$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft File: B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft (raw, json) Hash identifier: p8OzgjPBJHVc6Ep4RBxa0o1Uni/qj8ChCGVHn5HsRPc= Subject key identifier: 27:0A:B1:0D:1F:FA:57:40:A1:76:8C:34:DC:7E:A4:22:F8:76:1E:10 Authority key identifier: B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C Certificate issuer: /CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C Certificate serial: 11834D68E7521DD7E3286E460AA0D657D3C1F2F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:21:02 +0000 Manifest this update: Thu 24 Sep 2026 12:16:02 +0000 Manifest next update: Fri 25 Sep 2026 12:22:02 +0000 Files and hashes: 1: B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl (hash: p072ep2gRDK5lZTODj93vRGPI5jWlfjdyXJ5ChF4wNA=) 2: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: Xlw4ZgOA9dxklZxuwsm7BdQVTv81WEpzZ+FyUCbJp8U=) 3: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (hash: EOraKN7NbhJxKTOduQMxHR15n6cFJJTiK2diztwSbic=) 4: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (hash: zDvSDZMoY6Znb5y3IJOyYf9v6rjB8P6HkgrYk/e4IOY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:83:4d:68:e7:52:1d:d7:e3:28:6e:46:0a:a0:d6:57:d3:c1:f2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B63B54AD0E764DB5250CE7F12EDB432F0C02897C Validity Not Before: Sep 24 12:16:02 2026 GMT Not After : Sep 25 12:22:02 2026 GMT Subject: CN=270AB10D1FFA5740A1768C34DC7EA422F8761E10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:bf:57:06:6f:82:e6:41:e8:17:47:6c:cb: 05:8b:12:95:7b:79:b2:aa:8e:e6:9a:4a:89:02:ce: bb:a4:97:9f:a9:74:a6:54:93:2d:4a:22:6c:f9:14: 38:53:56:da:c0:5b:83:21:a3:ae:19:a1:14:23:e2: 33:ae:7b:f1:4f:d0:35:d5:e6:cf:2f:fe:e1:ba:40: 77:ce:46:4c:36:44:c2:42:62:7b:2a:7b:93:b3:5e: 2b:d2:90:45:ed:d3:17:c7:fc:5e:7d:77:25:80:81: 85:7d:e3:c4:cc:e8:35:63:86:3a:ee:8b:2f:bb:eb: 36:18:eb:66:ad:73:41:e7:3d:55:f2:43:4e:1a:46: 2e:09:d2:af:03:67:43:e9:64:1d:2e:4c:07:8a:ce: 1b:e3:07:21:c8:e7:3c:f6:00:9c:8b:ba:3a:63:8e: cb:03:04:de:70:1d:fa:14:f3:9b:ba:d6:6f:cd:74: 0f:4f:7b:26:cd:cc:43:b1:94:44:c1:af:21:70:76: 18:af:e1:44:62:67:28:d4:d4:91:1b:ab:77:bb:ee: c3:02:70:ed:75:f7:96:b4:c2:74:89:d4:98:d0:2a: c7:15:a6:c2:7f:06:90:66:99:87:88:db:7e:96:8d: 78:ec:79:6a:95:61:0f:2b:c7:84:c2:23:8d:18:b7: da:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0A:B1:0D:1F:FA:57:40:A1:76:8C:34:DC:7E:A4:22:F8:76:1E:10 X509v3 Authority Key Identifier: keyid:B6:3B:54:AD:0E:76:4D:B5:25:0C:E7:F1:2E:DB:43:2F:0C:02:89:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/B63B54AD0E764DB5250CE7F12EDB432F0C02897C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:42:5b:8e:e8:ff:27:99:2f:36:58:43:6e:3d:ab:f9:ce:38: 81:79:9c:30:8c:ea:7c:e1:ea:86:13:86:59:18:44:42:58:b8: 11:09:fa:2e:f1:2a:b4:ef:52:db:a3:49:15:00:5b:1c:74:b7: 55:fd:9c:af:cf:c3:86:5d:b3:28:e6:68:17:f6:90:a1:85:5b: 28:c2:42:78:6b:6e:a3:6c:08:4b:37:0a:8e:36:2f:0f:ba:aa: b2:da:0a:fb:de:cf:0a:bf:2a:44:43:7c:21:8a:b8:0d:0d:a8: b7:ad:b0:ec:01:84:ff:1f:fc:7f:82:1e:4e:3c:79:d1:94:31: 3c:e1:3c:d3:44:89:40:7c:da:37:6c:9b:db:83:87:28:6e:b3: c2:00:a5:73:d6:dc:9a:28:f4:ef:92:47:26:0d:16:ae:55:cf: 83:58:4c:ff:ed:36:53:ec:bf:5a:8a:71:ff:84:89:dd:95:ab: 0d:4c:27:14:ef:a4:02:40:71:6e:59:c2:a3:ce:83:d7:bc:be: 5a:be:03:d2:52:0c:65:fc:a4:48:b4:12:a9:39:96:b7:dc:28: ab:2a:7d:28:5e:87:69:5d:c0:ca:b8:12:6f:0e:ee:5e:f1:5f: 60:22:af:56:12:5a:02:02:d4:9b:c1:84:b6:0b:34:42:23:03: bb:1d:63:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEYNNaOdSHdfjKG5GCqDWV9PB8vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzQjU0QUQwRTc2NERCNTI1MENFN0YxMkVEQjQzMkYw QzAyODk3QzAeFw0yNjA5MjQxMjE2MDJaFw0yNjA5MjUxMjIyMDJaMDMxMTAvBgNV BAMTKDI3MEFCMTBEMUZGQTU3NDBBMTc2OEMzNERDN0VBNDIyRjg3NjFFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpL9XBm+C5kHoF0dsywWLEpV7 ebKqjuaaSokCzrukl5+pdKZUky1KImz5FDhTVtrAW4Mho64ZoRQj4jOue/FP0DXV 5s8v/uG6QHfORkw2RMJCYnsqe5OzXivSkEXt0xfH/F59dyWAgYV948TM6DVjhjru iy+76zYY62atc0HnPVXyQ04aRi4J0q8DZ0PpZB0uTAeKzhvjByHI5zz2AJyLujpj jssDBN5wHfoU85u61m/NdA9PeybNzEOxlETBryFwdhiv4URiZyjU1JEbq3e77sMC cO1195a0wnSJ1JjQKscVpsJ/BpBmmYeI236WjXjseWqVYQ8rx4TCI40Yt9q9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJwqxDR/6V0Chdow03H6kIvh2HhAwHwYDVR0j BBgwFoAUtjtUrQ52TbUlDOfxLttDLwwCiXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTUwNDc5M2MtYzIwOS00NjlhLThlM2MtZWIzZjVhODM4NjNmLzAvQjYzQjU0QUQw RTc2NERCNTI1MENFN0YxMkVEQjQzMkYwQzAyODk3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjNCNTRBRDBFNzY0REI1MjUwQ0U3RjEyRURCNDMyRjBDMDI4 OTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTUwNDc5M2MtYzIwOS00NjlhLThl M2MtZWIzZjVhODM4NjNmLzAvQjYzQjU0QUQwRTc2NERCNTI1MENFN0YxMkVEQjQz MkYwQzAyODk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdCW47o/yeZLzZYQ249q/nOOIF5nDCM6nzh 6oYThlkYREJYuBEJ+i7xKrTvUtujSRUAWxx0t1X9nK/Pw4ZdsyjmaBf2kKGFWyjC QnhrbqNsCEs3Co42Lw+6qrLaCvvezwq/KkRDfCGKuA0NqLetsOwBhP8f/H+CHk48 edGUMTzhPNNEiUB82jdsm9uDhyhus8IApXPW3Joo9O+SRyYNFq5Vz4NYTP/tNlPs v1qKcf+Eid2Vqw1MJxTvpAJAcW5ZwqPOg9e8vlq+A9JSDGX8pEi0Eqk5lrfcKKsq fSheh2ldwMq4Em8O7l7xX2Air1YSWgIC1JvBhLYLNEIjA7sdY50= -----END CERTIFICATE-----Generated at Fri Sep 25 02:50:34 2026 by rpki-client