$ rpki-client -vvvf rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft File: 8828D395B775E6267ED1C496B6DA870C9DA36235.mft (raw, json) Hash identifier: 8MMltjx5hzetkhR4bHIzhQy4ycpoSR+kxIK2fK3MYco= Subject key identifier: 72:90:E9:41:99:CF:C4:03:1A:A0:78:D3:D5:44:11:21:B2:F0:05:F8 Authority key identifier: 88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 Certificate issuer: /CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Certificate serial: 09EEC23BD26A7802DB6FF0E4184F13027ACB66D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft Manifest number: BF Signing time: Mon 21 Sep 2026 13:58:51 +0000 Manifest this update: Mon 21 Sep 2026 13:53:51 +0000 Manifest next update: Tue 22 Sep 2026 17:38:51 +0000 Files and hashes: 1: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: KKSmfUNkqalCLO37YcNIo/DR91Odj11Ccmn9dQDHPBE=) 2: 8828D395B775E6267ED1C496B6DA870C9DA36235.crl (hash: 6dGVLMckbmutvknqzRJH+PmCxMWenYOHI0i7KVPmDuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ee:c2:3b:d2:6a:78:02:db:6f:f0:e4:18:4f:13:02:7a:cb:66:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Validity Not Before: Sep 21 13:53:51 2026 GMT Not After : Sep 22 17:38:51 2026 GMT Subject: CN=7290E94199CFC4031AA078D3D5441121B2F005F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e1:70:b9:e7:00:78:56:fc:bb:c8:34:07:32: d6:b9:bd:ca:93:4d:f8:9b:66:eb:85:b5:42:f0:3f: f7:da:3e:11:e5:d0:40:3a:2e:ff:de:e2:cf:7c:b0: d1:24:48:fd:8a:cc:75:bc:a9:d0:fa:45:87:79:f2: f0:65:c6:e4:94:d2:3d:d3:6f:b6:0c:b9:97:7c:34: e4:46:3a:5e:4b:e9:98:fe:ac:7b:c7:4f:1d:13:20: 82:41:46:2c:c8:95:c5:3e:6a:94:c3:33:f4:d5:64: 6c:3e:20:fc:46:b9:05:48:00:84:c8:70:d8:89:0c: b9:b7:50:5e:df:a3:17:ad:cb:4e:27:36:0d:06:d6: a9:79:46:05:fc:32:12:c2:13:6d:bc:d7:50:8a:6e: ff:00:54:ec:35:6b:bd:0e:d2:b6:9b:42:ab:a1:6f: 90:27:71:77:81:19:e5:42:dc:bd:ef:31:33:80:61: 41:34:ba:c2:28:ea:07:bb:2f:f2:a4:1f:b7:52:43: 8e:ea:99:0a:b7:09:37:e9:c6:58:d2:0b:d5:12:51: 3f:78:41:2e:8b:49:3c:13:5a:4f:d0:6e:a1:67:f3: 8c:7c:c5:7f:e3:b3:5f:40:4c:68:29:95:44:db:2d: 9a:0d:50:46:4f:0a:62:1e:a2:40:9d:f7:df:35:d5: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:90:E9:41:99:CF:C4:03:1A:A0:78:D3:D5:44:11:21:B2:F0:05:F8 X509v3 Authority Key Identifier: keyid:88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:00:16:e2:b9:b1:ea:3b:38:1c:c5:37:a8:41:0c:a1:79:5b: 11:a0:dd:85:ea:0d:34:ba:1c:9d:f0:47:80:83:d9:89:96:65: 11:e4:3a:9e:7a:b6:f7:b4:8a:38:5b:db:a6:08:06:29:c1:f7: 04:8e:dd:ce:40:a5:c7:d6:66:57:0c:75:95:84:ea:00:55:30: 67:73:c5:d3:cd:af:d8:de:0b:dc:cd:aa:97:4c:2a:6a:cc:b5: 23:d8:fd:8f:ed:51:d4:74:ba:57:57:cd:b4:3f:ef:a9:ac:be: 17:d8:25:bb:a6:5b:5e:50:0f:78:32:e6:d4:88:8b:cf:58:59: 60:bc:e1:1f:fc:0c:67:d0:0b:65:c7:39:e1:29:e1:c3:83:c1: 5b:08:10:51:84:b7:6e:de:67:47:0a:63:eb:0b:33:f7:5d:81: de:db:c0:d3:13:af:31:b6:e1:d4:0e:6f:dd:10:71:67:e7:ed: 96:d2:e1:5c:ab:2e:25:b8:39:a1:8b:90:7b:b7:41:51:55:46: 7a:6b:e0:11:76:14:1e:bb:f5:54:2b:74:d2:b1:0e:27:ac:d0: ba:dd:30:6b:d2:15:b3:11:1e:ce:56:4c:33:e5:0b:a1:52:d3: 05:c7:6d:d0:c1:52:54:4e:e7:9f:53:44:43:d9:f7:a7:ee:78: 35:d1:73:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCe7CO9JqeALbb/DkGE8TAnrLZtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5 REEzNjIzNTAeFw0yNjA5MjExMzUzNTFaFw0yNjA5MjIxNzM4NTFaMDMxMTAvBgNV BAMTKDcyOTBFOTQxOTlDRkM0MDMxQUEwNzhEM0Q1NDQxMTIxQjJGMDA1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4XC55wB4Vvy7yDQHMta5vcqT TfibZuuFtULwP/faPhHl0EA6Lv/e4s98sNEkSP2KzHW8qdD6RYd58vBlxuSU0j3T b7YMuZd8NORGOl5L6Zj+rHvHTx0TIIJBRizIlcU+apTDM/TVZGw+IPxGuQVIAITI cNiJDLm3UF7foxety04nNg0G1ql5RgX8MhLCE22811CKbv8AVOw1a70O0rabQquh b5AncXeBGeVC3L3vMTOAYUE0usIo6ge7L/KkH7dSQ47qmQq3CTfpxljSC9USUT94 QS6LSTwTWk/QbqFn84x8xX/js19ATGgplUTbLZoNUEZPCmIeokCd99811SlLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcpDpQZnPxAMaoHjT1UQRIbLwBfgwHwYDVR0j BBgwFoAUiCjTlbd15iZ+0cSWttqHDJ2jYjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTljMjc2MjEtZTI5Ny00MTAwLTk3MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVC Nzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5REEzNjIzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODI4RDM5NUI3NzVFNjI2N0VEMUM0OTZCNkRBODcwQzlEQTM2 MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3 MEM5REEzNjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQAFuK5seo7OBzFN6hBDKF5WxGg3YXqDTS6 HJ3wR4CD2YmWZRHkOp56tve0ijhb26YIBinB9wSO3c5ApcfWZlcMdZWE6gBVMGdz xdPNr9jeC9zNqpdMKmrMtSPY/Y/tUdR0uldXzbQ/76msvhfYJbumW15QD3gy5tSI i89YWWC84R/8DGfQC2XHOeEp4cODwVsIEFGEt27eZ0cKY+sLM/ddgd7bwNMTrzG2 4dQOb90QcWfn7ZbS4VyrLiW4OaGLkHu3QVFVRnpr4BF2FB679VQrdNKxDies0Lrd MGvSFbMRHs5WTDPlC6FS0wXHbdDBUlRO559TREPZ96fueDXRc8Q= -----END CERTIFICATE-----Generated at Tue Sep 22 09:02:31 2026 by rpki-client