$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft File: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft (raw, json) Hash identifier: a7Dlu15IBBjzJRCmgiZQczHEseZdJb9Z+mfln75sH4M= Subject key identifier: 7C:37:9B:05:DD:26:CB:12:57:43:AD:0C:63:5B:BF:47:E2:22:02:9D Authority key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 Certificate issuer: /CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Certificate serial: 05A0B809ED2CE8036E24F2B633F945FCADFD3A6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 01:16:31 +0000 Manifest this update: Fri 25 Sep 2026 01:11:31 +0000 Manifest next update: Sat 26 Sep 2026 02:30:31 +0000 Files and hashes: 1: 323430313a346661303a3a2f33322d3438203d3e20313431393539.roa (hash: YSkaXkoDpu4xkOc0DMYpS2KAoSxyKN+Gksem+MM/1ic=) 2: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: WrcnjDvM2bO2wuu3OCRivgLaRSs+xddaOJ50D9MbO8U=) 3: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl (hash: OpgAuGGvf0ydwdfEb9ClLbB2768Y+B+fskQkjRfLL7o=) 4: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: Pavi+Ibkd+bl9I6ebmoiu+/5SxrpK9sFhLxy2ZXQkGw=) 5: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: vGdo0aPhNFfXshch3eNd6YkNvIG8QzHxW2xedSDSTPc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a0:b8:09:ed:2c:e8:03:6e:24:f2:b6:33:f9:45:fc:ad:fd:3a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Validity Not Before: Sep 25 01:11:31 2026 GMT Not After : Sep 26 02:30:31 2026 GMT Subject: CN=7C379B05DD26CB125743AD0C635BBF47E222029D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:1c:b5:81:6f:ff:84:7d:30:d9:2d:1d:ad: 85:d4:05:8a:36:f1:9e:68:d5:72:45:57:aa:11:d9: 45:93:fc:64:bd:16:26:fb:b9:af:2e:73:90:2f:9f: aa:29:54:29:47:85:3c:48:eb:2a:91:6d:07:d4:15: f7:3c:4b:34:54:58:5a:77:c9:5d:53:d7:80:a6:eb: b3:29:c9:e8:0a:40:36:1b:3b:b9:1d:a9:dc:99:12: 47:8b:c6:e9:4a:c7:12:2c:7f:7e:60:dd:64:01:51: 3e:c1:bf:2d:b9:1e:59:da:7c:16:92:e5:60:a8:55: 36:de:f3:2a:93:8b:47:77:58:3a:4d:27:4a:c8:fd: 3c:00:66:73:d4:ab:ac:0e:ab:61:5f:c5:42:54:bb: de:a1:fe:8e:6f:f1:db:3d:d0:68:1d:a1:ce:9b:58: c4:1f:f2:c5:ce:df:56:14:33:1a:54:18:b7:eb:cb: 59:e5:9f:8f:f2:85:2e:ad:2c:55:d3:87:11:1e:85: b9:76:cc:9c:98:93:29:36:fb:75:2b:17:d3:34:52: ba:68:33:70:72:88:46:e7:67:0c:a0:5a:91:74:93: e7:18:ad:82:6f:28:2f:11:00:c9:5d:dc:dd:f7:64: 37:2b:1f:f3:97:0c:50:a4:28:1d:50:11:24:4d:40: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:37:9B:05:DD:26:CB:12:57:43:AD:0C:63:5B:BF:47:E2:22:02:9D X509v3 Authority Key Identifier: keyid:B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a1:f0:42:43:3c:9c:e5:a4:2f:b9:44:76:9d:35:9a:72:2d: c2:f0:06:7a:1a:0c:0c:5c:8a:52:83:3d:a1:f4:29:a1:29:57: fa:6b:a0:28:6b:64:bc:5d:6b:df:59:23:1f:d3:e1:3a:6e:12: bf:11:91:dd:2c:28:2d:bf:ac:2e:53:38:57:fb:3b:a3:7c:fd: 72:fe:4e:12:8f:3d:29:29:12:ab:9d:7a:a2:8b:be:8e:49:49: a8:fe:05:ef:a0:06:0e:1d:4a:74:4b:55:bf:01:11:84:b6:63: 7c:17:fd:55:d9:83:a3:a3:b6:6e:f9:de:3d:72:26:c0:cf:77: a1:e5:cb:b5:01:82:ae:84:d2:ce:63:94:a9:a2:2e:a7:9f:9b: 9b:04:76:55:44:81:c4:ca:7d:71:9f:9c:93:57:be:3a:91:c1: be:49:57:3c:2a:d1:1b:ee:04:77:32:cb:4e:60:59:08:e7:fe: 9f:61:4e:87:a3:21:b1:c1:8f:a7:24:07:14:8a:04:5b:a4:ab: 43:3b:70:18:02:25:68:39:0d:72:11:a4:a1:71:5f:e4:fc:9e: 0d:3a:d0:20:d3:2e:90:39:c7:57:64:48:da:3e:d0:1e:eb:78: 90:03:04:88:43:0c:de:7c:9f:a9:5a:e6:70:39:42:1b:36:9c: f3:41:be:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBaC4Ce0s6ANuJPK2M/lF/K39OmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5QzVF Q0QyRDcwOTAeFw0yNjA5MjUwMTExMzFaFw0yNjA5MjYwMjMwMzFaMDMxMTAvBgNV BAMTKDdDMzc5QjA1REQyNkNCMTI1NzQzQUQwQzYzNUJCRjQ3RTIyMjAyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsFxy1gW//hH0w2S0drYXUBYo2 8Z5o1XJFV6oR2UWT/GS9Fib7ua8uc5Avn6opVClHhTxI6yqRbQfUFfc8SzRUWFp3 yV1T14Cm67MpyegKQDYbO7kdqdyZEkeLxulKxxIsf35g3WQBUT7Bvy25HlnafBaS 5WCoVTbe8yqTi0d3WDpNJ0rI/TwAZnPUq6wOq2FfxUJUu96h/o5v8ds90Ggdoc6b WMQf8sXO31YUMxpUGLfry1nln4/yhS6tLFXThxEehbl2zJyYkyk2+3UrF9M0Urpo M3ByiEbnZwygWpF0k+cYrYJvKC8RAMld3N33ZDcrH/OXDFCkKB1QESRNQPf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfDebBd0myxJXQ60MY1u/R+IiAp0wHwYDVR0j BBgwFoAUsxbGPS2hOH0ZGn6m3AtZxezS1wkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZmMDk1ODQtOTExMC00YjBkLThmNmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0Qy REExMzg3RDE5MUE3RUE2REMwQjU5QzVFQ0QyRDcwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzE2QzYzRDJEQTEzODdEMTkxQTdFQTZEQzBCNTlDNUVDRDJE NzA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5 QzVFQ0QyRDcwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6h8EJDPJzlpC+5RHadNZpyLcLwBnoaDAxc ilKDPaH0KaEpV/proChrZLxda99ZIx/T4TpuEr8Rkd0sKC2/rC5TOFf7O6N8/XL+ ThKPPSkpEqudeqKLvo5JSaj+Be+gBg4dSnRLVb8BEYS2Y3wX/VXZg6Ojtm753j1y JsDPd6Hly7UBgq6E0s5jlKmiLqefm5sEdlVEgcTKfXGfnJNXvjqRwb5JVzwq0Rvu BHcyy05gWQjn/p9hToejIbHBj6ckBxSKBFukq0M7cBgCJWg5DXIRpKFxX+T8ng06 0CDTLpA5x1dkSNo+0B7reJADBIhDDN58n6la5nA5Qhs2nPNBvqI= -----END CERTIFICATE-----Generated at Fri Sep 25 17:35:52 2026 by rpki-client