$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft File: B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft (raw, json) Hash identifier: BoSvi3Tf8v9L/AcHaXJe71YjlgpnmA1QgHp+9cB59UM= Subject key identifier: 4C:0B:88:7F:58:13:62:D9:D1:63:01:3A:F0:7C:DB:98:0F:58:F2:C3 Authority key identifier: B0:30:51:7A:0B:1B:D6:5F:BF:EE:74:83:84:96:29:9F:0B:A0:5F:7F Certificate issuer: /CN=B030517A0B1BD65FBFEE74838496299F0BA05F7F Certificate serial: 5D63C636BD97FA60C87D637BD6CA12EFDA05345D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft Manifest number: C8 Signing time: Mon 28 Sep 2026 19:34:04 +0000 Manifest this update: Mon 28 Sep 2026 19:29:04 +0000 Manifest next update: Tue 29 Sep 2026 21:39:04 +0000 Files and hashes: 1: B030517A0B1BD65FBFEE74838496299F0BA05F7F.crl (hash: Ms0RgKsfsGyoUI0SZsRo7X3BULRMYS0wRrBjsPSqI0s=) 2: 3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (hash: CiiqdwBZAVnGMR0qtGMfauV+tUH3q+Pz/RWqgcuzqbE=) 3: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (hash: t30njUzebXe3AxcuIduvUxjNgMCTv9/yxa80hivgvRU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.crl rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:63:c6:36:bd:97:fa:60:c8:7d:63:7b:d6:ca:12:ef:da:05:34:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B030517A0B1BD65FBFEE74838496299F0BA05F7F Validity Not Before: Sep 28 19:29:04 2026 GMT Not After : Sep 29 21:39:04 2026 GMT Subject: CN=4C0B887F581362D9D163013AF07CDB980F58F2C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:b2:f2:34:60:63:b0:b0:48:14:4f:11:58: 4f:20:38:0b:e0:76:84:69:ea:f8:94:49:66:a8:fa: ff:25:a7:1e:bf:b6:96:82:3f:16:7d:4b:84:61:bf: 63:f0:67:c8:0a:10:e0:e0:d5:74:2b:4c:83:f9:bd: 4b:16:6f:47:50:db:54:e4:07:fc:3f:0d:f0:8e:db: 68:40:30:2a:82:e8:1a:00:da:08:7b:bc:6d:ce:ec: ef:ee:0d:88:a8:d8:43:93:18:a8:4c:33:6d:cc:d9: 18:3d:17:27:0b:fb:0e:5b:8a:56:5a:ba:2e:6c:55: de:88:b4:16:e8:cf:9e:ab:37:dd:96:fa:28:78:80: a3:ff:2a:b2:c2:66:a4:37:f4:65:1a:2e:17:49:af: 6d:fe:23:54:e5:6b:bc:83:8a:53:57:f4:6a:e8:8a: ad:91:e4:bd:1d:42:fc:3f:f5:5a:55:5e:8b:44:fb: 91:f0:2a:e2:53:00:3d:77:51:8e:08:ec:a2:dc:eb: b2:7c:98:b4:80:a3:a8:48:ff:0b:f0:57:a7:99:63: 9b:c9:c8:f1:3e:4a:f4:30:85:b7:65:9e:73:c2:1e: 7d:90:82:ef:1e:d0:6c:6f:8b:36:5e:c3:cc:29:94: 59:e0:4e:63:7d:d7:44:da:e1:55:33:20:b4:83:bf: 11:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0B:88:7F:58:13:62:D9:D1:63:01:3A:F0:7C:DB:98:0F:58:F2:C3 X509v3 Authority Key Identifier: keyid:B0:30:51:7A:0B:1B:D6:5F:BF:EE:74:83:84:96:29:9F:0B:A0:5F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:dd:2d:b4:32:45:a9:e5:01:24:7e:e5:eb:81:4c:e4:f6:90: 1b:fb:bf:33:30:15:5c:06:8f:af:b2:6c:8e:03:08:e8:02:6f: 24:49:13:50:4b:46:db:f9:55:5b:f0:f5:95:de:38:ef:e0:40: dd:be:3f:cd:69:b5:46:c0:8c:9f:10:9a:ee:65:79:5d:46:54: fd:a9:33:63:e4:19:05:21:86:ed:8a:2f:73:da:12:c1:14:32: 36:b1:04:d8:a3:5a:8f:c9:41:e0:1b:bb:89:6e:32:e9:73:8e: 64:e6:e4:2f:b1:a6:34:3a:9f:48:16:8c:15:3e:a2:8a:67:3e: 22:9a:05:a6:ee:a3:0d:85:12:95:91:16:ab:d6:3d:71:aa:3d: ea:ea:c0:0b:3a:61:d8:27:4e:12:d6:f7:38:23:dc:de:4c:5f: d4:ab:9c:63:32:9d:bd:e7:86:e7:d6:cc:2d:ca:4f:84:69:a9: 6e:27:c2:65:8a:a9:72:32:31:30:3d:14:a7:b6:5b:cc:30:f4: 15:56:a1:8f:34:cd:bb:ae:82:f2:02:bc:58:18:68:b3:25:6f: d1:57:62:2d:a7:b0:b6:fa:b7:41:83:79:2e:d6:58:46:03:54: c5:5a:6f:97:ec:08:65:b1:a3:8d:09:5a:6a:25:cd:8c:84:ad: 4c:a2:21:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWPGNr2X+mDIfWN71soS79oFNF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjAzMDUxN0EwQjFCRDY1RkJGRUU3NDgzODQ5NjI5OUYw QkEwNUY3RjAeFw0yNjA5MjgxOTI5MDRaFw0yNjA5MjkyMTM5MDRaMDMxMTAvBgNV BAMTKDRDMEI4ODdGNTgxMzYyRDlEMTYzMDEzQUYwN0NEQjk4MEY1OEYyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCax7LyNGBjsLBIFE8RWE8gOAvg doRp6viUSWao+v8lpx6/tpaCPxZ9S4Rhv2PwZ8gKEODg1XQrTIP5vUsWb0dQ21Tk B/w/DfCO22hAMCqC6BoA2gh7vG3O7O/uDYio2EOTGKhMM23M2Rg9FycL+w5bilZa ui5sVd6ItBboz56rN92W+ih4gKP/KrLCZqQ39GUaLhdJr23+I1Tla7yDilNX9Gro iq2R5L0dQvw/9VpVXotE+5HwKuJTAD13UY4I7KLc67J8mLSAo6hI/wvwV6eZY5vJ yPE+SvQwhbdlnnPCHn2Qgu8e0GxvizZew8wplFngTmN910Ta4VUzILSDvxEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTAuIf1gTYtnRYwE68HzbmA9Y8sMwHwYDVR0j BBgwFoAUsDBRegsb1l+/7nSDhJYpnwugX38wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFlMDA3NzktNGEzOS00N2YwLTgzMzgtNDRmODhjMjkxNzA2LzAvQjAzMDUxN0Ew QjFCRDY1RkJGRUU3NDgzODQ5NjI5OUYwQkEwNUY3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMDMwNTE3QTBCMUJENjVGQkZFRTc0ODM4NDk2Mjk5RjBCQTA1 RjdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFlMDA3NzktNGEzOS00N2YwLTgz MzgtNDRmODhjMjkxNzA2LzAvQjAzMDUxN0EwQjFCRDY1RkJGRUU3NDgzODQ5NjI5 OUYwQkEwNUY3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvdLbQyRanlASR+5euBTOT2kBv7vzMwFVwG j6+ybI4DCOgCbyRJE1BLRtv5VVvw9ZXeOO/gQN2+P81ptUbAjJ8Qmu5leV1GVP2p M2PkGQUhhu2KL3PaEsEUMjaxBNijWo/JQeAbu4luMulzjmTm5C+xpjQ6n0gWjBU+ oopnPiKaBabuow2FEpWRFqvWPXGqPerqwAs6YdgnThLW9zgj3N5MX9SrnGMynb3n hufWzC3KT4RpqW4nwmWKqXIyMTA9FKe2W8ww9BVWoY80zbuugvICvFgYaLMlb9FX Yi2nsLb6t0GDeS7WWEYDVMVab5fsCGWxo40JWmolzYyErUyiITU= -----END CERTIFICATE-----Generated at Tue Sep 29 09:16:22 2026 by rpki-client