$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft File: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft (raw, json) Hash identifier: MVthYXRPlaqId7PV5xurlj4Iv9ulOoC0DcS5GbZ/ubc= Subject key identifier: 93:5D:9B:5F:0E:2B:90:1B:C6:9A:60:79:68:23:26:47:DE:DB:29:43 Authority key identifier: B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 Certificate issuer: /CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Certificate serial: 5C69F881C32AE2C3B4896C9397A4031BCB2D2976 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:17:28 +0000 Manifest this update: Thu 17 Sep 2026 07:12:28 +0000 Manifest next update: Fri 18 Sep 2026 09:34:28 +0000 Files and hashes: 1: B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl (hash: wAZB0PvGiBlXtziz475vvh1MbnL8S4zMDFCxbsucKDc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:69:f8:81:c3:2a:e2:c3:b4:89:6c:93:97:a4:03:1b:cb:2d:29:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B98FD48914B489C7847A7A27E53C7F1603BEEAD2 Validity Not Before: Sep 17 07:12:28 2026 GMT Not After : Sep 18 09:34:28 2026 GMT Subject: CN=935D9B5F0E2B901BC69A607968232647DEDB2943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:fa:85:80:2e:a9:d3:43:bd:c5:bb:5e:88: 00:aa:cf:43:c2:f6:69:d3:30:75:38:63:90:4d:b0: f7:60:85:cc:01:1e:ed:c2:c5:ed:5c:98:fc:f0:c6: ef:31:74:91:b1:d0:69:0e:6d:c7:f1:c5:32:e2:5a: 81:cc:cc:46:3d:41:1e:01:04:a9:dc:ef:4c:a9:4f: ba:89:ca:4e:a7:26:9c:a0:94:ae:cc:ec:0f:61:31: ef:4f:9c:f6:d4:dd:c9:92:5f:23:3a:e8:25:4e:a3: 33:9c:74:31:ba:f3:64:28:3f:bc:85:08:1c:3d:75: b9:e0:0d:8b:5e:78:65:33:fb:d5:0b:36:64:ec:25: cd:42:3e:92:c4:b7:f8:e0:6b:c3:c3:f7:12:11:d5: a1:0b:8d:3c:be:ee:f8:dd:12:a5:b8:1a:ad:2d:7b: c3:7a:2e:0f:77:db:17:0a:11:04:ae:c6:61:4c:46: 6d:b9:c6:05:25:6a:30:6e:ce:a2:0f:3a:ab:91:6a: 52:43:99:12:f3:86:1c:f8:d4:60:7b:03:90:5a:45: 2d:61:ee:36:fb:81:b5:f3:53:6f:c3:21:ff:d1:ef: 0d:39:87:b1:9f:a6:db:f4:cc:5b:01:a9:78:18:26: 72:ad:e5:5b:da:13:30:66:81:d2:57:f6:aa:1a:f4: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5D:9B:5F:0E:2B:90:1B:C6:9A:60:79:68:23:26:47:DE:DB:29:43 X509v3 Authority Key Identifier: keyid:B9:8F:D4:89:14:B4:89:C7:84:7A:7A:27:E5:3C:7F:16:03:BE:EA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/B98FD48914B489C7847A7A27E53C7F1603BEEAD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:92:7b:7b:8c:95:c5:30:d0:81:a0:c3:e6:78:9d:64:12:77: b0:75:98:de:01:7e:15:07:cd:97:30:78:39:ea:82:17:ab:e9: 30:82:bf:ad:ff:86:ad:99:4d:5a:26:83:2b:ba:64:4b:62:7c: a7:f9:d6:2f:5f:b9:52:0f:be:42:a6:03:78:5f:d8:42:61:b9: 0b:fa:64:0e:98:ec:9d:23:cb:95:8c:53:39:8e:2a:f4:91:44: d5:b2:68:81:d1:09:8a:3c:0d:47:df:d3:7d:b1:07:d8:a1:38: 72:d0:11:3d:a8:bc:c5:e5:46:23:1f:a5:d7:88:1c:58:ae:ce: 59:a4:c7:e0:e8:ae:54:e8:c4:71:ed:c9:80:b0:72:c9:43:2a: a5:88:22:ef:a3:8a:b1:21:a3:d7:18:d8:8c:8c:a3:9a:f5:3e: 1a:ca:b4:c5:86:62:1b:8a:62:73:40:2c:81:50:96:9c:10:fb: 21:c9:68:33:2c:e4:7c:e0:82:59:99:c1:ab:6d:38:7b:56:f9: 04:92:cb:38:dd:2a:27:20:b7:c6:ab:ed:cc:3a:18:2d:ee:2a: 0a:4e:ce:b9:18:41:4d:10:48:d9:26:cd:1c:d1:29:03:7c:35: 20:78:44:fb:41:5c:3c:b6:4e:18:98:f5:ff:83:fa:64:ac:e3: 5e:c0:c6:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXGn4gcMq4sO0iWyTl6QDG8stKXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYw M0JFRUFEMjAeFw0yNjA5MTcwNzEyMjhaFw0yNjA5MTgwOTM0MjhaMDMxMTAvBgNV BAMTKDkzNUQ5QjVGMEUyQjkwMUJDNjlBNjA3OTY4MjMyNjQ3REVEQjI5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KPqFgC6p00O9xbteiACqz0PC 9mnTMHU4Y5BNsPdghcwBHu3Cxe1cmPzwxu8xdJGx0GkObcfxxTLiWoHMzEY9QR4B BKnc70ypT7qJyk6nJpyglK7M7A9hMe9PnPbU3cmSXyM66CVOozOcdDG682QoP7yF CBw9dbngDYteeGUz+9ULNmTsJc1CPpLEt/jga8PD9xIR1aELjTy+7vjdEqW4Gq0t e8N6Lg932xcKEQSuxmFMRm25xgUlajBuzqIPOquRalJDmRLzhhz41GB7A5BaRS1h 7jb7gbXzU2/DIf/R7w05h7Gfptv0zFsBqXgYJnKt5VvaEzBmgdJX9qoa9G6hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk12bXw4rkBvGmmB5aCMmR97bKUMwHwYDVR0j BBgwFoAUuY/UiRS0iceEenon5Tx/FgO+6tIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDVjMmM3MWMtNmFlNS00ZWE5LWI4NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkx NEI0ODlDNzg0N0E3QTI3RTUzQzdGMTYwM0JFRUFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COThGRDQ4OTE0QjQ4OUM3ODQ3QTdBMjdFNTNDN0YxNjAzQkVF QUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvQjk4RkQ0ODkxNEI0ODlDNzg0N0E3QTI3RTUzQzdG MTYwM0JFRUFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuSe3uMlcUw0IGgw+Z4nWQSd7B1mN4BfhUH zZcweDnqgher6TCCv63/hq2ZTVomgyu6ZEtifKf51i9fuVIPvkKmA3hf2EJhuQv6 ZA6Y7J0jy5WMUzmOKvSRRNWyaIHRCYo8DUff032xB9ihOHLQET2ovMXlRiMfpdeI HFiuzlmkx+DorlToxHHtyYCwcslDKqWIIu+jirEho9cY2IyMo5r1PhrKtMWGYhuK YnNALIFQlpwQ+yHJaDMs5HzgglmZwattOHtW+QSSyzjdKicgt8ar7cw6GC3uKgpO zrkYQU0QSNkmzRzRKQN8NSB4RPtBXDy2ThiY9f+D+mSs417Axuk= -----END CERTIFICATE-----Generated at Thu Sep 17 11:51:43 2026 by rpki-client