$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft File: B977405A3167FC0E8490C54AB080E37B0920C4B4.mft (raw, json) Hash identifier: 3a19qGsLPqD1fwe+/3QzLiFqrhB6GI1J/YwdTYs0nME= Subject key identifier: 70:12:01:D6:0B:7B:24:6B:FA:83:43:69:DC:CC:2E:9A:A2:1F:28:AA Authority key identifier: B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4 Certificate issuer: /CN=B977405A3167FC0E8490C54AB080E37B0920C4B4 Certificate serial: 35C9F82E749A8D3A54BA4D2ECFACB0AF42B4192B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft Manifest number: BF Signing time: Mon 21 Sep 2026 13:18:01 +0000 Manifest this update: Mon 21 Sep 2026 13:13:01 +0000 Manifest next update: Tue 22 Sep 2026 13:25:01 +0000 Files and hashes: 1: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: TSVY5x+9VndlFploLHkJHga5L+L+3DIx++btPsU48bE=) 2: B977405A3167FC0E8490C54AB080E37B0920C4B4.crl (hash: qb+OB6B9kjPXwrsVwY5BccMFmp7nA0wsjsSv/jHCDb4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.crl rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c9:f8:2e:74:9a:8d:3a:54:ba:4d:2e:cf:ac:b0:af:42:b4:19:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B977405A3167FC0E8490C54AB080E37B0920C4B4 Validity Not Before: Sep 21 13:13:01 2026 GMT Not After : Sep 22 13:25:01 2026 GMT Subject: CN=701201D60B7B246BFA834369DCCC2E9AA21F28AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:74:60:32:f1:1b:35:c9:db:c5:25:80:15: d5:d3:89:ff:08:ce:f7:47:ea:83:8c:c7:60:19:64: c1:24:81:c8:57:ac:2b:1a:b8:2f:95:c0:8e:45:3b: da:a2:27:03:a9:b3:48:a2:e6:63:56:ff:5c:eb:fd: 1f:75:d2:aa:f4:f6:23:ac:9a:94:b5:ff:5b:cd:a8: 41:64:31:63:b2:dc:ed:e8:15:14:b5:05:1f:64:e0: e0:50:e4:37:75:f6:25:2f:2c:9a:a7:46:47:6f:1a: f5:66:a1:15:48:fb:07:c0:92:82:03:dc:36:d5:71: d8:6d:03:3e:d1:85:5a:03:67:aa:89:21:4d:90:17: 3a:79:78:07:8d:6e:d5:cd:c3:ca:67:ac:0e:1f:26: 64:43:57:9b:9a:f9:af:a2:79:8c:d1:07:bd:9c:33: 2a:ff:b6:60:fa:80:34:7b:a9:c9:2c:2f:56:47:4b: 28:96:51:65:ca:f2:d5:44:85:80:93:93:dd:37:47: b9:ef:55:4f:63:83:13:35:ad:25:8d:ad:a8:a1:2b: 1e:dc:4e:f4:fb:46:a7:e9:5c:8f:54:6a:75:9c:b0: 48:72:49:a4:83:08:e4:69:c1:64:b8:50:ad:97:ea: fb:fd:61:29:9c:24:4b:9e:53:a0:bf:80:ec:4f:e4: 54:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:12:01:D6:0B:7B:24:6B:FA:83:43:69:DC:CC:2E:9A:A2:1F:28:AA X509v3 Authority Key Identifier: keyid:B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:d2:e6:b2:96:a8:fd:b5:53:1d:84:84:df:e5:47:c4:67:e5: 8d:a8:81:22:c7:8f:48:7d:b5:36:81:d3:fc:92:27:4b:66:4e: 14:71:65:9a:c0:bb:f1:f2:e8:e8:b3:67:ac:10:2f:b3:35:d3: d4:e5:d1:fc:fc:70:c8:54:0c:c8:fe:01:e7:0e:a7:3e:16:74: 5d:5a:a7:27:ee:14:37:9f:65:1e:da:c2:3f:b5:db:d8:05:2a: 65:c6:ce:42:17:a2:97:9e:4e:e1:b0:5f:48:9b:b3:9a:d6:73: e0:ee:1e:ab:03:4a:6d:e3:fa:9c:74:37:ff:b9:c4:9e:e3:40: cb:73:96:37:e7:43:6e:12:e1:75:b6:3e:d0:28:b5:19:de:49: 87:d6:1c:92:f5:09:dc:59:56:07:a1:49:2b:a8:03:58:9e:77: 77:46:58:d9:43:b1:91:45:54:51:6e:a5:9f:75:8f:eb:13:f4: 03:5e:72:c7:5c:ef:9b:d1:9c:3c:4c:fa:96:e9:6b:2a:c2:b1: 29:18:7e:43:7a:14:a7:69:15:04:a2:ec:9a:f7:62:d0:84:d9: 6c:35:34:03:95:c6:b8:bc:c0:d0:d1:21:e2:d5:6c:73:59:99: e4:90:5d:e2:c3:c4:bc:3a:00:ca:1a:e9:10:05:3d:12:8f:99: 5f:af:e3:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcn4LnSajTpUuk0uz6ywr0K0GSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3NzQwNUEzMTY3RkMwRTg0OTBDNTRBQjA4MEUzN0Iw OTIwQzRCNDAeFw0yNjA5MjExMzEzMDFaFw0yNjA5MjIxMzI1MDFaMDMxMTAvBgNV BAMTKDcwMTIwMUQ2MEI3QjI0NkJGQTgzNDM2OURDQ0MyRTlBQTIxRjI4QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hXRgMvEbNcnbxSWAFdXTif8I zvdH6oOMx2AZZMEkgchXrCsauC+VwI5FO9qiJwOps0ii5mNW/1zr/R910qr09iOs mpS1/1vNqEFkMWOy3O3oFRS1BR9k4OBQ5Dd19iUvLJqnRkdvGvVmoRVI+wfAkoID 3DbVcdhtAz7RhVoDZ6qJIU2QFzp5eAeNbtXNw8pnrA4fJmRDV5ua+a+ieYzRB72c Myr/tmD6gDR7qcksL1ZHSyiWUWXK8tVEhYCTk903R7nvVU9jgxM1rSWNraihKx7c TvT7RqfpXI9UanWcsEhySaSDCORpwWS4UK2X6vv9YSmcJEueU6C/gOxP5FSNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcBIB1gt7JGv6g0Np3MwumqIfKKowHwYDVR0j BBgwFoAUuXdAWjFn/A6EkMVKsIDjewkgxLQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTBiZTJkZjgtMmMzNi00NjUyLWE1MGMtZjY0MjBkMmNkOWQzLzAvQjk3NzQwNUEz MTY3RkMwRTg0OTBDNTRBQjA4MEUzN0IwOTIwQzRCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTc3NDA1QTMxNjdGQzBFODQ5MEM1NEFCMDgwRTM3QjA5MjBD NEI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQjk3NzQwNUEzMTY3RkMwRTg0OTBDNTRBQjA4MEUz N0IwOTIwQzRCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/S5rKWqP21Ux2EhN/lR8Rn5Y2ogSLHj0h9 tTaB0/ySJ0tmThRxZZrAu/Hy6OizZ6wQL7M109Tl0fz8cMhUDMj+AecOpz4WdF1a pyfuFDefZR7awj+129gFKmXGzkIXopeeTuGwX0ibs5rWc+DuHqsDSm3j+px0N/+5 xJ7jQMtzljfnQ24S4XW2PtAotRneSYfWHJL1CdxZVgehSSuoA1ied3dGWNlDsZFF VFFupZ91j+sT9ANecsdc75vRnDxM+pbpayrCsSkYfkN6FKdpFQSi7Jr3YtCE2Ww1 NAOVxri8wNDRIeLVbHNZmeSQXeLDxLw6AMoa6RAFPRKPmV+v4yw= -----END CERTIFICATE-----Generated at Tue Sep 22 07:55:05 2026 by rpki-client