$ rpki-client -vvvf rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft File: 885F36F281B0D4CC516E3818323CB9C1F30AF373.mft (raw, json) Hash identifier: esaNrx+GvaejqqAJixh2eQ27z0gVJCy7LQiOG0efZVw= Subject key identifier: 8B:E9:A5:42:5B:9E:AB:D4:64:AE:ED:0E:21:11:E9:98:AE:EC:E2:D2 Authority key identifier: 88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73 Certificate issuer: /CN=885F36F281B0D4CC516E3818323CB9C1F30AF373 Certificate serial: 4F316584A2C3B523E7D346B7EEDED30645F58EC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft Manifest number: BD Signing time: Mon 21 Sep 2026 00:22:00 +0000 Manifest this update: Mon 21 Sep 2026 00:17:00 +0000 Manifest next update: Tue 22 Sep 2026 04:07:00 +0000 Files and hashes: 1: 885F36F281B0D4CC516E3818323CB9C1F30AF373.crl (hash: P5ZmHA+I3qjZf20Ap6LtF342XNpc6kCTVejynoVOjNQ=) 2: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: vKe09VJpirx3d8Vkqz6gLuC+DkGeanu2r5WmGCErId4=) 3: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: OhU6QiMCF4ACcpqhynxB56U3zBuIn9qNb0BYC0SetEg=) 4: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: 7FbZ5pEtfFRoEPaeAL7hu5dTo4RHGPeRroJ1/nBeqOo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:31:65:84:a2:c3:b5:23:e7:d3:46:b7:ee:de:d3:06:45:f5:8e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885F36F281B0D4CC516E3818323CB9C1F30AF373 Validity Not Before: Sep 21 00:17:00 2026 GMT Not After : Sep 22 04:07:00 2026 GMT Subject: CN=8BE9A5425B9EABD464AEED0E2111E998AEECE2D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:46:fe:14:c4:26:67:22:57:f2:19:d6:0a: b0:e5:aa:91:63:ec:a6:c1:71:e0:4b:b9:e8:00:92: 5c:0d:27:55:de:50:11:bf:e8:f0:fd:a5:63:ce:e3: 7e:41:4b:a3:62:7e:f7:79:b6:f2:cb:30:06:af:50: 6d:9b:96:1c:62:09:83:d2:6e:cc:6c:f2:31:14:25: 59:34:b5:96:f5:5a:0b:b2:2b:39:77:92:7e:0b:6e: 58:f2:26:87:60:f6:95:e3:25:24:f3:70:36:e9:8b: 89:43:43:62:dd:c8:49:c9:66:0d:6f:c0:9d:a1:00: 40:8f:7d:00:d9:14:a3:b5:d7:32:c3:df:68:3c:0d: 7a:4a:40:0e:c8:53:39:72:61:b7:4e:dc:e7:ce:75: d4:86:52:66:e0:e7:8d:c1:5a:0b:b7:28:41:6f:03: 8c:88:71:ea:e1:df:ed:b3:34:36:8e:73:3e:8b:80: 2c:de:1e:d3:48:ba:ce:b8:9f:4f:c5:e4:ce:26:55: 06:16:23:52:72:25:97:fc:ab:17:cf:56:03:64:ff: 0b:9b:4a:8b:cb:5b:a5:84:95:4d:a5:7e:2a:db:78: 1f:eb:bf:c9:69:5a:39:0e:af:0c:55:03:39:a3:5a: 06:14:44:26:ec:1c:8f:6b:e5:ef:38:57:7d:0d:36: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E9:A5:42:5B:9E:AB:D4:64:AE:ED:0E:21:11:E9:98:AE:EC:E2:D2 X509v3 Authority Key Identifier: keyid:88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fd:91:b3:c1:10:5f:83:5e:db:a9:6d:5d:94:a9:40:49:68: a4:0e:9d:7b:95:7e:af:7a:25:bc:49:54:6c:f2:5d:48:18:3d: 23:9e:82:5d:5f:77:d4:9a:e9:3a:76:92:51:d2:2f:30:ff:35: f9:f1:af:6f:09:14:c5:a7:f7:48:53:b2:86:18:46:64:66:12: b2:0a:b5:e5:fd:14:34:41:33:5b:48:ae:52:14:af:2f:a6:a6: 53:bc:8d:94:be:bd:f5:01:9f:be:ec:71:07:4f:90:44:f2:85: 40:9e:a7:3b:44:fe:ba:e6:cb:b9:e2:dd:51:22:79:db:4c:fe: 38:ea:2b:d7:67:3a:f6:ea:e0:9a:aa:bf:67:c5:fd:0f:44:4d: 4a:50:f9:73:c6:2b:03:6a:8e:0b:16:fb:2e:61:cb:37:26:0f: d7:b0:15:00:b7:a3:c1:9c:be:ee:2c:24:ce:f1:6c:11:c8:b6: f4:45:a1:0c:3f:62:e6:e9:cb:d5:bd:d3:66:ac:da:1b:19:17: b8:96:51:03:30:82:3c:29:31:26:dc:5d:fa:22:f4:29:16:63: bb:0f:1c:f0:9c:85:59:89:e8:2c:b2:db:04:20:7f:cc:b7:ae: 06:82:a2:22:a5:d5:4c:6f:23:17:a1:8a:47:c8:f2:80:0a:61: f1:a5:02:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTzFlhKLDtSPn00a37t7TBkX1jskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1RjM2RjI4MUIwRDRDQzUxNkUzODE4MzIzQ0I5QzFG MzBBRjM3MzAeFw0yNjA5MjEwMDE3MDBaFw0yNjA5MjIwNDA3MDBaMDMxMTAvBgNV BAMTKDhCRTlBNTQyNUI5RUFCRDQ2NEFFRUQwRTIxMTFFOTk4QUVFQ0UyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bUb+FMQmZyJX8hnWCrDlqpFj 7KbBceBLuegAklwNJ1XeUBG/6PD9pWPO435BS6Nifvd5tvLLMAavUG2blhxiCYPS bsxs8jEUJVk0tZb1WguyKzl3kn4LbljyJodg9pXjJSTzcDbpi4lDQ2LdyEnJZg1v wJ2hAECPfQDZFKO11zLD32g8DXpKQA7IUzlyYbdO3OfOddSGUmbg543BWgu3KEFv A4yIcerh3+2zNDaOcz6LgCzeHtNIus64n0/F5M4mVQYWI1JyJZf8qxfPVgNk/wub SovLW6WElU2lfirbeB/rv8lpWjkOrwxVAzmjWgYURCbsHI9r5e84V30NNt6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi+mlQlueq9Rkru0OIRHpmK7s4tIwHwYDVR0j BBgwFoAUiF828oGw1MxRbjgYMjy5wfMK83MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUyMjI2ZWEtNWUyNi00ZWE1LWE2ODktNDc1N2FkMDVmOTUyLzAvODg1RjM2RjI4 MUIwRDRDQzUxNkUzODE4MzIzQ0I5QzFGMzBBRjM3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODVGMzZGMjgxQjBENENDNTE2RTM4MTgzMjNDQjlDMUYzMEFG MzczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvODg1RjM2RjI4MUIwRDRDQzUxNkUzODE4MzIzQ0I5 QzFGMzBBRjM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADP9kbPBEF+DXtupbV2UqUBJaKQOnXuVfq96 JbxJVGzyXUgYPSOegl1fd9Sa6Tp2klHSLzD/Nfnxr28JFMWn90hTsoYYRmRmErIK teX9FDRBM1tIrlIUry+mplO8jZS+vfUBn77scQdPkETyhUCepztE/rrmy7ni3VEi edtM/jjqK9dnOvbq4Jqqv2fF/Q9ETUpQ+XPGKwNqjgsW+y5hyzcmD9ewFQC3o8Gc vu4sJM7xbBHItvRFoQw/Yubpy9W902as2hsZF7iWUQMwgjwpMSbcXfoi9CkWY7sP HPCchVmJ6Cyy2wQgf8y3rgaCoiKl1UxvIxehikfI8oAKYfGlAtA= -----END CERTIFICATE-----Generated at Mon Sep 21 17:58:42 2026 by rpki-client