$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft File: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft (raw, json) Hash identifier: B6sYFojiO4V89LaAyhBDtG5H2Yyr7t+SJxQJr04UiZo= Subject key identifier: 6E:EB:4B:54:ED:72:35:15:73:8A:C8:89:1D:92:F5:50:E7:49:B8:04 Authority key identifier: B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18 Certificate issuer: /CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718 Certificate serial: 3192118EEBF1F416278F3DD593F743C0C38A77B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 03:53:19 +0000 Manifest this update: Thu 17 Sep 2026 03:48:19 +0000 Manifest next update: Fri 18 Sep 2026 05:37:19 +0000 Files and hashes: 1: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: AMAK0g33Kv2aI5QR9+0p9uxKjyyXdje3jg9ykQZ5pUA=) 2: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: fQwW9jEUlabh0L2NvQSOViFURIlDH59x+g1CS1ccauI=) 3: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 6QK6aAC3OH45PZDy0os84YcWYINTJWbPpMpi72u5POI=) 4: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl (hash: 47Xem4uaof/hKGOKeobe/fjDt9BkKuBxuW8v/ZWQhi4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:92:11:8e:eb:f1:f4:16:27:8f:3d:d5:93:f7:43:c0:c3:8a:77:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718 Validity Not Before: Sep 17 03:48:19 2026 GMT Not After : Sep 18 05:37:19 2026 GMT Subject: CN=6EEB4B54ED723515738AC8891D92F550E749B804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:3b:87:06:d8:ca:7a:c8:c3:12:59:d5:d1: 5f:c3:ea:0b:2b:39:df:f6:81:06:99:c4:b3:87:2c: 3d:79:ce:01:b0:12:87:9d:cf:d7:31:f8:4b:62:69: 40:72:34:99:42:84:4e:66:0f:98:05:70:fa:a3:b2: d5:13:3c:2c:78:38:e8:7e:5c:10:90:4a:9a:20:9f: ff:2e:ad:5b:4d:74:32:fd:ea:8b:e9:49:67:e2:ee: aa:ee:b0:10:97:c9:3d:29:7b:91:1b:36:4a:54:28: ac:b5:64:cc:34:72:d3:36:55:50:a9:bf:15:f8:8e: e4:d4:07:bf:17:4e:51:30:f4:67:bd:55:ef:c3:1e: 52:8b:52:02:45:a0:db:cf:a0:a6:d6:ad:43:85:48: e3:70:ab:4c:1b:24:2b:fd:bb:08:b5:64:72:22:4e: d2:3b:ed:e6:12:c4:db:6d:c4:4e:6c:0c:0c:47:ac: f2:04:33:51:5a:04:c1:89:b3:2f:97:1b:8d:7b:cc: 07:11:67:df:96:71:4b:7a:19:05:aa:48:3b:70:09: b6:c7:b7:9f:21:35:fc:92:a2:49:4d:46:b4:23:18: 87:f0:84:86:dd:ec:16:c6:38:56:c9:56:1b:8e:13: bb:23:16:fe:bd:70:a4:84:f4:2b:93:c9:48:68:b9: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EB:4B:54:ED:72:35:15:73:8A:C8:89:1D:92:F5:50:E7:49:B8:04 X509v3 Authority Key Identifier: keyid:B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:34:21:ee:ba:31:61:85:4c:d0:08:9e:92:f6:38:f1:62:dc: 59:0c:0d:ed:64:da:29:7b:eb:02:78:ab:55:c1:81:83:63:2c: 65:2c:bb:1b:91:61:7a:e3:13:bf:d4:80:46:56:fd:ef:08:f7: 51:74:cf:99:5b:31:1c:f1:5e:a9:5a:37:e0:31:1a:01:a2:de: bd:7a:8f:63:11:ad:39:5a:30:52:bb:08:61:fc:d6:54:74:c9: 2a:13:be:f5:37:92:98:f2:9e:46:f9:7f:03:ab:24:af:fa:a0: ab:83:28:34:54:c0:88:17:95:af:0b:68:97:e1:50:3a:ff:fc: 9b:e5:33:a2:f7:69:03:3a:e4:77:26:75:2c:2c:3d:64:7a:6f: 19:53:d3:60:7f:1f:bb:99:5e:db:5f:79:18:a7:48:c0:34:e0: 79:54:5c:2f:e6:4a:c1:07:34:90:f6:52:23:39:2b:84:f2:de: a5:d8:f9:10:99:6b:c7:82:50:56:d1:21:de:3e:95:f3:13:dd: bd:68:7d:3e:1c:63:f2:9e:95:a2:48:49:7b:76:81:8d:70:57: 69:32:19:f8:b2:39:7e:68:dd:f5:10:0e:a2:54:52:a6:98:0c: df:7b:12:1a:bb:38:b7:ab:94:d0:0d:0b:7e:57:7c:74:f2:45: eb:99:b9:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZIRjuvx9BYnjz3Vk/dDwMOKd7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCOENEQ0VFNzQyNkQwMzEwMjBCRUMxRUFEMjMzN0NC NTFEQTcxODAeFw0yNjA5MTcwMzQ4MTlaFw0yNjA5MTgwNTM3MTlaMDMxMTAvBgNV BAMTKDZFRUI0QjU0RUQ3MjM1MTU3MzhBQzg4OTFEOTJGNTUwRTc0OUI4MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncTuHBtjKesjDElnV0V/D6gsr Od/2gQaZxLOHLD15zgGwEoedz9cx+EtiaUByNJlChE5mD5gFcPqjstUTPCx4OOh+ XBCQSpogn/8urVtNdDL96ovpSWfi7qrusBCXyT0pe5EbNkpUKKy1ZMw0ctM2VVCp vxX4juTUB78XTlEw9Ge9Ve/DHlKLUgJFoNvPoKbWrUOFSONwq0wbJCv9uwi1ZHIi TtI77eYSxNttxE5sDAxHrPIEM1FaBMGJsy+XG417zAcRZ9+WcUt6GQWqSDtwCbbH t58hNfySoklNRrQjGIfwhIbd7BbGOFbJVhuOE7sjFv69cKSE9CuTyUhoubqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbutLVO1yNRVzisiJHZL1UOdJuAQwHwYDVR0j BBgwFoAUsLjNzudCbQMQIL7B6tIzfLUdpxgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZjMTdjYzItZjRhMi00MTVlLThlYTItZjljNDdmNzVjNGNhLzAvQjBCOENEQ0VF NzQyNkQwMzEwMjBCRUMxRUFEMjMzN0NCNTFEQTcxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEI4Q0RDRUU3NDI2RDAzMTAyMEJFQzFFQUQyMzM3Q0I1MURB NzE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQjBCOENEQ0VFNzQyNkQwMzEwMjBCRUMxRUFEMjMz N0NCNTFEQTcxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFI0Ie66MWGFTNAInpL2OPFi3FkMDe1k2il7 6wJ4q1XBgYNjLGUsuxuRYXrjE7/UgEZW/e8I91F0z5lbMRzxXqlaN+AxGgGi3r16 j2MRrTlaMFK7CGH81lR0ySoTvvU3kpjynkb5fwOrJK/6oKuDKDRUwIgXla8LaJfh UDr//JvlM6L3aQM65HcmdSwsPWR6bxlT02B/H7uZXttfeRinSMA04HlUXC/mSsEH NJD2UiM5K4Ty3qXY+RCZa8eCUFbRId4+lfMT3b1ofT4cY/KelaJISXt2gY1wV2ky GfiyOX5o3fUQDqJUUqaYDN97Ehq7OLerlNANC35XfHTyReuZufs= -----END CERTIFICATE-----Generated at Thu Sep 17 10:58:06 2026 by rpki-client