$ rpki-client -vvvf rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft File: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft (raw, json) Hash identifier: TT/EdlrekRvLdoXtOk9w7n4L64RDizPPntDGRVkee7s= Subject key identifier: 9E:6B:09:76:1E:79:A8:25:95:C9:2E:62:E0:1D:46:5E:FC:E1:67:C6 Authority key identifier: 88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97 Certificate issuer: /CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97 Certificate serial: 29461CCA4CDD6A32FDAD89CB61E0951D4CF4FDE0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft Manifest number: D7 Signing time: Sun 11 Oct 2026 07:47:00 +0000 Manifest this update: Sun 11 Oct 2026 07:42:00 +0000 Manifest next update: Mon 12 Oct 2026 09:52:00 +0000 Files and hashes: 1: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl (hash: AnxSBjw9mUQGguaCmSiPXbWFH7tvuO0v8t/PcGE7mAA=) 2: 3130332e31312e32322e302f32332d3234203d3e203538333930.roa (hash: 81p6B3Tk5Za1NJUs2uCoetypfDjnwptAX9451IsBrBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:46:1c:ca:4c:dd:6a:32:fd:ad:89:cb:61:e0:95:1d:4c:f4:fd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97 Validity Not Before: Oct 11 07:42:00 2026 GMT Not After : Oct 12 09:52:00 2026 GMT Subject: CN=9E6B09761E79A82595C92E62E01D465EFCE167C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:97:0f:aa:66:1d:b9:f6:1b:e1:b5:26:ad: 7f:6e:b0:33:b6:21:c6:1c:0b:89:bd:a9:0b:9b:f5: 5d:56:f0:be:f6:96:a5:d9:e7:0e:b5:8f:e7:c2:d7: 2a:19:b6:e9:0e:b1:cb:3c:90:62:29:43:64:4b:2e: d5:a6:96:39:f4:55:57:a6:57:0c:81:f1:50:9b:18: fa:ab:93:87:88:b7:73:c4:39:8c:a7:06:74:5e:d6: 01:68:92:44:ca:e6:3a:d3:d2:60:12:8e:b7:a9:cc: f1:06:15:04:93:1c:84:ec:9a:3f:0c:55:85:53:77: 55:10:b9:f5:ae:9f:3d:6b:a4:0c:ec:30:ad:2f:88: d6:c6:84:3c:b1:6d:f4:6a:5e:2b:0b:19:a4:25:6e: f2:cc:3d:bd:5d:05:ef:dc:6b:b1:0f:fd:d9:b0:99: 80:bf:8d:34:d0:0a:4f:d3:5e:f8:c3:8c:1b:83:47: 13:68:eb:06:6a:9d:4e:14:ad:14:40:6d:79:4f:5b: 97:b7:92:5b:37:db:9c:e9:a8:e9:89:ef:68:44:23: e3:e0:27:54:f0:90:39:43:76:b0:6d:ec:e3:59:77: 47:b0:99:8a:49:91:53:c2:00:3e:ed:6b:4e:79:c9: 8d:06:24:69:51:79:5a:db:82:2a:7a:00:4c:d4:29: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6B:09:76:1E:79:A8:25:95:C9:2E:62:E0:1D:46:5E:FC:E1:67:C6 X509v3 Authority Key Identifier: keyid:88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:3f:60:af:40:33:d6:f1:f5:8c:2c:4a:e6:8b:de:17:eb:d6: e1:49:2d:fc:5c:7f:eb:22:5a:3f:b0:d4:25:1f:b1:0c:01:82: 51:19:08:08:69:4a:cc:b6:cd:f2:06:fd:3c:3b:7d:4e:02:e6: e5:dd:d2:40:e3:fb:05:12:f8:9c:07:48:77:5f:b3:88:09:26: 93:4c:31:d9:16:2c:02:2c:28:df:02:cf:b5:ee:fe:c6:24:86: 90:a6:82:9d:ab:c5:6c:a8:62:0c:69:85:b5:2b:38:b1:8d:03: 4b:d5:a2:d2:3c:eb:f7:60:da:ae:10:83:4f:fe:6b:6c:72:1b: c7:45:99:e9:a3:ae:9e:0a:c5:d5:f5:f7:7b:c0:d5:ca:df:e3: 5d:74:74:9d:92:60:9c:60:e0:e3:55:bc:f2:50:f1:75:9a:05: 09:d9:1b:62:a7:44:db:a2:78:00:1e:31:23:bd:7d:c4:df:36: 9f:9c:12:a4:6f:f1:82:48:91:fc:e2:c6:ea:f4:10:84:f6:82: 1c:9f:87:89:d8:67:93:2f:b1:73:77:a7:52:24:50:fa:3d:9f: 05:11:20:8b:ae:41:7c:4e:25:68:b1:a5:41:2b:8e:40:db:85: 1b:cd:70:5d:4c:31:04:51:62:7b:d0:77:0e:a7:de:83:fb:7a: 2a:14:93:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUYcykzdajL9rYnLYeCVHUz0/eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0RTIzNjVFNEI4QUYwNUM0NEJENjQ5RDVCNDI5NjhF NDhCOEE5NzAeFw0yNjEwMTEwNzQyMDBaFw0yNjEwMTIwOTUyMDBaMDMxMTAvBgNV BAMTKDlFNkIwOTc2MUU3OUE4MjU5NUM5MkU2MkUwMUQ0NjVFRkNFMTY3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4JcPqmYdufYb4bUmrX9usDO2 IcYcC4m9qQub9V1W8L72lqXZ5w61j+fC1yoZtukOscs8kGIpQ2RLLtWmljn0VVem VwyB8VCbGPqrk4eIt3PEOYynBnRe1gFokkTK5jrT0mASjrepzPEGFQSTHITsmj8M VYVTd1UQufWunz1rpAzsMK0viNbGhDyxbfRqXisLGaQlbvLMPb1dBe/ca7EP/dmw mYC/jTTQCk/TXvjDjBuDRxNo6wZqnU4UrRRAbXlPW5e3kls325zpqOmJ72hEI+Pg J1TwkDlDdrBt7ONZd0ewmYpJkVPCAD7ta055yY0GJGlReVrbgip6AEzUKd6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnmsJdh55qCWVyS5i4B1GXvzhZ8YwHwYDVR0j BBgwFoAUiE4jZeS4rwXES9ZJ1bQpaOSLipcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg3YWRlOWYtNmI3OS00NzIzLTk5NDktOTZkZTdlNDFkYjcwLzAvODg0RTIzNjVF NEI4QUYwNUM0NEJENjQ5RDVCNDI5NjhFNDhCOEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODRFMjM2NUU0QjhBRjA1QzQ0QkQ2NDlENUI0Mjk2OEU0OEI4 QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg3YWRlOWYtNmI3OS00NzIzLTk5 NDktOTZkZTdlNDFkYjcwLzAvODg0RTIzNjVFNEI4QUYwNUM0NEJENjQ5RDVCNDI5 NjhFNDhCOEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQ/YK9AM9bx9YwsSuaL3hfr1uFJLfxcf+si Wj+w1CUfsQwBglEZCAhpSsy2zfIG/Tw7fU4C5uXd0kDj+wUS+JwHSHdfs4gJJpNM MdkWLAIsKN8Cz7Xu/sYkhpCmgp2rxWyoYgxphbUrOLGNA0vVotI86/dg2q4Qg0/+ a2xyG8dFmemjrp4KxdX193vA1crf4110dJ2SYJxg4ONVvPJQ8XWaBQnZG2KnRNui eAAeMSO9fcTfNp+cEqRv8YJIkfzixur0EIT2ghyfh4nYZ5MvsXN3p1IkUPo9nwUR IIuuQXxOJWixpUErjkDbhRvNcF1MMQRRYnvQdw6n3oP7eioUk2U= -----END CERTIFICATE-----Generated at Sun Oct 11 23:46:49 2026 by rpki-client