$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft File: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft (raw, json) Hash identifier: DmYLkdlRoaIPH6Qla+tO7jrqwNPPXlgWQT9M7RONr+U= Subject key identifier: 92:E1:29:BA:72:D2:7E:DB:92:FA:5F:D0:73:78:33:88:F9:9D:EA:12 Authority key identifier: B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 Certificate issuer: /CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Certificate serial: 63813D8503F1B397A1716DF6E36BC80F2FABA46F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 13:58:16 +0000 Manifest this update: Thu 24 Sep 2026 13:53:16 +0000 Manifest next update: Fri 25 Sep 2026 15:49:16 +0000 Files and hashes: 1: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: 4Y1mZB2qJy+rnsbtqPt0mJQCafCDh7l369bEnaFDUds=) 2: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: 0dA2mfgVhJxUx/fjGY3+Dm6GSQVEEUHFqlvFJHB2B4M=) 3: B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl (hash: 4Y+Rg1t77chO9QiMyeg3polEuGstsUMHj2pHLpwHxXw=) 4: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: fnDhoiL+V7XHrTgcb34geX86ATfCep/ePS+vjKoYts4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:81:3d:85:03:f1:b3:97:a1:71:6d:f6:e3:6b:c8:0f:2f:ab:a4:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27 Validity Not Before: Sep 24 13:53:16 2026 GMT Not After : Sep 25 15:49:16 2026 GMT Subject: CN=92E129BA72D27EDB92FA5FD073783388F99DEA12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:12:9e:11:e3:fe:31:ea:e8:d6:17:1a:e3:50: e7:a8:73:07:0b:63:4b:e3:68:69:97:e0:78:86:b8: cf:8d:5d:b2:26:85:1f:1d:43:1a:81:13:f3:27:4e: fa:1a:1a:2c:1d:1c:0c:d6:88:51:19:16:17:68:ca: b4:f4:87:c6:0b:06:79:cc:c7:83:10:f8:a3:b5:82: f3:d8:9e:26:d7:fc:eb:6c:2d:91:aa:c3:ae:35:61: da:54:24:a4:9e:b5:fa:17:a2:41:d2:48:92:9c:01: c0:d7:df:4e:94:9c:c9:05:12:55:78:bb:a6:78:3a: f6:6d:a3:53:ed:71:4d:86:1e:17:e5:81:54:ef:e5: 05:5a:3d:b3:db:34:11:c8:d4:42:65:d4:39:1c:af: 9e:05:d3:02:a6:59:d8:48:e9:c6:25:10:27:fe:dc: 9e:97:e9:90:ea:f4:97:87:39:9b:a6:7f:46:79:56: 59:cd:ae:33:f1:24:b8:7b:9a:5d:54:63:56:90:0a: ce:f5:48:a1:6a:9c:50:fe:4d:66:f0:42:13:e5:56: e5:2b:c9:48:03:13:e9:4c:9b:32:f4:4f:82:c8:0f: 06:81:7d:5d:b1:00:83:97:50:a1:c0:93:2d:52:b4: c8:e2:dd:43:37:58:75:50:db:f1:82:27:b2:3c:9e: 99:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E1:29:BA:72:D2:7E:DB:92:FA:5F:D0:73:78:33:88:F9:9D:EA:12 X509v3 Authority Key Identifier: keyid:B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:fd:37:d5:ea:80:7c:47:80:e9:c6:f8:46:54:35:41:0d:5f: 04:ef:cb:a3:fa:aa:0c:b1:b6:d5:b7:17:ec:df:0e:ab:4f:0c: 98:47:cd:d0:3d:25:0a:01:20:97:5f:23:bb:69:6b:49:a3:7c: a3:39:5b:6d:5c:23:3b:54:87:9a:45:98:f6:46:c9:d6:8f:88: ec:01:c7:ae:c4:ce:b7:06:8e:54:18:22:85:1d:86:b9:b4:bf: 5d:f2:5c:ee:b2:4f:76:8b:7b:23:29:df:77:09:18:e8:8d:37: 76:4f:b3:d2:a3:1d:71:36:d6:35:28:60:10:4a:34:8b:27:b9: 0d:7b:7b:44:fa:12:98:2b:ce:d9:3f:6b:f9:80:f4:1c:7b:e5: 4c:e9:ee:75:7f:4f:29:27:3b:42:0d:e0:d7:a3:c2:29:2b:0f: f7:a8:90:33:85:bd:65:49:a9:fb:ff:cf:1f:64:21:cf:3d:f9: 13:e0:77:38:81:b3:0d:dc:c7:49:32:2a:32:c8:8b:b2:72:07: bf:d5:25:73:a7:b0:00:64:3d:59:dd:5d:06:41:2c:d2:9e:d3: 9d:1e:48:74:9d:35:8c:66:61:f2:c5:c9:9c:7d:08:51:04:d1: a6:bf:3d:bf:37:25:9e:86:88:14:d1:e8:76:60:7a:17:79:d3: 83:3b:e0:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4E9hQPxs5ehcW3242vIDy+rpG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNUM3RUQzODY2RDNDQUQyNDREQUIzNjRENURFQUIw MUI0MUIyNzAeFw0yNjA5MjQxMzUzMTZaFw0yNjA5MjUxNTQ5MTZaMDMxMTAvBgNV BAMTKDkyRTEyOUJBNzJEMjdFREI5MkZBNUZEMDczNzgzMzg4Rjk5REVBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEp4R4/4x6ujWFxrjUOeocwcL Y0vjaGmX4HiGuM+NXbImhR8dQxqBE/MnTvoaGiwdHAzWiFEZFhdoyrT0h8YLBnnM x4MQ+KO1gvPYnibX/OtsLZGqw641YdpUJKSetfoXokHSSJKcAcDX306UnMkFElV4 u6Z4OvZto1PtcU2GHhflgVTv5QVaPbPbNBHI1EJl1Dkcr54F0wKmWdhI6cYlECf+ 3J6X6ZDq9JeHOZumf0Z5VlnNrjPxJLh7ml1UY1aQCs71SKFqnFD+TWbwQhPlVuUr yUgDE+lMmzL0T4LIDwaBfV2xAIOXUKHAky1StMji3UM3WHVQ2/GCJ7I8npnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkuEpunLSftuS+l/Qc3gziPmd6hIwHwYDVR0j BBgwFoAUuaXH7Thm08rSRNqzZNXeqwG0GycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkxMDY4MjctODY2ZS00YWMzLThmNzktYTZlMzIwYjIwZGU3LzAvQjlBNUM3RUQz ODY2RDNDQUQyNDREQUIzNjRENURFQUIwMUI0MUIyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUE1QzdFRDM4NjZEM0NBRDI0NERBQjM2NEQ1REVBQjAxQjQx QjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjlBNUM3RUQzODY2RDNDQUQyNDREQUIzNjRENURF QUIwMUI0MUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABn9N9XqgHxHgOnG+EZUNUENXwTvy6P6qgyx ttW3F+zfDqtPDJhHzdA9JQoBIJdfI7tpa0mjfKM5W21cIztUh5pFmPZGydaPiOwB x67EzrcGjlQYIoUdhrm0v13yXO6yT3aLeyMp33cJGOiNN3ZPs9KjHXE21jUoYBBK NIsnuQ17e0T6Epgrztk/a/mA9Bx75Uzp7nV/TyknO0IN4NejwikrD/eokDOFvWVJ qfv/zx9kIc89+RPgdziBsw3cx0kyKjLIi7JyB7/VJXOnsABkPVndXQZBLNKe050e SHSdNYxmYfLFyZx9CFEE0aa/Pb83JZ6GiBTR6HZgehd504M74Ec= -----END CERTIFICATE-----Generated at Fri Sep 25 03:43:56 2026 by rpki-client