$ rpki-client -vvvf rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft File: B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft (raw, json) Hash identifier: n0iNFGtpTgBVMn68kv/OvM8iWMGRREHj/aNBh7aG57M= Subject key identifier: C3:CF:73:0D:14:5D:8E:E6:B6:E6:89:A0:85:43:54:35:CD:0C:A0:2F Authority key identifier: B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC Certificate issuer: /CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Certificate serial: 1EF87CF29512822DDF799AD242E2A35419426368 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 19:13:54 +0000 Manifest this update: Sat 26 Sep 2026 19:08:54 +0000 Manifest next update: Sun 27 Sep 2026 22:04:54 +0000 Files and hashes: 1: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: c6pFiJSk1UQhVnz9HO0WDm1mZbg2xnGEy69Z/hHQfrI=) 2: B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl (hash: DBZDsh1fPA8BaKsgOJrcTzwePpawXBxg43BrkN3m3YY=) 3: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: lh47cqtqX+UfhZbQx7DPwZTGhdNBwMPbLmUFIaoV1ag=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f8:7c:f2:95:12:82:2d:df:79:9a:d2:42:e2:a3:54:19:42:63:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Validity Not Before: Sep 26 19:08:54 2026 GMT Not After : Sep 27 22:04:54 2026 GMT Subject: CN=C3CF730D145D8EE6B6E689A085435435CD0CA02F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fe:0c:48:67:5b:52:9e:63:0e:fa:37:07:68: 1c:49:01:3d:e2:bb:d8:bc:47:66:b6:9a:b4:76:41: db:b5:b4:68:1e:d2:90:fa:ac:75:09:0e:f3:90:97: c7:d4:04:7a:2b:bc:21:e5:08:2b:cc:c6:b0:bc:2c: b6:c0:db:fc:64:a9:e9:b8:ec:db:01:a5:1f:1d:75: e6:3a:cc:15:8f:2c:34:ef:5b:32:3a:57:8c:51:9d: a5:82:d4:cb:5d:b5:00:b4:56:92:8e:5d:28:63:56: be:13:43:29:d1:cc:7c:b3:39:e7:a7:cb:9c:df:fd: ad:0a:7b:6c:85:d9:8c:80:96:86:f9:d1:97:0a:66: 90:2f:e6:36:90:62:7e:45:cf:86:44:94:e4:ee:52: 2d:e3:bf:ec:0c:78:38:95:2b:9c:fc:98:0d:2c:88: e9:2f:8c:70:56:1b:a1:7d:73:a1:0f:8c:d7:0c:9e: cd:cb:0f:96:37:ad:2f:2b:b8:34:51:77:c3:cd:7b: c8:56:0d:b5:fc:a1:41:c0:27:00:69:06:d6:55:cb: 37:42:56:0a:d9:92:79:0f:21:5e:a3:20:7e:2b:0f: b1:5f:ad:20:fb:a9:87:45:68:c8:7a:83:5b:c2:7a: 90:a4:38:2c:f3:9e:f6:68:fc:f3:5b:9c:66:c1:f6: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CF:73:0D:14:5D:8E:E6:B6:E6:89:A0:85:43:54:35:CD:0C:A0:2F X509v3 Authority Key Identifier: keyid:B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d5:39:9e:43:29:12:d8:70:95:5c:08:9e:60:38:ab:c5:57: 1c:23:b1:85:61:ae:b7:a2:a5:25:f4:b3:68:04:23:0f:46:1b: d2:e5:be:e5:17:f9:2a:4f:bb:1e:e5:7d:9e:14:ce:a2:94:d9: 0f:07:a0:79:7e:3f:63:11:db:20:bd:f4:2b:38:b0:50:c3:67: f8:32:57:94:1e:c8:88:eb:a1:82:3c:29:3f:aa:1c:3f:fe:6b: de:31:5b:5c:db:d9:f5:71:14:b1:2e:c8:a3:10:a3:33:54:55: 2a:ba:9d:ed:08:25:a9:be:38:1e:de:6f:dc:0e:cc:e1:90:01: e5:82:3d:9d:9a:9c:46:0c:59:9c:54:3c:0f:fc:82:8e:20:02: b1:80:71:aa:4e:b6:41:dd:be:40:f3:b4:44:3c:a0:8c:c3:f2: b2:66:2e:80:ee:6a:d8:34:2a:9f:cc:86:3f:1a:b4:b8:8e:3f: 5c:93:d4:10:d0:00:58:1e:3f:dc:b0:6d:8f:ec:59:9c:ef:18: 89:81:bb:82:c7:fc:f4:34:66:0f:4a:27:c1:1b:f5:bf:fc:ab: b2:f8:51:ee:df:5d:2b:ba:a7:09:3f:7d:3b:a9:db:9d:d1:24: de:84:b9:f7:86:1c:b4:f4:52:78:79:24:ac:47:d8:96:83:d7: 89:ec:11:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvh88pUSgi3feZrSQuKjVBlCY2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4 N0FDRURCQzAeFw0yNjA5MjYxOTA4NTRaFw0yNjA5MjcyMjA0NTRaMDMxMTAvBgNV BAMTKEMzQ0Y3MzBEMTQ1RDhFRTZCNkU2ODlBMDg1NDM1NDM1Q0QwQ0EwMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS/gxIZ1tSnmMO+jcHaBxJAT3i u9i8R2a2mrR2Qdu1tGge0pD6rHUJDvOQl8fUBHorvCHlCCvMxrC8LLbA2/xkqem4 7NsBpR8ddeY6zBWPLDTvWzI6V4xRnaWC1MtdtQC0VpKOXShjVr4TQynRzHyzOeen y5zf/a0Ke2yF2YyAlob50ZcKZpAv5jaQYn5Fz4ZElOTuUi3jv+wMeDiVK5z8mA0s iOkvjHBWG6F9c6EPjNcMns3LD5Y3rS8ruDRRd8PNe8hWDbX8oUHAJwBpBtZVyzdC VgrZknkPIV6jIH4rD7FfrSD7qYdFaMh6g1vCepCkOCzznvZo/PNbnGbB9lSzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw89zDRRdjua25omghUNUNc0MoC8wHwYDVR0j BBgwFoAUsukU19QDtFxLvCjjZoR4WIes7bwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVlMjQxNWMtN2Q0Zi00NDI3LTgzMmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdE NDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4N0FDRURCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkU5MTREN0Q0MDNCNDVDNEJCQzI4RTM2Njg0Nzg1ODg3QUNF REJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4 NTg4N0FDRURCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzVOZ5DKRLYcJVcCJ5gOKvFVxwjsYVhrrei pSX0s2gEIw9GG9LlvuUX+SpPux7lfZ4UzqKU2Q8HoHl+P2MR2yC99Cs4sFDDZ/gy V5QeyIjroYI8KT+qHD/+a94xW1zb2fVxFLEuyKMQozNUVSq6ne0IJam+OB7eb9wO zOGQAeWCPZ2anEYMWZxUPA/8go4gArGAcapOtkHdvkDztEQ8oIzD8rJmLoDuatg0 Kp/Mhj8atLiOP1yT1BDQAFgeP9ywbY/sWZzvGImBu4LH/PQ0Zg9KJ8Eb9b/8q7L4 Ue7fXSu6pwk/fTup253RJN6EufeGHLT0Unh5JKxH2JaD14nsEfI= -----END CERTIFICATE-----Generated at Sun Sep 27 14:08:05 2026 by rpki-client