$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft File: B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft (raw, json) Hash identifier: jLfbcWg/p+JrgSttPT3fWLlkz2x83YRUyPPhVDv3Diw= Subject key identifier: 14:48:77:84:8B:60:D7:18:D6:B4:BE:8D:88:06:B8:DE:C1:49:74:50 Authority key identifier: B8:4C:63:BE:F8:B2:6A:45:95:EC:8A:50:0B:A5:15:4E:3A:6B:0F:60 Certificate issuer: /CN=B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60 Certificate serial: 54148308F5F9BA34A33B0A3CFFDCF6417E244DFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 21:52:38 +0000 Manifest this update: Fri 25 Sep 2026 21:47:38 +0000 Manifest next update: Sun 27 Sep 2026 00:27:38 +0000 Files and hashes: 1: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: 6lqWNKAt2XmMr/8ZP7Y7ImCHg1Wbbj2dB1ROb8aS1r0=) 2: B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.crl (hash: 23EfPPlBdgpQVnhwfZPVzib6//WeNA4O21sQf0gSlhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.crl rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 00:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:14:83:08:f5:f9:ba:34:a3:3b:0a:3c:ff:dc:f6:41:7e:24:4d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60 Validity Not Before: Sep 25 21:47:38 2026 GMT Not After : Sep 27 00:27:38 2026 GMT Subject: CN=144877848B60D718D6B4BE8D8806B8DEC1497450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1a:e7:f5:d5:a4:6c:a3:5a:c1:0c:de:60:10: 9b:c9:46:2a:5b:21:0d:91:74:14:81:3d:44:0a:df: 8a:65:dd:c4:2b:5f:d1:9d:6c:2a:17:85:a7:cc:79: 19:14:00:5c:be:e4:31:38:0a:6f:fb:24:db:49:3f: 7c:e0:8f:9a:1a:0b:28:88:11:ab:28:da:82:67:9d: 4d:88:d7:8a:07:be:dc:c6:f1:6c:ea:47:ac:f4:09: 9b:d4:f7:4e:f0:60:d5:fe:94:aa:4c:66:90:94:22: b1:83:35:f6:73:49:19:05:e4:e1:8f:67:bf:9a:31: 09:e3:a0:c6:4b:b5:99:7e:f5:93:ea:87:ec:1f:d2: 87:06:59:2e:f2:8e:bc:3f:b0:00:74:7c:07:12:98: d5:be:8d:4f:28:1b:2f:8e:48:b1:ab:b0:d7:c7:c9: 25:6b:39:6e:e9:22:19:1f:b7:f9:db:af:90:ca:af: 7f:64:80:06:d7:e3:af:b0:7c:f3:ee:6f:c1:01:05: 30:7c:19:8b:ea:ce:54:8c:a2:da:81:3e:8e:86:4e: 01:0f:d0:10:93:9e:7d:6d:a6:80:f6:a8:0e:ac:14: 09:59:94:60:b4:d1:a2:14:50:01:81:0d:1f:7d:ed: f7:17:83:cb:12:7e:f5:4e:71:18:88:5e:bd:04:ab: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:48:77:84:8B:60:D7:18:D6:B4:BE:8D:88:06:B8:DE:C1:49:74:50 X509v3 Authority Key Identifier: keyid:B8:4C:63:BE:F8:B2:6A:45:95:EC:8A:50:0B:A5:15:4E:3A:6B:0F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/B84C63BEF8B26A4595EC8A500BA5154E3A6B0F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:58:33:4c:fb:22:00:9b:ca:03:83:a0:ee:11:1f:d8:8c:47: a9:0b:0a:20:d2:eb:b0:6d:7f:ad:1f:cd:ca:da:0d:43:20:b4: f5:65:66:ba:8f:40:96:42:3c:4c:d1:6d:71:b7:c2:d8:a0:15: d4:3f:7b:1f:16:98:f3:27:38:06:e2:ee:51:67:73:0b:3b:c6: cf:2c:80:45:e6:2d:3d:53:9f:b8:68:a1:9f:43:71:b8:b6:05: 67:02:fa:9d:61:19:c8:cd:53:ad:70:56:6f:f5:ae:b4:ea:c5: 53:96:f5:4b:be:6a:f1:30:04:9c:8c:a2:d6:59:9f:94:f1:6a: e6:0b:71:ea:e6:fb:a0:d2:9f:a4:59:74:36:d9:77:02:db:34: 24:6b:d6:21:4b:00:cc:36:1e:d9:b2:8b:8b:db:aa:25:22:de: 63:b5:98:e7:40:d7:fd:4f:58:6e:99:1b:f1:ce:74:95:3f:92: 34:ed:47:7a:d2:ab:eb:e3:12:37:0c:da:a0:d6:d0:68:c8:75: af:d7:f1:80:3e:e7:12:ee:40:08:ac:aa:cf:53:b2:83:bf:d3: ef:e4:49:4b:be:05:2c:aa:74:ac:78:d0:c3:36:cc:08:6e:08: 23:16:48:40:dd:8c:ff:7b:8d:fc:cc:2d:59:7a:18:50:04:06: 1d:32:c7:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBSDCPX5ujSjOwo8/9z2QX4kTfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0QzYzQkVGOEIyNkE0NTk1RUM4QTUwMEJBNTE1NEUz QTZCMEY2MDAeFw0yNjA5MjUyMTQ3MzhaFw0yNjA5MjcwMDI3MzhaMDMxMTAvBgNV BAMTKDE0NDg3Nzg0OEI2MEQ3MThENkI0QkU4RDg4MDZCOERFQzE0OTc0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMGuf11aRso1rBDN5gEJvJRipb IQ2RdBSBPUQK34pl3cQrX9GdbCoXhafMeRkUAFy+5DE4Cm/7JNtJP3zgj5oaCyiI Easo2oJnnU2I14oHvtzG8WzqR6z0CZvU907wYNX+lKpMZpCUIrGDNfZzSRkF5OGP Z7+aMQnjoMZLtZl+9ZPqh+wf0ocGWS7yjrw/sAB0fAcSmNW+jU8oGy+OSLGrsNfH ySVrOW7pIhkft/nbr5DKr39kgAbX46+wfPPub8EBBTB8GYvqzlSMotqBPo6GTgEP 0BCTnn1tpoD2qA6sFAlZlGC00aIUUAGBDR997fcXg8sSfvVOcRiIXr0Eq2RnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFEh3hItg1xjWtL6NiAa43sFJdFAwHwYDVR0j BBgwFoAUuExjvviyakWV7IpQC6UVTjprD2AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjU2NWExY2YtMjk1MC00N2RjLWEyMTItZjY1M2I4YzNmNWE5LzAvQjg0QzYzQkVG OEIyNkE0NTk1RUM4QTUwMEJBNTE1NEUzQTZCMEY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODRDNjNCRUY4QjI2QTQ1OTVFQzhBNTAwQkE1MTU0RTNBNkIw RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQjg0QzYzQkVGOEIyNkE0NTk1RUM4QTUwMEJBNTE1 NEUzQTZCMEY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVYM0z7IgCbygODoO4RH9iMR6kLCiDS67Bt f60fzcraDUMgtPVlZrqPQJZCPEzRbXG3wtigFdQ/ex8WmPMnOAbi7lFncws7xs8s gEXmLT1Tn7hooZ9Dcbi2BWcC+p1hGcjNU61wVm/1rrTqxVOW9Uu+avEwBJyMotZZ n5TxauYLcerm+6DSn6RZdDbZdwLbNCRr1iFLAMw2Htmyi4vbqiUi3mO1mOdA1/1P WG6ZG/HOdJU/kjTtR3rSq+vjEjcM2qDW0GjIda/X8YA+5xLuQAisqs9TsoO/0+/k SUu+BSyqdKx40MM2zAhuCCMWSEDdjP97jfzMLVl6GFAEBh0yxxQ= -----END CERTIFICATE-----Generated at Sat Sep 26 18:13:50 2026 by rpki-client