$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft File: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft (raw, json) Hash identifier: rzqnoKvk2ehteTdx3tj1FWFKIr89O5kjZh28Eb+QiSw= Subject key identifier: 86:B8:08:AC:6F:F3:B5:4E:D4:99:AF:8B:6F:67:4A:62:62:9A:FD:8B Authority key identifier: B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB Certificate issuer: /CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Certificate serial: 66EB824C2DA269B41DA8BBB51B07172C8562AFF1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 22:59:03 +0000 Manifest this update: Thu 24 Sep 2026 22:54:03 +0000 Manifest next update: Fri 25 Sep 2026 23:34:03 +0000 Files and hashes: 1: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: lfMuEG6m1w+3L6wzJesoEfOVGjLJIPXAAFywmq7MUaw=) 2: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl (hash: gk7GEQecB0BTzYeiGWWgT+cKa/FKJgZiK4J+/Wd24Ag=) 3: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: 8GvfzVduMFTtGlADd061A8wAjIa0JhN238PnLdk7UyA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 23:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:eb:82:4c:2d:a2:69:b4:1d:a8:bb:b5:1b:07:17:2c:85:62:af:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Validity Not Before: Sep 24 22:54:03 2026 GMT Not After : Sep 25 23:34:03 2026 GMT Subject: CN=86B808AC6FF3B54ED499AF8B6F674A62629AFD8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:07:7f:3c:45:2d:5f:2f:e7:fe:15:4a:16:2d: 8d:fa:18:a5:8d:02:e0:92:3c:0b:ba:7f:c0:27:f3: 43:54:1e:a5:7d:85:31:b9:4f:c1:a1:6c:9b:49:0e: ac:03:ef:51:f5:f9:e2:be:a1:6a:47:c2:56:28:dc: 5e:fc:c4:c9:8d:2b:49:53:4a:23:41:d9:69:c4:38: 08:13:31:15:10:eb:53:7b:6e:64:53:74:a2:27:81: f6:1b:ad:8a:8d:05:e5:91:12:c5:c8:77:eb:92:14: e7:3f:c4:6c:44:50:01:5b:cc:96:0b:85:47:b9:f0: ec:ec:e5:7b:5a:71:4b:42:4f:5a:42:42:30:64:4b: 4b:39:c6:a1:9d:8f:0e:47:4a:02:1d:fe:72:95:42: 3f:86:5d:8b:ad:8d:6c:21:57:b3:a3:db:6f:7f:03: f0:47:fa:a1:1d:f3:4f:ea:db:1f:90:a3:dd:6e:11: fc:74:69:4e:7f:24:d3:cb:44:47:2a:7a:f3:4f:b6: ce:33:d6:d6:0d:8f:01:73:61:b5:1d:6b:c7:b7:13: a7:f0:4e:d2:42:77:7f:af:09:07:a8:2c:00:8f:f4: 9f:cc:d4:41:22:af:be:2e:0f:0d:b3:68:2e:b5:f4: 8f:1f:59:62:d3:eb:b9:08:71:7c:39:58:98:5c:21: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B8:08:AC:6F:F3:B5:4E:D4:99:AF:8B:6F:67:4A:62:62:9A:FD:8B X509v3 Authority Key Identifier: keyid:B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:93:73:d5:f4:ed:3f:f4:96:4c:df:00:05:1f:cb:61:00:b9: 30:bd:04:6d:9a:67:16:01:43:2c:6f:0b:4f:57:3b:76:fa:17: c1:e0:62:49:8b:23:6d:1c:a3:c3:1a:6c:57:67:b0:02:1d:f0: a8:a1:8c:e5:0f:36:96:a3:fe:5e:4c:21:1a:c5:0a:09:9c:7d: 8d:88:ff:13:24:b0:d3:d9:ef:68:e5:24:74:4c:6d:ac:fa:8f: 94:f2:53:0a:d5:b4:c3:b2:65:82:b5:08:19:07:6c:fb:66:72: 87:9c:f2:fe:df:73:c5:60:d5:2b:e9:98:f8:d9:e6:d0:94:c3: a0:c6:2e:61:7a:e7:9b:3a:82:f9:3e:44:51:e6:f3:33:39:9d: 28:83:89:c2:d5:e3:f4:52:90:22:54:a8:49:4c:51:02:90:0f: 2c:31:42:27:48:90:6b:c8:19:21:67:4f:ad:ab:5e:77:4c:d0: 81:0c:7e:c1:9f:24:5e:36:92:f5:9f:03:52:25:10:5f:41:b3: 71:e2:9b:d4:40:27:94:ae:ae:a0:9b:25:dd:37:5c:67:87:e4: fa:8f:e4:68:6c:53:ed:a0:d0:e3:dd:a8:4f:19:6d:db:f4:33: f8:9d:0d:b5:40:b8:6d:70:eb:80:09:06:76:2c:7a:af:f7:5d: 8b:57:4d:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuuCTC2iabQdqLu1GwcXLIVir/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3 M0I4MDJCQjAeFw0yNjA5MjQyMjU0MDNaFw0yNjA5MjUyMzM0MDNaMDMxMTAvBgNV BAMTKDg2QjgwOEFDNkZGM0I1NEVENDk5QUY4QjZGNjc0QTYyNjI5QUZEOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMB388RS1fL+f+FUoWLY36GKWN AuCSPAu6f8An80NUHqV9hTG5T8GhbJtJDqwD71H1+eK+oWpHwlYo3F78xMmNK0lT SiNB2WnEOAgTMRUQ61N7bmRTdKIngfYbrYqNBeWREsXId+uSFOc/xGxEUAFbzJYL hUe58Ozs5XtacUtCT1pCQjBkS0s5xqGdjw5HSgId/nKVQj+GXYutjWwhV7Oj229/ A/BH+qEd80/q2x+Qo91uEfx0aU5/JNPLREcqevNPts4z1tYNjwFzYbUda8e3E6fw TtJCd3+vCQeoLACP9J/M1EEir74uDw2zaC619I8fWWLT67kIcXw5WJhcIYp1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhrgIrG/ztU7Uma+Lb2dKYmKa/YswHwYDVR0j BBgwFoAUsR1SY33Mtn+OmdrYDYLF4nO4ArswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZhM2NmZjctMmFhMS00NGRmLTkxNGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3 RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3M0I4MDJCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTFENTI2MzdEQ0NCNjdGOEU5OURBRDgwRDgyQzVFMjczQjgw MkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1 RTI3M0I4MDJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmTc9X07T/0lkzfAAUfy2EAuTC9BG2aZxYB QyxvC09XO3b6F8HgYkmLI20co8MabFdnsAId8KihjOUPNpaj/l5MIRrFCgmcfY2I /xMksNPZ72jlJHRMbaz6j5TyUwrVtMOyZYK1CBkHbPtmcoec8v7fc8Vg1SvpmPjZ 5tCUw6DGLmF655s6gvk+RFHm8zM5nSiDicLV4/RSkCJUqElMUQKQDywxQidIkGvI GSFnT62rXndM0IEMfsGfJF42kvWfA1IlEF9Bs3Him9RAJ5SurqCbJd03XGeH5PqP 5GhsU+2g0OPdqE8Zbdv0M/idDbVAuG1w64AJBnYseq/3XYtXTY8= -----END CERTIFICATE-----Generated at Fri Sep 25 13:10:18 2026 by rpki-client