$ rpki-client -vvvf rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft File: B806053521FE6FECB8809B52E561CCCA002004C5.mft (raw, json) Hash identifier: T4vD+ppzMLzqXGIlZQCKZjH6WRODYraAitXiHOmHNnA= Subject key identifier: 94:9B:9B:DF:C3:11:5F:ED:22:92:A3:0B:66:60:A9:58:67:0E:D0:13 Authority key identifier: B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5 Certificate issuer: /CN=B806053521FE6FECB8809B52E561CCCA002004C5 Certificate serial: 02BE42E33C68AD86612A28FA15E8BB2C69997EFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 22:33:28 +0000 Manifest this update: Thu 24 Sep 2026 22:28:28 +0000 Manifest next update: Sat 26 Sep 2026 00:02:28 +0000 Files and hashes: 1: B806053521FE6FECB8809B52E561CCCA002004C5.crl (hash: fG6TUwCeIXrtw8jkMcxWampU+DdrF7WApmz+SYYqf+g=) 2: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: un5iMbvwLLHgZ/gVlHFbug00/xJXBrdaRm/T/UqWjVI=) 3: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: vm98v9W8rSeQ8Av1Tc7EkqP0Z8ZuAgCRGwku9YNKDo0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.crl rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:be:42:e3:3c:68:ad:86:61:2a:28:fa:15:e8:bb:2c:69:99:7e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B806053521FE6FECB8809B52E561CCCA002004C5 Validity Not Before: Sep 24 22:28:28 2026 GMT Not After : Sep 26 00:02:28 2026 GMT Subject: CN=949B9BDFC3115FED2292A30B6660A958670ED013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:94:e1:f0:77:69:63:e4:27:8f:c1:0f:86: e8:ba:9b:43:f8:4c:50:5b:b7:47:09:f3:0c:18:43: 5d:42:e9:51:21:77:8d:7d:55:e3:ff:7c:b8:55:1f: 56:9d:e1:49:38:e2:fb:c6:2b:75:fe:16:ec:86:8f: ba:1c:a3:d2:b7:ca:4d:30:0e:86:06:1c:b9:5f:d0: 8b:92:5b:cc:b3:92:8d:09:08:a9:69:bd:e9:68:7a: 14:21:9e:02:df:fd:f3:e3:ef:97:fd:fc:08:40:2d: 3d:e5:ad:84:73:fb:95:aa:79:82:0a:38:37:5d:2a: 56:cc:ab:6b:d2:9f:99:f0:ba:48:6d:31:fd:aa:57: a2:4d:10:aa:79:4c:58:c0:95:11:c7:39:8d:00:28: 0c:79:7f:86:2b:95:13:ce:5a:23:c4:01:f7:ac:6e: 6e:7b:8e:c2:60:51:4c:9d:bf:61:45:e5:84:b7:72: 91:f4:00:b1:54:a8:9b:af:2d:69:0e:12:72:a2:82: f2:11:40:af:16:9c:e9:78:0b:1b:c1:56:e5:41:6c: cb:19:b8:c5:f1:ce:6b:54:2c:c8:4a:10:29:dc:5e: a3:e3:fa:5a:72:b5:75:89:c1:1d:5d:bd:42:1d:e2: 60:27:ca:a2:e7:c7:7b:b8:c2:7c:d4:7f:a2:19:de: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9B:9B:DF:C3:11:5F:ED:22:92:A3:0B:66:60:A9:58:67:0E:D0:13 X509v3 Authority Key Identifier: keyid:B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:4f:1c:e8:1b:18:4a:1f:72:87:d0:a4:67:1b:84:1d:fe:72: f4:fe:3b:54:f2:59:aa:26:aa:e2:41:6f:5e:24:88:95:9f:cc: 89:a4:87:de:98:e7:b6:a7:7f:1c:bb:6c:3a:9d:bb:d0:e5:fd: 16:b7:58:32:6a:a6:86:66:d4:20:41:b3:e9:67:51:18:75:56: f4:05:c6:f7:88:a8:95:ed:93:90:c9:c4:7d:4c:83:39:b0:76: a6:39:a3:74:92:ba:f8:74:0a:67:fb:14:00:42:a2:1e:e7:46: ad:ca:9d:fd:5c:48:da:bd:34:b0:94:72:a0:cb:09:41:b3:00: cc:ec:dc:df:2b:09:4f:1a:ac:4a:fc:7f:78:24:f5:5f:f4:2c: 45:b3:b0:8f:9a:f0:71:75:79:8f:f7:99:34:d2:8c:a8:ec:16: 9e:7c:ed:17:33:f3:51:e1:81:79:f5:37:fd:14:22:fa:b1:07: d5:31:c2:33:59:79:ab:89:b1:28:44:95:b3:16:f3:5f:05:f5: 6d:16:de:26:fb:52:92:14:b9:5d:57:b2:03:01:75:b2:f2:5e: 5c:52:6a:23:8d:5b:72:21:f7:11:86:76:a4:22:75:70:2a:68: aa:ed:75:e8:13:87:bf:30:ac:13:d9:b0:28:85:65:5a:31:ef: b1:45:ee:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAr5C4zxorYZhKij6Fei7LGmZfv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgwNjA1MzUyMUZFNkZFQ0I4ODA5QjUyRTU2MUNDQ0Ew MDIwMDRDNTAeFw0yNjA5MjQyMjI4MjhaFw0yNjA5MjYwMDAyMjhaMDMxMTAvBgNV BAMTKDk0OUI5QkRGQzMxMTVGRUQyMjkyQTMwQjY2NjBBOTU4NjcwRUQwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vJTh8HdpY+Qnj8EPhui6m0P4 TFBbt0cJ8wwYQ11C6VEhd419VeP/fLhVH1ad4Uk44vvGK3X+FuyGj7oco9K3yk0w DoYGHLlf0IuSW8yzko0JCKlpveloehQhngLf/fPj75f9/AhALT3lrYRz+5WqeYIK ODddKlbMq2vSn5nwukhtMf2qV6JNEKp5TFjAlRHHOY0AKAx5f4YrlRPOWiPEAfes bm57jsJgUUydv2FF5YS3cpH0ALFUqJuvLWkOEnKigvIRQK8WnOl4CxvBVuVBbMsZ uMXxzmtULMhKECncXqPj+lpytXWJwR1dvUId4mAnyqLnx3u4wnzUf6IZ3nOVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlJub38MRX+0ikqMLZmCpWGcO0BMwHwYDVR0j BBgwFoAUuAYFNSH+b+y4gJtS5WHMygAgBMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODEzNjQ1ZDQtNTQzYi00NDRiLWEzYTUtZmRjZDQxODExYzIxLzAvQjgwNjA1MzUy MUZFNkZFQ0I4ODA5QjUyRTU2MUNDQ0EwMDIwMDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODA2MDUzNTIxRkU2RkVDQjg4MDlCNTJFNTYxQ0NDQTAwMjAw NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvQjgwNjA1MzUyMUZFNkZFQ0I4ODA5QjUyRTU2MUND Q0EwMDIwMDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJPHOgbGEofcofQpGcbhB3+cvT+O1TyWaom quJBb14kiJWfzImkh96Y57anfxy7bDqdu9Dl/Ra3WDJqpoZm1CBBs+lnURh1VvQF xveIqJXtk5DJxH1MgzmwdqY5o3SSuvh0Cmf7FABCoh7nRq3Knf1cSNq9NLCUcqDL CUGzAMzs3N8rCU8arEr8f3gk9V/0LEWzsI+a8HF1eY/3mTTSjKjsFp587Rcz81Hh gXn1N/0UIvqxB9UxwjNZeauJsShElbMW818F9W0W3ib7UpIUuV1XsgMBdbLyXlxS aiONW3Ih9xGGdqQidXAqaKrtdegTh78wrBPZsCiFZVox77FF7pY= -----END CERTIFICATE-----Generated at Fri Sep 25 08:34:58 2026 by rpki-client