$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft File: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft (raw, json) Hash identifier: 2jcuWS4hFQhz5kP/Kbn38iGjJ+JRbcaKOwKCMQhlESY= Subject key identifier: 12:E1:8E:BD:A3:03:80:CC:D8:B9:CD:2B:FE:4F:A1:B7:94:B7:2B:92 Authority key identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A Certificate issuer: /CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Certificate serial: 2CFF1C3303FD33613CE05DCCF9500FF5EF61DF83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 04:32:53 +0000 Manifest this update: Sun 02 Aug 2026 04:27:53 +0000 Manifest next update: Mon 03 Aug 2026 07:10:53 +0000 Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: fDnmzf65jBSv74PMDMyNjaHpX/nCsTXRpP2C1qWxmnk=) 2: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl (hash: eVEhCiBgR2HKGBKEhF4B6B7UXsmtgCciYx5+NylO6rw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ff:1c:33:03:fd:33:61:3c:e0:5d:cc:f9:50:0f:f5:ef:61:df:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Validity Not Before: Aug 2 04:27:53 2026 GMT Not After : Aug 3 07:10:53 2026 GMT Subject: CN=12E18EBDA30380CCD8B9CD2BFE4FA1B794B72B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a0:18:e7:2f:e9:4d:1a:1d:27:fb:5b:57:55: b0:d4:89:d0:62:13:20:01:d7:5a:43:33:23:06:c9: a1:6d:94:c6:18:0e:60:b3:d9:3a:b2:48:44:1f:e1: fb:e5:3c:dd:13:3c:92:fb:7e:f2:21:db:86:d9:0f: 97:2d:79:d6:a7:40:a7:60:78:35:c0:89:a0:d5:3a: 5a:64:6f:73:ae:ff:23:54:2b:7a:45:c4:80:ab:ed: 6b:fe:64:78:12:0f:ce:e1:01:00:ba:79:7b:4f:aa: 7c:45:06:e5:53:d9:81:e4:db:b4:89:3c:00:16:f9: b9:e4:92:b0:f5:65:56:8e:56:9d:8f:88:15:8e:4b: 35:78:53:af:cd:e5:63:c4:5d:6c:5a:f1:3f:e1:c9: 77:05:01:8f:96:d8:c3:82:ba:0b:be:24:be:86:9a: 03:93:72:b5:cf:02:00:01:41:7f:0a:b8:6a:43:d1: 99:97:61:ed:67:98:bb:7a:2a:bb:b6:01:c5:7a:e6: 91:93:e2:0f:88:78:99:6c:7f:7d:fd:a6:b7:91:0c: 6a:84:83:ec:92:73:51:3a:35:c2:a0:ad:07:62:14: a9:97:32:1c:97:85:e1:fd:0d:e8:bf:80:44:59:c1: a1:9e:2c:da:ef:8d:1f:34:1e:28:b2:a0:40:63:fd: 69:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E1:8E:BD:A3:03:80:CC:D8:B9:CD:2B:FE:4F:A1:B7:94:B7:2B:92 X509v3 Authority Key Identifier: keyid:B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:00:71:b5:76:63:a2:6d:4a:71:1e:eb:9c:64:7f:47:ec:25: 38:b2:af:03:31:47:49:1a:68:97:d2:d7:bd:a1:55:8e:a4:68: 05:a8:bf:e9:04:2f:2d:68:75:81:77:34:dc:ee:3b:46:74:01: c8:20:a2:85:b5:6d:cf:d9:0c:cf:50:2c:90:f7:59:db:b0:48: d2:3a:ad:61:d1:81:61:42:ed:dd:f1:d2:ee:c0:b7:9f:a5:87: e6:d1:6c:01:5b:d7:60:f4:fd:1a:b4:96:cf:69:d7:0b:9c:82: f6:48:97:1b:0c:48:8e:c0:37:66:18:0f:cc:8b:64:05:2a:78: 17:4b:58:ac:a8:88:db:9a:2f:df:e2:e5:74:e0:9b:61:89:3a: e7:fc:ed:49:37:6e:7a:67:f4:43:c0:53:41:88:a6:71:88:e5: 50:14:52:f6:63:16:1d:30:58:7b:8a:0e:b0:4f:c0:b8:a6:ad: 2b:15:d2:17:92:41:9e:ba:3e:e1:a0:47:4b:4e:49:80:27:c3: 77:49:5a:f1:f9:e5:b9:eb:c1:74:00:a0:d2:76:36:f2:b9:34: 41:8e:8b:2d:74:be:c7:8b:51:b4:5a:7e:51:28:28:e0:5c:dc: 63:f0:86:2a:58:f5:06:9b:7d:b9:59:3c:0a:8c:42:df:ad:69: 36:5b:57:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULP8cMwP9M2E84F3M+VAP9e9h34MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFD NUZBRDI5QTAeFw0yNjA4MDIwNDI3NTNaFw0yNjA4MDMwNzEwNTNaMDMxMTAvBgNV BAMTKDEyRTE4RUJEQTMwMzgwQ0NEOEI5Q0QyQkZFNEZBMUI3OTRCNzJCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSoBjnL+lNGh0n+1tXVbDUidBi EyAB11pDMyMGyaFtlMYYDmCz2TqySEQf4fvlPN0TPJL7fvIh24bZD5ctedanQKdg eDXAiaDVOlpkb3Ou/yNUK3pFxICr7Wv+ZHgSD87hAQC6eXtPqnxFBuVT2YHk27SJ PAAW+bnkkrD1ZVaOVp2PiBWOSzV4U6/N5WPEXWxa8T/hyXcFAY+W2MOCugu+JL6G mgOTcrXPAgABQX8KuGpD0ZmXYe1nmLt6Kru2AcV65pGT4g+IeJlsf339preRDGqE g+ySc1E6NcKgrQdiFKmXMhyXheH9Dei/gERZwaGeLNrvjR80HiiyoEBj/WnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEuGOvaMDgMzYuc0r/k+ht5S3K5IwHwYDVR0j BBgwFoAUubimHY6lUgzyjo5cJFAXasX60powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MTc2MDgtMTZiOC00NDk3LTgxZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4 RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFDNUZBRDI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9COUI4QTYxRDhFQTU1MjBDRjI4RThFNUMyNDUwMTc2QUM1RkFE MjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3 NkFDNUZBRDI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcAcbV2Y6JtSnEe65xkf0fsJTiyrwMxR0ka aJfS172hVY6kaAWov+kELy1odYF3NNzuO0Z0AcggooW1bc/ZDM9QLJD3WduwSNI6 rWHRgWFC7d3x0u7At5+lh+bRbAFb12D0/Rq0ls9p1wucgvZIlxsMSI7AN2YYD8yL ZAUqeBdLWKyoiNuaL9/i5XTgm2GJOuf87Uk3bnpn9EPAU0GIpnGI5VAUUvZjFh0w WHuKDrBPwLimrSsV0heSQZ66PuGgR0tOSYAnw3dJWvH55bnrwXQAoNJ2NvK5NEGO iy10vseLUbRaflEoKOBc3GPwhipY9QabfblZPAqMQt+taTZbV5U= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:39 2026 by rpki-client