$ rpki-client -vvvf rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft File: B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft (raw, json) Hash identifier: X3HACMwpVg243VLdmetpMe0PgL30PAXnL8UXHIRdS6s= Subject key identifier: A9:95:68:83:F4:AF:04:E2:A1:4B:58:2F:9C:F4:E1:74:C0:A5:FC:68 Authority key identifier: B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A Certificate issuer: /CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Certificate serial: 282118D47C5679E0800AEC7AD3C31B717EE03912 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 14:03:21 +0000 Manifest this update: Thu 24 Sep 2026 13:58:21 +0000 Manifest next update: Fri 25 Sep 2026 15:19:21 +0000 Files and hashes: 1: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (hash: K9ZXJ5o5f3vYvyXmfnPwnT8NeUbIoGsEKpT0pUSErho=) 2: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: 437bd6cfCi4QfkyxcuG38VNcn0yO3ZKj6CESWVC/jyw=) 3: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: F/oy8su27rCM1WBmuMCn8wfDlNFF1ZO6cFWNdzyAW6M=) 4: B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl (hash: jU+VS4/yJU3bLCFDVkDwTv/gIOKqcXHBh+lvQ/uuzbI=) 5: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: ahISTiCVoc+28My7h8uDRC0QvRMDpO2sYZ/b3hjHSLM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:21:18:d4:7c:56:79:e0:80:0a:ec:7a:d3:c3:1b:71:7e:e0:39:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Validity Not Before: Sep 24 13:58:21 2026 GMT Not After : Sep 25 15:19:21 2026 GMT Subject: CN=A9956883F4AF04E2A14B582F9CF4E174C0A5FC68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:1f:e6:43:0e:39:d3:f3:4f:16:f5:e0:5e: 60:f2:5f:ec:c5:ab:17:70:ad:3a:6b:48:86:39:de: 1f:2e:bd:9f:d1:49:08:76:71:48:e7:c7:57:34:5c: 7d:c3:dc:0c:3b:a9:d8:24:f5:27:cb:de:df:cc:f3: 37:d2:21:26:aa:a4:81:a5:c3:d4:98:86:26:7c:24: 5f:2b:c2:ce:b1:dc:68:d9:2a:f5:20:ea:ee:f9:fd: bd:f5:e0:db:12:83:5e:50:7a:92:a7:df:4f:00:ed: ed:15:58:cb:f3:6a:01:59:84:40:7f:30:96:40:db: 00:42:e4:b2:b7:35:08:06:25:0c:19:f7:ff:98:79: 08:2b:58:bf:27:1a:f7:41:dc:b2:42:37:72:b1:69: a6:d3:8d:8b:19:97:e7:d0:d4:75:25:0e:05:e6:87: d9:81:dd:35:39:a0:e2:e0:45:96:01:c4:22:c0:70: 40:ed:2d:86:a0:0d:92:6b:ce:ba:49:aa:fb:88:78: c2:b8:40:47:d9:b7:2a:37:d4:3a:58:93:d0:d0:55: 27:62:bf:7a:a4:c9:a4:57:6b:5e:6c:fa:cf:8b:9b: 5b:ee:da:44:65:b5:20:c0:76:4a:64:e6:41:7b:fc: d1:76:99:b4:b6:a1:cc:e0:af:f5:a5:11:61:68:e4: c1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:95:68:83:F4:AF:04:E2:A1:4B:58:2F:9C:F4:E1:74:C0:A5:FC:68 X509v3 Authority Key Identifier: keyid:B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:93:c4:b0:c9:c7:06:e0:35:b7:7d:f6:f0:5d:41:b5:70:a8: 68:39:1a:af:b2:bb:38:8f:80:06:70:23:98:17:e4:9f:2b:71: 9f:48:6e:09:48:ed:b2:fe:b6:32:cc:a8:1d:7a:63:72:6e:13: ba:40:af:4e:2f:be:dc:0f:8e:48:fc:9d:a0:98:d7:62:1c:90: 64:9c:45:8f:83:30:89:ba:21:38:3b:9d:01:64:21:e6:7b:bf: 3a:55:ed:28:e2:b2:b0:c9:e9:bc:7c:9e:a7:4f:7b:7a:72:d7: 3a:49:0a:ab:9f:1a:c1:d9:72:1d:9d:b7:a8:7b:7f:3f:f0:53: 28:4a:37:93:ea:bd:26:9f:63:81:9e:1d:77:8e:3f:51:5a:d2: da:06:a4:bd:ee:c5:c4:d8:bd:76:09:9c:fe:42:0f:a5:9e:90: b0:53:5f:28:2b:1e:d5:fc:9b:2a:29:9c:c7:e4:cd:ae:d1:eb: 5c:96:a4:ee:d2:d3:d5:54:3d:ed:33:57:75:db:e6:0a:a6:ee: 67:4c:ab:68:7b:d2:7f:4c:f9:90:0c:39:91:93:72:19:69:29: 7b:c1:67:73:6c:43:d2:08:cf:16:bc:0e:93:a7:b9:02:c2:58: 10:a6:24:14:18:fd:c6:df:7b:e7:ae:56:f4:5d:53:dd:cc:29: 68:4c:10:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCEY1HxWeeCACux608MbcX7gORIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJG MTMzNzE2QTAeFw0yNjA5MjQxMzU4MjFaFw0yNjA5MjUxNTE5MjFaMDMxMTAvBgNV BAMTKEE5OTU2ODgzRjRBRjA0RTJBMTRCNTgyRjlDRjRFMTc0QzBBNUZDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgh/mQw450/NPFvXgXmDyX+zF qxdwrTprSIY53h8uvZ/RSQh2cUjnx1c0XH3D3Aw7qdgk9SfL3t/M8zfSISaqpIGl w9SYhiZ8JF8rws6x3GjZKvUg6u75/b314NsSg15QepKn308A7e0VWMvzagFZhEB/ MJZA2wBC5LK3NQgGJQwZ9/+YeQgrWL8nGvdB3LJCN3KxaabTjYsZl+fQ1HUlDgXm h9mB3TU5oOLgRZYBxCLAcEDtLYagDZJrzrpJqvuIeMK4QEfZtyo31DpYk9DQVSdi v3qkyaRXa15s+s+Lm1vu2kRltSDAdkpk5kF7/NF2mbS2oczgr/WlEWFo5MGRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqZVog/SvBOKhS1gvnPThdMCl/GgwHwYDVR0j BBgwFoAUuDWodGOEdJvzuae67DCh6/EzcWowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDZiZWRmM2EtZDdkMS00OWE2LTkzZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2 Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJGMTMzNzE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODM1QTg3NDYzODQ3NDlCRjNCOUE3QkFFQzMwQTFFQkYxMzM3 MTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEEx RUJGMTMzNzE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKTxLDJxwbgNbd99vBdQbVwqGg5Gq+yuziP gAZwI5gX5J8rcZ9IbglI7bL+tjLMqB16Y3JuE7pAr04vvtwPjkj8naCY12IckGSc RY+DMIm6ITg7nQFkIeZ7vzpV7SjisrDJ6bx8nqdPe3py1zpJCqufGsHZch2dt6h7 fz/wUyhKN5PqvSafY4GeHXeOP1Fa0toGpL3uxcTYvXYJnP5CD6WekLBTXygrHtX8 myopnMfkza7R61yWpO7S09VUPe0zV3Xb5gqm7mdMq2h70n9M+ZAMOZGTchlpKXvB Z3NsQ9IIzxa8DpOnuQLCWBCmJBQY/cbfe+euVvRdU93MKWhMEPg= -----END CERTIFICATE-----Generated at Fri Sep 25 02:54:44 2026 by rpki-client