$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft File: B486D413919D8F20144DB8254040D1237E34B8AA.mft (raw, json) Hash identifier: m63vxJJnmCvRNMztsCcdUAYpBA8xo3bLRlXITsPUm3Q= Subject key identifier: B2:71:B1:6D:8E:EC:3B:A3:F2:2E:7C:50:6E:32:EF:42:04:DE:A3:28 Authority key identifier: B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA Certificate issuer: /CN=B486D413919D8F20144DB8254040D1237E34B8AA Certificate serial: 798C2EE375F0F491E365604587A7B8A8CE68D5B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 08:01:15 +0000 Manifest this update: Wed 23 Sep 2026 07:56:15 +0000 Manifest next update: Thu 24 Sep 2026 10:49:15 +0000 Files and hashes: 1: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: I7JOfc7cIihje61qrOhB8mNIVUiXPbuVCLb1xIG81r0=) 2: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: eldG4bxXfHfHBZuQpQd9deqvI4oVqZUOKXxgD57litE=) 3: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: 7QTUY2NQvJrxF3QQX7LUC6hqv5ttn70Xh40WXHVfruk=) 4: B486D413919D8F20144DB8254040D1237E34B8AA.crl (hash: T35oXCfAw61mLRqEGqqjesD5DjTQCZ05LomUyYT0VhU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8c:2e:e3:75:f0:f4:91:e3:65:60:45:87:a7:b8:a8:ce:68:d5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B486D413919D8F20144DB8254040D1237E34B8AA Validity Not Before: Sep 23 07:56:15 2026 GMT Not After : Sep 24 10:49:15 2026 GMT Subject: CN=B271B16D8EEC3BA3F22E7C506E32EF4204DEA328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:5c:48:fa:f0:09:67:4b:1f:5b:cc:e9:e3: c7:d2:e2:6d:a5:0e:59:cd:e1:b9:d9:56:bd:75:f5: f5:94:1f:fb:aa:c3:18:52:54:28:ff:30:d4:43:f1: 03:3b:e0:5f:e8:6d:9f:0c:2b:34:8d:ae:7d:eb:cd: 5c:c7:0c:21:2e:d8:30:81:73:a3:39:cf:08:79:42: 5d:59:f1:ce:e3:35:02:c7:ab:74:36:25:54:53:34: ab:80:e6:df:b1:e4:c5:82:03:01:ee:a8:57:6c:50: 6d:b3:da:6a:62:42:32:8c:fb:28:db:a5:80:21:a1: d7:35:e4:a2:e6:81:98:5f:6e:85:e6:09:99:b5:14: 40:8b:91:2a:a0:fe:fc:78:dc:f4:46:32:55:05:0b: 39:7a:7c:3b:aa:4b:64:dc:bf:0d:74:2c:f3:b1:69: 91:de:5e:10:5f:09:7c:26:79:96:b0:f6:b3:69:55: a9:ea:a9:4d:80:c6:92:4f:9b:f4:4a:53:1a:26:ea: 0d:c0:c3:44:97:0e:b4:fb:6e:13:34:84:8e:f9:3c: d2:1c:75:05:f3:1e:74:08:47:d3:1d:1c:a9:2f:b1: b2:24:a0:cd:61:b4:09:34:ed:58:fa:b7:eb:c7:1d: c1:e7:d3:0b:95:af:ff:cc:eb:d6:82:33:75:5b:ec: a1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:71:B1:6D:8E:EC:3B:A3:F2:2E:7C:50:6E:32:EF:42:04:DE:A3:28 X509v3 Authority Key Identifier: keyid:B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e7:89:86:18:7e:26:39:48:d7:57:23:05:10:e8:8b:3a:80: 7e:21:5f:b7:ba:bb:9b:54:72:5a:dd:a4:3c:1b:7d:e3:16:81: 8a:91:a2:71:6a:55:74:d3:bd:49:cb:b6:c1:21:10:98:7a:2a: e7:df:51:c0:5d:6b:21:94:96:70:97:a3:10:3f:17:f9:2a:3b: 05:72:28:db:11:38:36:8b:36:31:40:23:9f:50:72:cb:97:b8: e4:9d:8c:c4:43:57:cd:9a:05:5e:03:68:7a:83:20:e5:d3:9a: 0d:35:c0:4d:70:98:e2:2f:61:2e:65:06:5c:44:92:1a:ab:0f: 7b:08:c4:1d:40:0e:77:50:7a:cd:26:6a:5b:7d:aa:6e:2c:20: 2f:5e:5e:5e:6c:a5:89:6c:3a:69:96:a0:84:c2:cd:48:97:7e: e9:14:1d:f7:da:36:51:d5:47:d7:c9:f5:5a:1f:e3:09:e9:4b: ff:87:4c:1d:7a:63:da:75:93:fd:a2:ba:86:96:1a:75:14:76: 06:9d:7c:48:ab:93:78:17:a5:00:17:b1:b9:f5:d8:c1:49:ae: c9:0a:91:d7:58:78:5f:b1:1b:30:54:11:21:47:51:cc:c3:76: fa:35:1c:a5:75:e2:9a:d0:20:a7:11:78:44:f1:27:dd:b8:ee: 74:ee:1f:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYwu43Xw9JHjZWBFh6e4qM5o1bgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3 RTM0QjhBQTAeFw0yNjA5MjMwNzU2MTVaFw0yNjA5MjQxMDQ5MTVaMDMxMTAvBgNV BAMTKEIyNzFCMTZEOEVFQzNCQTNGMjJFN0M1MDZFMzJFRjQyMDRERUEzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwT1xI+vAJZ0sfW8zp48fS4m2l DlnN4bnZVr119fWUH/uqwxhSVCj/MNRD8QM74F/obZ8MKzSNrn3rzVzHDCEu2DCB c6M5zwh5Ql1Z8c7jNQLHq3Q2JVRTNKuA5t+x5MWCAwHuqFdsUG2z2mpiQjKM+yjb pYAhodc15KLmgZhfboXmCZm1FECLkSqg/vx43PRGMlUFCzl6fDuqS2Tcvw10LPOx aZHeXhBfCXwmeZaw9rNpVanqqU2AxpJPm/RKUxom6g3Aw0SXDrT7bhM0hI75PNIc dQXzHnQIR9MdHKkvsbIkoM1htAk07Vj6t+vHHcHn0wuVr//M69aCM3Vb7KFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsnGxbY7sO6PyLnxQbjLvQgTeoygwHwYDVR0j BBgwFoAUtIbUE5GdjyAUTbglQEDRI340uKowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBjMTcxZjQtYmQxMS00OGVkLTg3ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5 MTlEOEYyMDE0NERCODI1NDA0MEQxMjM3RTM0QjhBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDg2RDQxMzkxOUQ4RjIwMTQ0REI4MjU0MDQwRDEyMzdFMzRC OEFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQjQ4NkQ0MTM5MTlEOEYyMDE0NERCODI1NDA0MEQx MjM3RTM0QjhBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHniYYYfiY5SNdXIwUQ6Is6gH4hX7e6u5tU clrdpDwbfeMWgYqRonFqVXTTvUnLtsEhEJh6KuffUcBdayGUlnCXoxA/F/kqOwVy KNsRODaLNjFAI59QcsuXuOSdjMRDV82aBV4DaHqDIOXTmg01wE1wmOIvYS5lBlxE khqrD3sIxB1ADndQes0malt9qm4sIC9eXl5spYlsOmmWoITCzUiXfukUHffaNlHV R9fJ9Vof4wnpS/+HTB16Y9p1k/2iuoaWGnUUdgadfEirk3gXpQAXsbn12MFJrskK kddYeF+xGzBUESFHUczDdvo1HKV14prQIKcReETxJ9247nTuH60= -----END CERTIFICATE-----Generated at Thu Sep 24 03:45:36 2026 by rpki-client