$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft File: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft (raw, json) Hash identifier: 9gSdh0zmusz6IH3uHyjZZVaQeIZ+FV1UE/vhoa0Fipc= Subject key identifier: 07:B1:E7:4B:F1:65:87:ED:0C:00:1E:FC:BE:6A:BB:0D:46:60:F8:B7 Authority key identifier: B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E Certificate issuer: /CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Certificate serial: 220D686F8294A8C29FACEBE54A7656B46B0569ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:56:46 +0000 Manifest this update: Thu 24 Sep 2026 04:51:46 +0000 Manifest next update: Fri 25 Sep 2026 08:49:46 +0000 Files and hashes: 1: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: GMFkIV2sJittLK9WJRbpUUZTvqKbZ67tY6581Ugt0f0=) 2: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: dKZb6aaVbPeaaWDRCiGgkOh/h5qEP/6edHL6dbBuTxw=) 3: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: dOi5t8zi5JAQodBD98mcsNs1h4au7JIDI+EvfriW4vk=) 4: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: q3EmEpNbHapfK5Arcd9ZblsuZXEZdJPpzKqJnzLo0DY=) 5: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl (hash: RrIBsOMGPrvzEwyKedU292ZgaDtxtr/Kb4CAx+F7/oQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0d:68:6f:82:94:a8:c2:9f:ac:eb:e5:4a:76:56:b4:6b:05:69:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Validity Not Before: Sep 24 04:51:46 2026 GMT Not After : Sep 25 08:49:46 2026 GMT Subject: CN=07B1E74BF16587ED0C001EFCBE6ABB0D4660F8B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:23:10:69:3c:c6:38:40:58:47:4d:59:62: d2:5d:7c:db:ec:8e:1d:dd:fa:35:6c:b4:d6:b4:5c: 46:60:35:57:90:57:aa:3f:8c:7e:e6:de:da:b1:8d: 82:db:d0:f6:e8:71:7b:42:ad:a1:a0:3c:04:f7:e4: 9a:75:09:80:15:3f:6e:53:1e:c1:4a:18:47:dc:99: d8:1a:6d:17:75:36:63:2d:3c:5f:76:1c:a6:05:83: 0c:b8:0d:1d:13:8b:8e:35:d3:d9:ef:43:e5:0e:8c: d2:0f:ce:7c:ec:5a:ec:68:05:8f:ca:9b:23:d5:1f: 9d:fd:58:fb:e0:ac:af:e1:92:2f:ef:9f:5c:73:a0: 25:8d:26:64:a7:9a:19:a9:26:10:3d:d2:7c:d2:46: ce:a4:fa:9c:e6:1f:3a:f7:9f:26:ae:53:83:6f:ab: 23:1e:15:ba:04:04:aa:00:cc:3d:e1:c2:59:4e:9e: a0:47:cb:08:6b:7a:33:b3:53:ce:e7:b3:b0:a4:cc: 5a:6e:1e:de:6a:0c:1a:f9:59:a5:d5:04:4e:a2:40: 89:dd:50:4b:6f:33:d9:9e:e0:15:8e:72:f1:2e:b0: e8:28:aa:a5:f4:a3:f3:fe:61:41:e8:51:c4:ae:1c: d9:e9:f1:f5:af:3b:f3:2e:e1:d0:43:fa:45:bb:5e: 2d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B1:E7:4B:F1:65:87:ED:0C:00:1E:FC:BE:6A:BB:0D:46:60:F8:B7 X509v3 Authority Key Identifier: keyid:B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c7:5a:81:a8:d9:56:b1:ab:3c:91:31:5e:c5:d1:b2:5a:c1: 8a:3e:8d:7d:29:9d:88:7e:ab:ba:60:86:75:c4:11:84:a8:d7: 94:33:31:29:4e:2f:e6:85:5a:74:0d:d3:52:7f:3a:ce:10:5f: f7:b7:68:ac:dc:e5:ed:56:9f:84:d5:5a:9c:6b:32:f7:50:49: 13:fa:76:24:b7:c8:08:91:f3:3e:41:bb:f4:67:e7:d0:67:88: 24:df:21:2d:db:7b:2d:cf:52:59:ef:3f:08:8e:cd:3f:e7:4c: ad:99:ee:98:6d:d5:a7:25:77:44:99:7f:13:a2:ce:d1:2d:b3: a0:b6:aa:7d:17:8b:e7:58:36:a4:7a:d5:18:9d:58:74:a9:38: f4:1b:cd:fc:b1:8e:3d:02:42:1c:0b:be:ad:b0:2a:3b:9a:77: e3:a1:bf:ef:01:18:77:ce:05:c5:ad:47:7d:7c:1e:00:9b:57: 1e:dd:e7:0b:17:de:ce:85:a7:df:d0:67:e2:ee:f3:97:bd:1b: 58:d4:30:e1:49:ed:2a:a0:63:dc:78:31:6d:51:5f:5a:47:e6: dd:03:c8:75:07:7e:00:19:ae:95:09:72:fd:2d:dd:42:d6:1b: c2:de:c1:7a:a8:73:8c:b4:70:b3:97:97:64:1e:28:5c:35:9a: 11:35:ea:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIg1ob4KUqMKfrOvlSnZWtGsFae0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBB QzFGQkY2RTAeFw0yNjA5MjQwNDUxNDZaFw0yNjA5MjUwODQ5NDZaMDMxMTAvBgNV BAMTKDA3QjFFNzRCRjE2NTg3RUQwQzAwMUVGQ0JFNkFCQjBENDY2MEY4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7miMQaTzGOEBYR01ZYtJdfNvs jh3d+jVstNa0XEZgNVeQV6o/jH7m3tqxjYLb0PbocXtCraGgPAT35Jp1CYAVP25T HsFKGEfcmdgabRd1NmMtPF92HKYFgwy4DR0Ti44109nvQ+UOjNIPznzsWuxoBY/K myPVH539WPvgrK/hki/vn1xzoCWNJmSnmhmpJhA90nzSRs6k+pzmHzr3nyauU4Nv qyMeFboEBKoAzD3hwllOnqBHywhrejOzU87ns7CkzFpuHt5qDBr5WaXVBE6iQInd UEtvM9me4BWOcvEusOgoqqX0o/P+YUHoUcSuHNnp8fWvO/Mu4dBD+kW7Xi2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB7HnS/Flh+0MAB78vmq7DUZg+LcwHwYDVR0j BBgwFoAUsWjPo3n06s0V2w73bOvFgKwfv24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIxMjdmZWItOTYxNS00YzU4LWEzYmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3 OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBBQzFGQkY2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTY4Q0ZBMzc5RjRFQUNEMTVEQjBFRjc2Q0VCQzU4MEFDMUZC RjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1 ODBBQzFGQkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbHWoGo2VaxqzyRMV7F0bJawYo+jX0pnYh+ q7pghnXEEYSo15QzMSlOL+aFWnQN01J/Os4QX/e3aKzc5e1Wn4TVWpxrMvdQSRP6 diS3yAiR8z5Bu/Rn59BniCTfIS3bey3PUlnvPwiOzT/nTK2Z7pht1acld0SZfxOi ztEts6C2qn0Xi+dYNqR61RidWHSpOPQbzfyxjj0CQhwLvq2wKjuad+Ohv+8BGHfO BcWtR318HgCbVx7d5wsX3s6Fp9/QZ+Lu85e9G1jUMOFJ7SqgY9x4MW1RX1pH5t0D yHUHfgAZrpUJcv0t3ULWG8LewXqoc4y0cLOXl2QeKFw1mhE16vg= -----END CERTIFICATE-----Generated at Thu Sep 24 21:39:02 2026 by rpki-client