$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft File: B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft (raw, json) Hash identifier: eIVX+hNL/GNaasH9c76QeXxPmdoWKcfhGFdw3+hWNOg= Subject key identifier: C9:73:93:0B:EC:BF:81:1E:E3:16:7E:4F:48:4B:34:FC:6D:CD:44:75 Authority key identifier: B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D Certificate issuer: /CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D Certificate serial: 5004EE6728918DD5479C60043C8F7078C5AED9FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft Manifest number: BA Signing time: Thu 17 Sep 2026 04:44:16 +0000 Manifest this update: Thu 17 Sep 2026 04:39:16 +0000 Manifest next update: Fri 18 Sep 2026 07:44:16 +0000 Files and hashes: 1: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: JtFDDBHLhFW7JsMlxs4g2eR/5c2AZrAbcpY0KNoiazs=) 2: B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl (hash: awxlXvHEU/hg3mYaXXQRJOwJzjhwsjNEfWCXd/MOrKU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:04:ee:67:28:91:8d:d5:47:9c:60:04:3c:8f:70:78:c5:ae:d9:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D Validity Not Before: Sep 17 04:39:16 2026 GMT Not After : Sep 18 07:44:16 2026 GMT Subject: CN=C973930BECBF811EE3167E4F484B34FC6DCD4475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:6a:b7:90:2a:e1:31:b0:bb:89:97:ff:76: d1:2a:f4:2a:da:13:7d:b1:09:ce:b3:58:96:a5:b0: c4:f7:e2:db:26:d1:54:de:88:ca:01:22:50:6e:3a: 24:2c:8c:f8:df:4d:9a:e7:96:88:bb:c9:d1:5c:dc: 70:70:2c:09:89:40:c7:28:85:8f:67:ea:96:0f:2c: 04:19:16:d4:b4:af:30:30:86:f4:bc:89:19:d2:bf: 04:b7:4b:0f:72:6c:e2:92:7b:87:1e:34:ea:7a:4c: 49:b7:f7:5c:10:14:3e:ce:18:92:c0:28:85:4f:d7: 2a:6a:33:a4:73:a7:7f:fc:65:44:53:5b:0e:f2:a0: 8f:74:c5:9b:c3:84:d4:14:c7:ea:df:90:8a:6e:80: 72:fc:7b:32:63:84:a9:48:67:ef:ed:60:62:7c:91: 63:db:38:c6:9b:e5:41:c7:9c:d8:36:71:c0:1d:bc: 5e:5a:d3:56:5c:65:5c:60:30:a5:ec:db:46:f8:f3: 81:24:3b:ab:f9:62:6d:9a:19:23:38:f3:a7:d2:a7: 02:5d:8b:8b:5b:2f:b6:39:d0:21:12:83:49:1c:f2: 39:a6:d1:b1:be:af:f0:45:00:f5:88:91:ad:01:c8: 33:67:b9:78:0e:4c:24:fe:f0:59:a1:8c:34:54:66: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:73:93:0B:EC:BF:81:1E:E3:16:7E:4F:48:4B:34:FC:6D:CD:44:75 X509v3 Authority Key Identifier: keyid:B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:81:80:f6:6d:68:e7:b6:46:fa:23:e4:0b:92:5a:b3:e4:bd: e1:3c:3a:9c:82:9a:44:af:57:0a:cd:a9:24:f1:c9:4b:b2:66: 5f:4e:5a:7c:d3:df:b2:d3:6c:fa:fc:9f:16:14:03:eb:99:f7: 58:98:71:cf:3f:f4:66:57:86:41:c2:e4:90:d8:5b:3d:1c:1a: 5f:80:fe:75:59:32:02:b2:d1:9a:6a:81:e3:64:b7:03:36:80: 89:7d:a6:63:14:a8:9f:84:ad:a6:b6:26:f8:5a:9e:21:1a:80: 94:f1:3a:4a:bf:78:18:37:64:2a:91:21:75:ec:9c:c0:14:7b: 2e:05:58:36:bc:75:fb:a7:e0:de:e8:dc:26:6f:6c:56:1b:09: eb:da:08:8c:98:49:ca:cb:07:bf:53:26:10:69:ce:c8:30:fa: d2:83:85:81:66:e6:34:fe:a8:71:ab:d1:60:14:77:e7:74:48: 9d:2d:a0:fa:84:3a:03:2f:12:29:da:49:63:4b:4c:30:fb:08: 3e:8f:ed:18:71:66:22:1f:01:2f:d4:a6:2c:bf:81:08:5d:3d: 6d:0b:4a:32:84:9f:da:e7:e2:83:b1:5f:14:94:6b:63:8c:ea: 57:ff:4c:bc:c6:84:2e:eb:9e:74:93:c5:9f:53:a2:b5:9d:65: 1d:5a:64:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUATuZyiRjdVHnGAEPI9weMWu2f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBMDdGMTc0OEU1NjFCMzNEQjhDNDMyNjk4MUE1NUIy N0NFRTkzRDAeFw0yNjA5MTcwNDM5MTZaFw0yNjA5MTgwNzQ0MTZaMDMxMTAvBgNV BAMTKEM5NzM5MzBCRUNCRjgxMUVFMzE2N0U0RjQ4NEIzNEZDNkRDRDQ0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCzmq3kCrhMbC7iZf/dtEq9Cra E32xCc6zWJalsMT34tsm0VTeiMoBIlBuOiQsjPjfTZrnloi7ydFc3HBwLAmJQMco hY9n6pYPLAQZFtS0rzAwhvS8iRnSvwS3Sw9ybOKSe4ceNOp6TEm391wQFD7OGJLA KIVP1ypqM6Rzp3/8ZURTWw7yoI90xZvDhNQUx+rfkIpugHL8ezJjhKlIZ+/tYGJ8 kWPbOMab5UHHnNg2ccAdvF5a01ZcZVxgMKXs20b484EkO6v5Ym2aGSM486fSpwJd i4tbL7Y50CESg0kc8jmm0bG+r/BFAPWIka0ByDNnuXgOTCT+8FmhjDRUZvDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyXOTC+y/gR7jFn5PSEs0/G3NRHUwHwYDVR0j BBgwFoAUsqB/F0jlYbM9uMQyaYGlWyfO6T0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFlMGQxN2MtZWRkMS00MjAyLWI3MzYtM2I1MjdlZmE2YmEyLzAvQjJBMDdGMTc0 OEU1NjFCMzNEQjhDNDMyNjk4MUE1NUIyN0NFRTkzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkEwN0YxNzQ4RTU2MUIzM0RCOEM0MzI2OTgxQTU1QjI3Q0VF OTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvQjJBMDdGMTc0OEU1NjFCMzNEQjhDNDMyNjk4MUE1 NUIyN0NFRTkzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiBgPZtaOe2Rvoj5AuSWrPkveE8OpyCmkSv VwrNqSTxyUuyZl9OWnzT37LTbPr8nxYUA+uZ91iYcc8/9GZXhkHC5JDYWz0cGl+A /nVZMgKy0ZpqgeNktwM2gIl9pmMUqJ+Eraa2JvhaniEagJTxOkq/eBg3ZCqRIXXs nMAUey4FWDa8dfun4N7o3CZvbFYbCevaCIyYScrLB79TJhBpzsgw+tKDhYFm5jT+ qHGr0WAUd+d0SJ0toPqEOgMvEinaSWNLTDD7CD6P7RhxZiIfAS/Upiy/gQhdPW0L SjKEn9rn4oOxXxSUa2OM6lf/TLzGhC7rnnSTxZ9TorWdZR1aZL4= -----END CERTIFICATE-----Generated at Thu Sep 17 15:58:26 2026 by rpki-client