$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft File: B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft (raw, json) Hash identifier: 5Pk/0toArtpm3/C2kFzu/0YJcqSMjta+OSDtMeUbJqg= Subject key identifier: D7:6D:E5:6A:23:B3:1A:1F:09:CB:BE:72:F5:6C:CF:62:53:FF:A8:55 Authority key identifier: B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D Certificate issuer: /CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D Certificate serial: 72AA07CE9DB5EA41C302082A31422A1F421CF3B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 19:35:07 +0000 Manifest this update: Wed 23 Sep 2026 19:30:07 +0000 Manifest next update: Thu 24 Sep 2026 23:31:07 +0000 Files and hashes: 1: B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl (hash: Bce2Wkm9r+wHLpekgvEl7uV3vpKvQOeNmxkECroVX0s=) 2: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: JtFDDBHLhFW7JsMlxs4g2eR/5c2AZrAbcpY0KNoiazs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:aa:07:ce:9d:b5:ea:41:c3:02:08:2a:31:42:2a:1f:42:1c:f3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D Validity Not Before: Sep 23 19:30:07 2026 GMT Not After : Sep 24 23:31:07 2026 GMT Subject: CN=D76DE56A23B31A1F09CBBE72F56CCF6253FFA855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:e5:4f:4e:ae:4c:f7:48:0f:c2:d3:a5:f6: f6:8f:b8:ad:52:08:11:00:30:b7:bb:23:25:ca:e6: 9c:38:cc:eb:2f:73:88:39:37:17:7a:ae:7d:14:10: 21:ba:bc:53:7f:bc:ee:95:5e:a9:22:ce:5f:ce:29: 53:e3:74:d2:21:ff:e5:61:ab:d1:f3:c7:36:0a:1e: 3f:51:0f:89:c8:ef:b9:c4:67:4e:18:0b:64:a3:bb: c9:92:b0:d0:15:86:a2:e1:e2:3a:32:2a:40:96:89: f6:70:d8:b1:eb:a7:a9:c9:eb:ee:7e:cb:7c:ea:92: 00:51:30:9e:8a:57:01:13:ad:29:5e:ea:e6:19:61: 94:6e:fa:67:ed:26:e2:a3:41:9d:68:0e:53:9f:e5: bb:ad:30:d0:36:ff:45:27:6b:bf:20:2b:34:a2:9c: 31:94:d4:44:8a:1c:73:ce:bd:93:bc:51:62:a7:9b: 52:ab:c0:aa:06:42:03:d3:93:b6:f8:43:5c:13:2d: 19:ca:de:86:f8:55:1f:04:a6:e4:46:5a:df:ea:c4: e7:9c:b2:c0:64:cd:8f:98:08:25:1e:c6:c1:ca:ec: 40:88:42:9d:a9:6f:a6:61:de:ca:75:bb:58:68:2a: 8e:9e:7b:2f:a2:5b:91:ae:0c:ed:95:91:d1:67:83: 62:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6D:E5:6A:23:B3:1A:1F:09:CB:BE:72:F5:6C:CF:62:53:FF:A8:55 X509v3 Authority Key Identifier: keyid:B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:f7:66:44:8f:e1:50:cd:ef:2c:1e:91:f6:a0:27:65:94:36: 2b:10:a0:42:04:cc:6e:f2:aa:5d:f9:ca:5d:77:ea:e8:88:f0: 39:a0:ed:fd:fb:06:c7:00:f9:13:e4:d3:bd:6e:d0:34:2d:90: ae:a7:22:35:21:37:da:67:3a:34:76:8b:fd:ff:c0:46:f8:c1: 0f:00:f4:0a:4b:34:2e:59:57:6d:b1:bf:34:d5:00:d1:ac:7c: 6c:0c:99:f3:dc:64:62:5a:73:fb:e0:ad:b5:2a:43:e0:4d:4b: 57:a0:d7:38:49:47:95:75:cd:29:26:f6:52:7a:fb:2f:3a:c3: 06:f4:a1:4e:d7:e8:a5:b5:70:d2:c3:5f:6e:3d:e5:e6:51:d3: 7f:72:d6:61:7f:3d:35:9e:ad:6f:63:b8:b6:47:f6:9f:de:75: ca:d6:6f:f6:9a:df:84:2d:47:71:c5:f5:4e:ae:f0:07:95:af: 53:e8:b5:2d:26:b5:65:63:75:a5:76:c1:5e:e4:e0:3a:b3:24: 3b:a7:3b:0c:23:1f:9c:dc:eb:6d:ca:3e:26:fe:d1:04:30:f8: a4:14:db:97:3d:4a:5e:a1:c2:31:b4:e8:be:dc:54:80:05:f9: ea:1a:71:a3:68:39:8a:c1:1e:b6:a1:8f:ac:3a:c6:d3:86:6f: 35:c5:70:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcqoHzp216kHDAggqMUIqH0Ic87gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBMDdGMTc0OEU1NjFCMzNEQjhDNDMyNjk4MUE1NUIy N0NFRTkzRDAeFw0yNjA5MjMxOTMwMDdaFw0yNjA5MjQyMzMxMDdaMDMxMTAvBgNV BAMTKEQ3NkRFNTZBMjNCMzFBMUYwOUNCQkU3MkY1NkNDRjYyNTNGRkE4NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeruVPTq5M90gPwtOl9vaPuK1S CBEAMLe7IyXK5pw4zOsvc4g5Nxd6rn0UECG6vFN/vO6VXqkizl/OKVPjdNIh/+Vh q9HzxzYKHj9RD4nI77nEZ04YC2Sju8mSsNAVhqLh4joyKkCWifZw2LHrp6nJ6+5+ y3zqkgBRMJ6KVwETrSle6uYZYZRu+mftJuKjQZ1oDlOf5butMNA2/0Una78gKzSi nDGU1ESKHHPOvZO8UWKnm1KrwKoGQgPTk7b4Q1wTLRnK3ob4VR8EpuRGWt/qxOec ssBkzY+YCCUexsHK7ECIQp2pb6Zh3sp1u1hoKo6eey+iW5GuDO2VkdFng2LlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU123laiOzGh8Jy75y9WzPYlP/qFUwHwYDVR0j BBgwFoAUsqB/F0jlYbM9uMQyaYGlWyfO6T0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFlMGQxN2MtZWRkMS00MjAyLWI3MzYtM2I1MjdlZmE2YmEyLzAvQjJBMDdGMTc0 OEU1NjFCMzNEQjhDNDMyNjk4MUE1NUIyN0NFRTkzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkEwN0YxNzQ4RTU2MUIzM0RCOEM0MzI2OTgxQTU1QjI3Q0VF OTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvQjJBMDdGMTc0OEU1NjFCMzNEQjhDNDMyNjk4MUE1 NUIyN0NFRTkzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALr3ZkSP4VDN7ywekfagJ2WUNisQoEIEzG7y ql35yl136uiI8Dmg7f37BscA+RPk071u0DQtkK6nIjUhN9pnOjR2i/3/wEb4wQ8A 9ApLNC5ZV22xvzTVANGsfGwMmfPcZGJac/vgrbUqQ+BNS1eg1zhJR5V1zSkm9lJ6 +y86wwb0oU7X6KW1cNLDX2495eZR039y1mF/PTWerW9juLZH9p/edcrWb/aa34Qt R3HF9U6u8AeVr1PotS0mtWVjdaV2wV7k4DqzJDunOwwjH5zc623KPib+0QQw+KQU 25c9Sl6hwjG06L7cVIAF+eoacaNoOYrBHrahj6w6xtOGbzXFcFo= -----END CERTIFICATE-----Generated at Thu Sep 24 03:46:38 2026 by rpki-client