$ rpki-client -vvvf rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft File: 8828D395B775E6267ED1C496B6DA870C9DA36235.mft (raw, json) Hash identifier: q9LU9WQQWc199uStxgsUcd3XSJvBdXNQbbSVN/7NuBc= Subject key identifier: 8A:FB:37:EE:AA:42:D5:E0:48:44:F5:82:61:54:33:1D:EC:05:5F:92 Authority key identifier: 88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 Certificate issuer: /CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Certificate serial: 23C3F925033CED627F7DF46121F600EE8FFFEA10 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 09:43:32 +0000 Manifest this update: Tue 22 Sep 2026 09:38:32 +0000 Manifest next update: Wed 23 Sep 2026 12:22:32 +0000 Files and hashes: 1: 8828D395B775E6267ED1C496B6DA870C9DA36235.crl (hash: /pUfw7GKvn/QrCqCLXi30nibSgVj08QdEJ71nnf2P0A=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: KKSmfUNkqalCLO37YcNIo/DR91Odj11Ccmn9dQDHPBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c3:f9:25:03:3c:ed:62:7f:7d:f4:61:21:f6:00:ee:8f:ff:ea:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Validity Not Before: Sep 22 09:38:32 2026 GMT Not After : Sep 23 12:22:32 2026 GMT Subject: CN=8AFB37EEAA42D5E04844F5826154331DEC055F92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:e6:07:46:5a:e7:51:4d:c2:00:43:bb:19: f5:0d:61:60:4e:85:17:e7:0e:a2:b9:b8:f8:08:bd: 30:a3:ab:29:c1:1f:fd:28:21:3c:0c:f6:70:5b:2b: 25:a9:dd:c0:7c:ca:4d:8b:7d:99:4b:80:4b:e1:f3: 1c:be:40:4a:e1:2a:99:4a:16:3b:af:5b:3d:1c:14: ee:7d:8e:2e:63:05:b6:e5:4d:55:52:8f:07:39:f8: b7:74:f1:8d:bc:41:79:4c:7f:86:f5:3b:6c:d8:a6: 00:b9:53:fd:8c:3f:d4:b1:e9:3c:71:4b:e3:87:9e: c0:ad:e3:c0:6f:73:a5:ef:7d:a0:2c:17:6e:64:e2: 70:30:66:6d:1f:ce:6c:82:7d:96:96:b3:48:a7:39: 70:be:0c:24:aa:8d:0a:bb:e5:72:57:ff:88:5e:1d: 8c:a1:21:5e:a7:26:df:26:e7:d4:0c:7d:22:f8:b4: 50:09:26:bd:70:47:d4:88:8a:19:dc:99:71:66:06: ea:b3:a6:ee:d2:11:f7:cb:09:e4:f1:60:0c:09:30: b4:69:e0:7b:6a:a2:ce:44:93:16:a8:14:29:b2:17: bf:de:db:0a:a9:c5:bb:74:63:77:04:d1:f0:4e:18: e2:84:e0:02:00:72:0b:cd:07:1c:07:82:19:41:77: 29:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FB:37:EE:AA:42:D5:E0:48:44:F5:82:61:54:33:1D:EC:05:5F:92 X509v3 Authority Key Identifier: keyid:88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:7a:79:34:1e:09:ad:d1:4d:f1:f8:0a:8f:54:85:73:c1:04: 07:b1:e5:02:be:b4:38:c9:3a:a7:53:e2:e3:3b:90:7f:e9:41: a8:e7:64:0e:ca:1f:fe:ba:67:a2:e1:e3:db:e4:9f:3c:da:b3: c1:21:5d:ec:cc:7b:f6:7f:ef:f3:05:00:58:48:2f:5d:99:98: 07:a0:30:1a:61:7b:60:17:c7:84:72:39:99:7c:ba:4e:91:53: 53:13:92:ea:c8:a9:b4:1d:73:a2:c9:6c:ec:41:46:86:09:78: 6f:b0:c1:ee:38:68:fa:78:95:f8:e4:e4:4d:be:26:7f:a9:3c: 96:bb:bc:cd:e6:44:65:25:8d:85:f9:83:92:39:0f:77:99:68: 63:03:e0:05:79:70:be:b2:7c:0b:83:62:cb:11:d4:44:62:62: 31:f8:42:77:7e:7d:2c:80:70:85:8c:c4:41:ff:45:88:8d:c3: ae:d1:b1:81:21:7c:16:19:b6:fe:b7:4e:8d:6d:e9:66:6a:cb: e5:bd:89:7c:e3:ae:61:21:83:4a:2c:19:70:e5:3a:4b:13:63: e7:02:9f:6f:f8:bb:89:fe:26:62:2c:b6:ee:58:67:ee:c9:71: 62:12:00:d4:1a:b3:0c:37:8a:6f:8a:bc:5b:11:7f:0a:e6:46: 3a:1f:1a:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI8P5JQM87WJ/ffRhIfYA7o//6hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5 REEzNjIzNTAeFw0yNjA5MjIwOTM4MzJaFw0yNjA5MjMxMjIyMzJaMDMxMTAvBgNV BAMTKDhBRkIzN0VFQUE0MkQ1RTA0ODQ0RjU4MjYxNTQzMzFERUMwNTVGOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnDOYHRlrnUU3CAEO7GfUNYWBO hRfnDqK5uPgIvTCjqynBH/0oITwM9nBbKyWp3cB8yk2LfZlLgEvh8xy+QErhKplK FjuvWz0cFO59ji5jBbblTVVSjwc5+Ld08Y28QXlMf4b1O2zYpgC5U/2MP9Sx6Txx S+OHnsCt48Bvc6XvfaAsF25k4nAwZm0fzmyCfZaWs0inOXC+DCSqjQq75XJX/4he HYyhIV6nJt8m59QMfSL4tFAJJr1wR9SIihncmXFmBuqzpu7SEffLCeTxYAwJMLRp 4Htqos5EkxaoFCmyF7/e2wqpxbt0Y3cE0fBOGOKE4AIAcgvNBxwHghlBdykbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUivs37qpC1eBIRPWCYVQzHewFX5IwHwYDVR0j BBgwFoAUiCjTlbd15iZ+0cSWttqHDJ2jYjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTljMjc2MjEtZTI5Ny00MTAwLTk3MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVC Nzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5REEzNjIzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODI4RDM5NUI3NzVFNjI2N0VEMUM0OTZCNkRBODcwQzlEQTM2 MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3 MEM5REEzNjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGd6eTQeCa3RTfH4Co9UhXPBBAex5QK+tDjJ OqdT4uM7kH/pQajnZA7KH/66Z6Lh49vknzzas8EhXezMe/Z/7/MFAFhIL12ZmAeg MBphe2AXx4RyOZl8uk6RU1MTkurIqbQdc6LJbOxBRoYJeG+wwe44aPp4lfjk5E2+ Jn+pPJa7vM3mRGUljYX5g5I5D3eZaGMD4AV5cL6yfAuDYssR1ERiYjH4Qnd+fSyA cIWMxEH/RYiNw67RsYEhfBYZtv63To1t6WZqy+W9iXzjrmEhg0osGXDlOksTY+cC n2/4u4n+JmIstu5YZ+7JcWISANQasww3im+KvFsRfwrmRjofGhc= -----END CERTIFICATE-----Generated at Tue Sep 22 19:55:40 2026 by rpki-client