$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft File: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft (raw, json) Hash identifier: Cvdu7Y2XROwpDa+pbLbFuV9WgACTbGHixqWpHMMpeqw= Subject key identifier: 95:31:6E:D2:8B:60:C2:73:B1:28:70:5F:B1:F3:16:D6:AB:A1:8C:5B Authority key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 Certificate issuer: /CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Certificate serial: 2D275F888C7A56ADF978E641898CABA67BC35392 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 05:37:19 +0000 Manifest this update: Fri 25 Sep 2026 05:32:19 +0000 Manifest next update: Sat 26 Sep 2026 07:07:19 +0000 Files and hashes: 1: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: 0KpGk+Me0s5mBlSvDHCHu9w7qKthN0KZwNcXUygtBFI=) 2: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: G626nf3IkAH7IIThn3UlVRBOX9wH92EFofVHExk6vxQ=) 3: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl (hash: fNFcIn5ZqRO16UGQeCA4i9v0uxPBDN+d5b91fcBYUJM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:27:5f:88:8c:7a:56:ad:f9:78:e6:41:89:8c:ab:a6:7b:c3:53:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5 Validity Not Before: Sep 25 05:32:19 2026 GMT Not After : Sep 26 07:07:19 2026 GMT Subject: CN=95316ED28B60C273B128705FB1F316D6ABA18C5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:53:aa:8a:e3:6e:84:e1:7e:c4:b7:6e:47:1c: 50:96:55:6e:48:e6:55:bd:ed:3d:e4:96:e2:0d:77: fd:15:34:18:c5:72:c8:7b:34:89:95:cf:96:f2:4c: c2:49:d4:72:d1:9b:1c:03:6a:08:0e:79:e1:5e:7f: c1:67:22:48:d6:80:7d:8e:b9:af:d5:9b:68:55:eb: 5c:1c:60:bf:34:fa:66:1e:4b:7f:ca:ea:f2:dc:78: 8e:7f:a8:08:d4:21:11:a2:2f:2c:b0:94:28:c8:4d: b7:12:8e:56:62:bb:b0:26:e0:84:cb:77:e9:ca:36: 4a:0e:05:26:ac:3b:df:a4:d4:3c:c8:54:51:2b:b8: df:88:07:7f:e0:46:ae:0a:ef:77:33:b5:ef:4d:1c: 14:c6:24:ac:0a:1f:b4:21:fa:d1:f3:35:7d:e4:9c: 06:5c:f3:f0:e5:1d:62:6a:03:50:46:e4:df:3c:71: 00:d4:45:ed:14:cf:89:10:f2:ea:cb:32:2e:dd:56: 5a:25:a8:a1:b6:8b:53:76:35:c3:33:fd:e4:14:30: da:84:b7:7c:5b:d3:56:52:a4:7c:59:e2:43:b2:a6: 1e:02:06:41:02:15:56:bb:e4:ef:86:da:fe:d7:be: c2:b9:cf:b3:65:0b:08:0c:21:4e:e8:6d:b5:14:27: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:31:6E:D2:8B:60:C2:73:B1:28:70:5F:B1:F3:16:D6:AB:A1:8C:5B X509v3 Authority Key Identifier: keyid:B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2f:97:91:01:a8:ec:b3:ea:a5:54:05:fe:7a:70:23:1a:34: b8:37:af:4d:0c:95:59:d9:75:48:f9:1e:f9:7b:a3:ba:2a:19: de:7a:95:c1:2b:bd:45:02:68:44:17:07:7e:2c:7a:e2:69:c9: 54:b7:4f:eb:70:d4:55:09:ac:64:c5:80:2e:5d:08:8f:bb:a1: 95:39:61:c1:a8:fe:03:4d:5e:ce:ef:00:77:12:94:e2:df:c5: 2e:ae:63:48:51:b6:23:35:46:d1:d3:9d:33:af:b6:53:11:a9: b5:c6:87:a3:b0:e8:37:63:b8:c1:b6:ab:bd:0a:f5:a8:b7:e8: 96:5b:0e:e1:ff:e1:1a:b3:20:22:20:6c:a8:39:b7:47:76:5f: 8f:0c:8e:b4:a4:37:c5:fa:1a:62:35:d1:0c:d1:55:d9:ce:58: 1f:15:b5:b6:15:4d:97:d9:0c:e7:57:9d:7d:3b:f1:5b:3d:f0: a9:e7:e3:cb:86:a3:7a:a2:5a:1e:f0:88:0c:b9:21:6c:b6:8b: 15:32:dd:a2:5b:71:c2:8b:77:71:f5:7f:df:b2:75:d4:6c:c9: 73:bc:bc:d7:fc:6d:1b:bb:e7:15:34:46:54:84:0f:c1:c5:3c: 17:b1:d7:fe:e1:54:33:d3:8a:8a:88:85:23:76:e3:37:6d:8e: 69:56:6c:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSdfiIx6Vq35eOZBiYyrpnvDU5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDQjJFOUY2NTEzQjBBQkQ2OUNEMkEyQ0M2MDRENjFD MTVEQUNBNTAeFw0yNjA5MjUwNTMyMTlaFw0yNjA5MjYwNzA3MTlaMDMxMTAvBgNV BAMTKDk1MzE2RUQyOEI2MEMyNzNCMTI4NzA1RkIxRjMxNkQ2QUJBMThDNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZU6qK426E4X7Et25HHFCWVW5I 5lW97T3kluINd/0VNBjFcsh7NImVz5byTMJJ1HLRmxwDaggOeeFef8FnIkjWgH2O ua/Vm2hV61wcYL80+mYeS3/K6vLceI5/qAjUIRGiLyywlCjITbcSjlZiu7Am4ITL d+nKNkoOBSasO9+k1DzIVFEruN+IB3/gRq4K73czte9NHBTGJKwKH7Qh+tHzNX3k nAZc8/DlHWJqA1BG5N88cQDURe0Uz4kQ8urLMi7dVlolqKG2i1N2NcMz/eQUMNqE t3xb01ZSpHxZ4kOyph4CBkECFVa75O+G2v7XvsK5z7NlCwgMIU7obbUUJ7GVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlTFu0otgwnOxKHBfsfMW1quhjFswHwYDVR0j BBgwFoAUt8sun2UTsKvWnNKizGBNYcFdrKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMzNzBlNmYtZjBjNy00ZjQwLThiYTQtYTAxZTVkMGM3NGU0LzAvQjdDQjJFOUY2 NTEzQjBBQkQ2OUNEMkEyQ0M2MDRENjFDMTVEQUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CN0NCMkU5RjY1MTNCMEFCRDY5Q0QyQTJDQzYwNEQ2MUMxNURB Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvQjdDQjJFOUY2NTEzQjBBQkQ2OUNEMkEyQ0M2MDRE NjFDMTVEQUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMvl5EBqOyz6qVUBf56cCMaNLg3r00MlVnZ dUj5Hvl7o7oqGd56lcErvUUCaEQXB34seuJpyVS3T+tw1FUJrGTFgC5dCI+7oZU5 YcGo/gNNXs7vAHcSlOLfxS6uY0hRtiM1RtHTnTOvtlMRqbXGh6Ow6DdjuMG2q70K 9ai36JZbDuH/4RqzICIgbKg5t0d2X48MjrSkN8X6GmI10QzRVdnOWB8VtbYVTZfZ DOdXnX078Vs98Knn48uGo3qiWh7wiAy5IWy2ixUy3aJbccKLd3H1f9+yddRsyXO8 vNf8bRu75xU0RlSED8HFPBex1/7hVDPTioqIhSN24zdtjmlWbNo= -----END CERTIFICATE-----Generated at Fri Sep 25 08:52:17 2026 by rpki-client