$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft File: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft (raw, json) Hash identifier: 1h4W/8xmSvvmJtxnANio/W+oOYqxb48/edKaTb+nAeM= Subject key identifier: 96:8F:CC:16:F4:36:51:B5:60:51:84:B3:44:C5:AC:F4:58:9B:AB:EA Authority key identifier: B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC Certificate issuer: /CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Certificate serial: 43248AC43A35D51292974BB656A1295CA8D73A0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft Manifest number: BA Signing time: Thu 17 Sep 2026 06:00:52 +0000 Manifest this update: Thu 17 Sep 2026 05:55:52 +0000 Manifest next update: Fri 18 Sep 2026 08:16:52 +0000 Files and hashes: 1: B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl (hash: QdMetiM9ko19pMXBSbFI+MuxNHNX2XUJwJPndZova+Y=) 2: 3130332e3231352e36332e302f32342d3234203d3e20313531303130.roa (hash: KOBMUeuuJtkuzoTiB4FBFCyBVV1+45BqlCrbct7wq3M=) 3: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (hash: xB0/WgkgeQpbT+DgIUgkpcHnnIC1tIl18yTmoTUITOQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:24:8a:c4:3a:35:d5:12:92:97:4b:b6:56:a1:29:5c:a8:d7:3a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CFA020DD4BBFD498C5E4D84A8D6309738749CC Validity Not Before: Sep 17 05:55:52 2026 GMT Not After : Sep 18 08:16:52 2026 GMT Subject: CN=968FCC16F43651B5605184B344C5ACF4589BABEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f0:e2:31:40:46:75:02:fc:02:2c:61:3d:70: b9:83:c9:e9:95:4c:e1:13:4e:13:78:3b:25:ab:c4: 6b:3c:7c:c6:b4:79:e7:6f:16:6f:e7:48:95:81:6f: 61:0b:ee:c0:1f:a5:38:52:59:b2:78:9a:b8:92:87: fa:80:78:af:fe:2c:99:d6:a7:86:3d:6e:a8:f4:6d: b0:b8:e4:9d:79:c1:cd:29:51:1c:76:02:c6:b3:46: 23:47:53:ab:8f:93:72:1d:b3:47:a2:09:4f:70:29: a8:ca:f9:87:fd:c5:8b:4a:02:09:c1:1a:06:75:90: 0f:20:d9:94:06:c6:a2:80:23:e2:f7:9d:04:32:4a: 37:62:95:33:94:58:fd:a0:84:93:4b:eb:93:8d:7f: 00:22:49:78:f5:63:8c:6e:1e:7e:8e:ab:02:9d:00: b7:e5:d2:91:3f:a3:a3:e3:ef:4c:af:6f:5e:09:b6: e9:de:33:b0:e5:cc:0d:0d:84:be:5e:f2:62:a4:35: f2:53:b4:3b:01:b8:2d:d0:be:fd:0a:c5:de:d0:23: 03:48:db:ea:19:6d:04:db:0d:33:17:48:59:88:66: 40:24:5a:ec:b6:3e:0a:48:80:9c:77:b5:34:96:93: c6:fa:89:2a:c0:d6:69:13:df:db:07:e1:7a:4e:03: 40:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8F:CC:16:F4:36:51:B5:60:51:84:B3:44:C5:AC:F4:58:9B:AB:EA X509v3 Authority Key Identifier: keyid:B5:CF:A0:20:DD:4B:BF:D4:98:C5:E4:D8:4A:8D:63:09:73:87:49:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/B5CFA020DD4BBFD498C5E4D84A8D6309738749CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8d:6f:04:af:1a:21:85:e0:7a:f5:fb:f3:32:ac:35:a3:3c: ff:f5:9c:8a:72:ff:5c:f4:90:c0:2c:d2:73:fd:72:a8:7b:3b: 35:34:0e:41:d1:e9:81:9e:82:ab:e0:9d:05:2e:69:7e:f5:81: e6:12:18:24:89:ca:72:79:3c:41:4e:0a:16:54:f7:77:78:c1: 01:9a:52:0c:98:8c:47:59:17:f6:9d:27:b2:49:b5:f6:f0:1d: be:c4:38:18:77:e3:03:3a:36:45:9a:b1:fa:0a:4f:8a:5c:4e: 46:e8:44:33:51:5f:39:ac:c6:61:70:b8:a1:a3:ba:b4:71:e7: 99:20:66:b1:be:d1:da:77:c4:b6:34:cf:5b:cc:64:f5:78:6e: 40:f4:bb:81:9c:f3:b8:86:1d:48:74:7c:35:6f:20:86:11:29: b8:b1:3d:f5:2f:5d:cd:17:dd:cb:7a:00:a6:e7:39:25:5a:b0: 70:84:b2:b7:f1:d8:6f:9b:17:f3:8c:43:a3:17:9e:57:c0:3f: 69:ac:8c:4b:c9:ca:72:82:9d:4e:8c:56:f6:1d:c1:82:78:8b: 67:03:69:f9:4e:84:af:a4:15:5d:3b:91:4e:95:b1:14:15:14: 58:13:98:16:38:34:99:b8:de:f3:6b:be:fb:c1:c5:8a:50:df: 84:51:0d:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQySKxDo11RKSl0u2VqEpXKjXOg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3 Mzg3NDlDQzAeFw0yNjA5MTcwNTU1NTJaFw0yNjA5MTgwODE2NTJaMDMxMTAvBgNV BAMTKDk2OEZDQzE2RjQzNjUxQjU2MDUxODRCMzQ0QzVBQ0Y0NTg5QkFCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe8OIxQEZ1AvwCLGE9cLmDyemV TOETThN4OyWrxGs8fMa0eedvFm/nSJWBb2EL7sAfpThSWbJ4mriSh/qAeK/+LJnW p4Y9bqj0bbC45J15wc0pURx2AsazRiNHU6uPk3Ids0eiCU9wKajK+Yf9xYtKAgnB GgZ1kA8g2ZQGxqKAI+L3nQQySjdilTOUWP2ghJNL65ONfwAiSXj1Y4xuHn6OqwKd ALfl0pE/o6Pj70yvb14JtuneM7DlzA0NhL5e8mKkNfJTtDsBuC3Qvv0Kxd7QIwNI 2+oZbQTbDTMXSFmIZkAkWuy2PgpIgJx3tTSWk8b6iSrA1mkT39sH4XpOA0AJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlo/MFvQ2UbVgUYSzRMWs9Fibq+owHwYDVR0j BBgwFoAUtc+gIN1Lv9SYxeTYSo1jCXOHScwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGEwZmJiNTUtMWRkOC00ZjhiLWI4OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBE RDRCQkZENDk4QzVFNEQ4NEE4RDYzMDk3Mzg3NDlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNUNGQTAyMERENEJCRkQ0OThDNUU0RDg0QThENjMwOTczODc0 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGEwZmJiNTUtMWRkOC00ZjhiLWI4 OTAtNGEyYzBhMDExMWRiLzAvQjVDRkEwMjBERDRCQkZENDk4QzVFNEQ4NEE4RDYz MDk3Mzg3NDlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGNbwSvGiGF4Hr1+/MyrDWjPP/1nIpy/1z0 kMAs0nP9cqh7OzU0DkHR6YGegqvgnQUuaX71geYSGCSJynJ5PEFOChZU93d4wQGa UgyYjEdZF/adJ7JJtfbwHb7EOBh34wM6NkWasfoKT4pcTkboRDNRXzmsxmFwuKGj urRx55kgZrG+0dp3xLY0z1vMZPV4bkD0u4Gc87iGHUh0fDVvIIYRKbixPfUvXc0X 3ct6AKbnOSVasHCEsrfx2G+bF/OMQ6MXnlfAP2msjEvJynKCnU6MVvYdwYJ4i2cD aflOhK+kFV07kU6VsRQVFFgTmBY4NJm43vNrvvvBxYpQ34RRDQQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:33 2026 by rpki-client