$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft File: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft (raw, json) Hash identifier: XigN973E9KfnPDWLUdsjM7ot7kkwnFSB9qFhxUDwQW4= Subject key identifier: BD:B6:09:A2:59:B1:34:11:CF:E5:65:A1:E5:8D:AF:1C:3C:89:C7:0D Authority key identifier: B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 Certificate issuer: /CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Certificate serial: 5FDAAD9473D0DA7F75B182ADAD45C96E9D848501 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 14:13:32 +0000 Manifest this update: Thu 24 Sep 2026 14:08:32 +0000 Manifest next update: Fri 25 Sep 2026 15:47:32 +0000 Files and hashes: 1: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl (hash: Eg+4wZMnEVzoEbO1dHmAUh3RY2+B2dLCn/o08Esc4uM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:da:ad:94:73:d0:da:7f:75:b1:82:ad:ad:45:c9:6e:9d:84:85:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Validity Not Before: Sep 24 14:08:32 2026 GMT Not After : Sep 25 15:47:32 2026 GMT Subject: CN=BDB609A259B13411CFE565A1E58DAF1C3C89C70D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3f:c3:16:d9:aa:8a:51:e6:db:58:70:20:2c: 41:75:f2:8d:e2:41:6b:a4:f9:76:e7:b7:ab:b1:eb: c0:a7:b9:e5:b0:de:2a:f8:42:94:91:5d:12:06:21: 73:90:18:3b:3c:ac:d0:08:ec:58:44:e9:48:9d:eb: c2:1d:92:02:54:af:a2:fe:30:2b:7b:94:7a:34:01: e4:ed:03:82:70:9e:0e:ed:d9:2f:12:cc:44:66:31: ed:6c:98:18:28:dd:a8:04:74:07:4c:99:18:79:42: 87:44:86:28:7f:a3:06:23:f5:c2:2f:70:26:83:b9: 4a:41:0f:4a:26:03:c0:41:d6:93:7b:f2:a5:f6:c5: ea:0b:8b:ef:50:04:51:a5:6c:63:df:f2:b7:6e:18: 31:89:0b:46:0a:a9:22:3c:ee:39:3d:d5:ba:12:20: a9:bc:93:c1:d1:98:f7:b3:5c:b9:31:b1:96:f1:e0: 5a:d2:aa:3c:b9:1d:fe:54:54:61:13:23:ee:d8:c0: bb:af:b5:2b:87:9a:fd:89:67:80:3c:96:16:2c:85: 9b:08:44:50:8c:29:16:36:85:f4:c1:51:c3:8b:11: be:4b:e1:a7:33:b1:d1:1e:e9:b1:3a:9f:39:88:d7: 84:67:2d:e8:c8:8a:b4:d6:59:89:49:61:49:0c:ed: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B6:09:A2:59:B1:34:11:CF:E5:65:A1:E5:8D:AF:1C:3C:89:C7:0D X509v3 Authority Key Identifier: keyid:B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:71:9e:de:ad:70:45:4e:0a:b2:64:26:a2:2d:0e:8d:f7:bc: 7a:fd:34:9a:de:72:e5:26:95:32:04:ad:2f:c5:20:d5:12:81: 2a:05:85:cf:42:67:4a:4f:37:cb:f7:ed:2d:b9:3f:e6:ab:3f: 20:fd:ad:c1:57:34:73:34:b9:76:4f:76:f0:96:6f:06:0e:da: 96:ca:64:ed:12:31:ae:9f:4e:20:66:f0:5a:57:0c:ee:2b:73: 71:41:2f:71:8e:e6:0b:20:09:e6:89:05:d1:10:41:38:72:bc: 52:6e:8a:94:f9:f5:7b:3b:94:c3:73:cd:72:86:af:e6:51:3b: 80:58:d2:16:77:dd:36:58:4e:22:35:3f:13:3f:d6:af:8a:46: 73:37:1d:cb:4d:52:9c:73:7d:05:ad:d6:65:b2:a0:2a:20:0f: fb:d5:b2:8f:45:cc:00:49:bd:9f:90:64:23:da:29:c3:68:08: 67:f4:47:31:50:d2:d2:8b:39:fc:53:c8:79:cd:3d:a4:b1:2d: 80:60:bf:2b:76:c8:ea:74:b3:d0:ed:92:b2:1f:fd:36:f5:60: d5:c9:bb:0a:04:73:f8:01:93:15:c0:08:6b:ba:89:b4:c6:45: 14:d8:1e:5e:1e:99:ff:0a:76:3e:c7:4c:c5:e4:09:1a:b4:ea: 02:88:f1:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9qtlHPQ2n91sYKtrUXJbp2EhQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYw M0JFRUFEMjAeFw0yNjA5MjQxNDA4MzJaFw0yNjA5MjUxNTQ3MzJaMDMxMTAvBgNV BAMTKEJEQjYwOUEyNTlCMTM0MTFDRkU1NjVBMUU1OERBRjFDM0M4OUM3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhP8MW2aqKUebbWHAgLEF18o3i QWuk+Xbnt6ux68CnueWw3ir4QpSRXRIGIXOQGDs8rNAI7FhE6Uid68IdkgJUr6L+ MCt7lHo0AeTtA4Jwng7t2S8SzERmMe1smBgo3agEdAdMmRh5QodEhih/owYj9cIv cCaDuUpBD0omA8BB1pN78qX2xeoLi+9QBFGlbGPf8rduGDGJC0YKqSI87jk91boS IKm8k8HRmPezXLkxsZbx4FrSqjy5Hf5UVGETI+7YwLuvtSuHmv2JZ4A8lhYshZsI RFCMKRY2hfTBUcOLEb5L4aczsdEe6bE6nzmI14RnLejIirTWWYlJYUkM7Q9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvbYJolmxNBHP5WWh5Y2vHDyJxw0wHwYDVR0j BBgwFoAUuY/UiRS0iceEenon5Tx/FgO+6tIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDVjMmM3MWMtNmFlNS00ZWE5LWI4NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkx NEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYwM0JFRUFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COThGRDQ4OTE0QjQ4OUM3ODQ3QTdBMjdFNTNDN0YxNjAzQkVF QUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdG MTYwM0JFRUFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpxnt6tcEVOCrJkJqItDo33vHr9NJrecuUm lTIErS/FINUSgSoFhc9CZ0pPN8v37S25P+arPyD9rcFXNHM0uXZPdvCWbwYO2pbK ZO0SMa6fTiBm8FpXDO4rc3FBL3GO5gsgCeaJBdEQQThyvFJuipT59Xs7lMNzzXKG r+ZRO4BY0hZ33TZYTiI1PxM/1q+KRnM3HctNUpxzfQWt1mWyoCogD/vVso9FzABJ vZ+QZCPaKcNoCGf0RzFQ0tKLOfxTyHnNPaSxLYBgvyt2yOp0s9DtkrIf/Tb1YNXJ uwoEc/gBkxXACGu6ibTGRRTYHl4emf8Kdj7HTMXkCRq06gKI8cw= -----END CERTIFICATE-----Generated at Fri Sep 25 04:01:10 2026 by rpki-client