$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft File: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft (raw, json) Hash identifier: YfG7qW6X8/2/VAG+jIS6zbeATygvzEafzUaf1Q1UsXk= Subject key identifier: 69:45:F4:A1:8F:0C:B1:82:F8:19:DA:1C:7A:21:F1:66:A7:DE:90:C1 Authority key identifier: B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC Certificate issuer: /CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Certificate serial: 27380EB4262A1F58A79405B4DF9AC6FF277CC9D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft Manifest number: BA Signing time: Thu 17 Sep 2026 02:31:34 +0000 Manifest this update: Thu 17 Sep 2026 02:26:34 +0000 Manifest next update: Fri 18 Sep 2026 06:22:34 +0000 Files and hashes: 1: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: DOdXqvIf8YC77FzkFbP1ZhH9lDDTTUCUrQuHHws44kQ=) 2: B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl (hash: foa0lP5J/b4IAZAtDEZSZmclA01M/NTQDZqE8auTqjk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:38:0e:b4:26:2a:1f:58:a7:94:05:b4:df:9a:c6:ff:27:7c:c9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC Validity Not Before: Sep 17 02:26:34 2026 GMT Not After : Sep 18 06:22:34 2026 GMT Subject: CN=6945F4A18F0CB182F819DA1C7A21F166A7DE90C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:88:a3:75:55:b1:44:d2:5c:19:62:97:c2: de:da:8f:e1:c0:62:02:8f:03:3a:7e:58:9a:60:93: 45:b3:3b:04:2e:c0:21:26:29:3d:84:05:60:56:74: f1:78:54:bc:c7:80:75:7e:a3:0c:bb:11:33:d9:88: 16:c8:a0:10:c3:23:19:d3:f4:f5:6b:b9:ea:41:10: 4a:7a:9a:24:93:1a:e7:25:39:aa:44:d9:3c:5d:a5: fe:26:f6:69:d7:93:e4:d8:43:03:7f:64:85:bb:11: be:01:e8:46:4c:1a:7a:de:cd:ee:4e:4d:97:88:bb: 3a:2c:bc:9d:39:ba:80:17:4b:30:63:bc:b3:18:39: 53:47:8f:28:9a:4c:cb:13:b2:76:73:af:b2:dd:ce: 5b:91:ff:4f:00:aa:49:03:00:6d:30:fb:97:48:68: 6f:26:e7:e1:92:4b:43:a7:19:ea:f7:8b:1c:24:fa: bf:72:e0:44:3f:b0:3d:ac:b0:e1:84:70:58:28:b5: c5:43:70:fd:b0:aa:9a:a1:9c:b0:7d:52:0c:5b:00: 32:bd:0f:8a:ae:75:4f:fd:3a:4e:09:61:b8:2f:e7: 74:5c:d7:ae:7d:ec:72:3b:53:04:d0:3a:14:ec:3b: 10:19:38:d0:79:18:dd:34:67:03:da:9b:e8:5f:c2: 28:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:45:F4:A1:8F:0C:B1:82:F8:19:DA:1C:7A:21:F1:66:A7:DE:90:C1 X509v3 Authority Key Identifier: keyid:B9:90:8F:59:4E:63:0B:EA:1E:EA:0D:DB:F4:A3:0D:C8:CF:12:7C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/B9908F594E630BEA1EEA0DDBF4A30DC8CF127CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c3:6b:b3:4e:fe:5c:b6:a3:69:e6:7b:54:4c:93:96:cb:43: 5b:8d:bf:1c:f8:6d:d7:d9:8a:49:b1:0b:47:d7:5f:84:6b:13: 67:3d:ca:0d:32:6b:af:67:74:3d:58:71:d9:39:0d:0e:11:e6: aa:52:60:38:3e:71:db:78:95:12:c6:3e:8f:5d:1b:91:52:17: c3:8c:20:ac:c0:bb:ea:24:ef:11:c1:40:86:22:8a:20:00:5f: f7:d5:f8:39:cd:e8:7c:08:38:5c:f2:2f:a3:1d:a3:89:1a:8c: 04:e2:2d:a3:b4:2a:b3:23:2b:7f:48:9d:d8:09:05:48:74:81: d6:37:49:fb:36:5a:19:87:df:8f:3d:da:dd:ce:ed:f2:47:a7: b3:4d:5b:70:61:12:2e:d8:77:c2:60:cf:99:e8:e8:d0:a5:c1: 2a:92:df:2a:bd:60:8e:b3:75:5e:c2:b0:2d:32:7c:d2:78:76: 39:1c:0b:4b:84:2a:e7:b4:08:1c:40:4c:f3:b7:75:07:08:5b: aa:8e:af:b7:fe:26:57:fc:94:c9:6b:0c:5e:ca:95:d9:53:fe: 2c:6a:70:5a:32:dc:4e:6a:c5:b3:66:f2:e4:de:6c:27:9b:31: 5a:50:5d:b5:30:69:97:c6:11:9a:72:b9:13:09:51:f4:78:7c: fc:0f:2b:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzgOtCYqH1inlAW035rG/yd8ydQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhD RjEyN0NBQzAeFw0yNjA5MTcwMjI2MzRaFw0yNjA5MTgwNjIyMzRaMDMxMTAvBgNV BAMTKDY5NDVGNEExOEYwQ0IxODJGODE5REExQzdBMjFGMTY2QTdERTkwQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNU4ijdVWxRNJcGWKXwt7aj+HA YgKPAzp+WJpgk0WzOwQuwCEmKT2EBWBWdPF4VLzHgHV+owy7ETPZiBbIoBDDIxnT 9PVruepBEEp6miSTGuclOapE2Txdpf4m9mnXk+TYQwN/ZIW7Eb4B6EZMGnreze5O TZeIuzosvJ05uoAXSzBjvLMYOVNHjyiaTMsTsnZzr7LdzluR/08AqkkDAG0w+5dI aG8m5+GSS0OnGer3ixwk+r9y4EQ/sD2ssOGEcFgotcVDcP2wqpqhnLB9UgxbADK9 D4qudU/9Ok4JYbgv53Rc16597HI7UwTQOhTsOxAZONB5GN00ZwPam+hfwigfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaUX0oY8MsYL4GdoceiHxZqfekMEwHwYDVR0j BBgwFoAUuZCPWU5jC+oe6g3b9KMNyM8SfKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZlY2M3MmEtZTk1NC00MzAyLTkyYzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0 RTYzMEJFQTFFRUEwRERCRjRBMzBEQzhDRjEyN0NBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTkwOEY1OTRFNjMwQkVBMUVFQTBEREJGNEEzMERDOENGMTI3 Q0FDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvQjk5MDhGNTk0RTYzMEJFQTFFRUEwRERCRjRBMzBE QzhDRjEyN0NBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvDa7NO/ly2o2nme1RMk5bLQ1uNvxz4bdfZ ikmxC0fXX4RrE2c9yg0ya69ndD1Ycdk5DQ4R5qpSYDg+cdt4lRLGPo9dG5FSF8OM IKzAu+ok7xHBQIYiiiAAX/fV+DnN6HwIOFzyL6Mdo4kajATiLaO0KrMjK39IndgJ BUh0gdY3Sfs2WhmH34892t3O7fJHp7NNW3BhEi7Yd8Jgz5no6NClwSqS3yq9YI6z dV7CsC0yfNJ4djkcC0uEKue0CBxATPO3dQcIW6qOr7f+Jlf8lMlrDF7KldlT/ixq cFoy3E5qxbNm8uTebCebMVpQXbUwaZfGEZpyuRMJUfR4fPwPK+g= -----END CERTIFICATE-----Generated at Thu Sep 17 13:51:24 2026 by rpki-client