$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft File: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft (raw, json) Hash identifier: WWIKiSx5M2heWo8c0ou/NxbPCsnO/cW9TMYCplbpGok= Subject key identifier: 73:E5:FB:27:09:E3:FE:A2:99:D5:50:6C:E5:60:C1:E8:9B:78:7F:D4 Authority key identifier: B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 Certificate issuer: /CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Certificate serial: 55B4B939B7450A841C1FB8383BD21C0347A76307 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:20:07 +0000 Manifest this update: Wed 23 Sep 2026 11:15:07 +0000 Manifest next update: Thu 24 Sep 2026 14:37:07 +0000 Files and hashes: 1: 3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa (hash: ksYVDZOsUaPH9h3h6FXJXhC94WZiPEsTowZUMKAvBn0=) 2: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl (hash: YVmKHgtzFKyAtm0X6oWF25K0I3HqdTV3YprgwKAyD+c=) 3: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: sTfiDvuvbkVeyTPfpKYSFsI9nMpAT34o8x5bhe0xkFw=) 4: 3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa (hash: SMAdsArRGPYxDZsZ/CCe6hdzjIJy0KvpAA+wvauroZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:b4:b9:39:b7:45:0a:84:1c:1f:b8:38:3b:d2:1c:03:47:a7:63:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Validity Not Before: Sep 23 11:15:07 2026 GMT Not After : Sep 24 14:37:07 2026 GMT Subject: CN=73E5FB2709E3FEA299D5506CE560C1E89B787FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:19:fd:6e:0d:4b:10:e3:40:0b:2d:12:d6: 25:cb:49:1f:67:e0:79:e3:23:5f:42:91:88:44:03: 73:f7:b0:ce:c9:98:6b:26:9f:f3:21:07:73:cb:69: c3:80:3a:c6:d4:a5:b4:72:c8:51:b6:d1:aa:7e:6f: e5:ec:52:43:a6:f7:16:ff:ef:05:11:18:48:89:48: 04:25:d2:bd:48:1f:a8:08:29:c4:20:84:6a:fa:f6: c7:79:8c:78:ce:f3:53:66:de:c6:16:eb:79:25:e5: db:94:11:00:c3:2a:e4:9f:cd:a1:98:97:3d:e6:a3: f8:cb:dd:42:52:ce:12:b9:49:7b:8c:46:5e:4a:ee: a0:45:c9:ea:0e:e8:77:20:d5:7d:f2:92:44:2c:76: ba:a4:e7:dd:9b:4c:f1:2c:f1:f9:6f:fa:a6:6c:a6: 8f:28:a3:b5:27:7a:fb:82:ff:b6:21:a0:0b:b7:d9: 65:4f:a7:1e:fa:62:68:1b:59:c1:1b:8b:7a:2f:ac: 00:27:d2:ff:b9:ad:11:e9:26:83:b2:db:64:2d:73: d3:97:ad:b1:bf:0d:da:b4:ac:28:a9:31:1d:62:72: d6:41:b3:36:3d:c8:8a:7c:ea:d3:80:d3:07:f3:43: e0:ee:20:0a:5b:75:15:74:cd:b5:83:51:c2:d6:76: 96:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E5:FB:27:09:E3:FE:A2:99:D5:50:6C:E5:60:C1:E8:9B:78:7F:D4 X509v3 Authority Key Identifier: keyid:B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:ff:02:61:5a:9c:9c:e5:4b:e5:f6:f1:f3:4a:6e:c6:86:d0: ff:f4:6d:87:16:38:f0:be:d0:e0:6b:86:fd:53:28:d2:5d:b0: 13:c4:ed:d3:ca:e8:bf:55:d8:56:97:34:06:b8:76:3b:8a:5d: d7:1e:45:39:17:ab:b6:2a:3b:04:b9:15:52:79:88:56:f6:c7: dd:11:89:9d:08:af:3a:ee:17:a8:31:d4:7d:98:ab:d5:b5:30: 16:85:78:ca:c1:fb:03:0a:be:6c:40:9c:04:33:e2:e9:dc:b6: 8b:52:12:2d:71:cf:ac:9f:b7:3e:ec:45:99:50:1d:7c:6e:a8: e0:8b:f1:00:48:1f:7a:44:8f:94:dd:a2:e4:6e:38:7b:3f:6a: e1:a9:54:a5:cc:85:5c:43:5b:b2:21:95:e6:7e:28:f4:11:cf: a7:65:0d:3d:d8:9d:ce:e7:43:3f:e4:be:1b:e1:82:c6:cc:52: f9:11:0e:e3:0d:51:74:55:1b:61:ea:77:f7:82:86:c6:22:ea: 49:4e:18:09:83:b6:0f:c7:c2:cb:52:ce:e6:cc:41:66:43:4f: 2f:5f:c7:66:35:70:21:6a:72:7c:6e:72:42:cc:29:ec:ad:7a: 88:c9:72:17:de:3b:55:8b:be:65:f2:a9:33:28:c1:e4:6d:e7: 42:12:a9:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVbS5ObdFCoQcH7g4O9IcA0enYwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3 M0RBMTY4NTAeFw0yNjA5MjMxMTE1MDdaFw0yNjA5MjQxNDM3MDdaMDMxMTAvBgNV BAMTKDczRTVGQjI3MDlFM0ZFQTI5OUQ1NTA2Q0U1NjBDMUU4OUI3ODdGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEABn9bg1LEONACy0S1iXLSR9n 4HnjI19CkYhEA3P3sM7JmGsmn/MhB3PLacOAOsbUpbRyyFG20ap+b+XsUkOm9xb/ 7wURGEiJSAQl0r1IH6gIKcQghGr69sd5jHjO81Nm3sYW63kl5duUEQDDKuSfzaGY lz3mo/jL3UJSzhK5SXuMRl5K7qBFyeoO6Hcg1X3ykkQsdrqk592bTPEs8flv+qZs po8oo7UnevuC/7YhoAu32WVPpx76YmgbWcEbi3ovrAAn0v+5rRHpJoOy22Qtc9OX rbG/Ddq0rCipMR1ictZBszY9yIp86tOA0wfzQ+DuIApbdRV0zbWDUcLWdpbVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc+X7Jwnj/qKZ1VBs5WDB6Jt4f9QwHwYDVR0j BBgwFoAUsrSKnASLUc0TOtCu5vX563PaFoUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzMDk3ZjAtMzk3OC00OWNlLWI2OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMw NDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3M0RBMTY4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkI0OEE5QzA0OEI1MUNEMTMzQUQwQUVFNkY1RjlFQjczREEx Njg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5 RUI3M0RBMTY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALv/AmFanJzlS+X28fNKbsaG0P/0bYcWOPC+ 0OBrhv1TKNJdsBPE7dPK6L9V2FaXNAa4djuKXdceRTkXq7YqOwS5FVJ5iFb2x90R iZ0IrzruF6gx1H2Yq9W1MBaFeMrB+wMKvmxAnAQz4unctotSEi1xz6yftz7sRZlQ HXxuqOCL8QBIH3pEj5TdouRuOHs/auGpVKXMhVxDW7IhleZ+KPQRz6dlDT3Ync7n Qz/kvhvhgsbMUvkRDuMNUXRVG2Hqd/eChsYi6klOGAmDtg/HwstSzubMQWZDTy9f x2Y1cCFqcnxuckLMKeyteojJchfeO1WLvmXyqTMoweRt50ISqZw= -----END CERTIFICATE-----Generated at Thu Sep 24 03:04:33 2026 by rpki-client