRENURFQUIwMUI0MUIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUE1QzdFRDM4NjZEM0NBRDI0NERBQjM2NEQ1REVBQjAxQjQx QjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjlBNUM3RUQzODY2RDNDQUQyNDREQUIzNjRENURF QUIwMUI0MUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2lEla5/On0QTc5gPRj1b6DxaVGVWQW/0yP 6RhLlBs6Y9yHt0EEkXuk/EdmiU6qmqPHsO6SIOwOy0qtDidr9jwoyREluukZpKrK Bd+3SSXSKj/xmtxll2O2yvFPS4s9RnF3Nl/LxeSAr+6uSWS5uXCO+rxGYwkyHuAE vP+WzkQCvdqKkrVfxwWFcMLYWAc0hsQcfrHSRpM37EvkAoBDdrJsIvy4wO+77fUy AHflWqhNQOoNnl79UJGRQejg41tTlPRvAejCAPITenLqaKZ7fykv6BO8bz+YlEcW KtQ7WMuad/AJ6mFvRQZzi7WgED8iRWYeC6T3A/hd/EMVh3AxGkQ= -----END CERTIFICATE-----Generated at Tue Sep 22 16:29:42 2026 by rpki-client