$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft File: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft (raw, json) Hash identifier: y4P64/pWr4D3Y9bmwpdljNv5VPvFnG8J/cBgjaix99o= Subject key identifier: B9:C2:B3:0A:CF:73:A2:58:5C:2D:BD:05:1D:15:58:10:1B:1F:63:97 Authority key identifier: B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5 Certificate issuer: /CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5 Certificate serial: 7C6B94CADF2554D66991CBE80A48E9CBEE01FEED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:32:48 +0000 Manifest this update: Thu 17 Sep 2026 03:27:48 +0000 Manifest next update: Fri 18 Sep 2026 06:53:48 +0000 Files and hashes: 1: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: hZL/hi6Qgsw4sgW/mhx3uNInW8MyX4I+jFDzsHcP8Z4=) 2: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl (hash: lqf54D+p4jyGYs8fPuz+W5lRsUirXPfr/Hl0yaydiEM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6b:94:ca:df:25:54:d6:69:91:cb:e8:0a:48:e9:cb:ee:01:fe:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5 Validity Not Before: Sep 17 03:27:48 2026 GMT Not After : Sep 18 06:53:48 2026 GMT Subject: CN=B9C2B30ACF73A2585C2DBD051D1558101B1F6397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:99:27:e0:4c:df:5b:a1:85:51:d7:7b:5c: 41:f4:35:47:59:0f:47:a0:c4:c9:be:05:f2:34:ea: d0:cf:39:bf:02:b5:05:4d:49:72:96:07:b9:97:08: c0:48:c6:66:de:39:fb:d2:f8:a0:02:e8:4f:e1:70: 06:bd:dc:20:ec:ac:d4:47:70:ae:be:b3:22:51:5b: 5f:cc:ea:f6:12:4a:93:14:94:80:e4:b9:32:e5:ea: 89:79:70:44:ec:72:74:a8:48:33:e9:d9:d7:71:46: 6a:18:46:2b:50:5b:fa:f7:43:ed:50:a5:3b:cd:83: 46:19:23:50:a6:97:d1:3b:28:5a:4d:68:bf:fa:89: fa:3e:ec:e6:2a:26:1d:7b:62:b6:4f:1a:fb:68:5d: 95:b9:4c:fd:bc:14:d7:2b:49:a1:34:94:e3:56:9b: 2d:90:84:51:7c:81:48:7c:e6:37:be:58:31:48:72: 5e:07:ee:8c:bc:ee:0a:48:96:c5:c7:e3:70:1c:99: 03:99:1e:d1:18:5c:0b:24:7a:16:7f:a6:b1:48:cc: 7c:b3:42:b8:d9:cc:77:92:66:e2:31:0f:10:f2:b7: 27:83:3e:0e:6a:df:3d:ee:fa:d1:d3:b0:ae:ac:18: 14:e7:19:e9:4f:05:a6:c4:ec:96:51:e5:70:81:45: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C2:B3:0A:CF:73:A2:58:5C:2D:BD:05:1D:15:58:10:1B:1F:63:97 X509v3 Authority Key Identifier: keyid:B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a4:d7:81:79:3d:24:c1:97:49:bc:a9:66:77:ee:72:d7:3c: 0d:23:31:b7:21:23:22:17:8f:a1:39:bf:f7:1a:1f:ee:9e:e7: 32:53:41:8f:d2:07:3f:d2:fc:3c:c2:1b:82:9d:3c:33:d7:5d: 83:8d:16:3b:4b:ce:10:43:4f:70:1c:15:81:50:83:29:89:37: d5:29:15:0b:3d:64:84:58:98:2f:4a:78:70:5f:1a:5c:e7:ca: 16:48:80:6d:47:78:0a:95:79:02:28:b7:2c:07:c6:79:81:9a: 63:bf:67:ec:8a:ca:b4:68:5e:9d:fd:a0:7d:aa:57:97:19:46: e9:92:97:4c:2b:f4:ea:60:17:70:c9:09:54:ee:7a:4a:92:31: 34:7f:09:f5:57:ed:6a:1e:1b:d3:ee:05:be:e0:f3:49:3e:bf: 4c:63:79:bb:95:01:8a:ce:5e:42:01:16:fc:6d:d1:07:dd:e3: 2f:1f:1b:79:76:d8:d9:a7:c7:df:c4:98:f2:c2:53:34:5e:b9: 76:29:52:a3:0b:87:93:d1:a5:1d:39:13:96:46:ae:96:a7:21: 4c:45:4a:5e:91:d2:e7:8c:d3:e8:d3:6f:a4:a7:dd:b2:82:3c: 3c:c2:1d:0a:b8:d4:cf:e1:13:93:33:ea:10:db:b8:25:52:bc: b6:93:f8:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfGuUyt8lVNZpkcvoCkjpy+4B/u0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBRTdENzlCMjI5NTY1REI1QTlDNEU3NENEMDM4RTUz Rjk4NEJGNTAeFw0yNjA5MTcwMzI3NDhaFw0yNjA5MTgwNjUzNDhaMDMxMTAvBgNV BAMTKEI5QzJCMzBBQ0Y3M0EyNTg1QzJEQkQwNTFEMTU1ODEwMUIxRjYzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67Jkn4EzfW6GFUdd7XEH0NUdZ D0egxMm+BfI06tDPOb8CtQVNSXKWB7mXCMBIxmbeOfvS+KAC6E/hcAa93CDsrNRH cK6+syJRW1/M6vYSSpMUlIDkuTLl6ol5cETscnSoSDPp2ddxRmoYRitQW/r3Q+1Q pTvNg0YZI1Cml9E7KFpNaL/6ifo+7OYqJh17YrZPGvtoXZW5TP28FNcrSaE0lONW my2QhFF8gUh85je+WDFIcl4H7oy87gpIlsXH43AcmQOZHtEYXAskehZ/prFIzHyz QrjZzHeSZuIxDxDytyeDPg5q3z3u+tHTsK6sGBTnGelPBabE7JZR5XCBRW8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUucKzCs9zolhcLb0FHRVYEBsfY5cwHwYDVR0j BBgwFoAUta59ebIpVl21qcTnTNA45T+YS/UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjNzM5NmMtNGJiZS00YzZlLThmNTAtNDQyYzIwNWUwNzBjLzAvQjVBRTdENzlC MjI5NTY1REI1QTlDNEU3NENEMDM4RTUzRjk4NEJGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUFFN0Q3OUIyMjk1NjVEQjVBOUM0RTc0Q0QwMzhFNTNGOTg0 QkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjNzM5NmMtNGJiZS00YzZlLThm NTAtNDQyYzIwNWUwNzBjLzAvQjVBRTdENzlCMjI5NTY1REI1QTlDNEU3NENEMDM4 RTUzRjk4NEJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEak14F5PSTBl0m8qWZ37nLXPA0jMbchIyIX j6E5v/caH+6e5zJTQY/SBz/S/DzCG4KdPDPXXYONFjtLzhBDT3AcFYFQgymJN9Up FQs9ZIRYmC9KeHBfGlznyhZIgG1HeAqVeQIotywHxnmBmmO/Z+yKyrRoXp39oH2q V5cZRumSl0wr9OpgF3DJCVTuekqSMTR/CfVX7WoeG9PuBb7g80k+v0xjebuVAYrO XkIBFvxt0Qfd4y8fG3l22Nmnx9/EmPLCUzReuXYpUqMLh5PRpR05E5ZGrpanIUxF Sl6R0ueM0+jTb6Sn3bKCPDzCHQq41M/hE5Mz6hDbuCVSvLaT+Cg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:43:21 2026 by rpki-client