$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft File: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft (raw, json) Hash identifier: W2+NTt1u4ffejyzm03WoycbN/CLlA6sR8kY/cZriKiw= Subject key identifier: CA:A2:31:02:03:CB:68:B5:5D:AD:B3:9D:03:00:C4:BE:EF:86:7C:49 Authority key identifier: BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 Certificate issuer: /CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Certificate serial: 292876704F87FDDB19B90914365075566BA00C89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 18:48:53 +0000 Manifest this update: Thu 24 Sep 2026 18:43:53 +0000 Manifest next update: Fri 25 Sep 2026 20:10:53 +0000 Files and hashes: 1: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: tDYsDAflbcBxokNCYrVdFRBBRfHA9s3JtNKf99TBDJ4=) 2: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl (hash: U+s4Rz0E9KPghyjWQdfdE36oSGl1GZdCcTtwtBHxV9A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:28:76:70:4f:87:fd:db:19:b9:09:14:36:50:75:56:6b:a0:0c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Validity Not Before: Sep 24 18:43:53 2026 GMT Not After : Sep 25 20:10:53 2026 GMT Subject: CN=CAA2310203CB68B55DADB39D0300C4BEEF867C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:61:59:21:8f:ee:32:78:52:16:09:53:17: 9d:ed:92:bd:47:c6:f2:34:66:01:1c:36:d6:e6:d7: 4a:5c:b7:d9:80:c4:94:f1:d8:a2:54:13:e0:66:27: 57:d5:1b:1d:8e:f9:f6:ea:4b:b9:45:78:0e:c4:c2: 93:08:31:73:9a:c9:09:29:b4:46:b7:1c:40:af:ea: ff:6d:76:32:40:ee:08:4d:40:03:77:fa:c3:b4:5c: 96:05:ab:27:c9:e5:dd:6e:4b:97:cd:ad:3b:62:4d: a6:74:72:f5:e2:14:1c:74:8d:30:d4:79:11:b4:21: 1b:3e:13:84:1e:94:72:d0:6b:78:f9:0e:ce:7b:84: 01:1e:bf:27:62:a8:ec:27:d9:01:89:09:14:e9:62: bf:b0:c0:65:3c:0c:7a:44:6f:87:93:1c:c7:ee:63: 0f:52:cc:5d:14:4c:c5:99:b0:f9:18:86:df:eb:d1: 95:2b:cc:73:5c:04:29:20:dd:d1:52:24:0f:5e:88: ad:1f:6b:84:28:96:70:69:cd:de:b1:7e:88:35:0d: c1:14:37:bb:bb:b7:1d:58:62:e8:9e:59:da:9e:63: cb:32:31:f4:be:07:1a:11:9e:ba:9a:bc:cb:f7:e7: 16:26:9e:88:ba:da:02:fc:9e:6f:1d:dd:e6:a7:a3: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A2:31:02:03:CB:68:B5:5D:AD:B3:9D:03:00:C4:BE:EF:86:7C:49 X509v3 Authority Key Identifier: keyid:BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ac:78:46:25:f5:cb:c9:32:0c:4c:f8:c2:4e:65:60:1e:7c: e3:1f:01:32:ed:96:4e:5e:a4:e9:b9:93:df:ac:88:ba:e6:cd: 46:81:01:f5:42:f3:4b:54:ef:f5:28:18:ce:c5:57:f7:9f:8f: a8:fc:fe:76:f9:fe:a7:43:68:72:ce:32:93:9d:bd:61:ea:50: 1f:9f:59:e1:e2:e0:53:c4:be:ba:2e:6b:a0:ba:b9:6a:a9:ff: 53:fe:a5:36:df:ff:2b:9d:1d:49:97:a1:4a:ce:a1:05:e2:9c: bb:cf:a0:75:ed:cf:1d:27:cb:eb:34:19:5a:19:fe:c0:fc:de: 59:6f:d3:96:c1:32:c7:13:e9:2e:b5:7d:e3:98:ec:10:01:43: 63:0e:66:b5:2c:ce:2b:15:e8:5e:c3:ad:66:d7:46:4e:d8:90: 2e:2e:59:5a:10:26:d8:ba:ce:85:c5:25:16:40:c1:f9:0f:12: ad:f0:df:5e:05:92:a1:18:59:aa:87:6a:73:c8:13:71:4f:62: a8:27:d5:d3:d5:cf:d4:62:95:ff:c8:65:13:e3:6d:72:c0:39: 57:00:f3:4d:53:34:98:24:cb:40:98:92:51:92:85:91:8d:88: 93:a1:6e:54:60:ba:8a:c3:3a:be:67:d5:08:fa:35:77:e6:cc: 00:2b:7f:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKSh2cE+H/dsZuQkUNlB1VmugDIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0NTI4 QTk5RkFGNjAeFw0yNjA5MjQxODQzNTNaFw0yNjA5MjUyMDEwNTNaMDMxMTAvBgNV BAMTKENBQTIzMTAyMDNDQjY4QjU1REFEQjM5RDAzMDBDNEJFRUY4NjdDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGGFZIY/uMnhSFglTF53tkr1H xvI0ZgEcNtbm10pct9mAxJTx2KJUE+BmJ1fVGx2O+fbqS7lFeA7EwpMIMXOayQkp tEa3HECv6v9tdjJA7ghNQAN3+sO0XJYFqyfJ5d1uS5fNrTtiTaZ0cvXiFBx0jTDU eRG0IRs+E4QelHLQa3j5Ds57hAEevydiqOwn2QGJCRTpYr+wwGU8DHpEb4eTHMfu Yw9SzF0UTMWZsPkYht/r0ZUrzHNcBCkg3dFSJA9eiK0fa4QolnBpzd6xfog1DcEU N7u7tx1YYuieWdqeY8syMfS+BxoRnrqavMv35xYmnoi62gL8nm8d3eano8gjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyqIxAgPLaLVdrbOdAwDEvu+GfEkwHwYDVR0j BBgwFoAUvJMXgObwnv3tbT/4PJg0UoqZ+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBF NkYwOUVGREVENkQzRkY4M0M5ODM0NTI4QTk5RkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQzkzMTc4MEU2RjA5RUZERUQ2RDNGRjgzQzk4MzQ1MjhBOTlG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0 NTI4QTk5RkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+seEYl9cvJMgxM+MJOZWAefOMfATLtlk5e pOm5k9+siLrmzUaBAfVC80tU7/UoGM7FV/efj6j8/nb5/qdDaHLOMpOdvWHqUB+f WeHi4FPEvroua6C6uWqp/1P+pTbf/yudHUmXoUrOoQXinLvPoHXtzx0ny+s0GVoZ /sD83llv05bBMscT6S61feOY7BABQ2MOZrUszisV6F7DrWbXRk7YkC4uWVoQJti6 zoXFJRZAwfkPEq3w314FkqEYWaqHanPIE3FPYqgn1dPVz9Rilf/IZRPjbXLAOVcA 801TNJgky0CYklGShZGNiJOhblRguorDOr5n1Qj6NXfmzAArf4I= -----END CERTIFICATE-----Generated at Fri Sep 25 11:00:20 2026 by rpki-client