$ rpki-client -vvvf rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft File: B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft (raw, json) Hash identifier: 2aURGYKRWH4LslsCnOsJlD1thEI6cKxio53sC5vBnow= Subject key identifier: E7:45:94:5F:57:F8:D6:BC:9C:E3:BA:7E:DA:ED:E9:2D:69:B9:BB:F5 Authority key identifier: B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A Certificate issuer: /CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Certificate serial: 06779AD6F0E13CB89958C6FDE974980830B357BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft Manifest number: BA Signing time: Thu 17 Sep 2026 02:26:29 +0000 Manifest this update: Thu 17 Sep 2026 02:21:29 +0000 Manifest next update: Fri 18 Sep 2026 05:14:29 +0000 Files and hashes: 1: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: ahISTiCVoc+28My7h8uDRC0QvRMDpO2sYZ/b3hjHSLM=) 2: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: F/oy8su27rCM1WBmuMCn8wfDlNFF1ZO6cFWNdzyAW6M=) 3: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: 437bd6cfCi4QfkyxcuG38VNcn0yO3ZKj6CESWVC/jyw=) 4: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (hash: K9ZXJ5o5f3vYvyXmfnPwnT8NeUbIoGsEKpT0pUSErho=) 5: B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl (hash: gEA8HBNwuZAugQ+9j7DRC35nzwdum0jWHB9+416oTlg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:77:9a:d6:f0:e1:3c:b8:99:58:c6:fd:e9:74:98:08:30:b3:57:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B835A8746384749BF3B9A7BAEC30A1EBF133716A Validity Not Before: Sep 17 02:21:29 2026 GMT Not After : Sep 18 05:14:29 2026 GMT Subject: CN=E745945F57F8D6BC9CE3BA7EDAEDE92D69B9BBF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e5:ba:8f:6a:87:4d:d5:f3:ed:23:3f:ae:b9: 9f:58:91:5a:14:bb:2b:62:ac:fe:d3:e2:85:44:c3: 9e:ba:24:e0:cd:55:3e:aa:12:81:6d:66:2e:d5:b4: e3:2f:a0:71:a6:4a:b4:c7:cf:85:51:f1:80:7b:09: b0:4c:98:f5:b7:58:80:fa:e6:83:ab:15:2d:0b:84: 48:af:e2:3b:3f:2c:13:0a:94:e2:e7:5e:99:b6:4e: 27:8b:80:b1:94:c0:81:64:26:46:6e:16:89:70:b7: 6e:6f:38:4b:83:ab:73:1d:d8:7c:7f:9e:41:aa:c0: 0c:52:10:ed:85:03:57:e5:ad:76:58:47:26:48:59: 40:fe:55:5d:6a:f1:51:a9:8f:e2:bc:33:15:96:ff: 66:0c:16:74:70:ce:1d:c7:ba:8f:ac:a2:99:b2:5b: df:da:fe:65:3c:bf:e5:d0:1b:95:53:72:ab:ec:fe: 98:67:64:d9:24:45:28:e8:9f:e4:3f:ba:9d:e9:d6: 49:52:75:34:68:0c:cd:22:47:8d:5d:f4:db:bd:62: ab:86:38:f5:57:01:cf:cd:ee:be:83:40:2b:6e:30: 19:b9:7a:ee:98:9f:37:a1:87:fd:87:08:a4:16:64: 39:1e:7e:42:27:9a:63:d5:e7:1a:4d:a9:93:6b:21: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:45:94:5F:57:F8:D6:BC:9C:E3:BA:7E:DA:ED:E9:2D:69:B9:BB:F5 X509v3 Authority Key Identifier: keyid:B8:35:A8:74:63:84:74:9B:F3:B9:A7:BA:EC:30:A1:EB:F1:33:71:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B835A8746384749BF3B9A7BAEC30A1EBF133716A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/B835A8746384749BF3B9A7BAEC30A1EBF133716A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:20:54:d8:e2:57:39:71:41:01:e6:f6:fe:99:4e:a8:5f:03: d0:1b:6f:82:1b:48:1e:64:51:e4:28:34:25:6a:7e:30:d8:1a: 14:12:07:a5:0a:46:e6:6f:53:a9:98:9d:2e:5f:65:d5:33:4b: 91:54:42:3f:71:96:64:1e:db:74:eb:1a:cd:b1:1d:42:56:99: 59:9b:23:5f:92:70:3c:f6:2f:fa:6d:83:9b:35:01:6c:44:b1: 94:a8:0a:b8:df:aa:d8:32:45:ce:bd:ab:c3:89:bb:f5:42:ec: 71:fb:33:6f:b6:f2:8f:11:60:65:e5:54:6d:cb:b4:cf:20:a7: 57:8a:b3:f2:fb:2b:1a:d7:61:f5:41:17:8b:59:aa:32:fb:0c: 8b:5d:c5:3f:41:f5:32:26:14:aa:4a:21:1e:d1:f1:26:4f:c8: 5b:09:cd:ea:e2:33:a8:cc:1d:96:04:bd:87:d4:60:f1:c9:c8: 1f:c8:9b:95:17:e4:7f:73:b6:d5:f2:f3:52:73:68:74:88:34: 26:9d:56:31:de:92:44:85:00:8d:4d:ec:a5:86:aa:12:2a:89: 35:f5:78:94:c1:6e:88:9a:ef:2d:48:ab:96:e1:31:93:2a:45: 74:09:99:98:4e:4a:0e:00:6c:c5:93:56:21:c6:28:a3:0b:40: 94:7b:5f:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBnea1vDhPLiZWMb96XSYCDCzV74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJG MTMzNzE2QTAeFw0yNjA5MTcwMjIxMjlaFw0yNjA5MTgwNTE0MjlaMDMxMTAvBgNV BAMTKEU3NDU5NDVGNTdGOEQ2QkM5Q0UzQkE3RURBRURFOTJENjlCOUJCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg5bqPaodN1fPtIz+uuZ9YkVoU uytirP7T4oVEw566JODNVT6qEoFtZi7VtOMvoHGmSrTHz4VR8YB7CbBMmPW3WID6 5oOrFS0LhEiv4js/LBMKlOLnXpm2TieLgLGUwIFkJkZuFolwt25vOEuDq3Md2Hx/ nkGqwAxSEO2FA1flrXZYRyZIWUD+VV1q8VGpj+K8MxWW/2YMFnRwzh3Huo+sopmy W9/a/mU8v+XQG5VTcqvs/phnZNkkRSjon+Q/up3p1klSdTRoDM0iR41d9Nu9YquG OPVXAc/N7r6DQCtuMBm5eu6Ynzehh/2HCKQWZDkefkInmmPV5xpNqZNrIRABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU50WUX1f41ryc47p+2u3pLWm5u/UwHwYDVR0j BBgwFoAUuDWodGOEdJvzuae67DCh6/EzcWowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDZiZWRmM2EtZDdkMS00OWE2LTkzZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2 Mzg0NzQ5QkYzQjlBN0JBRUMzMEExRUJGMTMzNzE2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODM1QTg3NDYzODQ3NDlCRjNCOUE3QkFFQzMwQTFFQkYxMzM3 MTZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvQjgzNUE4NzQ2Mzg0NzQ5QkYzQjlBN0JBRUMzMEEx RUJGMTMzNzE2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIgVNjiVzlxQQHm9v6ZTqhfA9Abb4IbSB5k UeQoNCVqfjDYGhQSB6UKRuZvU6mYnS5fZdUzS5FUQj9xlmQe23TrGs2xHUJWmVmb I1+ScDz2L/ptg5s1AWxEsZSoCrjfqtgyRc69q8OJu/VC7HH7M2+28o8RYGXlVG3L tM8gp1eKs/L7KxrXYfVBF4tZqjL7DItdxT9B9TImFKpKIR7R8SZPyFsJzeriM6jM HZYEvYfUYPHJyB/Im5UX5H9zttXy81JzaHSINCadVjHekkSFAI1N7KWGqhIqiTX1 eJTBboia7y1Iq5bhMZMqRXQJmZhOSg4AbMWTViHGKKMLQJR7X0s= -----END CERTIFICATE-----Generated at Thu Sep 17 09:17:57 2026 by rpki-client