$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft File: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft (raw, json) Hash identifier: xcNEHK1J45P1JnghEnIbDG7bOUaCGjWjQZlPLAWxlCI= Subject key identifier: 42:64:89:B4:41:B2:C3:58:71:C0:99:2B:7A:13:FA:AD:70:D8:D3:A9 Authority key identifier: B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 Certificate issuer: /CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Certificate serial: 42A1310F5D2BCC256030310BB6F3974E03F66B9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 02:05:29 +0000 Manifest this update: Thu 03 Sep 2026 02:00:29 +0000 Manifest next update: Fri 04 Sep 2026 05:22:29 +0000 Files and hashes: 1: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: Pavi+Ibkd+bl9I6ebmoiu+/5SxrpK9sFhLxy2ZXQkGw=) 2: 323430313a346661303a3a2f33322d3438203d3e20313431393539.roa (hash: YSkaXkoDpu4xkOc0DMYpS2KAoSxyKN+Gksem+MM/1ic=) 3: B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl (hash: XMxRy5e0i2nH2kt2/QzUiq2PVxeRkNznjX9yKIOx8bU=) 4: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: vGdo0aPhNFfXshch3eNd6YkNvIG8QzHxW2xedSDSTPc=) 5: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: WrcnjDvM2bO2wuu3OCRivgLaRSs+xddaOJ50D9MbO8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a1:31:0f:5d:2b:cc:25:60:30:31:0b:b6:f3:97:4e:03:f6:6b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709 Validity Not Before: Sep 3 02:00:29 2026 GMT Not After : Sep 4 05:22:29 2026 GMT Subject: CN=426489B441B2C35871C0992B7A13FAAD70D8D3A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:22:80:6e:65:c3:c3:12:c4:ac:54:31:0b:3e: b5:98:81:46:6a:12:a6:53:86:c6:ee:18:49:bf:b7: 30:d8:17:12:5d:1b:02:cf:35:84:47:79:1b:71:00: 18:01:1e:b5:83:d4:a1:4d:92:0a:92:ed:03:78:e1: 53:e4:f0:78:f5:b0:f6:59:81:b6:a3:40:3a:dd:42: 86:7a:9b:b9:e7:2d:94:57:cf:9f:8e:15:b0:36:d1: 17:09:1d:25:6b:39:19:e7:5f:b5:4e:dd:f7:f2:22: d6:e1:14:b9:0d:2d:04:bb:28:2c:22:98:a9:5f:67: 9c:95:43:78:77:bc:64:1c:ee:2b:98:a9:87:25:93: ed:b7:80:54:36:e3:fd:3c:6c:5a:6e:90:fe:bb:d3: d3:c5:2c:01:9e:c8:c7:84:7f:6f:72:02:6d:19:fc: 73:8e:80:9b:55:a4:5e:5d:13:26:a9:a5:30:ce:95: ba:70:5e:3e:e6:e3:ad:f0:4f:ff:82:5e:36:79:fc: fa:37:8a:05:c3:e6:e3:29:c6:b8:cb:05:1f:41:b7: f5:5e:f3:03:0f:a9:0d:06:aa:6d:96:9a:49:70:44: 21:62:3d:e9:8a:ef:45:a3:b9:94:a4:9a:8a:3e:42: 4b:9c:1e:e1:40:4d:ae:8f:a7:25:2b:da:ba:ec:89: db:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:64:89:B4:41:B2:C3:58:71:C0:99:2B:7A:13:FA:AD:70:D8:D3:A9 X509v3 Authority Key Identifier: keyid:B3:16:C6:3D:2D:A1:38:7D:19:1A:7E:A6:DC:0B:59:C5:EC:D2:D7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/B316C63D2DA1387D191A7EA6DC0B59C5ECD2D709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4e:c1:20:17:e8:88:0d:6a:fe:1b:b5:b6:f1:74:6f:30:bc: 31:b2:05:54:56:15:35:ad:32:83:53:69:e6:eb:f6:6f:89:7f: d8:9f:b1:34:b7:c6:33:99:4d:0e:a5:5e:59:01:7c:61:c4:12: 15:54:fd:e0:74:ae:36:1e:ec:21:48:ee:e5:fe:a3:cc:99:c4: 2e:c2:01:e2:78:c6:86:18:de:9a:d4:5b:56:ad:0b:24:be:bc: a8:8a:9a:76:e8:65:80:1f:9d:5b:a0:da:9c:91:d9:7a:56:5d: 83:06:f4:86:ca:46:3b:44:e0:78:7a:fc:6d:4e:eb:84:83:75: 0d:e6:73:eb:77:0d:f5:71:28:12:64:b8:c1:e3:d7:3f:c8:17: 63:e4:98:f1:93:13:97:92:f9:90:d6:a3:98:e8:a4:0d:0e:bc: c2:f9:ea:cd:81:8f:dd:b2:ca:ba:5c:bc:5a:2c:b4:ef:d3:53: a0:5b:ac:52:16:71:9f:fa:14:2c:10:52:fd:50:61:ca:8f:ed: 23:af:fa:9b:6b:ac:ae:89:25:d3:06:a7:7c:40:23:91:75:83: 94:c3:e7:12:3d:1d:4e:12:fd:f3:52:68:5c:43:78:2e:ff:24: bb:1a:1d:e9:05:e0:2e:e7:74:38:d8:78:8f:64:df:3d:18:80: 1f:da:63:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqExD10rzCVgMDELtvOXTgP2a5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5QzVF Q0QyRDcwOTAeFw0yNjA5MDMwMjAwMjlaFw0yNjA5MDQwNTIyMjlaMDMxMTAvBgNV BAMTKDQyNjQ4OUI0NDFCMkMzNTg3MUMwOTkyQjdBMTNGQUFENzBEOEQzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlIoBuZcPDEsSsVDELPrWYgUZq EqZThsbuGEm/tzDYFxJdGwLPNYRHeRtxABgBHrWD1KFNkgqS7QN44VPk8Hj1sPZZ gbajQDrdQoZ6m7nnLZRXz5+OFbA20RcJHSVrORnnX7VO3ffyItbhFLkNLQS7KCwi mKlfZ5yVQ3h3vGQc7iuYqYclk+23gFQ24/08bFpukP6709PFLAGeyMeEf29yAm0Z /HOOgJtVpF5dEyappTDOlbpwXj7m463wT/+CXjZ5/Po3igXD5uMpxrjLBR9Bt/Ve 8wMPqQ0Gqm2WmklwRCFiPemK70WjuZSkmoo+QkucHuFATa6PpyUr2rrsiduLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmSJtEGyw1hxwJkrehP6rXDY06kwHwYDVR0j BBgwFoAUsxbGPS2hOH0ZGn6m3AtZxezS1wkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGZmMDk1ODQtOTExMC00YjBkLThmNmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0Qy REExMzg3RDE5MUE3RUE2REMwQjU5QzVFQ0QyRDcwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzE2QzYzRDJEQTEzODdEMTkxQTdFQTZEQzBCNTlDNUVDRDJE NzA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvQjMxNkM2M0QyREExMzg3RDE5MUE3RUE2REMwQjU5 QzVFQ0QyRDcwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9OwSAX6IgNav4btbbxdG8wvDGyBVRWFTWt MoNTaebr9m+Jf9ifsTS3xjOZTQ6lXlkBfGHEEhVU/eB0rjYe7CFI7uX+o8yZxC7C AeJ4xoYY3prUW1atCyS+vKiKmnboZYAfnVug2pyR2XpWXYMG9IbKRjtE4Hh6/G1O 64SDdQ3mc+t3DfVxKBJkuMHj1z/IF2PkmPGTE5eS+ZDWo5jopA0OvML56s2Bj92y yrpcvFostO/TU6BbrFIWcZ/6FCwQUv1QYcqP7SOv+ptrrK6JJdMGp3xAI5F1g5TD 5xI9HU4S/fNSaFxDeC7/JLsaHekF4C7ndDjYeI9k3z0YgB/aY+Q= -----END CERTIFICATE-----Generated at Thu Sep 3 05:57:36 2026 by rpki-client