$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft File: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft (raw, json) Hash identifier: 1dLCl1fYZdhEMBiqol/VVjMMasYLI2BOQpR1kGGRGT0= Subject key identifier: 5A:E2:63:E1:19:D9:F4:6F:17:AF:FA:E2:AB:97:C6:16:85:FF:2E:C6 Authority key identifier: B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18 Certificate issuer: /CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718 Certificate serial: 52CB1DCB7CBA42FF09761122334690560C864D9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 23:04:36 +0000 Manifest this update: Wed 23 Sep 2026 22:59:36 +0000 Manifest next update: Fri 25 Sep 2026 01:49:36 +0000 Files and hashes: 1: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl (hash: QxUV0U0gIcFmWeefO3rQ0Ftq3ZYb8YXURgsN1C5lRyg=) 2: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 6QK6aAC3OH45PZDy0os84YcWYINTJWbPpMpi72u5POI=) 3: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: fQwW9jEUlabh0L2NvQSOViFURIlDH59x+g1CS1ccauI=) 4: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: AMAK0g33Kv2aI5QR9+0p9uxKjyyXdje3jg9ykQZ5pUA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cb:1d:cb:7c:ba:42:ff:09:76:11:22:33:46:90:56:0c:86:4d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718 Validity Not Before: Sep 23 22:59:36 2026 GMT Not After : Sep 25 01:49:36 2026 GMT Subject: CN=5AE263E119D9F46F17AFFAE2AB97C61685FF2EC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:dc:3c:84:35:9a:a0:f9:b8:4e:f8:63:08: 77:df:4b:cc:df:ea:a7:8b:70:18:b7:d8:2a:fd:bb: 32:b1:8d:da:a4:26:49:1f:04:76:40:ec:7a:95:05: b1:c6:6b:60:6a:5b:0f:32:ca:40:8f:2c:4d:37:15: c2:17:f3:1a:15:3e:d8:63:d0:fa:82:f0:0b:d3:b4: fa:9b:e9:a5:67:63:71:63:33:2a:80:4c:00:fb:41: 90:d1:05:ab:66:6a:9e:7a:43:3e:4f:4f:bc:67:ce: 73:9a:2d:14:e1:8b:08:e6:d3:51:66:1a:11:45:e7: 07:c6:42:45:e6:8c:0a:8e:72:9a:23:7f:85:f2:20: 63:ea:ac:30:ba:fc:28:73:31:34:fb:e8:ea:a5:84: 7d:29:8b:25:67:72:4e:18:d3:19:8f:3c:be:bf:a7: 22:f5:61:10:98:b8:bc:99:f5:64:14:16:06:1c:7d: 4b:5b:4b:39:f2:74:bc:e6:1c:f9:49:aa:30:57:f7: 06:00:21:d3:58:3f:b8:24:51:b3:83:f6:c2:c2:c4: 97:be:46:8d:52:13:39:5a:8f:68:cc:ef:da:51:f7: f2:98:26:cf:1f:b3:92:08:39:56:5c:0e:ba:42:69: b2:db:2b:d1:07:f5:2e:77:e2:15:44:43:db:4a:d7: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:63:E1:19:D9:F4:6F:17:AF:FA:E2:AB:97:C6:16:85:FF:2E:C6 X509v3 Authority Key Identifier: keyid:B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fb:64:e1:c8:d6:1b:1e:9d:86:47:24:bf:4f:ba:03:8c:61: 1d:2e:ef:2c:cc:d4:d2:89:aa:a8:9c:21:20:59:c2:df:2e:d2: 0b:69:6d:cd:7b:6e:00:bf:9e:a1:59:4a:1a:9c:f0:b1:59:70: 89:21:3b:eb:b7:81:25:16:90:0c:61:c3:c6:c1:44:eb:35:8c: 1e:a1:d5:03:0d:4b:54:88:67:f8:28:d6:85:d0:f6:26:f0:4d: d4:78:a8:a7:82:43:41:1c:d3:cb:7e:e8:70:ab:90:4f:dc:9b: 6f:64:e3:79:22:4e:6d:1c:82:c1:e6:d2:8a:4f:5b:0c:8b:b2: fa:66:e9:04:86:26:84:9f:1c:79:71:45:f7:77:4f:c6:8d:cb: 86:f4:d8:0e:b7:2d:63:d7:78:bf:26:e0:9e:ea:97:8c:dd:c3: 60:9a:87:73:41:40:19:26:8f:eb:e4:74:75:16:11:25:c9:65: 7a:03:4f:c2:3f:bd:4c:9d:bd:61:f4:0b:a5:5f:86:42:ae:2f: 51:39:94:ca:9c:19:70:59:39:4a:ea:25:e2:5b:eb:d2:9b:1a: 64:43:ce:5b:1a:1d:7c:a6:b6:be:ec:eb:f3:ea:3e:d9:5b:f8: cc:81:7c:76:0d:57:5f:f5:60:e3:46:a0:c4:77:74:1a:ad:58: 63:e6:d5:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUssdy3y6Qv8JdhEiM0aQVgyGTZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCOENEQ0VFNzQyNkQwMzEwMjBCRUMxRUFEMjMzN0NC NTFEQTcxODAeFw0yNjA5MjMyMjU5MzZaFw0yNjA5MjUwMTQ5MzZaMDMxMTAvBgNV BAMTKDVBRTI2M0UxMTlEOUY0NkYxN0FGRkFFMkFCOTdDNjE2ODVGRjJFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaPtw8hDWaoPm4TvhjCHffS8zf 6qeLcBi32Cr9uzKxjdqkJkkfBHZA7HqVBbHGa2BqWw8yykCPLE03FcIX8xoVPthj 0PqC8AvTtPqb6aVnY3FjMyqATAD7QZDRBatmap56Qz5PT7xnznOaLRThiwjm01Fm GhFF5wfGQkXmjAqOcpojf4XyIGPqrDC6/ChzMTT76OqlhH0piyVnck4Y0xmPPL6/ pyL1YRCYuLyZ9WQUFgYcfUtbSznydLzmHPlJqjBX9wYAIdNYP7gkUbOD9sLCxJe+ Ro1SEzlaj2jM79pR9/KYJs8fs5IIOVZcDrpCabLbK9EH9S534hVEQ9tK15hrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWuJj4RnZ9G8Xr/riq5fGFoX/LsYwHwYDVR0j BBgwFoAUsLjNzudCbQMQIL7B6tIzfLUdpxgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZjMTdjYzItZjRhMi00MTVlLThlYTItZjljNDdmNzVjNGNhLzAvQjBCOENEQ0VF NzQyNkQwMzEwMjBCRUMxRUFEMjMzN0NCNTFEQTcxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEI4Q0RDRUU3NDI2RDAzMTAyMEJFQzFFQUQyMzM3Q0I1MURB NzE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQjBCOENEQ0VFNzQyNkQwMzEwMjBCRUMxRUFEMjMz N0NCNTFEQTcxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAr7ZOHI1hsenYZHJL9PugOMYR0u7yzM1NKJ qqicISBZwt8u0gtpbc17bgC/nqFZShqc8LFZcIkhO+u3gSUWkAxhw8bBROs1jB6h 1QMNS1SIZ/go1oXQ9ibwTdR4qKeCQ0Ec08t+6HCrkE/cm29k43kiTm0cgsHm0opP WwyLsvpm6QSGJoSfHHlxRfd3T8aNy4b02A63LWPXeL8m4J7ql4zdw2Cah3NBQBkm j+vkdHUWESXJZXoDT8I/vUydvWH0C6VfhkKuL1E5lMqcGXBZOUrqJeJb69KbGmRD zlsaHXymtr7s6/PqPtlb+MyBfHYNV1/1YONGoMR3dBqtWGPm1aA= -----END CERTIFICATE-----Generated at Thu Sep 24 04:06:21 2026 by rpki-client