$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft File: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft (raw, json) Hash identifier: REIZrDTzTxkYmcq3BdYWZ7cQKWrUvrqcwYEzuZGoK60= Subject key identifier: 82:2A:83:26:2B:11:25:B9:00:AA:36:04:7A:15:24:E1:CA:F2:1C:0D Authority key identifier: B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E Certificate issuer: /CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Certificate serial: 2AECE42F528CBD840AC74C166ED99B72839631F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:15:04 +0000 Manifest this update: Thu 17 Sep 2026 09:10:04 +0000 Manifest next update: Fri 18 Sep 2026 12:20:04 +0000 Files and hashes: 1: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: GMFkIV2sJittLK9WJRbpUUZTvqKbZ67tY6581Ugt0f0=) 2: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: dOi5t8zi5JAQodBD98mcsNs1h4au7JIDI+EvfriW4vk=) 3: B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl (hash: tYaWG+3ux0c6FLn/12mckl8/Yc2blrfm5oz+mhBJCCg=) 4: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: q3EmEpNbHapfK5Arcd9ZblsuZXEZdJPpzKqJnzLo0DY=) 5: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: dKZb6aaVbPeaaWDRCiGgkOh/h5qEP/6edHL6dbBuTxw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ec:e4:2f:52:8c:bd:84:0a:c7:4c:16:6e:d9:9b:72:83:96:31:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E Validity Not Before: Sep 17 09:10:04 2026 GMT Not After : Sep 18 12:20:04 2026 GMT Subject: CN=822A83262B1125B900AA36047A1524E1CAF21C0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6c:9c:1c:bc:3c:47:e7:31:1f:3c:a1:65:2a: e0:fc:6d:a0:53:0b:89:37:50:4b:9b:b2:6a:b5:49: 85:3b:93:d0:c8:4a:50:d6:ca:1f:17:68:14:0f:65: e6:70:09:fd:76:ca:c7:de:3e:f7:30:1b:d6:f1:e8: 28:2d:7b:d3:ea:15:6f:85:44:b4:dd:85:d9:40:09: fb:47:48:70:20:bb:bf:9a:39:da:b5:3d:d8:1a:0b: fb:ce:c2:07:4b:e1:cc:25:0a:09:0b:a8:ca:55:41: 10:0c:00:79:94:7b:71:2f:c4:d8:21:2f:d2:7d:f3: 98:ee:2a:82:16:ef:e1:1f:64:4c:ad:d6:d1:dc:ea: 6e:f4:9a:e6:66:8b:a8:2f:cc:b4:8d:81:c9:30:17: 26:29:69:e0:89:31:2f:eb:80:52:83:69:58:ec:a6: 1b:a7:72:8f:35:f3:ad:c2:a0:9a:ef:89:8d:cc:ba: a1:42:cc:8b:7f:f6:71:33:5c:87:94:86:72:db:ce: 58:b9:0e:27:f9:c3:e1:66:be:20:61:0d:99:4f:b2: b0:b6:7a:b6:d5:5c:8a:65:39:d3:1e:d2:cc:6d:d0: 44:75:51:9e:af:79:70:a7:07:9f:be:8e:ec:8a:83: 1b:b1:5a:10:08:da:78:82:2c:09:45:d1:45:68:55: 8e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2A:83:26:2B:11:25:B9:00:AA:36:04:7A:15:24:E1:CA:F2:1C:0D X509v3 Authority Key Identifier: keyid:B1:68:CF:A3:79:F4:EA:CD:15:DB:0E:F7:6C:EB:C5:80:AC:1F:BF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/B168CFA379F4EACD15DB0EF76CEBC580AC1FBF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:5e:ed:b9:00:07:c9:7f:ec:f2:61:90:2e:95:97:99:98:26: 92:d7:a0:22:cb:c3:15:97:d7:0d:a1:6f:cf:01:12:86:9e:78: f0:e9:15:71:0c:69:25:9c:9b:fb:96:27:a5:a1:d5:b1:b4:d2: 7a:17:c0:9a:a1:93:cb:01:eb:59:b0:0b:a9:10:77:22:c3:3d: 8f:02:ec:01:b4:76:e5:c7:0a:54:79:12:8a:1f:96:58:3e:d5: 46:4a:0a:93:1e:7f:2d:c5:f4:8c:53:b8:14:ac:60:e4:77:a2: 20:de:98:62:21:57:83:44:fc:7a:99:0c:66:06:bb:25:2d:1b: b5:17:7a:a4:94:55:c5:21:73:7d:38:30:60:21:52:53:a1:16: 48:9c:11:9b:e6:1b:ac:f7:02:9f:39:bc:1e:d9:b5:f7:44:1f: 22:fa:f5:94:ba:78:00:b9:0b:01:53:98:73:f4:75:fe:34:43: f5:89:7d:bc:4b:c6:2f:a3:e0:53:b3:f0:c0:d3:6b:63:5d:1c: 51:a7:d5:32:7c:b3:9f:53:1f:5d:d9:0f:46:a1:d6:22:1b:1f: ee:a8:b1:1a:00:14:7a:d0:ec:fb:b6:b8:56:c5:92:2b:1c:4d: 7f:d0:38:e5:ca:34:72:3b:e2:42:8d:80:27:cc:8e:eb:a4:bb: 8f:c5:68:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuzkL1KMvYQKx0wWbtmbcoOWMfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBB QzFGQkY2RTAeFw0yNjA5MTcwOTEwMDRaFw0yNjA5MTgxMjIwMDRaMDMxMTAvBgNV BAMTKDgyMkE4MzI2MkIxMTI1QjkwMEFBMzYwNDdBMTUyNEUxQ0FGMjFDMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObJwcvDxH5zEfPKFlKuD8baBT C4k3UEubsmq1SYU7k9DISlDWyh8XaBQPZeZwCf12ysfePvcwG9bx6Cgte9PqFW+F RLTdhdlACftHSHAgu7+aOdq1PdgaC/vOwgdL4cwlCgkLqMpVQRAMAHmUe3EvxNgh L9J985juKoIW7+EfZEyt1tHc6m70muZmi6gvzLSNgckwFyYpaeCJMS/rgFKDaVjs phunco81863CoJrviY3MuqFCzIt/9nEzXIeUhnLbzli5Dif5w+FmviBhDZlPsrC2 erbVXIplOdMe0sxt0ER1UZ6veXCnB5++juyKgxuxWhAI2niCLAlF0UVoVY4VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgiqDJisRJbkAqjYEehUk4cryHA0wHwYDVR0j BBgwFoAUsWjPo3n06s0V2w73bOvFgKwfv24wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTIxMjdmZWItOTYxNS00YzU4LWEzYmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3 OUY0RUFDRDE1REIwRUY3NkNFQkM1ODBBQzFGQkY2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTY4Q0ZBMzc5RjRFQUNEMTVEQjBFRjc2Q0VCQzU4MEFDMUZC RjZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvQjE2OENGQTM3OUY0RUFDRDE1REIwRUY3NkNFQkM1 ODBBQzFGQkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhe7bkAB8l/7PJhkC6Vl5mYJpLXoCLLwxWX 1w2hb88BEoaeePDpFXEMaSWcm/uWJ6Wh1bG00noXwJqhk8sB61mwC6kQdyLDPY8C 7AG0duXHClR5Eoofllg+1UZKCpMefy3F9IxTuBSsYOR3oiDemGIhV4NE/HqZDGYG uyUtG7UXeqSUVcUhc304MGAhUlOhFkicEZvmG6z3Ap85vB7ZtfdEHyL69ZS6eAC5 CwFTmHP0df40Q/WJfbxLxi+j4FOz8MDTa2NdHFGn1TJ8s59TH13ZD0ah1iIbH+6o sRoAFHrQ7Pu2uFbFkiscTX/QOOXKNHI74kKNgCfMjuuku4/FaAs= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:37 2026 by rpki-client