$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft File: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft (raw, json) Hash identifier: JB2l0A9QAZ88jssw3jPiqJiM0QE1WKDEP9/2lElrHbE= Subject key identifier: 39:42:0B:4A:AA:7E:8B:00:B3:32:1B:DF:44:BD:5D:8A:F2:66:F2:6C Authority key identifier: B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65 Certificate issuer: /CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865 Certificate serial: 5E0AC9DB0298BEF21261B27E56C68DF0754C390D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft Manifest number: EA Signing time: Sat 24 Oct 2026 19:23:26 +0000 Manifest this update: Sat 24 Oct 2026 19:18:26 +0000 Manifest next update: Sun 25 Oct 2026 19:51:26 +0000 Files and hashes: 1: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: +LPJ5wMBOnCiRiVVBw9/f075KEvSA/QkdJARXOeWxBI=) 2: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl (hash: 9YnPp0c1JghxkGeXf/TSaysueuoa2viZUBLiK/6bk5g=) 3: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: 4hL7+e18qobBBQHbTnmFkA+ZM9pKWiAv/aAZLelInyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0a:c9:db:02:98:be:f2:12:61:b2:7e:56:c6:8d:f0:75:4c:39:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865 Validity Not Before: Oct 24 19:18:26 2026 GMT Not After : Oct 25 19:51:26 2026 GMT Subject: CN=39420B4AAA7E8B00B3321BDF44BD5D8AF266F26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:6a:a7:60:25:26:8f:ee:db:09:1b:12:03: 9e:77:38:10:9a:ea:fb:39:4b:d7:6a:80:87:e9:a5: 70:c7:af:56:42:5e:b8:ca:8f:d2:28:c1:5a:b2:f9: 7d:5d:f9:8c:93:d2:d7:1b:1a:8f:72:b8:4f:ea:73: d2:bc:52:30:63:eb:06:e7:1b:cd:30:16:56:7d:d7: 22:1c:b8:f0:24:41:76:04:b5:47:c8:1d:39:df:d2: 2b:92:f3:c8:63:fc:f6:c0:36:77:4b:e7:d6:da:6e: 0e:b8:92:76:41:09:39:d9:39:5a:6c:c2:ec:06:78: 42:d4:5e:d4:f9:eb:7d:7f:70:74:f4:24:d5:9e:22: 23:61:61:cc:22:75:83:54:ea:04:a0:73:0b:b6:4b: a4:8c:d8:5c:92:fa:ce:23:40:78:f4:b8:06:85:37: e2:2e:f4:f7:eb:45:89:c4:cf:a1:d2:eb:47:d7:7a: ac:62:8b:bf:d6:82:28:bb:4a:36:6c:07:13:2d:45: 01:a4:ad:89:61:15:9b:e6:89:94:2c:45:71:6f:47: 48:e7:cb:55:7c:b3:1b:b8:97:3a:3c:f5:26:c9:21: 7f:a2:8e:55:b9:5a:46:d5:ee:64:27:7b:d2:5f:dd: 68:62:5a:dd:e8:60:5a:cf:72:fb:f2:a6:43:9e:c0: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:42:0B:4A:AA:7E:8B:00:B3:32:1B:DF:44:BD:5D:8A:F2:66:F2:6C X509v3 Authority Key Identifier: keyid:B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:45:69:eb:1d:a1:57:f2:70:d8:e0:c5:33:be:c4:34:e2:07: 37:3a:7f:ef:c0:7d:5c:f4:b0:65:89:e9:1a:aa:a0:d0:cf:8b: 22:ff:58:89:84:da:aa:d1:72:a2:4e:06:de:27:de:9e:83:bc: 43:28:3d:7e:1e:37:82:e3:2e:92:92:12:f6:53:dd:28:9a:75: 42:8b:a4:ac:51:e2:6e:a2:f8:04:cc:ad:72:a5:7c:38:39:3a: 2d:31:9e:46:ce:7a:e4:60:6b:e8:13:5c:32:36:c4:94:de:29: 77:53:f8:63:64:f6:7e:65:0f:b6:e7:39:e4:a2:d1:66:12:44: 7b:d3:1e:51:44:9e:01:e9:3a:b7:ff:af:ab:df:b0:18:56:cf: 60:55:8e:1d:dd:ab:d5:72:04:30:64:32:bd:96:11:ee:13:d5: c7:30:fe:a6:73:2d:96:3b:33:16:7b:1d:9f:1d:5e:dc:1d:e0: ca:62:5d:87:8c:1e:72:b6:38:bc:56:9a:32:62:75:de:56:3b: e7:98:31:0f:af:bb:c3:d3:c6:4d:21:b4:27:6c:d6:1c:98:4e: 80:c6:82:b0:5e:f7:40:93:79:78:d3:71:37:7b:52:6d:f6:e4: d1:1e:34:0e:5e:b5:28:58:dd:c7:5b:e5:50:d9:f5:bf:70:c4: 99:05:56:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgrJ2wKYvvISYbJ+VsaN8HVMOQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCQ0NDQkU4OTI3QTdCQUI3ODUzQzdBQkIwQUYzOTVD RDA0Nzg2NTAeFw0yNjEwMjQxOTE4MjZaFw0yNjEwMjUxOTUxMjZaMDMxMTAvBgNV BAMTKDM5NDIwQjRBQUE3RThCMDBCMzMyMUJERjQ0QkQ1RDhBRjI2NkYyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKGqnYCUmj+7bCRsSA553OBCa 6vs5S9dqgIfppXDHr1ZCXrjKj9IowVqy+X1d+YyT0tcbGo9yuE/qc9K8UjBj6wbn G80wFlZ91yIcuPAkQXYEtUfIHTnf0iuS88hj/PbANndL59babg64knZBCTnZOVps wuwGeELUXtT5631/cHT0JNWeIiNhYcwidYNU6gSgcwu2S6SM2FyS+s4jQHj0uAaF N+Iu9PfrRYnEz6HS60fXeqxii7/Wgii7SjZsBxMtRQGkrYlhFZvmiZQsRXFvR0jn y1V8sxu4lzo89SbJIX+ijlW5WkbV7mQne9Jf3WhiWt3oYFrPcvvypkOewNcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOUILSqp+iwCzMhvfRL1divJm8mwwHwYDVR0j BBgwFoAUubzMvoknp7q3hTx6uwrzlc0EeGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmZlYmI2OGEtOGE1ZC00MTFjLThiYjMtODMzNDIzMTAwYjZlLzAvQjlCQ0NDQkU4 OTI3QTdCQUI3ODUzQzdBQkIwQUYzOTVDRDA0Nzg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COUJDQ0NCRTg5MjdBN0JBQjc4NTNDN0FCQjBBRjM5NUNEMDQ3 ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZlYmI2OGEtOGE1ZC00MTFjLThi YjMtODMzNDIzMTAwYjZlLzAvQjlCQ0NDQkU4OTI3QTdCQUI3ODUzQzdBQkIwQUYz OTVDRDA0Nzg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFFaesdoVfycNjgxTO+xDTiBzc6f+/AfVz0 sGWJ6RqqoNDPiyL/WImE2qrRcqJOBt4n3p6DvEMoPX4eN4LjLpKSEvZT3SiadUKL pKxR4m6i+ATMrXKlfDg5Oi0xnkbOeuRga+gTXDI2xJTeKXdT+GNk9n5lD7bnOeSi 0WYSRHvTHlFEngHpOrf/r6vfsBhWz2BVjh3dq9VyBDBkMr2WEe4T1ccw/qZzLZY7 MxZ7HZ8dXtwd4MpiXYeMHnK2OLxWmjJidd5WO+eYMQ+vu8PTxk0htCds1hyYToDG grBe90CTeXjTcTd7Um325NEeNA5etShY3cdb5VDZ9b9wxJkFVuM= -----END CERTIFICATE-----Generated at Sun Oct 25 06:04:37 2026 by rpki-client