$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft File: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft (raw, json) Hash identifier: kEYAEpDGFMcdqmxD2NVjCtlhwf+FPfkKh/y2mBaRfDw= Subject key identifier: 99:A0:6C:34:1F:25:E0:27:2B:57:EC:50:85:5A:B3:C0:2E:61:BC:9D Authority key identifier: B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB Certificate issuer: /CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Certificate serial: 47348ED628E852C69821085B4C2D5EE5A3D5EAA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 15:57:32 +0000 Manifest this update: Wed 02 Sep 2026 15:52:32 +0000 Manifest next update: Thu 03 Sep 2026 18:47:32 +0000 Files and hashes: 1: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl (hash: iQ4d3lLf+mgLrpDVLB0OkX9ZFZm5RzC61PmUgZdZ+0o=) 2: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: lfMuEG6m1w+3L6wzJesoEfOVGjLJIPXAAFywmq7MUaw=) 3: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: 8GvfzVduMFTtGlADd061A8wAjIa0JhN238PnLdk7UyA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 18:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:34:8e:d6:28:e8:52:c6:98:21:08:5b:4c:2d:5e:e5:a3:d5:ea:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Validity Not Before: Sep 2 15:52:32 2026 GMT Not After : Sep 3 18:47:32 2026 GMT Subject: CN=99A06C341F25E0272B57EC50855AB3C02E61BC9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:60:53:21:05:db:59:2e:57:28:e0:8a:f7:c5: a2:59:b3:b5:83:f8:af:9a:3e:9b:40:93:4f:43:be: f3:c3:28:d8:4d:fe:c2:7f:2b:8a:52:65:b8:d4:36: 34:e9:0b:7f:90:1a:d8:17:01:bc:89:e6:40:04:5b: 10:c4:45:6b:f5:36:db:8a:e5:78:39:d2:4e:bb:0e: b5:01:23:3a:cc:aa:b9:1d:06:43:b0:8c:d9:25:2a: e6:b0:4b:b9:27:ce:31:56:93:cb:5d:aa:8b:4e:f3: 1c:c5:80:b3:d4:2b:fb:06:2a:ed:c3:94:70:2c:0c: d1:1e:69:f8:6d:9d:11:f5:8f:c3:91:af:90:bb:07: 67:5e:59:48:6f:fb:84:1a:3e:72:70:be:11:8f:83: b5:80:b9:6c:fb:a7:a0:a9:85:a2:56:2d:57:7a:37: c8:05:8c:19:87:b2:cb:67:7b:7b:ec:5a:6c:7b:41: 54:65:1e:34:4a:e3:3e:12:97:70:02:3e:a1:1d:c1: 38:dd:d4:fa:0b:41:65:10:d8:9e:9e:c7:37:93:b3: e5:8e:ac:3b:6b:58:90:f1:8b:5c:c7:dd:80:88:86: 41:90:39:a2:56:a1:6b:6d:7e:bb:97:8c:06:61:12: 0e:22:8a:30:b1:f4:aa:48:9a:12:7f:c4:30:34:ee: d9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A0:6C:34:1F:25:E0:27:2B:57:EC:50:85:5A:B3:C0:2E:61:BC:9D X509v3 Authority Key Identifier: keyid:B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:87:72:a2:56:be:75:89:25:1b:e0:d9:ac:c0:68:a0:4e:8f: bf:6e:74:58:92:a8:bc:c6:5b:ff:b3:14:12:f8:b3:bc:a2:60: ed:97:03:64:b8:db:f8:1a:33:51:88:7d:70:16:c8:24:53:ae: e5:ad:2d:5d:91:3c:4b:b9:01:a9:64:41:5b:20:ad:e0:7c:52: fa:fd:75:87:65:9b:27:85:6e:52:73:e8:d5:93:f1:b8:38:f1: 79:93:24:56:af:db:12:7e:68:79:e8:a8:76:2e:48:0a:e4:7c: b1:0a:da:4d:db:b5:99:f6:c4:3e:60:8a:98:d2:7e:f0:cf:6f: 6a:00:58:e4:13:3a:81:6f:fd:e9:f5:98:1d:1a:4a:f1:b6:30: ca:93:25:f6:8c:8f:ec:50:44:cf:b7:7a:47:d0:41:c3:34:76: 3a:e5:ef:19:b3:66:3d:04:15:6b:4e:6a:eb:00:e1:3a:b4:bb: 35:1d:da:a4:f7:51:7c:a6:ea:2e:f5:a9:c9:1e:12:7c:6c:25: 6b:1a:3f:18:04:b6:f2:f7:ae:05:b7:f1:9a:11:ce:30:c4:ab: 4c:e5:0b:c4:e8:be:d8:1f:6b:42:24:ee:97:70:05:0b:c0:67: 71:f5:54:77:ed:31:70:00:63:67:d0:3d:f7:82:32:67:fa:a7: 6a:61:ce:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzSO1ijoUsaYIQhbTC1e5aPV6qkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3 M0I4MDJCQjAeFw0yNjA5MDIxNTUyMzJaFw0yNjA5MDMxODQ3MzJaMDMxMTAvBgNV BAMTKDk5QTA2QzM0MUYyNUUwMjcyQjU3RUM1MDg1NUFCM0MwMkU2MUJDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YFMhBdtZLlco4Ir3xaJZs7WD +K+aPptAk09DvvPDKNhN/sJ/K4pSZbjUNjTpC3+QGtgXAbyJ5kAEWxDERWv1NtuK 5Xg50k67DrUBIzrMqrkdBkOwjNklKuawS7knzjFWk8tdqotO8xzFgLPUK/sGKu3D lHAsDNEeafhtnRH1j8ORr5C7B2deWUhv+4QaPnJwvhGPg7WAuWz7p6CphaJWLVd6 N8gFjBmHsstne3vsWmx7QVRlHjRK4z4Sl3ACPqEdwTjd1PoLQWUQ2J6exzeTs+WO rDtrWJDxi1zH3YCIhkGQOaJWoWttfruXjAZhEg4iijCx9KpImhJ/xDA07tmZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmaBsNB8l4CcrV+xQhVqzwC5hvJ0wHwYDVR0j BBgwFoAUsR1SY33Mtn+OmdrYDYLF4nO4ArswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZhM2NmZjctMmFhMS00NGRmLTkxNGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3 RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3M0I4MDJCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTFENTI2MzdEQ0NCNjdGOEU5OURBRDgwRDgyQzVFMjczQjgw MkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1 RTI3M0I4MDJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaHcqJWvnWJJRvg2azAaKBOj79udFiSqLzG W/+zFBL4s7yiYO2XA2S42/gaM1GIfXAWyCRTruWtLV2RPEu5AalkQVsgreB8Uvr9 dYdlmyeFblJz6NWT8bg48XmTJFav2xJ+aHnoqHYuSArkfLEK2k3btZn2xD5gipjS fvDPb2oAWOQTOoFv/en1mB0aSvG2MMqTJfaMj+xQRM+3ekfQQcM0djrl7xmzZj0E FWtOausA4Tq0uzUd2qT3UXym6i71qckeEnxsJWsaPxgEtvL3rgW38ZoRzjDEq0zl C8Tovtgfa0Ik7pdwBQvAZ3H1VHftMXAAY2fQPfeCMmf6p2phzv8= -----END CERTIFICATE-----Generated at Thu Sep 3 05:11:24 2026 by rpki-client