$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft File: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft (raw, json) Hash identifier: LIfaQ6x0QpBfHFlCP2obw7zFXrYlvw66LoeJtjgq/7g= Subject key identifier: C0:E3:5F:AB:E4:D4:61:80:24:B2:F8:C8:1A:DC:F5:CF:8F:B9:95:66 Authority key identifier: B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 Certificate issuer: /CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Certificate serial: 116D1615B72128F9B83F82FB0A812D66F5847D2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 11:43:07 +0000 Manifest this update: Thu 17 Sep 2026 11:38:07 +0000 Manifest next update: Fri 18 Sep 2026 15:36:07 +0000 Files and hashes: 1: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: sTfiDvuvbkVeyTPfpKYSFsI9nMpAT34o8x5bhe0xkFw=) 2: 3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa (hash: SMAdsArRGPYxDZsZ/CCe6hdzjIJy0KvpAA+wvauroZY=) 3: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl (hash: 4f+xBkoPulYhjVVXXu6zirmlwOgjnti8Rw3ORNl+wjs=) 4: 3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa (hash: ksYVDZOsUaPH9h3h6FXJXhC94WZiPEsTowZUMKAvBn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:6d:16:15:b7:21:28:f9:b8:3f:82:fb:0a:81:2d:66:f5:84:7d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Validity Not Before: Sep 17 11:38:07 2026 GMT Not After : Sep 18 15:36:07 2026 GMT Subject: CN=C0E35FABE4D4618024B2F8C81ADCF5CF8FB99566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:48:cd:bf:1c:66:36:27:05:11:94:c5:d4:14: 85:17:83:82:12:34:ff:93:9d:d1:3d:31:ec:16:4c: 06:f8:4c:be:c0:64:d4:12:36:dd:39:fc:09:70:54: eb:8d:b3:a4:39:1c:fe:04:6f:e9:10:57:ac:a3:ae: 11:b5:f2:d3:70:e8:ed:e7:c5:26:ad:bb:03:56:31: 0f:54:11:68:2f:48:64:28:42:f4:5b:9b:ce:9d:00: 99:72:dc:70:fc:45:f5:91:69:b7:cc:a1:78:6c:d5: 91:df:24:84:08:74:3d:b3:bb:1d:2f:cc:46:df:f8: 85:f2:86:5d:28:cf:cb:3f:06:94:f6:eb:5b:7d:68: 40:5e:fa:ad:ce:71:61:0d:c0:a3:62:a6:d5:c2:cc: 10:a8:c3:27:16:d7:76:a1:b9:47:42:3a:c6:57:c2: 15:ae:db:0e:63:64:75:77:7f:3d:b1:5e:05:0e:d4: b2:30:79:24:26:bd:95:6a:61:41:a4:09:6a:16:11: 0e:e8:84:f0:7c:93:2f:be:54:9f:92:6b:0b:d3:39: 96:d9:c0:90:1c:05:55:1d:76:2b:a4:25:ad:e3:45: 55:92:89:76:a8:47:35:a3:20:c9:4e:4a:84:0c:d2: 54:f4:1b:8f:30:c4:50:50:00:23:74:6a:30:9f:58: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E3:5F:AB:E4:D4:61:80:24:B2:F8:C8:1A:DC:F5:CF:8F:B9:95:66 X509v3 Authority Key Identifier: keyid:B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:3c:85:72:70:3d:37:60:30:d8:48:38:aa:48:46:07:47:5f: 26:10:e0:c7:eb:1c:4e:0a:4e:ee:82:a6:e9:a7:ae:cb:80:e4: d7:66:67:c5:0a:52:f5:25:af:60:0f:d4:f8:03:8a:20:a5:c3: 9d:38:17:a7:ca:ed:1c:71:41:72:2f:0d:55:2b:65:38:ae:02: 3a:42:80:5f:73:e8:93:f4:53:08:c7:84:4a:af:20:b9:cd:0c: da:06:78:c3:fd:a2:06:00:93:1c:2b:08:2a:12:7c:98:8a:0d: c6:62:01:ae:e0:3e:e7:29:5d:aa:9e:c5:02:6c:ce:40:8c:98: dd:16:dc:12:95:43:6a:e2:7a:23:ff:cc:27:30:56:1a:12:61: a5:d8:f6:83:d6:47:d5:54:5a:c4:9c:6e:87:c7:d4:05:cf:6a: 20:e4:10:e4:dd:db:08:7b:7a:e6:82:e2:cb:cc:2f:21:f6:cc: b6:f5:c1:73:3f:81:4e:bf:a4:ec:97:fe:4a:cb:98:33:4f:71: 3f:ea:72:fc:89:f8:2e:70:48:04:44:8c:7e:cc:79:da:2b:f9: f7:34:b9:c0:30:f0:c0:80:41:71:e7:76:4f:d6:c7:76:0f:ed: 3b:f7:b6:e5:fa:8e:80:9f:7e:84:f8:98:2a:60:77:b2:b6:14: 59:d6:d1:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEW0WFbchKPm4P4L7CoEtZvWEfSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3 M0RBMTY4NTAeFw0yNjA5MTcxMTM4MDdaFw0yNjA5MTgxNTM2MDdaMDMxMTAvBgNV BAMTKEMwRTM1RkFCRTRENDYxODAyNEIyRjhDODFBRENGNUNGOEZCOTk1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSM2/HGY2JwURlMXUFIUXg4IS NP+TndE9MewWTAb4TL7AZNQSNt05/AlwVOuNs6Q5HP4Eb+kQV6yjrhG18tNw6O3n xSatuwNWMQ9UEWgvSGQoQvRbm86dAJly3HD8RfWRabfMoXhs1ZHfJIQIdD2zux0v zEbf+IXyhl0oz8s/BpT261t9aEBe+q3OcWENwKNiptXCzBCowycW13ahuUdCOsZX whWu2w5jZHV3fz2xXgUO1LIweSQmvZVqYUGkCWoWEQ7ohPB8ky++VJ+SawvTOZbZ wJAcBVUddiukJa3jRVWSiXaoRzWjIMlOSoQM0lT0G48wxFBQACN0ajCfWJOnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwONfq+TUYYAksvjIGtz1z4+5lWYwHwYDVR0j BBgwFoAUsrSKnASLUc0TOtCu5vX563PaFoUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzMDk3ZjAtMzk3OC00OWNlLWI2OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMw NDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3M0RBMTY4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkI0OEE5QzA0OEI1MUNEMTMzQUQwQUVFNkY1RjlFQjczREEx Njg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5 RUI3M0RBMTY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMA8hXJwPTdgMNhIOKpIRgdHXyYQ4MfrHE4K Tu6CpumnrsuA5NdmZ8UKUvUlr2AP1PgDiiClw504F6fK7RxxQXIvDVUrZTiuAjpC gF9z6JP0UwjHhEqvILnNDNoGeMP9ogYAkxwrCCoSfJiKDcZiAa7gPucpXaqexQJs zkCMmN0W3BKVQ2rieiP/zCcwVhoSYaXY9oPWR9VUWsScbofH1AXPaiDkEOTd2wh7 euaC4svMLyH2zLb1wXM/gU6/pOyX/krLmDNPcT/qcvyJ+C5wSAREjH7Medor+fc0 ucAw8MCAQXHndk/Wx3YP7Tv3tuX6joCffoT4mCpgd7K2FFnW0Tw= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:26 2026 by rpki-client