$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft File: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft (raw, json) Hash identifier: QvkM2FGlz/PCjEdNLQjYUoItOB/VFu+SzPn6rTaEzoo= Subject key identifier: 9E:8C:EA:E3:0F:3B:45:D2:01:51:43:B8:8F:F6:09:44:63:60:DB:FD Authority key identifier: B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC Certificate issuer: /CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Certificate serial: 23A8CF63D9B16EDAF476559F93E1FFA7B7C38D43 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 20:35:56 +0000 Manifest this update: Thu 24 Sep 2026 20:30:56 +0000 Manifest next update: Fri 25 Sep 2026 22:45:56 +0000 Files and hashes: 1: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: xB0/WgkgeQpbT+DgIUgkpcHnnIC1tIl18yTmoTUITOQ=) 2: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: KOBMUeuuJtkuzoTiB4FBFCyBVV1+45BqlCrbct7wq3M=) 3: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl (hash: mKhXWPigUY8k9ADvWNGpDo/OmDNcvuguz/3ztRAIrGY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a8:cf:63:d9:b1:6e:da:f4:76:55:9f:93:e1:ff:a7:b7:c3:8d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Validity Not Before: Sep 24 20:30:56 2026 GMT Not After : Sep 25 22:45:56 2026 GMT Subject: CN=9E8CEAE30F3B45D2015143B88FF609446360DBFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:fd:36:29:e6:be:2c:32:41:88:ca:08:46: de:2f:91:f0:51:ab:fd:e9:22:9b:0a:19:a3:eb:e7: 9f:78:28:34:01:b6:a1:c6:92:32:c7:ce:df:5e:d6: a4:55:cc:69:ee:a7:4e:c1:78:e9:0b:1a:11:d9:e2: ee:25:25:52:46:aa:c7:5d:02:4f:07:e4:e2:59:8e: 05:84:f2:1d:f9:c2:e1:21:8c:04:da:f0:51:f3:dd: 4a:e3:95:ab:26:28:30:67:71:85:20:35:00:b5:e2: 9b:00:8b:27:8d:bb:50:f3:52:02:de:91:bc:6a:ae: 25:aa:e6:13:e0:1a:ec:4e:44:10:ab:53:b2:53:28: 60:15:d3:13:ba:0a:87:c5:76:03:fc:47:83:7a:b4: ad:1c:de:ed:b9:6f:8b:d0:bb:e4:a0:db:f7:0e:d8: 47:f4:6f:7e:49:e8:de:61:f5:01:56:71:eb:e2:03: b5:5e:f6:00:14:0c:d4:60:ef:57:6c:c6:a7:b1:24: 32:cf:19:7e:6b:9c:9d:af:e2:e7:9b:85:73:74:2e: c1:c6:92:a9:5d:9b:f2:97:f1:b8:b4:65:3d:90:0f: 94:61:ce:0c:a4:c6:9e:45:1b:b6:37:22:64:61:cd: 61:98:33:c7:9c:5d:45:54:d2:0b:65:4a:7a:ff:17: bf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8C:EA:E3:0F:3B:45:D2:01:51:43:B8:8F:F6:09:44:63:60:DB:FD X509v3 Authority Key Identifier: keyid:B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b0:e8:a9:86:1e:28:77:9e:0b:06:12:23:32:ff:7a:7b:66: 65:11:87:3a:1f:71:36:0a:bd:d2:47:ce:6d:18:9b:2d:88:36: b3:b2:be:53:2a:64:ec:7f:f7:75:16:c3:cd:8d:60:ea:61:f9: 87:fc:77:92:a3:68:d8:7d:1d:c1:63:53:c1:8e:8d:a7:2f:49: 75:de:b5:54:e1:3e:bd:49:32:9e:bc:6f:2f:41:9b:04:ec:28: ae:44:1f:07:eb:b0:b7:1c:bd:28:56:59:63:62:c9:a8:91:bd: 01:f1:c1:51:fb:a4:fe:cf:3d:d2:ae:65:f2:25:48:c1:3b:5b: 8a:4f:dd:69:0c:6e:a2:9e:45:bc:f2:e0:36:68:0b:de:8a:35: cc:de:48:b1:95:2f:c8:ad:95:6d:ed:54:1f:15:34:be:ba:82: 01:a2:29:96:54:09:de:15:2c:33:a8:e7:d5:02:9c:f2:93:6b: bc:4e:18:7a:54:f7:b6:f2:d8:30:02:39:41:b5:8e:d7:73:8c: 75:61:d9:44:0c:06:e7:27:03:16:41:1d:76:61:a1:de:e5:5e: 5a:4c:e1:e3:2b:37:f9:59:6e:78:54:88:85:6a:f3:70:4e:83: d6:65:2a:5e:19:1a:60:93:f5:90:80:6f:21:3d:56:63:b0:f5: 8f:95:1b:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6jPY9mxbtr0dlWfk+H/p7fDjUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3 Mzg3NDlDQzAeFw0yNjA5MjQyMDMwNTZaFw0yNjA5MjUyMjQ1NTZaMDMxMTAvBgNV BAMTKDlFOENFQUUzMEYzQjQ1RDIwMTUxNDNCODhGRjYwOTQ0NjM2MERCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYf02Kea+LDJBiMoIRt4vkfBR q/3pIpsKGaPr5594KDQBtqHGkjLHzt9e1qRVzGnup07BeOkLGhHZ4u4lJVJGqsdd Ak8H5OJZjgWE8h35wuEhjATa8FHz3UrjlasmKDBncYUgNQC14psAiyeNu1DzUgLe kbxqriWq5hPgGuxORBCrU7JTKGAV0xO6CofFdgP8R4N6tK0c3u25b4vQu+Sg2/cO 2Ef0b35J6N5h9QFWceviA7Ve9gAUDNRg71dsxqexJDLPGX5rnJ2v4uebhXN0LsHG kqldm/KX8bi0ZT2QD5Rhzgykxp5FG7Y3ImRhzWGYM8ecXUVU0gtlSnr/F787AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnozq4w87RdIBUUO4j/YJRGNg2/0wHwYDVR0j BBgwFoAUtc+gIN1Lv9SYxeTYSo1jCXOHScwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGEwZmJiNTUtMWRkOC00ZjhiLWI4OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBE RDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3Mzg3NDlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUNGQTAyMERENEJCRkQ0OThDNUU0RDg0QThENjMwOTczODc0 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGEwZmJiNTUtMWRkOC00ZjhiLWI4 OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYz MDk3Mzg3NDlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKw6KmGHih3ngsGEiMy/3p7ZmURhzofcTYK vdJHzm0Ymy2INrOyvlMqZOx/93UWw82NYOph+Yf8d5KjaNh9HcFjU8GOjacvSXXe tVThPr1JMp68by9BmwTsKK5EHwfrsLccvShWWWNiyaiRvQHxwVH7pP7PPdKuZfIl SME7W4pP3WkMbqKeRbzy4DZoC96KNczeSLGVL8itlW3tVB8VNL66ggGiKZZUCd4V LDOo59UCnPKTa7xOGHpU97by2DACOUG1jtdzjHVh2UQMBucnAxZBHXZhod7lXlpM 4eMrN/lZbnhUiIVq83BOg9ZlKl4ZGmCT9ZCAbyE9VmOw9Y+VG4c= -----END CERTIFICATE-----Generated at Fri Sep 25 02:39:53 2026 by rpki-client