$ rpki-client -vvvf rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft File: 083DF9FCF3773A042D5A64A6401BE726552524C0.mft (raw, json) Hash identifier: bUNiu8/C4EoT8nEtcAqBf/hHzXMel1VeRflrVnhmEao= Subject key identifier: 0A:21:D8:35:D6:EE:FD:18:99:7C:6D:07:43:4D:72:44:9F:99:6B:5D Authority key identifier: 08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0 Certificate issuer: /CN=083DF9FCF3773A042D5A64A6401BE726552524C0 Certificate serial: 79F34F5CF41F7B466A1407CC4AD419960F842F52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft Manifest number: BC Signing time: Mon 21 Sep 2026 22:49:59 +0000 Manifest this update: Mon 21 Sep 2026 22:44:59 +0000 Manifest next update: Wed 23 Sep 2026 01:16:59 +0000 Files and hashes: 1: 083DF9FCF3773A042D5A64A6401BE726552524C0.crl (hash: WSB6x69osDNno4nkSQ70BY9W+ZYrEtCENiFNmw8ePaw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.crl rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f3:4f:5c:f4:1f:7b:46:6a:14:07:cc:4a:d4:19:96:0f:84:2f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=083DF9FCF3773A042D5A64A6401BE726552524C0 Validity Not Before: Sep 21 22:44:59 2026 GMT Not After : Sep 23 01:16:59 2026 GMT Subject: CN=0A21D835D6EEFD18997C6D07434D72449F996B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:bf:74:fb:09:9a:53:32:11:73:c3:d7:33: 79:64:28:10:1c:6e:f4:ec:4b:6f:08:3f:8f:d6:1d: bd:a2:4d:23:31:ad:6a:6b:00:34:4e:a9:0c:ae:93: 25:f7:6c:f5:54:c5:05:d0:ff:6e:b0:f4:f2:13:ff: a5:35:6a:b1:04:21:60:71:69:0a:ef:7e:37:f0:20: 9f:75:48:74:bd:cf:21:b0:06:ef:5e:5c:cf:fc:c6: 87:3f:af:74:20:00:19:6a:14:ef:76:7b:b9:62:97: e0:71:c4:f8:3f:69:d9:db:d5:bf:3d:54:fb:22:9d: f8:73:fb:13:b4:00:83:d0:31:0e:0f:94:62:7e:d3: 02:fc:66:b9:43:b2:cd:95:b6:e2:af:af:64:09:a9: 13:cd:70:ea:6d:11:9d:9f:31:e7:4c:5f:8f:75:3f: c3:9a:d8:a6:d8:cb:93:9e:9f:6c:cb:ca:64:d6:d8: 5c:76:b6:91:46:24:c9:d9:de:62:6b:23:ab:98:8f: b0:cd:b8:e0:20:db:29:57:89:61:99:2b:90:52:9b: 82:78:9b:69:bb:7c:8c:5f:fa:4b:22:4e:36:b2:44: 07:49:1d:71:19:2e:4b:ba:d2:43:ae:53:f0:4d:7f: d1:5c:ca:2f:5b:42:ce:43:e2:3b:ca:b1:98:45:5d: 27:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:21:D8:35:D6:EE:FD:18:99:7C:6D:07:43:4D:72:44:9F:99:6B:5D X509v3 Authority Key Identifier: keyid:08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5a:aa:3a:b5:c0:82:36:ee:b9:1d:61:ed:0d:48:96:38:1a: 35:1d:82:a2:0b:52:11:da:b9:1b:4d:8f:86:3f:39:83:67:b0: ac:dd:20:d5:87:13:fa:06:90:4d:9b:6c:b0:50:a7:bc:c5:c1: 7c:85:d6:58:da:bb:2d:c8:2d:9f:e7:4e:f8:c2:5d:37:56:16: 08:4e:2e:ed:52:a2:8f:ab:8a:65:2c:6c:5f:55:94:39:cb:97: 56:48:a3:a4:1d:5f:7d:fc:dd:9d:cf:aa:96:72:0a:26:4c:e3: 2b:c7:64:cd:ab:43:de:ad:f5:6e:cc:73:71:06:8b:1a:dc:2d: e9:2c:a0:14:0c:6b:9f:5f:9f:67:89:78:5a:bf:c9:b1:fe:7c: 0b:64:1c:86:18:83:b7:5a:bd:3d:2e:c7:fe:be:b6:5d:22:8d: 65:0a:01:11:b3:5e:05:4c:ea:65:2f:2f:b2:ac:24:00:86:e8: 33:73:87:33:d4:0f:43:c7:9e:2c:b2:3d:1e:09:3f:52:53:31: 77:7b:13:ef:bb:1a:8e:05:88:54:be:2a:f4:18:3f:40:fb:56: a9:d1:f2:cc:fb:ea:d1:37:b4:2f:89:55:b0:b4:ed:9c:7a:c2: a9:eb:76:3c:ba:66:16:34:13:96:a6:ff:75:e6:ec:c7:53:fe: 91:13:e4:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefNPXPQfe0ZqFAfMStQZlg+EL1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzREY5RkNGMzc3M0EwNDJENUE2NEE2NDAxQkU3MjY1 NTI1MjRDMDAeFw0yNjA5MjEyMjQ0NTlaFw0yNjA5MjMwMTE2NTlaMDMxMTAvBgNV BAMTKDBBMjFEODM1RDZFRUZEMTg5OTdDNkQwNzQzNEQ3MjQ0OUY5OTZCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY8790+wmaUzIRc8PXM3lkKBAc bvTsS28IP4/WHb2iTSMxrWprADROqQyukyX3bPVUxQXQ/26w9PIT/6U1arEEIWBx aQrvfjfwIJ91SHS9zyGwBu9eXM/8xoc/r3QgABlqFO92e7lil+BxxPg/adnb1b89 VPsinfhz+xO0AIPQMQ4PlGJ+0wL8ZrlDss2VtuKvr2QJqRPNcOptEZ2fMedMX491 P8Oa2KbYy5Oen2zLymTW2Fx2tpFGJMnZ3mJrI6uYj7DNuOAg2ylXiWGZK5BSm4J4 m2m7fIxf+ksiTjayRAdJHXEZLku60kOuU/BNf9Fcyi9bQs5D4jvKsZhFXSdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCiHYNdbu/RiZfG0HQ01yRJ+Za10wHwYDVR0j BBgwFoAUCD35/PN3OgQtWmSmQBvnJlUlJMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM1MjI1YTYtMDVkMy00NDRjLWJmM2YtMTFlM2VmN2I2YTE1LzAvMDgzREY5RkNG Mzc3M0EwNDJENUE2NEE2NDAxQkU3MjY1NTI1MjRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODNERjlGQ0YzNzczQTA0MkQ1QTY0QTY0MDFCRTcyNjU1MjUy NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMDgzREY5RkNGMzc3M0EwNDJENUE2NEE2NDAxQkU3 MjY1NTI1MjRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1aqjq1wII27rkdYe0NSJY4GjUdgqILUhHa uRtNj4Y/OYNnsKzdINWHE/oGkE2bbLBQp7zFwXyF1ljauy3ILZ/nTvjCXTdWFghO Lu1Soo+rimUsbF9VlDnLl1ZIo6QdX3383Z3PqpZyCiZM4yvHZM2rQ96t9W7Mc3EG ixrcLeksoBQMa59fn2eJeFq/ybH+fAtkHIYYg7davT0ux/6+tl0ijWUKARGzXgVM 6mUvL7KsJACG6DNzhzPUD0PHniyyPR4JP1JTMXd7E++7Go4FiFS+KvQYP0D7VqnR 8sz76tE3tC+JVbC07Zx6wqnrdjy6ZhY0E5am/3Xm7MdT/pET5Do= -----END CERTIFICATE-----Generated at Tue Sep 22 16:13:20 2026 by rpki-client