$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft File: B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft (raw, json) Hash identifier: UuI40aUCQ2SOUb03X6cjhE1e4wnqqMAU5/aLvuTNkeI= Subject key identifier: 09:B6:B4:E6:26:95:B2:76:F1:3A:38:64:B6:51:61:C0:49:55:82:B1 Authority key identifier: B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C Certificate issuer: /CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C Certificate serial: 49829D351A605AE798883A3081B7F646BA275A92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft Manifest number: BE Signing time: Mon 21 Sep 2026 11:50:59 +0000 Manifest this update: Mon 21 Sep 2026 11:45:59 +0000 Manifest next update: Tue 22 Sep 2026 15:10:59 +0000 Files and hashes: 1: B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl (hash: fz8HIS9vhP+vE8OLSLBZX1JrJGfng7606iqNrihQQA8=) 2: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: Xlw4ZgOA9dxklZxuwsm7BdQVTv81WEpzZ+FyUCbJp8U=) 3: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (hash: zDvSDZMoY6Znb5y3IJOyYf9v6rjB8P6HkgrYk/e4IOY=) 4: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (hash: EOraKN7NbhJxKTOduQMxHR15n6cFJJTiK2diztwSbic=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:82:9d:35:1a:60:5a:e7:98:88:3a:30:81:b7:f6:46:ba:27:5a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C Validity Not Before: Sep 21 11:45:59 2026 GMT Not After : Sep 22 15:10:59 2026 GMT Subject: CN=09B6B4E62695B276F13A3864B65161C0495582B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:85:72:ee:4a:5e:bb:f5:46:7e:71:bc:6f:8c: 94:55:c6:92:14:67:af:83:f2:5d:cd:47:2c:ab:26: e9:99:c9:87:c0:0b:27:2b:c9:fd:41:7a:28:4c:c7: ac:9e:bb:9e:73:47:ff:66:23:ad:dc:c6:37:6e:1f: 8c:38:1f:0e:c7:27:4c:3a:b7:ff:f6:32:84:46:35: f3:9b:a7:09:73:d5:a9:f1:cc:d8:c9:fe:06:6e:91: b4:52:32:d4:4c:da:5b:5e:b1:3d:cc:05:43:64:5d: 5c:ba:ca:1a:53:bd:3f:cf:81:f0:0a:46:88:68:f0: 45:3d:7d:6d:20:8d:2d:3d:36:1d:8f:16:8d:3a:02: 04:1a:16:fb:1f:24:ee:d1:b8:21:cb:bd:24:47:ac: 4f:68:c6:72:e8:5d:3d:fa:3f:39:4a:f4:bd:45:56: c7:ac:5e:31:b5:b4:73:e5:af:5b:51:e4:03:1a:cf: 95:61:28:07:8d:94:7a:d7:27:7a:d3:9b:5b:6b:01: d4:f2:94:8e:d8:33:d2:52:7c:ed:52:0b:46:d9:00: 2c:a6:22:21:30:38:60:e6:81:36:3a:cd:b2:72:41: fe:ef:4e:5c:06:8b:af:47:91:f6:0a:a0:3c:57:60: b3:20:74:a3:f7:6b:1e:28:dd:d5:56:94:16:8f:d7: 6e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B6:B4:E6:26:95:B2:76:F1:3A:38:64:B6:51:61:C0:49:55:82:B1 X509v3 Authority Key Identifier: keyid:B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:97:d9:9d:60:91:bc:14:b7:54:4b:e7:f0:a3:6e:6b:d1:fe: b1:e8:19:78:1e:63:22:bf:e4:9e:8b:8e:23:90:73:69:a7:21: 7b:c2:74:eb:34:72:1b:ec:e5:94:cf:d7:17:36:5e:b5:5f:46: c2:73:a7:80:93:47:76:e8:6a:ee:47:1c:3d:83:02:1b:fe:80: 3b:de:e2:0f:ad:7b:32:d8:21:0a:80:f2:1f:bc:3f:a0:f9:c1: 9c:35:49:68:87:3a:0b:b7:9b:36:fc:51:aa:70:02:30:5b:a8: dd:a3:a0:3d:a0:24:bf:8f:1b:38:f5:77:af:69:89:40:ef:b5: d8:ae:a3:41:6e:c6:51:9e:7c:c2:be:0b:4c:59:8f:c9:bb:d2: dc:ff:86:6f:45:06:bd:09:4b:27:c9:ad:a1:a0:13:96:af:69: bb:69:b5:e5:db:94:f4:9f:cc:c3:c4:86:b5:ca:3c:dc:b1:a8: cf:a7:b0:f4:03:6c:10:e8:90:d8:dc:7c:76:32:c7:ad:85:63: 69:43:7d:65:ed:4a:b3:27:f0:3a:49:c4:ea:e0:ae:5e:37:f9: 8c:a8:52:92:01:8e:23:d1:07:6e:1e:ce:ab:a3:51:c2:4a:c9: d2:24:46:55:25:d1:84:8d:e8:6a:4c:4f:0f:33:96:85:87:ea: 63:e2:fe:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSYKdNRpgWueYiDowgbf2RronWpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzQjU0QUQwRTc2NERCNTI1MENFN0YxMkVEQjQzMkYw QzAyODk3QzAeFw0yNjA5MjExMTQ1NTlaFw0yNjA5MjIxNTEwNTlaMDMxMTAvBgNV BAMTKDA5QjZCNEU2MjY5NUIyNzZGMTNBMzg2NEI2NTE2MUMwNDk1NTgyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbhXLuSl679UZ+cbxvjJRVxpIU Z6+D8l3NRyyrJumZyYfACycryf1BeihMx6yeu55zR/9mI63cxjduH4w4Hw7HJ0w6 t//2MoRGNfObpwlz1anxzNjJ/gZukbRSMtRM2ltesT3MBUNkXVy6yhpTvT/PgfAK Roho8EU9fW0gjS09Nh2PFo06AgQaFvsfJO7RuCHLvSRHrE9oxnLoXT36PzlK9L1F VsesXjG1tHPlr1tR5AMaz5VhKAeNlHrXJ3rTm1trAdTylI7YM9JSfO1SC0bZACym IiEwOGDmgTY6zbJyQf7vTlwGi69HkfYKoDxXYLMgdKP3ax4o3dVWlBaP126zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCba05iaVsnbxOjhktlFhwElVgrEwHwYDVR0j BBgwFoAUtjtUrQ52TbUlDOfxLttDLwwCiXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTUwNDc5M2MtYzIwOS00NjlhLThlM2MtZWIzZjVhODM4NjNmLzAvQjYzQjU0QUQw RTc2NERCNTI1MENFN0YxMkVEQjQzMkYwQzAyODk3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjNCNTRBRDBFNzY0REI1MjUwQ0U3RjEyRURCNDMyRjBDMDI4 OTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTUwNDc5M2MtYzIwOS00NjlhLThl M2MtZWIzZjVhODM4NjNmLzAvQjYzQjU0QUQwRTc2NERCNTI1MENFN0YxMkVEQjQz MkYwQzAyODk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOX2Z1gkbwUt1RL5/CjbmvR/rHoGXgeYyK/ 5J6LjiOQc2mnIXvCdOs0chvs5ZTP1xc2XrVfRsJzp4CTR3boau5HHD2DAhv+gDve 4g+tezLYIQqA8h+8P6D5wZw1SWiHOgu3mzb8UapwAjBbqN2joD2gJL+PGzj1d69p iUDvtdiuo0FuxlGefMK+C0xZj8m70tz/hm9FBr0JSyfJraGgE5avabtpteXblPSf zMPEhrXKPNyxqM+nsPQDbBDokNjcfHYyx62FY2lDfWXtSrMn8DpJxOrgrl43+Yyo UpIBjiPRB24ezqujUcJKydIkRlUl0YSN6GpMTw8zloWH6mPi/rE= -----END CERTIFICATE-----Generated at Mon Sep 21 20:38:19 2026 by rpki-client