$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft File: B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft (raw, json) Hash identifier: gyAEycnLS4V4bgl6KeNWrrU5LqOkCoDBLdmtJ5LHQGs= Subject key identifier: A1:50:C4:FD:F8:8A:25:F5:86:99:1A:71:63:2B:BC:98:D7:D6:0A:3C Authority key identifier: B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9 Certificate issuer: /CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9 Certificate serial: 4697BAABA8F791A88161424F86031F50F479B75B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:09:45 +0000 Manifest this update: Thu 17 Sep 2026 05:04:45 +0000 Manifest next update: Fri 18 Sep 2026 05:14:45 +0000 Files and hashes: 1: B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl (hash: eTkAb2eywl1Nsgt6e0/n5rQEIVDBlFS+M9XfxWLqnjE=) 2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: 2jTqkZUMM6RgBn0H5+b2a8SLrtyFxeMaWfySgcjTtJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:97:ba:ab:a8:f7:91:a8:81:61:42:4f:86:03:1f:50:f4:79:b7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9 Validity Not Before: Sep 17 05:04:45 2026 GMT Not After : Sep 18 05:14:45 2026 GMT Subject: CN=A150C4FDF88A25F586991A71632BBC98D7D60A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:24:72:40:e9:be:96:33:b1:e1:da:6c:aa: 2b:55:3c:65:aa:68:c6:60:2a:aa:71:aa:b2:69:49: 99:20:6b:d3:1f:9d:24:7a:62:34:a8:e8:55:18:52: 87:08:b0:28:dd:f2:e8:eb:2f:6b:75:4d:df:84:f5: 52:51:fb:01:9d:38:57:fe:ce:e0:e2:08:f1:91:c0: d4:16:07:b1:56:f1:f2:b5:9a:27:d2:22:c7:30:b3: 6e:5f:41:04:e2:da:14:20:ee:f2:02:f9:73:48:97: 28:ca:22:6e:fb:5d:fc:94:09:ce:d7:1f:42:8b:70: 28:55:69:f3:11:10:ef:b8:7f:e2:84:81:db:c2:81: 7c:7c:e8:a9:2f:da:77:52:be:23:ab:b1:5a:72:76: 70:4f:cf:7b:91:e2:6d:ac:d4:7d:07:b6:62:e2:a5: 60:7a:78:47:93:e1:82:8c:93:4f:ff:ec:bd:77:e6: 33:60:2c:af:f2:18:3e:6a:05:4b:4f:7e:17:89:23: da:57:02:37:ae:b2:e0:86:33:ad:b3:24:ff:a2:ef: f0:93:9b:fd:4c:5a:5b:66:00:09:99:9c:77:5f:ca: 4e:a1:90:eb:67:89:d4:65:df:2c:18:ea:d1:3a:1e: ca:09:f9:39:34:13:5d:23:fa:ec:2e:12:68:70:a7: 86:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:50:C4:FD:F8:8A:25:F5:86:99:1A:71:63:2B:BC:98:D7:D6:0A:3C X509v3 Authority Key Identifier: keyid:B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:39:78:ff:7e:a2:b0:11:4b:92:03:05:98:85:f3:20:ce:2a: 64:98:24:c7:52:a5:92:66:d2:e6:6f:d4:62:3b:73:7c:b6:6a: ed:91:5f:25:2a:eb:bb:8f:c5:da:6e:00:c4:d2:82:2d:ed:9e: a3:9f:a1:10:cd:a3:6f:91:49:a6:7e:e9:68:f5:9a:dd:11:87: 8f:60:1e:7b:c2:06:7d:53:7c:7d:54:80:c1:01:5c:04:05:05: 99:8e:a5:e9:0e:a4:d0:f2:55:ed:38:7c:f8:8c:c7:e0:f7:4c: ee:39:55:01:e2:06:b9:c5:7e:d1:ef:48:27:87:42:66:7e:a0: de:09:59:4c:e9:dd:ef:cc:e7:50:fd:00:0e:42:e6:49:bd:c4: 69:39:e8:36:a8:88:4b:03:c5:25:74:c0:20:3c:66:58:b5:d3: 21:36:21:76:0f:fd:b8:35:18:19:37:ee:53:7f:28:f4:af:6f: a6:8e:68:d7:34:30:ff:a1:3b:53:8b:20:71:37:83:9e:88:b2: ed:d2:88:36:a5:5b:50:59:86:91:e0:8e:24:ed:8c:0f:88:ec: af:0e:1e:bb:11:f8:8d:be:f3:c1:b2:1c:31:8d:85:eb:49:6b: 87:2d:60:47:ac:96:6d:b9:50:0b:2e:0f:bd:31:cc:7c:24:1f: 34:78:10:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpe6q6j3kaiBYUJPhgMfUPR5t1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUwNjdFNzgwMkQ3QjE5OTI4QkRGQTkzRTZENUJBNTY2 MTQxOEFGOTAeFw0yNjA5MTcwNTA0NDVaFw0yNjA5MTgwNTE0NDVaMDMxMTAvBgNV BAMTKEExNTBDNEZERjg4QTI1RjU4Njk5MUE3MTYzMkJCQzk4RDdENjBBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2SRyQOm+ljOx4dpsqitVPGWq aMZgKqpxqrJpSZkga9MfnSR6YjSo6FUYUocIsCjd8ujrL2t1Td+E9VJR+wGdOFf+ zuDiCPGRwNQWB7FW8fK1mifSIscws25fQQTi2hQg7vIC+XNIlyjKIm77XfyUCc7X H0KLcChVafMREO+4f+KEgdvCgXx86Kkv2ndSviOrsVpydnBPz3uR4m2s1H0HtmLi pWB6eEeT4YKMk0//7L135jNgLK/yGD5qBUtPfheJI9pXAjeusuCGM62zJP+i7/CT m/1MWltmAAmZnHdfyk6hkOtnidRl3ywY6tE6HsoJ+Tk0E10j+uwuEmhwp4ZhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoVDE/fiKJfWGmRpxYyu8mNfWCjwwHwYDVR0j BBgwFoAUtQZ+eALXsZkovfqT5tW6VmFBivkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmYwYzdhMzctNWQxOS00YzVjLTkzMDEtYTE0YTdmMTg1YzkyLzAvQjUwNjdFNzgw MkQ3QjE5OTI4QkRGQTkzRTZENUJBNTY2MTQxOEFGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNTA2N0U3ODAyRDdCMTk5MjhCREZBOTNFNkQ1QkE1NjYxNDE4 QUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQjUwNjdFNzgwMkQ3QjE5OTI4QkRGQTkzRTZENUJB NTY2MTQxOEFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJo5eP9+orARS5IDBZiF8yDOKmSYJMdSpZJm 0uZv1GI7c3y2au2RXyUq67uPxdpuAMTSgi3tnqOfoRDNo2+RSaZ+6Wj1mt0Rh49g HnvCBn1TfH1UgMEBXAQFBZmOpekOpNDyVe04fPiMx+D3TO45VQHiBrnFftHvSCeH QmZ+oN4JWUzp3e/M51D9AA5C5km9xGk56DaoiEsDxSV0wCA8Zli10yE2IXYP/bg1 GBk37lN/KPSvb6aOaNc0MP+hO1OLIHE3g56Isu3SiDalW1BZhpHgjiTtjA+I7K8O HrsR+I2+88GyHDGNhetJa4ctYEeslm25UAsuD70xzHwkHzR4ENE= -----END CERTIFICATE-----Generated at Thu Sep 17 09:28:59 2026 by rpki-client