$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft File: B977405A3167FC0E8490C54AB080E37B0920C4B4.mft (raw, json) Hash identifier: GWWJ5muiwGyZ09EnXSEfudEufEM4XdxO+DTyMxH9qJ8= Subject key identifier: 0C:75:15:D2:F1:86:9A:45:7F:62:60:42:4F:88:98:03:0E:31:BC:4E Authority key identifier: B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4 Certificate issuer: /CN=B977405A3167FC0E8490C54AB080E37B0920C4B4 Certificate serial: 029EFE21372D9A2B142CC85C9AC3E98B3FAE8AAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 17:47:58 +0000 Manifest this update: Wed 23 Sep 2026 17:42:58 +0000 Manifest next update: Thu 24 Sep 2026 18:07:58 +0000 Files and hashes: 1: B977405A3167FC0E8490C54AB080E37B0920C4B4.crl (hash: wXJqdCSZ0E426Ys2xbZUHMus/3NO5Rjw/LRAzs2q2OU=) 2: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: TSVY5x+9VndlFploLHkJHga5L+L+3DIx++btPsU48bE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.crl rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9e:fe:21:37:2d:9a:2b:14:2c:c8:5c:9a:c3:e9:8b:3f:ae:8a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B977405A3167FC0E8490C54AB080E37B0920C4B4 Validity Not Before: Sep 23 17:42:58 2026 GMT Not After : Sep 24 18:07:58 2026 GMT Subject: CN=0C7515D2F1869A457F6260424F8898030E31BC4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9a:42:63:aa:97:b1:7c:d6:99:34:56:ad:b1: 20:35:6b:85:cd:37:c0:7d:05:9c:ff:dd:fd:b0:71: dc:e8:ad:55:17:b0:33:27:ec:77:ed:ec:a3:da:b3: 54:6b:78:a3:92:a8:03:3e:f1:2b:cb:55:93:26:a3: bf:44:d9:9e:e3:93:c1:73:78:d8:1e:52:b2:58:4c: df:2b:d9:79:62:de:42:ca:f6:b6:49:14:6e:fe:d4: b5:54:1b:a7:28:79:2c:d9:77:22:ac:3d:64:9e:c0: 5e:b5:d9:b3:b4:37:d1:78:22:01:cc:57:e8:c1:34: 9b:02:f8:fd:70:92:01:86:d5:5d:53:18:ef:b6:f9: 17:5a:e3:30:3b:1e:8b:b0:81:b3:9d:fd:c2:2b:7e: b7:26:4b:34:14:34:ac:1b:cb:c9:89:87:80:70:dd: 9d:a3:91:e5:01:63:94:4e:42:f9:f6:89:cd:96:bc: 55:7e:b7:90:a0:0f:22:ed:52:97:0f:04:5f:15:88: b6:38:e4:13:d4:4a:04:1c:ec:6e:74:05:c0:19:b3: 02:09:f9:1e:32:5b:d7:c9:74:3d:aa:5c:ea:95:91: 59:20:9e:e4:99:21:4e:ed:f4:fc:1c:d1:e4:b6:03: c5:21:60:ca:1b:aa:c7:4a:3f:24:02:7d:60:c0:12: cf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:75:15:D2:F1:86:9A:45:7F:62:60:42:4F:88:98:03:0E:31:BC:4E X509v3 Authority Key Identifier: keyid:B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:9a:cd:4f:23:9a:1c:d5:f8:4c:7b:cf:e7:0c:62:16:9b:5e: d4:78:58:b8:0c:89:ce:af:1b:aa:9b:55:2c:04:5a:78:c5:46: 8d:12:bf:97:72:1d:0b:25:cb:96:a7:e6:31:fd:8f:2c:da:31: 4d:96:e2:6d:b0:95:88:1f:d1:aa:64:9b:8e:fa:ed:d2:76:86: 1d:5d:a8:21:f1:f2:53:e8:4a:3c:24:c1:26:d8:72:3d:eb:1e: 0f:99:9c:fe:97:71:d4:79:75:d3:67:5d:8d:6f:44:1c:cc:ec: 31:00:ab:18:3d:7e:1f:fa:19:eb:84:a9:20:2a:a1:fe:75:7f: d4:03:b2:85:0a:84:08:8d:01:85:f8:75:c9:2a:0a:1b:25:3b: 9c:20:b8:0c:7d:60:5f:ce:88:43:1e:59:69:cc:54:b2:c0:0c: df:18:c1:94:02:e5:6a:ca:c3:f9:a8:f2:8d:6f:96:ac:8f:7a: 17:72:7d:b8:87:32:3f:ad:46:84:fe:0a:34:1b:21:97:92:a2: 11:c7:5b:e8:8f:66:31:16:ff:d6:e7:0e:f2:c0:8a:07:84:84: d7:99:b1:85:80:78:00:51:6e:80:4e:d3:05:c9:2e:ce:99:2c: a1:c5:73:9b:fc:6e:8b:ac:9c:ee:a9:4b:04:d8:86:6f:6d:6d: 53:60:de:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAp7+ITctmisULMhcmsPpiz+uiqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3NzQwNUEzMTY3RkMwRTg0OTBDNTRBQjA4MEUzN0Iw OTIwQzRCNDAeFw0yNjA5MjMxNzQyNThaFw0yNjA5MjQxODA3NThaMDMxMTAvBgNV BAMTKDBDNzUxNUQyRjE4NjlBNDU3RjYyNjA0MjRGODg5ODAzMEUzMUJDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPmkJjqpexfNaZNFatsSA1a4XN N8B9BZz/3f2wcdzorVUXsDMn7Hft7KPas1RreKOSqAM+8SvLVZMmo79E2Z7jk8Fz eNgeUrJYTN8r2Xli3kLK9rZJFG7+1LVUG6coeSzZdyKsPWSewF612bO0N9F4IgHM V+jBNJsC+P1wkgGG1V1TGO+2+Rda4zA7HouwgbOd/cIrfrcmSzQUNKwby8mJh4Bw 3Z2jkeUBY5ROQvn2ic2WvFV+t5CgDyLtUpcPBF8ViLY45BPUSgQc7G50BcAZswIJ +R4yW9fJdD2qXOqVkVkgnuSZIU7t9Pwc0eS2A8UhYMobqsdKPyQCfWDAEs+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDHUV0vGGmkV/YmBCT4iYAw4xvE4wHwYDVR0j BBgwFoAUuXdAWjFn/A6EkMVKsIDjewkgxLQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTBiZTJkZjgtMmMzNi00NjUyLWE1MGMtZjY0MjBkMmNkOWQzLzAvQjk3NzQwNUEz MTY3RkMwRTg0OTBDNTRBQjA4MEUzN0IwOTIwQzRCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTc3NDA1QTMxNjdGQzBFODQ5MEM1NEFCMDgwRTM3QjA5MjBD NEI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQjk3NzQwNUEzMTY3RkMwRTg0OTBDNTRBQjA4MEUz N0IwOTIwQzRCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSazU8jmhzV+Ex7z+cMYhabXtR4WLgMic6v G6qbVSwEWnjFRo0Sv5dyHQsly5an5jH9jyzaMU2W4m2wlYgf0apkm4767dJ2hh1d qCHx8lPoSjwkwSbYcj3rHg+ZnP6XcdR5ddNnXY1vRBzM7DEAqxg9fh/6GeuEqSAq of51f9QDsoUKhAiNAYX4dckqChslO5wguAx9YF/OiEMeWWnMVLLADN8YwZQC5WrK w/mo8o1vlqyPehdyfbiHMj+tRoT+CjQbIZeSohHHW+iPZjEW/9bnDvLAigeEhNeZ sYWAeABRboBO0wXJLs6ZLKHFc5v8bousnO6pSwTYhm9tbVNg3kU= -----END CERTIFICATE-----Generated at Thu Sep 24 11:42:34 2026 by rpki-client