$ rpki-client -vvvf rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft File: B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft (raw, json) Hash identifier: QodjUOA7naZj0mo8v5n7BKZ79pSjDxFGSIGKSDmpUMc= Subject key identifier: E0:6B:CF:F9:CA:8C:01:D8:FF:4A:6D:C9:FB:73:AC:38:E4:13:A1:C1 Authority key identifier: B1:B8:0E:10:A5:B0:AA:BA:24:92:9E:33:CD:EF:91:29:59:A6:E4:FD Certificate issuer: /CN=B1B80E10A5B0AABA24929E33CDEF912959A6E4FD Certificate serial: 19372DE5CF64ADC7B2C7796AED08A03AB601306A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft Manifest number: EB Signing time: Sun 25 Oct 2026 19:56:40 +0000 Manifest this update: Sun 25 Oct 2026 19:51:40 +0000 Manifest next update: Mon 26 Oct 2026 23:12:40 +0000 Files and hashes: 1: B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl (hash: XcJbBTvpq5G4rhMReC/U1NTVcfmUccpAH/6m7Iv0MN4=) 2: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: guRu9prdmx+ch78kv34z9AVOzBlrJNlWUYpJ/aaI38s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 23:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:37:2d:e5:cf:64:ad:c7:b2:c7:79:6a:ed:08:a0:3a:b6:01:30:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1B80E10A5B0AABA24929E33CDEF912959A6E4FD Validity Not Before: Oct 25 19:51:40 2026 GMT Not After : Oct 26 23:12:40 2026 GMT Subject: CN=E06BCFF9CA8C01D8FF4A6DC9FB73AC38E413A1C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:e2:56:13:a0:f8:37:9f:49:3b:b2:72:98: a9:2f:32:cb:f9:96:d7:41:f9:43:ca:73:71:1b:08: 5f:10:52:ca:01:40:20:ab:bb:7b:82:63:08:62:5b: 2d:de:a3:d4:11:3c:d9:51:f6:d6:eb:0b:90:0f:90: d6:6e:ea:c8:db:86:82:f0:e8:6b:ec:17:04:66:2f: 81:97:24:28:2d:09:2a:fe:f4:97:a2:1d:79:61:47: a0:61:15:06:2b:e3:13:06:c5:cf:ca:b2:69:0a:ca: cc:dc:8c:2c:d3:6d:14:2f:85:d9:40:09:ef:61:85: 37:ca:61:7e:fd:8f:64:9a:80:ca:f3:5b:3a:e6:16: 3b:d2:ba:c5:93:f4:ab:92:d1:b1:a6:de:a7:00:c6: 79:f1:39:dd:ba:e0:ca:69:ca:da:89:7a:70:60:cf: 7f:4f:c9:dd:c6:79:ea:9b:a4:db:30:3f:c7:5e:51: 66:da:ff:d0:9b:34:68:37:0d:cc:fd:50:29:82:39: 97:f2:65:92:e5:66:b8:04:20:d9:8f:ca:75:7a:a6: 69:21:38:f7:34:1c:bf:d8:b0:69:35:34:dc:2a:f2: b5:36:8a:08:82:64:19:65:22:9d:a9:54:7e:da:71: 50:c6:4b:7c:40:75:c7:86:ca:cc:c9:1c:1c:59:18: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6B:CF:F9:CA:8C:01:D8:FF:4A:6D:C9:FB:73:AC:38:E4:13:A1:C1 X509v3 Authority Key Identifier: keyid:B1:B8:0E:10:A5:B0:AA:BA:24:92:9E:33:CD:EF:91:29:59:A6:E4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f6:2d:b0:6d:1c:d4:39:1d:79:db:75:2c:50:4c:e5:50:f2: d4:3f:7c:93:49:b4:94:03:7f:48:ca:3a:3c:94:41:66:48:dd: 22:d8:c7:5d:25:d0:51:53:58:0e:88:68:72:43:8a:0e:b9:df: a4:88:c3:08:39:c1:8a:29:f4:03:6c:43:27:ca:bd:2a:3f:0e: 0b:2f:f6:0b:5a:a5:a1:26:77:b7:44:97:20:48:55:6a:95:f5: 9a:84:14:f5:2b:a7:00:1c:24:ad:93:9c:39:cb:12:cd:ef:4a: ad:84:e2:b3:8d:f7:d0:1e:0f:52:b0:62:a4:eb:be:cb:e0:d5: 5c:ce:fa:47:77:44:ae:56:5d:92:8a:69:5c:4e:b4:6c:1b:01: 26:44:a9:e4:e9:fe:43:cf:09:61:c1:49:4c:10:d8:ac:c2:5e: d6:dd:2d:16:29:e1:03:58:4a:d4:b6:dd:2c:cd:b5:68:b2:b5: 6b:45:e1:51:fe:70:8d:33:de:9f:0e:fb:09:7c:79:de:52:88: 74:d6:20:c2:f6:36:49:46:30:2f:b7:72:df:f8:68:7e:cb:b9: 4b:cb:a8:38:1f:9e:3b:b9:ab:c2:7e:30:fd:2b:7b:c8:b4:e8: ca:be:95:68:ff:09:6b:08:77:60:06:cf:37:54:d3:54:7a:62: 45:c6:83:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTct5c9krceyx3lq7QigOrYBMGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFCODBFMTBBNUIwQUFCQTI0OTI5RTMzQ0RFRjkxMjk1 OUE2RTRGRDAeFw0yNjEwMjUxOTUxNDBaFw0yNjEwMjYyMzEyNDBaMDMxMTAvBgNV BAMTKEUwNkJDRkY5Q0E4QzAxRDhGRjRBNkRDOUZCNzNBQzM4RTQxM0ExQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8eJWE6D4N59JO7JymKkvMsv5 ltdB+UPKc3EbCF8QUsoBQCCru3uCYwhiWy3eo9QRPNlR9tbrC5APkNZu6sjbhoLw 6GvsFwRmL4GXJCgtCSr+9JeiHXlhR6BhFQYr4xMGxc/KsmkKyszcjCzTbRQvhdlA Ce9hhTfKYX79j2SagMrzWzrmFjvSusWT9KuS0bGm3qcAxnnxOd264MppytqJenBg z39Pyd3GeeqbpNswP8deUWba/9CbNGg3Dcz9UCmCOZfyZZLlZrgEINmPynV6pmkh OPc0HL/YsGk1NNwq8rU2igiCZBllIp2pVH7acVDGS3xAdceGyszJHBxZGPlbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4GvP+cqMAdj/Sm3J+3OsOOQTocEwHwYDVR0j BBgwFoAUsbgOEKWwqrokkp4zze+RKVmm5P0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDg5ODVmNTktMGVlNi00MjA4LTlhOTAtMjljMTA4NjAwY2ZjLzAvQjFCODBFMTBB NUIwQUFCQTI0OTI5RTMzQ0RFRjkxMjk1OUE2RTRGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMUI4MEUxMEE1QjBBQUJBMjQ5MjlFMzNDREVGOTEyOTU5QTZF NEZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvQjFCODBFMTBBNUIwQUFCQTI0OTI5RTMzQ0RFRjkx Mjk1OUE2RTRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/2LbBtHNQ5HXnbdSxQTOVQ8tQ/fJNJtJQD f0jKOjyUQWZI3SLYx10l0FFTWA6IaHJDig6536SIwwg5wYop9ANsQyfKvSo/Dgsv 9gtapaEmd7dElyBIVWqV9ZqEFPUrpwAcJK2TnDnLEs3vSq2E4rON99AeD1KwYqTr vsvg1VzO+kd3RK5WXZKKaVxOtGwbASZEqeTp/kPPCWHBSUwQ2KzCXtbdLRYp4QNY StS23SzNtWiytWtF4VH+cI0z3p8O+wl8ed5SiHTWIML2NklGMC+3ct/4aH7LuUvL qDgfnju5q8J+MP0re8i06Mq+lWj/CWsId2AGzzdU01R6YkXGg/4= -----END CERTIFICATE-----Generated at Mon Oct 26 09:01:50 2026 by rpki-client