$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft File: 83B5C37E9FBCC271373337B3F35E92BE81C88790.mft (raw, json) Hash identifier: 95Iio9UOpiMPes2jtHatyI5C3+eLWUFlxTXZZCgTteg= Subject key identifier: 82:E4:E4:F0:B8:60:07:67:39:63:C1:32:A7:7A:2D:2D:DD:A7:2F:75 Authority key identifier: 83:B5:C3:7E:9F:BC:C2:71:37:33:37:B3:F3:5E:92:BE:81:C8:87:90 Certificate issuer: /CN=83B5C37E9FBCC271373337B3F35E92BE81C88790 Certificate serial: 23DA6266FBE6298AE7A9189ECE0011642E8CECD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B5C37E9FBCC271373337B3F35E92BE81C88790.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft Manifest number: BD Signing time: Sun 20 Sep 2026 16:47:38 +0000 Manifest this update: Sun 20 Sep 2026 16:42:38 +0000 Manifest next update: Mon 21 Sep 2026 17:08:38 +0000 Files and hashes: 1: 83B5C37E9FBCC271373337B3F35E92BE81C88790.crl (hash: Q3VdNqyiAKKK3gNXFobhM1bCV6ASNsfSEolC7JlTgpI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.crl rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B5C37E9FBCC271373337B3F35E92BE81C88790.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:da:62:66:fb:e6:29:8a:e7:a9:18:9e:ce:00:11:64:2e:8c:ec:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83B5C37E9FBCC271373337B3F35E92BE81C88790 Validity Not Before: Sep 20 16:42:38 2026 GMT Not After : Sep 21 17:08:38 2026 GMT Subject: CN=82E4E4F0B86007673963C132A77A2D2DDDA72F75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:bd:40:97:a6:dd:ac:b9:54:53:a4:b5:aa: fe:0b:1b:a2:57:d2:c7:a0:a1:5a:d7:7d:0d:42:ab: 3e:26:60:53:50:1b:0a:74:6b:6d:4c:fc:52:01:be: cb:02:81:64:fa:aa:83:a6:35:86:01:31:a7:ee:78: 53:48:46:dd:7c:72:d8:5a:85:26:5a:7f:29:d3:ee: ad:2b:c0:ec:b4:69:fe:a1:69:96:a8:a3:c8:ac:57: d0:d1:de:73:cf:e3:49:94:de:b8:f3:ae:e4:f8:88: 9a:4d:ff:0d:c6:13:0e:06:92:1c:e2:58:ae:a2:f9: b4:60:cf:76:dc:38:62:e3:af:b1:30:24:67:d0:2c: 45:d8:90:b3:33:01:33:4a:06:f7:97:48:0a:46:20: 10:49:82:c1:7c:a4:0a:88:42:92:de:2b:66:6f:fa: fd:a6:5f:37:97:3b:0f:0d:52:ed:c6:5a:86:61:84: d2:76:f5:80:44:25:f7:aa:0f:df:8c:42:af:ab:ba: 28:5b:33:03:0c:96:9c:08:2e:ba:99:77:69:3e:45: d8:46:da:65:1c:3f:a8:b3:c2:5d:f3:b5:f1:41:f5: fb:dd:74:48:83:4e:3b:ed:7c:f8:23:89:74:ac:a4: 8c:d8:0e:a2:f4:0c:17:73:a2:cb:5a:b9:e8:89:95: 85:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E4:E4:F0:B8:60:07:67:39:63:C1:32:A7:7A:2D:2D:DD:A7:2F:75 X509v3 Authority Key Identifier: keyid:83:B5:C3:7E:9F:BC:C2:71:37:33:37:B3:F3:5E:92:BE:81:C8:87:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B5C37E9FBCC271373337B3F35E92BE81C88790.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9d:11:32:d2:ab:6c:d0:ac:8c:e7:3b:0d:cf:13:2f:e6:60: bf:66:37:16:5e:9c:c2:be:64:dc:3d:27:12:b6:80:f4:c6:f5: 5c:31:e1:82:2f:2a:6f:6f:92:a3:9e:cc:53:99:62:1e:7e:97: 29:6f:d4:c0:2a:cc:b8:e6:97:83:78:4f:2e:64:1b:da:07:b3: f3:32:f0:a2:56:96:b8:0c:89:7e:96:cc:a8:14:e9:d2:75:9b: 52:f5:e2:05:cc:ca:a9:a5:e0:7d:bf:6f:04:57:97:3a:e5:09: 56:ea:78:9c:e3:35:a1:44:f6:bf:5e:47:a8:3e:56:0a:de:3e: 00:dd:af:6b:fa:bd:0b:9a:a4:5d:fe:fd:53:ba:44:e1:3c:e9: 21:08:c4:54:16:32:0a:f6:41:37:17:f2:87:6c:b1:15:97:dc: 77:de:e2:a7:da:9a:bd:75:8b:37:6d:6f:08:cc:d1:fd:13:10: 4a:1d:e3:7d:39:b1:1b:03:4d:f8:57:a5:2a:e7:ed:bf:61:d5: 82:29:49:78:8f:43:ac:03:bc:74:9b:9c:10:6b:ec:ff:56:27: ee:9d:9a:32:02:56:e1:36:3f:10:ba:98:fe:a7:fc:ea:10:00: 99:17:db:5e:79:12:7d:93:ed:20:9a:f0:87:34:c2:2d:9d:a2: e1:b7:2d:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9piZvvmKYrnqRiezgARZC6M7NkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNCNUMzN0U5RkJDQzI3MTM3MzMzN0IzRjM1RTkyQkU4 MUM4ODc5MDAeFw0yNjA5MjAxNjQyMzhaFw0yNjA5MjExNzA4MzhaMDMxMTAvBgNV BAMTKDgyRTRFNEYwQjg2MDA3NjczOTYzQzEzMkE3N0EyRDJERERBNzJGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykr1Al6bdrLlUU6S1qv4LG6JX 0segoVrXfQ1Cqz4mYFNQGwp0a21M/FIBvssCgWT6qoOmNYYBMafueFNIRt18ctha hSZafynT7q0rwOy0af6haZaoo8isV9DR3nPP40mU3rjzruT4iJpN/w3GEw4Gkhzi WK6i+bRgz3bcOGLjr7EwJGfQLEXYkLMzATNKBveXSApGIBBJgsF8pAqIQpLeK2Zv +v2mXzeXOw8NUu3GWoZhhNJ29YBEJfeqD9+MQq+ruihbMwMMlpwILrqZd2k+RdhG 2mUcP6izwl3ztfFB9fvddEiDTjvtfPgjiXSspIzYDqL0DBdzostaueiJlYXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUguTk8LhgB2c5Y8Eyp3otLd2nL3UwHwYDVR0j BBgwFoAUg7XDfp+8wnE3Mzez816SvoHIh5AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI3MmY3MWEtYjljMi00MDMzLTk2NzUtZDc3MDc2MDNhODJjLzAvODNCNUMzN0U5 RkJDQzI3MTM3MzMzN0IzRjM1RTkyQkU4MUM4ODc5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84M0I1QzM3RTlGQkNDMjcxMzczMzM3QjNGMzVFOTJCRTgxQzg4 NzkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvODNCNUMzN0U5RkJDQzI3MTM3MzMzN0IzRjM1RTky QkU4MUM4ODc5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6dETLSq2zQrIznOw3PEy/mYL9mNxZenMK+ ZNw9JxK2gPTG9Vwx4YIvKm9vkqOezFOZYh5+lylv1MAqzLjml4N4Ty5kG9oHs/My 8KJWlrgMiX6WzKgU6dJ1m1L14gXMyqml4H2/bwRXlzrlCVbqeJzjNaFE9r9eR6g+ VgrePgDdr2v6vQuapF3+/VO6ROE86SEIxFQWMgr2QTcX8odssRWX3Hfe4qfamr11 izdtbwjM0f0TEEod4305sRsDTfhXpSrn7b9h1YIpSXiPQ6wDvHSbnBBr7P9WJ+6d mjICVuE2PxC6mP6n/OoQAJkX2155En2T7SCa8Ic0wi2douG3LY8= -----END CERTIFICATE-----Generated at Sun Sep 20 23:18:13 2026 by rpki-client