$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft File: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft (raw, json) Hash identifier: aNby+QqpXzJcBuWI6Zaf+daPn7Vx5McMN3+400Kl0UA= Subject key identifier: 29:9C:1F:76:DC:2A:EA:30:FB:9B:60:4F:00:F1:D8:C1:8C:C3:A7:28 Authority key identifier: B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB Certificate issuer: /CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Certificate serial: 093D259687FA8B17338BF462B23E79524577F23E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 15:34:36 +0000 Manifest this update: Fri 25 Sep 2026 15:29:36 +0000 Manifest next update: Sat 26 Sep 2026 17:33:36 +0000 Files and hashes: 1: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl (hash: g5LVT9WZy/4o90FMvUQEUL7LXxPt5fuo43vpIRkAKEw=) 2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: 8GvfzVduMFTtGlADd061A8wAjIa0JhN238PnLdk7UyA=) 3: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: lfMuEG6m1w+3L6wzJesoEfOVGjLJIPXAAFywmq7MUaw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3d:25:96:87:fa:8b:17:33:8b:f4:62:b2:3e:79:52:45:77:f2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Validity Not Before: Sep 25 15:29:36 2026 GMT Not After : Sep 26 17:33:36 2026 GMT Subject: CN=299C1F76DC2AEA30FB9B604F00F1D8C18CC3A728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:bf:d8:2e:0f:fb:2b:19:71:13:17:a2:3b: 4c:b8:85:35:1e:6e:c3:fd:35:fc:c6:eb:93:16:dc: d5:f9:4d:d5:98:92:96:7e:1a:b9:92:3b:9d:7e:73: 22:95:0f:1e:12:31:60:8a:4c:ae:43:4e:94:bf:aa: d2:40:a1:29:2f:dc:35:4d:26:e8:8c:10:24:98:54: 33:b9:d9:53:50:dd:99:3e:ba:ca:46:a6:89:f6:69: 38:1e:3d:7a:b1:bb:1d:a5:b6:a1:c6:9d:f4:d0:89: f0:2c:c0:df:55:81:ab:97:88:02:64:f1:32:fb:d4: d6:92:6f:81:d3:35:36:b3:91:f1:08:bf:e6:95:cc: 81:51:b8:3f:0d:9a:33:36:e0:eb:fc:ed:07:64:76: ef:01:89:06:af:37:9b:9e:1e:44:cd:35:d7:b7:6b: d6:12:f7:fb:f3:4d:5e:83:3a:84:99:47:36:e9:7c: 5d:a6:c4:73:28:62:9c:04:90:15:fa:61:53:93:2f: 1e:d3:1b:4e:1c:5f:c6:d3:8f:f3:19:43:e1:ee:23: 9b:be:86:8e:7d:97:d7:84:1d:f4:c5:af:3d:9c:79: 93:5d:fb:ca:64:6e:2b:33:57:7e:c4:fe:c2:b7:03: 58:85:61:8b:38:af:8d:48:fe:01:63:7c:0d:41:d6: 40:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9C:1F:76:DC:2A:EA:30:FB:9B:60:4F:00:F1:D8:C1:8C:C3:A7:28 X509v3 Authority Key Identifier: keyid:B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:57:1f:8c:d9:4c:33:98:28:44:4b:15:20:26:6f:19:31:a7: 10:3e:dc:d9:7a:92:d5:9c:ec:f2:72:71:88:9c:f5:9a:a5:cf: 04:f8:d9:a5:c5:09:84:7d:8b:d0:20:39:2e:03:a8:20:f7:3e: 50:7f:56:61:c2:c2:6e:f8:40:7a:68:5d:68:a5:db:e4:0a:59: 35:28:ca:09:94:bf:28:4d:68:72:00:de:d9:6d:16:21:fa:3c: c0:1b:b7:e1:8b:3c:35:0d:38:08:a6:20:10:1f:23:9a:4c:c6: c6:f8:c0:66:56:33:70:7b:98:58:01:40:c5:2a:b7:63:93:4b: e4:7d:71:c4:c1:46:96:fd:78:b4:56:c9:79:f3:8a:84:49:c5: 8b:af:4d:1d:56:b9:09:c5:92:a1:11:b3:c1:f8:93:8c:cd:b3: cd:a9:97:71:22:81:21:ca:13:d0:d6:05:15:9c:86:62:e8:30: 63:69:1a:a5:48:83:aa:f6:3e:c6:17:93:0a:09:e2:7c:6a:ad: f0:7b:05:51:3d:23:cb:3e:45:72:0d:c7:ab:c1:36:97:8f:19: 7c:ce:1b:99:4e:12:55:b2:da:78:a0:06:80:66:b0:f7:ad:be: fd:91:05:40:6c:62:8c:7c:d5:f5:f1:e3:ed:92:f3:d1:d5:d1: 8a:36:79:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCT0llof6ixczi/Risj55UkV38j4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3 M0I4MDJCQjAeFw0yNjA5MjUxNTI5MzZaFw0yNjA5MjYxNzMzMzZaMDMxMTAvBgNV BAMTKDI5OUMxRjc2REMyQUVBMzBGQjlCNjA0RjAwRjFEOEMxOENDM0E3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XL/YLg/7KxlxExeiO0y4hTUe bsP9NfzG65MW3NX5TdWYkpZ+GrmSO51+cyKVDx4SMWCKTK5DTpS/qtJAoSkv3DVN JuiMECSYVDO52VNQ3Zk+uspGpon2aTgePXqxux2ltqHGnfTQifAswN9VgauXiAJk 8TL71NaSb4HTNTazkfEIv+aVzIFRuD8NmjM24Ov87Qdkdu8BiQavN5ueHkTNNde3 a9YS9/vzTV6DOoSZRzbpfF2mxHMoYpwEkBX6YVOTLx7TG04cX8bTj/MZQ+HuI5u+ ho59l9eEHfTFrz2ceZNd+8pkbiszV37E/sK3A1iFYYs4r41I/gFjfA1B1kAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKZwfdtwq6jD7m2BPAPHYwYzDpygwHwYDVR0j BBgwFoAUsR1SY33Mtn+OmdrYDYLF4nO4ArswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZhM2NmZjctMmFhMS00NGRmLTkxNGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3 RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3M0I4MDJCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTFENTI2MzdEQ0NCNjdGOEU5OURBRDgwRDgyQzVFMjczQjgw MkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1 RTI3M0I4MDJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVXH4zZTDOYKERLFSAmbxkxpxA+3Nl6ktWc 7PJycYic9ZqlzwT42aXFCYR9i9AgOS4DqCD3PlB/VmHCwm74QHpoXWil2+QKWTUo ygmUvyhNaHIA3tltFiH6PMAbt+GLPDUNOAimIBAfI5pMxsb4wGZWM3B7mFgBQMUq t2OTS+R9ccTBRpb9eLRWyXnzioRJxYuvTR1WuQnFkqERs8H4k4zNs82pl3EigSHK E9DWBRWchmLoMGNpGqVIg6r2PsYXkwoJ4nxqrfB7BVE9I8s+RXINx6vBNpePGXzO G5lOElWy2nigBoBmsPetvv2RBUBsYox81fXx4+2S89HV0Yo2eVs= -----END CERTIFICATE-----Generated at Sat Sep 26 01:50:55 2026 by rpki-client