$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft File: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft (raw, json) Hash identifier: QyhV/I2/Q2dLVEF5kP3gfEUs5A6d9xwD695f5jDmlE4= Subject key identifier: CD:63:08:C1:C8:2F:16:67:1E:54:81:B1:C8:1A:A5:D1:23:FC:D1:42 Authority key identifier: B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E Certificate issuer: /CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Certificate serial: 62900442325F5723FCAEEAD6DED97655189FDE7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 00:51:06 +0000 Manifest this update: Fri 25 Sep 2026 00:46:06 +0000 Manifest next update: Sat 26 Sep 2026 04:31:06 +0000 Files and hashes: 1: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: GMFkIV2sJittLK9WJRbpUUZTvqKbZ67tY6581Ugt0f0=) 2: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl (hash: /vS91KY2bQdzkMnqepA62WXZTaQQQTCZShoxpiyW3jo=) 3: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: dKZb6aaVbPeaaWDRCiGgkOh/h5qEP/6edHL6dbBuTxw=) 4: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: dOi5t8zi5JAQodBD98mcsNs1h4au7JIDI+EvfriW4vk=) 5: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: q3EmEpNbHapfK5Arcd9ZblsuZXEZdJPpzKqJnzLo0DY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:90:04:42:32:5f:57:23:fc:ae:ea:d6:de:d9:76:55:18:9f:de:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Validity Not Before: Sep 25 00:46:06 2026 GMT Not After : Sep 26 04:31:06 2026 GMT Subject: CN=CD6308C1C82F16671E5481B1C81AA5D123FCD142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:05:31:c7:6e:75:62:73:c3:f3:aa:d4:08: bd:35:70:f7:f9:32:78:48:13:d9:7c:0a:f6:0a:26: 74:29:6f:1f:fd:c0:62:34:f1:69:0e:b2:be:c9:5f: 14:ed:b5:24:98:97:33:2d:6d:99:13:cf:a6:d6:8f: 50:45:37:c0:c5:42:de:f1:96:25:2e:c2:96:ec:f9: aa:6a:69:bc:58:0e:36:27:05:0c:ee:bc:83:7e:bb: df:cc:7d:96:28:6e:c8:c9:be:fd:52:1a:d6:60:4b: 9c:30:f3:ff:09:55:56:c3:21:d5:e6:4f:40:75:62: 25:b3:40:a7:46:78:f3:b0:8a:7e:c5:86:f2:29:58: f7:fd:8a:15:62:e3:48:04:0d:c1:11:6d:28:7c:52: c2:33:eb:e8:5d:a4:c9:97:e6:d8:95:5a:c8:09:74: dc:0a:b5:36:e4:3b:e8:03:6f:b4:48:b0:19:49:4e: dc:26:e6:4b:e8:a6:6f:82:da:60:65:80:97:15:f3: 6e:1a:6b:66:18:c3:b8:25:04:db:78:cf:8b:60:60: 7f:cd:d0:2f:85:28:75:0c:f5:f7:27:39:98:56:8e: 27:da:bf:60:be:24:7b:ae:bb:69:ea:3f:c1:55:91: f9:a5:90:79:bd:69:1a:f5:45:69:46:cd:b8:dd:4e: 31:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:63:08:C1:C8:2F:16:67:1E:54:81:B1:C8:1A:A5:D1:23:FC:D1:42 X509v3 Authority Key Identifier: keyid:B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ac:fe:01:0c:36:6a:18:44:03:6e:74:c7:48:bc:e8:2c:32: 02:8d:89:f4:a7:d2:21:16:16:e6:e1:54:5f:39:84:a9:5b:f6: fe:bb:b5:e6:9a:0b:57:0f:b7:29:67:f9:a8:14:6c:a5:2b:0a: 24:ed:b7:f5:34:32:00:49:28:10:36:1b:66:be:d4:61:d5:3f: cd:e5:5d:ef:61:2f:f8:ef:42:5a:dc:34:7a:ef:18:25:21:45: 70:84:24:9b:e2:76:30:4e:9f:29:91:92:38:c4:e0:19:db:8e: 49:e8:dd:80:94:9e:69:7a:91:8d:08:ce:fb:87:2c:5e:04:1f: 5a:5e:4d:df:f8:c9:d1:70:6e:6b:e2:a8:6c:4d:32:4c:4e:07: 57:fc:63:b8:d5:72:2e:af:96:10:1c:a7:0f:4d:55:8e:19:5e: 77:f5:49:45:c0:79:c6:40:d7:7f:fa:8a:0a:b0:dd:30:f2:0b: e8:d2:9c:4c:81:83:4e:03:09:ad:76:79:fa:45:5d:33:d6:20: 09:b8:a2:e4:8d:57:10:21:64:6d:a2:40:7d:0e:ef:81:1c:77: 32:96:27:e6:e1:b6:22:c2:83:6a:91:c7:ba:0a:8f:c3:2a:01: 72:93:80:ca:cb:ef:a6:80:b0:11:f5:97:b1:84:46:18:fc:e9: f2:b2:36:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpAEQjJfVyP8rurW3tl2VRif3nswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBB QzFGQkY2RTAeFw0yNjA5MjUwMDQ2MDZaFw0yNjA5MjYwNDMxMDZaMDMxMTAvBgNV BAMTKENENjMwOEMxQzgyRjE2NjcxRTU0ODFCMUM4MUFBNUQxMjNGQ0QxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2gUxx251YnPD86rUCL01cPf5 MnhIE9l8CvYKJnQpbx/9wGI08WkOsr7JXxTttSSYlzMtbZkTz6bWj1BFN8DFQt7x liUuwpbs+apqabxYDjYnBQzuvIN+u9/MfZYobsjJvv1SGtZgS5ww8/8JVVbDIdXm T0B1YiWzQKdGePOwin7FhvIpWPf9ihVi40gEDcERbSh8UsIz6+hdpMmX5tiVWsgJ dNwKtTbkO+gDb7RIsBlJTtwm5kvopm+C2mBlgJcV824aa2YYw7glBNt4z4tgYH/N 0C+FKHUM9fcnOZhWjifav2C+JHuuu2nqP8FVkfmlkHm9aRr1RWlGzbjdTjFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzWMIwcgvFmceVIGxyBql0SP80UIwHwYDVR0j BBgwFoAUsWjPo3n06s0V2w73bOvFgKwfv24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIxMjdmZWItOTYxNS00YzU4LWEzYmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3 OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBBQzFGQkY2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTY4Q0ZBMzc5RjRFQUNEMTVEQjBFRjc2Q0VCQzU4MEFDMUZC RjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1 ODBBQzFGQkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIes/gEMNmoYRANudMdIvOgsMgKNifSn0iEW FubhVF85hKlb9v67teaaC1cPtyln+agUbKUrCiTtt/U0MgBJKBA2G2a+1GHVP83l Xe9hL/jvQlrcNHrvGCUhRXCEJJvidjBOnymRkjjE4Bnbjkno3YCUnml6kY0IzvuH LF4EH1peTd/4ydFwbmviqGxNMkxOB1f8Y7jVci6vlhAcpw9NVY4ZXnf1SUXAecZA 13/6igqw3TDyC+jSnEyBg04DCa12efpFXTPWIAm4ouSNVxAhZG2iQH0O74EcdzKW J+bhtiLCg2qRx7oKj8MqAXKTgMrL76aAsBH1l7GERhj86fKyNrk= -----END CERTIFICATE-----Generated at Fri Sep 25 19:31:56 2026 by rpki-client