$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft File: 988BEA205B597B525439E1C7DF548E148BDF5DE3.mft (raw, json) Hash identifier: NdAOlIT0Wa86Iu259AIuFuvKJV5BdS0xM+AsIdw9cI0= Subject key identifier: 3C:9C:77:34:07:1A:D4:0E:97:C9:9A:AC:EF:F7:7C:88:58:C8:07:9E Authority key identifier: 98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 Certificate issuer: /CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Certificate serial: 12CCA4A16746B85D0D5BA038239526013AAA694A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft Manifest number: BF Signing time: Tue 22 Sep 2026 14:03:46 +0000 Manifest this update: Tue 22 Sep 2026 13:58:46 +0000 Manifest next update: Wed 23 Sep 2026 16:07:46 +0000 Files and hashes: 1: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: KyMbOLP8QXcvGQ9MezBY9LjyWg2SLWeZUDh4Qo5TXWQ=) 2: 988BEA205B597B525439E1C7DF548E148BDF5DE3.crl (hash: D76WpLmKvktf6q8248R3evhGhkvpW1YtdSTbBnwL0Eo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 16:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cc:a4:a1:67:46:b8:5d:0d:5b:a0:38:23:95:26:01:3a:aa:69:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Validity Not Before: Sep 22 13:58:46 2026 GMT Not After : Sep 23 16:07:46 2026 GMT Subject: CN=3C9C7734071AD40E97C99AACEFF77C8858C8079E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:b2:3e:66:46:99:79:14:aa:e2:f8:71:4a: f8:c1:1d:b8:70:ee:26:97:f4:2b:ad:41:e6:c9:45: b4:ad:81:a0:e3:62:a0:b7:b6:0b:98:f5:4c:36:05: e3:26:df:87:45:9c:e4:fa:8b:0c:9c:0c:28:aa:78: be:3f:b2:6a:7a:cc:5f:8b:63:a1:49:0c:f7:b6:cf: 62:8b:97:81:a6:1e:d6:75:74:92:f4:75:b5:f7:d9: 7e:9f:f0:dc:a1:21:bb:92:c3:79:9f:ba:4c:90:76: 4e:f8:0d:95:40:f9:2c:9d:ea:30:b3:07:07:8f:0e: 3f:14:b6:e2:59:d3:d4:da:3d:54:e0:02:bd:fe:49: 3d:16:6e:c6:23:30:83:0b:8f:fb:20:5e:ee:c8:5f: e9:a9:d0:ca:0e:61:0e:b7:50:66:ff:89:f6:71:51: ef:a2:3e:6f:fb:e6:49:ea:56:e6:37:e1:74:04:2d: e1:3e:15:32:7f:de:8b:59:08:4d:48:9d:8f:ee:49: 04:36:e2:cd:ce:09:1e:62:ef:60:15:97:0a:11:53: cd:83:81:e2:ce:38:c3:31:87:83:f7:cd:82:f2:ce: 09:97:4a:38:b3:b3:74:4c:60:5d:33:55:ef:fa:f6: df:63:bf:b1:3a:59:85:c5:7f:bf:30:5c:c3:84:8f: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9C:77:34:07:1A:D4:0E:97:C9:9A:AC:EF:F7:7C:88:58:C8:07:9E X509v3 Authority Key Identifier: keyid:98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3f:43:10:01:d8:0c:62:53:85:f0:4f:f1:b9:86:86:5a:3f: 13:55:af:a0:09:35:9f:fe:5d:d8:75:dd:e7:db:e2:3a:99:27: 45:6c:73:57:a6:79:e7:55:82:e6:cf:8e:76:6c:5d:f4:45:d9: 54:c0:e4:06:c2:a7:43:cc:42:85:cb:15:68:2d:6e:0c:ad:ba: 3e:45:3f:45:17:3f:62:90:98:02:48:8e:1f:01:86:fd:4e:66: 05:9b:35:c3:7e:12:e5:42:fa:4d:71:b2:cb:6c:d2:45:24:37: 8c:e8:7b:da:ce:74:7c:3e:c6:4c:09:67:a7:b3:98:e4:35:38: 7d:a5:d0:7a:6f:16:c3:c3:8b:4a:1b:d9:04:b5:fd:90:22:27: 91:4d:e0:7e:39:d9:f4:87:ac:a1:c5:83:a8:01:3c:ce:e3:cf: 0a:2c:35:2b:7f:25:82:ab:5f:e1:dd:c9:0f:3e:bc:38:1a:c7: f4:af:4c:f8:a5:35:07:e1:6f:da:9b:f5:90:7d:c3:76:0f:a9: 09:3b:da:fa:5b:15:03:a7:ca:be:b9:f6:73:b6:00:51:ce:5e: 71:c1:19:6a:d4:2e:c5:ca:9b:d5:35:dd:2c:b0:1a:88:ba:eb: 6d:f4:38:18:c7:6f:89:ce:45:93:10:f6:fb:4e:33:e8:79:38: 63:61:4c:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsykoWdGuF0NW6A4I5UmATqqaUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4 QkRGNURFMzAeFw0yNjA5MjIxMzU4NDZaFw0yNjA5MjMxNjA3NDZaMDMxMTAvBgNV BAMTKDNDOUM3NzM0MDcxQUQ0MEU5N0M5OUFBQ0VGRjc3Qzg4NThDODA3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4bI+ZkaZeRSq4vhxSvjBHbhw 7iaX9CutQebJRbStgaDjYqC3tguY9Uw2BeMm34dFnOT6iwycDCiqeL4/smp6zF+L Y6FJDPe2z2KLl4GmHtZ1dJL0dbX32X6f8NyhIbuSw3mfukyQdk74DZVA+Syd6jCz BwePDj8UtuJZ09TaPVTgAr3+ST0WbsYjMIMLj/sgXu7IX+mp0MoOYQ63UGb/ifZx Ue+iPm/75knqVuY34XQELeE+FTJ/3otZCE1InY/uSQQ24s3OCR5i72AVlwoRU82D geLOOMMxh4P3zYLyzgmXSjizs3RMYF0zVe/69t9jv7E6WYXFf78wXMOEj8EBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPJx3NAca1A6XyZqs7/d8iFjIB54wHwYDVR0j BBgwFoAUmIvqIFtZe1JUOeHH31SOFIvfXeMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBhNzhjMDYtMWQ2ZS00M2I2LWJmMzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1 QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4QkRGNURFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODhCRUEyMDVCNTk3QjUyNTQzOUUxQzdERjU0OEUxNDhCREY1 REUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhF MTQ4QkRGNURFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8/QxAB2AxiU4XwT/G5hoZaPxNVr6AJNZ/+ Xdh13efb4jqZJ0Vsc1emeedVgubPjnZsXfRF2VTA5AbCp0PMQoXLFWgtbgytuj5F P0UXP2KQmAJIjh8Bhv1OZgWbNcN+EuVC+k1xssts0kUkN4zoe9rOdHw+xkwJZ6ez mOQ1OH2l0HpvFsPDi0ob2QS1/ZAiJ5FN4H452fSHrKHFg6gBPM7jzwosNSt/JYKr X+HdyQ8+vDgax/SvTPilNQfhb9qb9ZB9w3YPqQk72vpbFQOnyr659nO2AFHOXnHB GWrULsXKm9U13SywGoi66230OBjHb4nORZMQ9vtOM+h5OGNhTFE= -----END CERTIFICATE-----Generated at Tue Sep 22 18:04:52 2026 by rpki-client