$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft File: B9E54455BBADEE4051F79D907B7453E95F13B467.mft (raw, json) Hash identifier: ZbHHp/nCMnyzM/WGqAXNDd09TMyFTWAJ+pJC/cr7SWs= Subject key identifier: CB:D5:3B:78:D8:BB:0D:D4:5F:20:16:B7:31:A6:72:C1:32:A8:16:6F Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67 Certificate issuer: /CN=B9E54455BBADEE4051F79D907B7453E95F13B467 Certificate serial: 6506B90CBE90663D4C5993C47309A60DBD40EBAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 21:42:59 +0000 Manifest this update: Wed 23 Sep 2026 21:37:59 +0000 Manifest next update: Fri 25 Sep 2026 01:30:59 +0000 Files and hashes: 1: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: 7pPEEFuxF2xingEKFsHlopxNVPNMkufYI24t0NlMTEY=) 2: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: /KOgzrDFq/tIyDOkqLi1nhsbulS+0UUYSYry8OoTmJg=) 3: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: UedpVAHn21ooqLw8ovvpIgJ1soqSurJAxq23sQ+qlfw=) 4: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: vFfmqz/S7K4aLguWPn5rp+ugEbZkxGvqsu4n1XKxUAg=) 5: B9E54455BBADEE4051F79D907B7453E95F13B467.crl (hash: lmjL9FC6UvgWiJ8VLImS/7Y5v+4ExPqbSKijn0MR8zM=) 6: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: Mm+87+26OdYLR0WzbeBFR1Yx08pPggtvOd7SnjyjkXk=) 7: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: 2snLe8yK3Bohn4tsm/dGVrhksjjX4tISeXo0oWw/2NQ=) 8: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: 8BxjP7wp2ny7XMMIeYWn2YhapQVIdzgBdHrT8RAE1hI=) 9: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: wr2AUAIBj15wOmk+O8JERfUGMC5W1ujwy25yjBMhvGA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:06:b9:0c:be:90:66:3d:4c:59:93:c4:73:09:a6:0d:bd:40:eb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467 Validity Not Before: Sep 23 21:37:59 2026 GMT Not After : Sep 25 01:30:59 2026 GMT Subject: CN=CBD53B78D8BB0DD45F2016B731A672C132A8166F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:97:ba:5e:c1:5d:8d:61:b6:0c:11:a4:da: c5:61:42:f0:a1:d7:79:93:2b:31:7b:69:2f:9e:67: 13:4c:19:d3:93:fe:60:c1:9e:c1:05:83:a4:d2:f5: ea:2f:eb:5c:5e:61:4f:b5:33:56:f4:8f:9b:96:62: 50:b1:a7:82:7e:51:6c:b9:97:f1:88:5a:1d:35:2d: 87:99:76:e8:a4:bb:59:e1:31:a5:7c:d4:da:55:aa: eb:b1:a2:8a:89:8c:67:a6:8c:20:55:dc:ec:10:aa: 33:96:5f:71:7e:62:49:0d:10:72:cf:79:ec:be:cf: ee:e6:bd:96:2a:b4:29:6b:b8:85:9c:a6:57:b8:c0: 2d:fb:10:5e:62:62:cb:8a:de:70:6c:6f:a1:15:55: a5:24:f0:1c:e8:b1:67:b3:3d:34:6b:91:b5:85:af: ee:13:14:dc:ee:8e:2e:e2:b4:3f:90:70:48:86:b8: dc:02:bb:34:27:c8:5f:0e:b9:c0:3b:71:1d:b2:31: a4:59:d8:13:de:e5:6d:66:a3:09:d5:bd:2d:7b:70: 2c:e1:e2:0d:83:4d:95:4d:03:d4:fb:04:bb:e9:b5: b2:55:7a:83:d2:1d:62:67:2f:56:7f:6b:b9:fd:8f: b1:ce:08:7f:e1:58:de:b8:0b:ad:39:87:83:0c:59: 28:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D5:3B:78:D8:BB:0D:D4:5F:20:16:B7:31:A6:72:C1:32:A8:16:6F X509v3 Authority Key Identifier: keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:e2:8a:2f:cf:36:20:94:03:73:4b:e4:4a:cb:04:01:4b:04: 7d:6e:cb:0a:1e:56:d0:ab:d1:7b:1e:be:0f:31:5f:ff:23:57: 5d:91:f2:07:d2:8d:ec:c2:02:93:f7:4a:0e:5b:7e:f7:e1:27: 25:39:bd:24:4b:7a:4a:a5:de:ea:83:53:09:fc:82:c2:f8:28: ae:06:34:61:e7:dd:97:e0:dc:71:0a:bd:d3:8c:37:46:06:b8: 0b:6e:34:aa:a3:f6:0f:15:57:48:6c:ac:cb:12:42:a9:b2:63: 9d:84:47:6e:7f:b9:32:86:30:1b:fe:f0:08:05:19:fd:ce:bf: a1:10:18:80:c8:0f:e3:ae:c2:1a:57:90:38:07:2d:90:bf:09: 86:7e:3f:50:43:c0:c3:e6:79:b9:a5:e1:c2:11:49:97:51:cb: 72:f6:e1:3b:41:6d:5e:44:5c:d0:ce:95:cb:3b:0e:e3:61:de: 09:18:ef:2a:d2:f7:a1:f7:9c:a1:78:63:5f:3a:2d:f9:41:ac: 02:2d:f9:3f:d2:fd:45:c2:f1:8c:00:b5:f9:ec:1c:a0:8c:0d: d5:ce:11:c5:eb:ae:76:a4:d5:cd:df:7b:0c:0a:6e:17:02:c7: 0f:bb:09:6a:56:6c:51:f3:83:d0:ce:82:db:61:6e:e5:84:44: 73:fb:e3:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQa5DL6QZj1MWZPEcwmmDb1A664wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFNTQ0NTVCQkFERUU0MDUxRjc5RDkwN0I3NDUzRTk1 RjEzQjQ2NzAeFw0yNjA5MjMyMTM3NTlaFw0yNjA5MjUwMTMwNTlaMDMxMTAvBgNV BAMTKENCRDUzQjc4RDhCQjBERDQ1RjIwMTZCNzMxQTY3MkMxMzJBODE2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU+5e6XsFdjWG2DBGk2sVhQvCh 13mTKzF7aS+eZxNMGdOT/mDBnsEFg6TS9eov61xeYU+1M1b0j5uWYlCxp4J+UWy5 l/GIWh01LYeZduiku1nhMaV81NpVquuxooqJjGemjCBV3OwQqjOWX3F+YkkNEHLP eey+z+7mvZYqtClruIWcple4wC37EF5iYsuK3nBsb6EVVaUk8BzosWezPTRrkbWF r+4TFNzuji7itD+QcEiGuNwCuzQnyF8OucA7cR2yMaRZ2BPe5W1mownVvS17cCzh 4g2DTZVNA9T7BLvptbJVeoPSHWJnL1Z/a7n9j7HOCH/hWN64C605h4MMWSgzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy9U7eNi7DdRfIBa3MaZywTKoFm8wHwYDVR0j BBgwFoAUueVEVbut7kBR952Qe3RT6V8TtGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGI0Zjg1MTEtMDdiMy00YTYxLWJkMDQtMmU2NjVjOTI3OGZjLzAvQjlFNTQ0NTVC QkFERUU0MDUxRjc5RDkwN0I3NDUzRTk1RjEzQjQ2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUU1NDQ1NUJCQURFRTQwNTFGNzlEOTA3Qjc0NTNFOTVGMTNC NDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGI0Zjg1MTEtMDdiMy00YTYxLWJk MDQtMmU2NjVjOTI3OGZjLzAvQjlFNTQ0NTVCQkFERUU0MDUxRjc5RDkwN0I3NDUz RTk1RjEzQjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOXiii/PNiCUA3NL5ErLBAFLBH1uywoeVtCr 0Xsevg8xX/8jV12R8gfSjezCApP3Sg5bfvfhJyU5vSRLekql3uqDUwn8gsL4KK4G NGHn3Zfg3HEKvdOMN0YGuAtuNKqj9g8VV0hsrMsSQqmyY52ER25/uTKGMBv+8AgF Gf3Ov6EQGIDID+OuwhpXkDgHLZC/CYZ+P1BDwMPmebml4cIRSZdRy3L24TtBbV5E XNDOlcs7DuNh3gkY7yrS96H3nKF4Y186LflBrAIt+T/S/UXC8YwAtfnsHKCMDdXO EcXrrnak1c3fewwKbhcCxw+7CWpWbFHzg9DOgtthbuWERHP748Q= -----END CERTIFICATE-----Generated at Thu Sep 24 08:58:44 2026 by rpki-client