$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.mft File: 087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.mft (raw, json) Hash identifier: D8QIWqVms3Mlo4A+bOOUGFDipfQlO04Lf7L0esEKi8I= Subject key identifier: 91:FE:CB:D5:AF:3B:0B:C4:64:D0:30:9F:5E:6D:C3:9D:5E:E7:DF:9D Authority key identifier: 08:72:80:BD:A2:BB:97:42:B0:39:8E:4B:6A:7E:5B:48:F9:CC:16:6A Certificate issuer: /CN=087280BDA2BB9742B0398E4B6A7E5B48F9CC166A Certificate serial: 2B31183CEBC63BB18351C9CD32037DF49B1483D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 01:23:12 +0000 Manifest this update: Mon 21 Sep 2026 01:18:12 +0000 Manifest next update: Tue 22 Sep 2026 01:30:12 +0000 Files and hashes: 1: 3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (hash: +Kn7NvcOxuOrc3s9SNHAsksZnKXZGqDWI/dzX6hzXlQ=) 2: 087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.crl (hash: lilbN77nAwwk/SWBZqO+BhrdjCNPWSUIkrG1Ur+S5Qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.crl rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:31:18:3c:eb:c6:3b:b1:83:51:c9:cd:32:03:7d:f4:9b:14:83:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=087280BDA2BB9742B0398E4B6A7E5B48F9CC166A Validity Not Before: Sep 21 01:18:12 2026 GMT Not After : Sep 22 01:30:12 2026 GMT Subject: CN=91FECBD5AF3B0BC464D0309F5E6DC39D5EE7DF9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:dd:88:8a:66:82:c4:c1:22:0f:fe:e1:70: 04:bd:f3:9c:16:3b:ba:ba:48:f7:26:1d:64:cc:7c: 58:97:df:fa:bc:42:40:9a:d1:c4:d5:9f:3e:a0:a8: 25:87:dc:83:4a:e7:c0:2d:e1:14:8c:95:9d:16:50: 3c:8c:d7:58:53:7e:4c:c6:35:91:af:7e:97:e6:15: c3:3c:96:0f:c7:b9:b0:10:ce:32:2e:5d:0f:04:ce: 95:80:9c:47:b6:15:1c:c9:c9:72:f1:6a:e3:c6:e0: 84:ce:31:97:ec:8e:eb:9b:41:00:dc:86:57:0b:db: a9:04:08:d9:13:5c:2b:97:76:36:04:19:59:4b:ff: 64:8b:0d:e8:9c:98:37:b1:37:50:f2:4b:72:7b:14: 39:c7:a9:e0:7f:5b:0a:c6:00:86:d2:67:90:9f:55: 84:b9:60:1b:7b:e6:15:15:11:74:94:6a:75:35:77: 43:9f:dd:68:9b:d5:4d:92:ff:65:32:a6:fd:e5:2b: 1c:ac:e3:e1:e5:ac:a6:f6:8b:d8:70:64:3b:e5:17: f3:34:63:69:00:2b:1e:ab:96:1d:e5:10:64:4c:cb: 64:c5:27:4d:a4:d1:fa:98:c7:62:b5:36:38:53:a8: 3e:d4:d4:e1:32:94:86:af:45:0a:59:77:a6:c9:fa: c5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FE:CB:D5:AF:3B:0B:C4:64:D0:30:9F:5E:6D:C3:9D:5E:E7:DF:9D X509v3 Authority Key Identifier: keyid:08:72:80:BD:A2:BB:97:42:B0:39:8E:4B:6A:7E:5B:48:F9:CC:16:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b3:cb:97:43:20:18:d0:d2:28:ac:86:0d:dd:fc:b4:9c:c0: 46:12:43:24:c8:31:4f:39:6e:40:dd:fd:07:1b:4d:51:82:00: a5:33:97:60:95:6f:90:ac:71:e2:12:11:4a:38:92:e1:0b:f3: 9f:f0:38:32:aa:58:f1:da:18:dd:40:5f:e6:d7:5b:f0:14:0d: 05:30:33:3f:bb:bd:d4:67:37:d0:1c:9b:be:a4:26:0e:9f:8b: 41:00:c3:3e:90:d2:c1:6d:b5:3f:bc:88:8e:fe:2f:af:01:5d: 9b:ba:02:88:e3:7a:22:dc:a7:15:10:c6:34:7f:75:76:bb:ef: 40:ed:ac:e9:c4:16:9f:de:26:2c:4c:2a:bd:3b:59:c9:de:8f: 87:c5:5d:b4:76:9a:ed:45:e7:76:a6:5e:65:dc:27:d2:12:6a: 0c:bd:85:e0:dc:ac:c3:59:fe:27:7d:23:1b:30:75:4b:40:f2: c0:68:16:9c:b6:31:ad:9c:f2:0a:d8:c7:8c:92:1d:04:24:40: d2:2b:34:a3:7a:31:03:58:f2:55:c1:d8:92:31:55:7a:f5:54: 40:63:99:35:77:43:86:65:7a:55:78:30:5c:05:8c:42:2e:b4: 87:33:70:46:43:30:9d:3f:db:97:4b:b7:e6:80:c3:1a:95:08: 2d:aa:43:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzEYPOvGO7GDUcnNMgN99JsUg9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3MjgwQkRBMkJCOTc0MkIwMzk4RTRCNkE3RTVCNDhG OUNDMTY2QTAeFw0yNjA5MjEwMTE4MTJaFw0yNjA5MjIwMTMwMTJaMDMxMTAvBgNV BAMTKDkxRkVDQkQ1QUYzQjBCQzQ2NEQwMzA5RjVFNkRDMzlENUVFN0RGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLyt2IimaCxMEiD/7hcAS985wW O7q6SPcmHWTMfFiX3/q8QkCa0cTVnz6gqCWH3INK58At4RSMlZ0WUDyM11hTfkzG NZGvfpfmFcM8lg/HubAQzjIuXQ8EzpWAnEe2FRzJyXLxauPG4ITOMZfsjuubQQDc hlcL26kECNkTXCuXdjYEGVlL/2SLDeicmDexN1DyS3J7FDnHqeB/WwrGAIbSZ5Cf VYS5YBt75hUVEXSUanU1d0Of3Wib1U2S/2Uypv3lKxys4+HlrKb2i9hwZDvlF/M0 Y2kAKx6rlh3lEGRMy2TFJ02k0fqYx2K1NjhTqD7U1OEylIavRQpZd6bJ+sUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkf7L1a87C8Rk0DCfXm3DnV7n350wHwYDVR0j BBgwFoAUCHKAvaK7l0KwOY5Lan5bSPnMFmowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjMxMmExNDYtZjk1NC00N2UzLWI5M2YtOTJjMmZlNmQ4OWVhLzAvMDg3MjgwQkRB MkJCOTc0MkIwMzk4RTRCNkE3RTVCNDhGOUNDMTY2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODcyODBCREEyQkI5NzQyQjAzOThFNEI2QTdFNUI0OEY5Q0Mx NjZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjMxMmExNDYtZjk1NC00N2UzLWI5 M2YtOTJjMmZlNmQ4OWVhLzAvMDg3MjgwQkRBMkJCOTc0MkIwMzk4RTRCNkE3RTVC NDhGOUNDMTY2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFizy5dDIBjQ0iishg3d/LScwEYSQyTIMU85 bkDd/QcbTVGCAKUzl2CVb5CsceISEUo4kuEL85/wODKqWPHaGN1AX+bXW/AUDQUw Mz+7vdRnN9Acm76kJg6fi0EAwz6Q0sFttT+8iI7+L68BXZu6AojjeiLcpxUQxjR/ dXa770DtrOnEFp/eJixMKr07Wcnej4fFXbR2mu1F53amXmXcJ9ISagy9heDcrMNZ /id9IxswdUtA8sBoFpy2Ma2c8grYx4ySHQQkQNIrNKN6MQNY8lXB2JIxVXr1VEBj mTV3Q4ZlelV4MFwFjEIutIczcEZDMJ0/25dLt+aAwxqVCC2qQ04= -----END CERTIFICATE-----Generated at Mon Sep 21 14:00:05 2026 by rpki-client