$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft File: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft (raw, json) Hash identifier: LpT/PZh4v7EKOptz2IsjsU0Ly+3ocxsxp6VP1X9A/yc= Subject key identifier: E1:E4:3D:50:36:68:0B:79:A9:C6:85:0A:7E:F3:67:41:6B:A0:5B:80 Authority key identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A Certificate issuer: /CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Certificate serial: 1D023E6EC56669D2DD754033FE885EBE97D24CEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:41:48 +0000 Manifest this update: Thu 17 Sep 2026 02:36:48 +0000 Manifest next update: Fri 18 Sep 2026 04:03:48 +0000 Files and hashes: 1: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl (hash: NLe06UhV/DWkT4q5I9zF+6gTwvflGJxYjoWHfIM6fFI=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: fDnmzf65jBSv74PMDMyNjaHpX/nCsTXRpP2C1qWxmnk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:02:3e:6e:c5:66:69:d2:dd:75:40:33:fe:88:5e:be:97:d2:4c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Validity Not Before: Sep 17 02:36:48 2026 GMT Not After : Sep 18 04:03:48 2026 GMT Subject: CN=E1E43D5036680B79A9C6850A7EF367416BA05B80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1f:98:31:a9:35:06:c2:ee:3a:23:60:a0:1e: 49:23:b6:e1:2f:54:cc:7e:a5:73:62:a8:1a:f6:0c: 07:57:c3:85:9a:99:4c:0f:1e:eb:7c:59:77:bc:b8: a4:b9:c9:89:0a:84:52:1c:11:db:94:2c:54:18:ef: 40:28:8d:64:ca:72:50:5d:ca:6b:3c:bd:5c:09:f1: 73:8f:b2:6c:f1:82:b4:67:89:59:f8:5d:59:b7:97: 30:c9:2c:e9:b1:9b:87:a7:97:42:d4:95:db:c4:7c: 94:a7:0a:e8:cd:04:e3:e4:13:bd:24:c1:69:0a:bf: a9:83:ae:95:e7:49:c1:de:63:18:d3:2c:83:dd:2b: a4:cf:b4:ad:1d:c5:44:c0:62:0a:fd:61:a7:28:1a: dc:ad:a8:a5:84:22:91:7b:2e:9f:c3:d5:29:89:36: f6:f3:28:c7:c8:de:6b:3e:01:3e:35:51:53:66:d2: 6e:fb:43:8e:3d:52:a6:5a:39:1f:ec:eb:8a:4e:8e: 32:90:a9:7d:83:a9:4e:54:26:ce:8f:25:a3:c4:44: c7:c3:27:e8:9f:21:79:78:e7:fe:06:b2:b0:cf:82: 13:08:3f:ab:ca:7d:19:87:2e:1a:3e:fa:6c:25:20: 54:99:fd:84:19:af:ee:3e:be:3c:2c:1e:37:37:33: 37:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E4:3D:50:36:68:0B:79:A9:C6:85:0A:7E:F3:67:41:6B:A0:5B:80 X509v3 Authority Key Identifier: keyid:B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:00:c5:05:83:93:6c:92:e2:a8:d3:d4:c2:7a:6e:9a:fe:99: 6b:14:78:e1:0a:93:3a:7e:06:9f:7f:19:d6:57:ee:2c:ed:61: af:28:4f:bb:d5:04:0d:69:a6:02:3f:bc:81:3f:fb:e1:10:d7: 07:39:88:6c:bc:45:f9:31:24:b2:70:68:56:4f:c3:01:2d:7e: 89:ec:ad:9b:83:c7:b1:18:a1:53:cf:c4:8b:07:6c:c9:17:11: 45:89:b4:f9:68:78:e4:8e:9d:8d:22:07:87:2a:97:e9:ea:30: 43:c4:dc:05:73:17:49:41:6c:be:95:20:56:76:45:07:63:e8: 86:55:ba:5c:3b:24:92:b1:aa:16:b7:70:53:d3:ef:ab:aa:65: f4:91:5e:c8:fc:f1:cf:3d:ec:16:6d:28:f2:a3:02:32:b7:bf: 34:dd:74:ed:b7:52:b0:59:ad:09:c6:22:ac:c5:50:5a:3f:f2: 34:b4:11:86:62:d5:f8:70:8f:81:92:09:34:bd:e9:fc:e1:69: 0b:6a:5d:1b:fd:04:bc:1f:40:21:03:48:6e:56:ba:9f:10:41: 02:f2:e1:fd:6c:8e:f9:d4:12:eb:a6:6f:55:d9:98:72:fa:81: 90:e0:e8:29:57:0e:0d:86:cd:1a:3f:3d:5f:90:c6:26:35:65: 31:7c:21:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQI+bsVmadLddUAz/ohevpfSTOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFD NUZBRDI5QTAeFw0yNjA5MTcwMjM2NDhaFw0yNjA5MTgwNDAzNDhaMDMxMTAvBgNV BAMTKEUxRTQzRDUwMzY2ODBCNzlBOUM2ODUwQTdFRjM2NzQxNkJBMDVCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5H5gxqTUGwu46I2CgHkkjtuEv VMx+pXNiqBr2DAdXw4WamUwPHut8WXe8uKS5yYkKhFIcEduULFQY70AojWTKclBd yms8vVwJ8XOPsmzxgrRniVn4XVm3lzDJLOmxm4enl0LUldvEfJSnCujNBOPkE70k wWkKv6mDrpXnScHeYxjTLIPdK6TPtK0dxUTAYgr9YacoGtytqKWEIpF7Lp/D1SmJ NvbzKMfI3ms+AT41UVNm0m77Q449UqZaOR/s64pOjjKQqX2DqU5UJs6PJaPERMfD J+ifIXl45/4GsrDPghMIP6vKfRmHLho++mwlIFSZ/YQZr+4+vjwsHjc3MzcfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4eQ9UDZoC3mpxoUKfvNnQWugW4AwHwYDVR0j BBgwFoAUubimHY6lUgzyjo5cJFAXasX60powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MTc2MDgtMTZiOC00NDk3LTgxZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4 RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFDNUZBRDI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9COUI4QTYxRDhFQTU1MjBDRjI4RThFNUMyNDUwMTc2QUM1RkFE MjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3 NkFDNUZBRDI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAAxQWDk2yS4qjT1MJ6bpr+mWsUeOEKkzp+ Bp9/GdZX7iztYa8oT7vVBA1ppgI/vIE/++EQ1wc5iGy8RfkxJLJwaFZPwwEtfons rZuDx7EYoVPPxIsHbMkXEUWJtPloeOSOnY0iB4cql+nqMEPE3AVzF0lBbL6VIFZ2 RQdj6IZVulw7JJKxqha3cFPT76uqZfSRXsj88c897BZtKPKjAjK3vzTddO23UrBZ rQnGIqzFUFo/8jS0EYZi1fhwj4GSCTS96fzhaQtqXRv9BLwfQCEDSG5Wup8QQQLy 4f1sjvnUEuumb1XZmHL6gZDg6ClXDg2GzRo/PV+QxiY1ZTF8IQg= -----END CERTIFICATE-----Generated at Thu Sep 17 11:34:15 2026 by rpki-client