$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft File: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft (raw, json) Hash identifier: st5X6lExvTxOSktM90MkCaIORanRt/P+/LywAb4dBo8= Subject key identifier: 4D:B9:B0:42:87:D7:58:70:BE:4E:8E:97:3A:A3:9E:3F:05:65:9E:F1 Authority key identifier: B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5 Certificate issuer: /CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5 Certificate serial: 0E9E667E630F5DD7A8CFAFEFAAE4A34699DE2FE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 17:06:52 +0000 Manifest this update: Thu 24 Sep 2026 17:01:52 +0000 Manifest next update: Fri 25 Sep 2026 20:10:52 +0000 Files and hashes: 1: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl (hash: NAJAizNBQbec5fvnBh9GFfJT++8Z7TH5HK7sujFHrSg=) 2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: hZL/hi6Qgsw4sgW/mhx3uNInW8MyX4I+jFDzsHcP8Z4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9e:66:7e:63:0f:5d:d7:a8:cf:af:ef:aa:e4:a3:46:99:de:2f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5 Validity Not Before: Sep 24 17:01:52 2026 GMT Not After : Sep 25 20:10:52 2026 GMT Subject: CN=4DB9B04287D75870BE4E8E973AA39E3F05659EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:11:4b:46:c0:bb:cf:66:df:9a:cd:a6:fa:2e: b5:87:cb:5e:91:bd:7f:c6:53:a8:90:3d:18:7e:03: 02:00:52:7f:6e:33:28:f0:cc:9a:66:54:c2:28:19: a0:99:a1:4c:8b:df:34:f9:68:06:4e:ea:da:06:14: b2:31:07:0e:eb:27:b0:80:91:5f:1a:15:cc:6c:81: 0d:a6:9c:67:57:da:89:45:25:22:45:88:71:18:2e: 19:bb:9a:f9:49:1b:2d:47:af:c9:11:f8:2a:dd:98: fa:34:77:60:19:3d:cb:57:b8:d1:ba:01:26:ed:2c: 56:61:ac:bf:5a:72:54:c3:0f:51:36:d2:14:c0:8b: 56:42:be:44:48:f3:69:98:61:11:5a:f7:e8:f9:80: 12:53:4a:a0:8e:c5:81:3c:65:6f:b2:0f:1b:e8:42: 7b:fe:50:de:3c:0d:62:ed:0f:cd:60:54:53:f6:a4: 52:2a:39:da:40:bf:55:5a:06:bf:55:53:fe:12:99: c9:0a:fa:87:53:20:e8:e6:9c:90:5f:20:2a:9c:8d: c1:be:2a:9e:40:99:24:da:6b:48:15:31:b2:5b:61: e3:91:5f:10:a7:01:2f:f4:a5:ca:dc:0a:95:21:2e: 3c:3c:73:e5:94:02:50:ec:71:97:3d:3d:19:fe:1a: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B9:B0:42:87:D7:58:70:BE:4E:8E:97:3A:A3:9E:3F:05:65:9E:F1 X509v3 Authority Key Identifier: keyid:B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:79:1d:1c:be:04:9a:dc:32:98:94:40:2f:53:8e:68:32:fd: 47:0e:13:d1:11:84:a7:72:8b:69:8c:3e:9a:45:c3:4a:3a:8b: 20:a3:f0:d1:b8:52:0e:95:23:b1:0e:85:d4:75:b4:67:b4:e7: 6b:2a:bb:62:bd:4f:8f:1f:b0:3d:15:61:db:b9:16:21:04:49: 8f:43:fc:2d:c7:9e:f8:06:26:7d:c3:3f:c1:60:e3:2a:5a:1a: 7c:eb:c5:83:6a:4c:de:82:55:07:1e:53:c8:06:77:ff:9b:0c: 3d:6d:3f:72:f2:f0:68:fa:e4:7d:58:78:e4:4d:29:64:d8:5a: 10:a6:ac:0e:38:de:4d:f1:e8:fb:2b:bc:82:ec:c5:17:6f:24: 93:68:21:65:c0:c8:9f:f2:22:51:55:fd:62:0d:f9:1c:c0:71: 11:d0:4b:3d:60:4b:b4:cf:6e:0a:92:88:99:26:bc:17:60:05: eb:10:fd:c9:50:8f:08:92:cd:04:de:e8:77:f0:54:45:52:b3: 8c:f5:33:91:70:e0:82:80:c5:76:cc:17:bb:10:8b:1e:be:44: 1a:a6:dc:fe:09:44:bf:9d:7a:fb:51:41:26:28:9e:5a:b3:06: 6e:46:97:b6:1c:8d:e0:4c:35:c3:1f:a3:86:cf:b1:34:7e:05: e3:b1:28:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDp5mfmMPXdeoz6/vquSjRpneL+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBRTdENzlCMjI5NTY1REI1QTlDNEU3NENEMDM4RTUz Rjk4NEJGNTAeFw0yNjA5MjQxNzAxNTJaFw0yNjA5MjUyMDEwNTJaMDMxMTAvBgNV BAMTKDREQjlCMDQyODdENzU4NzBCRTRFOEU5NzNBQTM5RTNGMDU2NTlFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjEUtGwLvPZt+azab6LrWHy16R vX/GU6iQPRh+AwIAUn9uMyjwzJpmVMIoGaCZoUyL3zT5aAZO6toGFLIxBw7rJ7CA kV8aFcxsgQ2mnGdX2olFJSJFiHEYLhm7mvlJGy1Hr8kR+CrdmPo0d2AZPctXuNG6 ASbtLFZhrL9aclTDD1E20hTAi1ZCvkRI82mYYRFa9+j5gBJTSqCOxYE8ZW+yDxvo Qnv+UN48DWLtD81gVFP2pFIqOdpAv1VaBr9VU/4SmckK+odTIOjmnJBfICqcjcG+ Kp5AmSTaa0gVMbJbYeORXxCnAS/0pcrcCpUhLjw8c+WUAlDscZc9PRn+GngpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTbmwQofXWHC+To6XOqOePwVlnvEwHwYDVR0j BBgwFoAUta59ebIpVl21qcTnTNA45T+YS/UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjNzM5NmMtNGJiZS00YzZlLThmNTAtNDQyYzIwNWUwNzBjLzAvQjVBRTdENzlC MjI5NTY1REI1QTlDNEU3NENEMDM4RTUzRjk4NEJGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUFFN0Q3OUIyMjk1NjVEQjVBOUM0RTc0Q0QwMzhFNTNGOTg0 QkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvQjVBRTdENzlCMjI5NTY1REI1QTlDNEU3NENEMDM4 RTUzRjk4NEJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHV5HRy+BJrcMpiUQC9Tjmgy/UcOE9ERhKdy i2mMPppFw0o6iyCj8NG4Ug6VI7EOhdR1tGe052squ2K9T48fsD0VYdu5FiEESY9D /C3HnvgGJn3DP8Fg4ypaGnzrxYNqTN6CVQceU8gGd/+bDD1tP3Ly8Gj65H1YeORN KWTYWhCmrA443k3x6PsrvILsxRdvJJNoIWXAyJ/yIlFV/WIN+RzAcRHQSz1gS7TP bgqSiJkmvBdgBesQ/clQjwiSzQTe6HfwVEVSs4z1M5Fw4IKAxXbMF7sQix6+RBqm 3P4JRL+devtRQSYonlqzBm5Gl7YcjeBMNcMfo4bPsTR+BeOxKDA= -----END CERTIFICATE-----Generated at Fri Sep 25 14:18:58 2026 by rpki-client