$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft File: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft (raw, json) Hash identifier: eLria49au+bSdtRc3dGBZcudgbQzvWH/fMigtY57W6g= Subject key identifier: 8E:EB:01:1F:47:23:F0:9B:B4:45:BA:DF:F5:DB:F0:76:4D:FD:91:C0 Authority key identifier: B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC Certificate issuer: /CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Certificate serial: 59C599862C9A518A1CE6985DF6C2C16C12AA47CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft Manifest number: BF Signing time: Mon 21 Sep 2026 01:33:25 +0000 Manifest this update: Mon 21 Sep 2026 01:28:25 +0000 Manifest next update: Tue 22 Sep 2026 03:45:25 +0000 Files and hashes: 1: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: xB0/WgkgeQpbT+DgIUgkpcHnnIC1tIl18yTmoTUITOQ=) 2: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl (hash: OfvpDi7yYhNyuOCVIxDKaeHA72NXyjjrGzRY1YAq3LM=) 3: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: KOBMUeuuJtkuzoTiB4FBFCyBVV1+45BqlCrbct7wq3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c5:99:86:2c:9a:51:8a:1c:e6:98:5d:f6:c2:c1:6c:12:aa:47:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Validity Not Before: Sep 21 01:28:25 2026 GMT Not After : Sep 22 03:45:25 2026 GMT Subject: CN=8EEB011F4723F09BB445BADFF5DBF0764DFD91C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4f:8a:0a:52:9e:a9:5c:aa:9c:ca:d0:8c:54: 07:fa:b4:cc:a3:18:05:f7:ae:5a:c5:23:23:d7:1e: a8:f3:cb:6f:1a:1d:a5:e2:a2:93:ae:fe:0e:88:ed: c7:05:53:70:27:ce:68:fb:c8:17:d8:2b:8e:96:9d: 5d:22:ea:eb:f8:ec:d8:95:a7:a2:9d:f0:b2:47:c7: 89:2b:2f:a5:1f:dd:a8:47:74:ec:a5:4a:2b:02:d7: cc:ee:f1:82:e6:17:04:58:0d:37:d5:b4:4c:47:3e: ca:62:5d:b4:be:93:51:eb:6e:00:0e:71:0e:21:a3: 04:78:97:0c:f1:be:75:95:94:c0:13:c2:bc:b5:eb: 39:ea:00:b7:5d:8e:11:81:82:03:88:49:5b:3e:fb: 29:fd:83:b8:e0:ba:46:30:81:46:55:83:79:b0:74: 00:a0:69:ac:62:45:b8:87:d7:c7:c1:e1:b4:e6:88: 3b:df:75:e6:f4:4c:49:13:43:5c:18:f0:c6:23:d9: 50:1b:c5:56:68:e4:8c:bc:4c:68:9e:5d:db:60:ab: 38:b2:00:e7:c6:00:a4:be:9a:44:f2:77:76:6f:87: 20:23:87:f8:62:ab:22:9e:b0:2e:6e:ea:03:f1:95: d0:c9:52:23:bc:95:13:52:d8:22:d2:56:c8:cf:ea: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EB:01:1F:47:23:F0:9B:B4:45:BA:DF:F5:DB:F0:76:4D:FD:91:C0 X509v3 Authority Key Identifier: keyid:B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:00:82:31:a8:c0:39:62:9d:1e:52:2f:fe:e7:f2:26:74:85: ae:59:2a:10:9c:40:d0:d4:e5:1e:a9:bd:b7:ef:fe:da:b2:fa: 81:10:b8:bc:53:41:93:7b:b3:d5:f6:2d:9b:b1:10:47:ae:3a: ac:09:01:c2:c2:62:81:5d:c0:26:c0:fa:30:fc:ac:33:12:e1: 5a:fc:62:ca:12:b3:9d:9c:1b:dc:53:f9:79:7c:e4:d6:25:68: dc:02:00:c4:b6:25:d0:64:ce:ab:9d:70:89:9c:cf:0c:6d:51: 7e:16:00:10:92:12:04:17:03:67:35:9e:0d:3f:02:4e:71:98: a3:d9:67:b8:3f:03:f3:71:fa:d6:3a:af:ed:45:58:13:6b:ac: 0f:ee:f5:74:e4:06:40:4b:0e:e9:3b:be:47:12:ae:e7:ce:fb: 82:47:8e:2f:8d:e9:0a:a4:3a:b0:6e:c9:8c:f3:06:c0:a0:ea: d6:fc:8e:de:16:e2:a3:f5:52:08:d9:54:05:c1:27:36:97:5b: e6:e9:62:a7:2e:1e:ea:ee:b4:1b:94:43:ff:6d:37:23:16:d4: 1e:6f:63:31:25:fc:b3:63:c4:c7:08:42:87:c2:f1:4f:a0:aa: ee:29:f3:8e:e7:59:c8:d8:ca:47:36:60:d1:8a:f9:36:8d:2c: 2d:30:d7:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWcWZhiyaUYoc5phd9sLBbBKqR80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3 Mzg3NDlDQzAeFw0yNjA5MjEwMTI4MjVaFw0yNjA5MjIwMzQ1MjVaMDMxMTAvBgNV BAMTKDhFRUIwMTFGNDcyM0YwOUJCNDQ1QkFERkY1REJGMDc2NERGRDkxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNT4oKUp6pXKqcytCMVAf6tMyj GAX3rlrFIyPXHqjzy28aHaXiopOu/g6I7ccFU3Anzmj7yBfYK46WnV0i6uv47NiV p6Kd8LJHx4krL6Uf3ahHdOylSisC18zu8YLmFwRYDTfVtExHPspiXbS+k1HrbgAO cQ4howR4lwzxvnWVlMATwry16znqALddjhGBggOISVs++yn9g7jgukYwgUZVg3mw dACgaaxiRbiH18fB4bTmiDvfdeb0TEkTQ1wY8MYj2VAbxVZo5Iy8TGieXdtgqziy AOfGAKS+mkTyd3ZvhyAjh/hiqyKesC5u6gPxldDJUiO8lRNS2CLSVsjP6kCVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjusBH0cj8Ju0Rbrf9dvwdk39kcAwHwYDVR0j BBgwFoAUtc+gIN1Lv9SYxeTYSo1jCXOHScwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGEwZmJiNTUtMWRkOC00ZjhiLWI4OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBE RDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3Mzg3NDlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUNGQTAyMERENEJCRkQ0OThDNUU0RDg0QThENjMwOTczODc0 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGEwZmJiNTUtMWRkOC00ZjhiLWI4 OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYz MDk3Mzg3NDlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQAgjGowDlinR5SL/7n8iZ0ha5ZKhCcQNDU 5R6pvbfv/tqy+oEQuLxTQZN7s9X2LZuxEEeuOqwJAcLCYoFdwCbA+jD8rDMS4Vr8 YsoSs52cG9xT+Xl85NYlaNwCAMS2JdBkzqudcImczwxtUX4WABCSEgQXA2c1ng0/ Ak5xmKPZZ7g/A/Nx+tY6r+1FWBNrrA/u9XTkBkBLDuk7vkcSrufO+4JHji+N6Qqk OrBuyYzzBsCg6tb8jt4W4qP1UgjZVAXBJzaXW+bpYqcuHurutBuUQ/9tNyMW1B5v YzEl/LNjxMcIQofC8U+gqu4p847nWcjYykc2YNGK+TaNLC0w18M= -----END CERTIFICATE-----Generated at Mon Sep 21 14:06:58 2026 by rpki-client