$ rpki-client -vvvf rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft File: 883664DA613C9067C8155436693AEF1A82B3B1A7.mft (raw, json) Hash identifier: jF7nkyeQT8GvQEGkRNt96MjgsdxKyt9993bWuwajRNs= Subject key identifier: 1F:23:55:91:11:21:B4:49:EE:98:46:10:AA:05:A5:17:E8:96:E3:A3 Authority key identifier: 88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7 Certificate issuer: /CN=883664DA613C9067C8155436693AEF1A82B3B1A7 Certificate serial: 6A0B7A35D18D52A2C484B2DFA24EFF59D59BD7EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 13:42:53 +0000 Manifest this update: Thu 24 Sep 2026 13:37:53 +0000 Manifest next update: Fri 25 Sep 2026 14:44:53 +0000 Files and hashes: 1: 3130332e3137382e3135312e302f32342d3234203d3e20313439333234.roa (hash: ETbLJXXcJM3Uqzm41+hqN5GkUeg2ajdJtzrh7tkT7pM=) 2: 3130332e3137382e3135302e302f32332d3233203d3e20313439333234.roa (hash: Yz7WTJdxRW1CYrN9boz8edyp4I9Scuuedk3B0vEsAGc=) 3: 883664DA613C9067C8155436693AEF1A82B3B1A7.crl (hash: FhK8SNmpwD+qhR0KkaVzmiLVG2Ygovnggq8AFl1vfQk=) 4: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (hash: lsAH30jSOhgM8OAAJtXdQCjaCWk5sZqIYZ6QuMuRymM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0b:7a:35:d1:8d:52:a2:c4:84:b2:df:a2:4e:ff:59:d5:9b:d7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883664DA613C9067C8155436693AEF1A82B3B1A7 Validity Not Before: Sep 24 13:37:53 2026 GMT Not After : Sep 25 14:44:53 2026 GMT Subject: CN=1F2355911121B449EE984610AA05A517E896E3A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:1f:75:05:a4:34:f0:2c:c8:26:85:88:cc: 3c:b8:cf:3c:25:9b:08:64:72:72:97:89:fb:ad:08: df:70:90:47:e2:e8:61:bd:90:ed:69:85:a5:c8:05: 00:57:f1:3a:3e:83:db:45:e5:8a:d1:f4:22:3c:17: da:93:56:98:df:38:f2:11:bc:09:7c:92:0a:89:ac: ce:84:32:8a:bd:d7:db:e4:b7:f4:61:cf:36:36:fa: ba:ae:cb:c4:8d:a9:33:d0:e8:ce:bb:af:08:e9:58: 51:33:64:f9:59:c7:c1:ab:ec:70:99:fe:0b:63:35: 38:62:d5:b8:85:ad:a5:8d:09:7d:d1:0a:53:25:0d: ab:86:78:a2:75:8b:34:65:46:99:f3:c0:7c:8f:59: cf:e5:90:10:0e:0f:0d:99:f7:e7:3f:b3:b9:1f:d5: e1:e5:46:b9:20:f4:f3:e5:25:47:ef:e4:e8:aa:66: f6:24:4a:6a:0e:88:d9:d8:7a:e0:e3:c7:23:1b:2a: 62:00:4a:31:bd:fe:6e:f4:2f:ff:04:da:68:dc:b6: b7:2e:87:77:8d:fa:ec:35:a9:94:dc:20:0b:36:ba: fe:16:55:a9:e2:91:f2:ef:21:fa:aa:7a:a6:a5:f4: 27:86:91:ab:b2:4b:99:90:a9:97:11:5d:3a:9d:0c: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:23:55:91:11:21:B4:49:EE:98:46:10:AA:05:A5:17:E8:96:E3:A3 X509v3 Authority Key Identifier: keyid:88:36:64:DA:61:3C:90:67:C8:15:54:36:69:3A:EF:1A:82:B3:B1:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883664DA613C9067C8155436693AEF1A82B3B1A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/883664DA613C9067C8155436693AEF1A82B3B1A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:4c:d2:58:a8:61:6a:65:cd:ec:b8:5a:1b:e8:1c:09:02:82: db:ef:00:99:ed:78:3c:0f:7f:e1:2d:fc:aa:97:5f:d0:87:67: 20:49:1e:65:ac:34:5f:56:14:77:bd:15:3b:54:b6:69:5b:98: e0:b0:a8:89:79:df:a6:ed:9e:db:ad:64:1b:3e:95:a1:fd:a3: b5:bd:b1:ea:bd:32:1b:08:7a:19:f0:52:07:28:0e:91:14:f4: b4:bc:b0:fa:e4:7f:bf:63:9c:c2:4d:26:34:f8:6f:8b:2e:08: 4d:b9:83:c8:e2:ba:a7:ae:af:09:0c:6c:50:bb:22:30:d4:61: e5:58:0f:33:7a:a1:11:7b:68:45:a2:08:2c:6a:73:c8:76:5b: 2d:55:b8:69:d7:f2:a2:c8:0c:ac:6d:2b:b3:ec:d1:c3:51:e2: 5b:ca:61:6d:d6:41:e0:db:e3:7d:10:5e:82:00:1d:68:69:d7: 62:2b:43:e2:6d:1f:77:65:c4:76:6d:f7:1c:b9:03:53:e8:07: 33:c5:1d:3d:52:01:b4:5c:47:34:cf:9e:fd:47:2e:df:cd:f1: 69:39:8f:e3:71:b2:28:d1:b6:1f:30:8f:55:e3:48:f8:a4:c9: ae:80:31:2d:db:0b:d6:d7:50:f7:14:54:e9:41:dd:78:72:56: 8a:a1:53:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUagt6NdGNUqLEhLLfok7/WdWb1+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzNjY0REE2MTNDOTA2N0M4MTU1NDM2NjkzQUVGMUE4 MkIzQjFBNzAeFw0yNjA5MjQxMzM3NTNaFw0yNjA5MjUxNDQ0NTNaMDMxMTAvBgNV BAMTKDFGMjM1NTkxMTEyMUI0NDlFRTk4NDYxMEFBMDVBNTE3RTg5NkUzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqx91BaQ08CzIJoWIzDy4zzwl mwhkcnKXifutCN9wkEfi6GG9kO1phaXIBQBX8To+g9tF5YrR9CI8F9qTVpjfOPIR vAl8kgqJrM6EMoq919vkt/RhzzY2+rquy8SNqTPQ6M67rwjpWFEzZPlZx8Gr7HCZ /gtjNThi1biFraWNCX3RClMlDauGeKJ1izRlRpnzwHyPWc/lkBAODw2Z9+c/s7kf 1eHlRrkg9PPlJUfv5OiqZvYkSmoOiNnYeuDjxyMbKmIASjG9/m70L/8E2mjctrcu h3eN+uw1qZTcIAs2uv4WVanikfLvIfqqeqal9CeGkauyS5mQqZcRXTqdDNThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHyNVkREhtEnumEYQqgWlF+iW46MwHwYDVR0j BBgwFoAUiDZk2mE8kGfIFVQ2aTrvGoKzsacwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDY1ZmE5OGYtMWU4NS00NjM4LWJiOWQtMjg3Mzc4YTRjZTg3LzAvODgzNjY0REE2 MTNDOTA2N0M4MTU1NDM2NjkzQUVGMUE4MkIzQjFBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODM2NjREQTYxM0M5MDY3QzgxNTU0MzY2OTNBRUYxQTgyQjNC MUE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDY1ZmE5OGYtMWU4NS00NjM4LWJi OWQtMjg3Mzc4YTRjZTg3LzAvODgzNjY0REE2MTNDOTA2N0M4MTU1NDM2NjkzQUVG MUE4MkIzQjFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNM0lioYWplzey4WhvoHAkCgtvvAJnteDwP f+Et/KqXX9CHZyBJHmWsNF9WFHe9FTtUtmlbmOCwqIl536btntutZBs+laH9o7W9 seq9MhsIehnwUgcoDpEU9LS8sPrkf79jnMJNJjT4b4suCE25g8jiuqeurwkMbFC7 IjDUYeVYDzN6oRF7aEWiCCxqc8h2Wy1VuGnX8qLIDKxtK7Ps0cNR4lvKYW3WQeDb 430QXoIAHWhp12IrQ+JtH3dlxHZt9xy5A1PoBzPFHT1SAbRcRzTPnv1HLt/N8Wk5 j+NxsijRth8wj1XjSPikya6AMS3bC9bXUPcUVOlB3XhyVoqhU1Q= -----END CERTIFICATE-----Generated at Fri Sep 25 01:24:57 2026 by rpki-client