$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft File: 883B1118323CCC5736EA818FCCFAFAA5F6346633.mft (raw, json) Hash identifier: S58spUDV/QPZmbM54D8arY8XEGeaOyuxmVXOYFyyzQ0= Subject key identifier: 9E:B9:18:5A:D0:DF:33:70:01:67:B7:72:8E:A9:29:84:75:56:DE:FA Authority key identifier: 88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 Certificate issuer: /CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Certificate serial: 1603F9CAD466E3FA656D3DD3A2DFB4FB9740604D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:06:19 +0000 Manifest this update: Mon 21 Sep 2026 12:01:19 +0000 Manifest next update: Tue 22 Sep 2026 12:36:19 +0000 Files and hashes: 1: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: XRMjBNqHnY6+jz0gyEQDgptcLtfFhiyGtn8MtQxlV6s=) 2: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: bFOzzHMeNiibUnZ6L+hq8KLmZQjQupaRQAA5Pf20Elk=) 3: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: mn881aCiRGLWWEDnawAxEXshps2FtIWZ7qkAUnFIOiE=) 4: 883B1118323CCC5736EA818FCCFAFAA5F6346633.crl (hash: wL71aGQnErh+TX1lAbQXNV4CavT1yCd0JHfoZmcJ7YA=) 5: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: cz+80lMPAlEnAUax/7iLVTXO0rUokGVs+fLA4W5hxnM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:03:f9:ca:d4:66:e3:fa:65:6d:3d:d3:a2:df:b4:fb:97:40:60:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Validity Not Before: Sep 21 12:01:19 2026 GMT Not After : Sep 22 12:36:19 2026 GMT Subject: CN=9EB9185AD0DF33700167B7728EA929847556DEFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f6:dc:04:39:bb:7d:69:99:e2:68:6b:ad:ac: e2:31:1c:38:b5:c6:aa:b5:09:41:e4:5a:10:8d:04: 3f:c7:fd:ae:ab:84:8b:f8:3f:f1:0c:83:7d:1a:df: 02:22:a2:2e:be:09:3b:5b:ca:72:43:23:ae:c7:b8: a8:92:1a:9a:3d:f9:24:cb:d7:b1:b2:ec:5a:eb:12: b5:55:fb:d5:e5:7c:2d:d2:92:52:ce:43:18:ea:ac: e7:fb:9a:60:a2:33:c8:77:b1:eb:f1:05:a4:96:e6: 77:5c:04:c3:bf:db:f3:ad:60:bf:87:1b:1a:f4:43: ad:30:5e:94:96:43:a1:cc:05:b6:3b:fb:6d:37:f9: 78:df:02:13:fa:7b:7c:aa:71:bc:f9:a6:19:97:75: a0:0c:0c:f4:e4:76:c6:b4:9b:21:09:5a:6b:4b:00: f3:68:3c:01:31:ee:6b:bb:63:b6:4f:10:ba:ea:7b: 4f:5e:91:65:3c:3c:b5:e5:a7:d1:87:9c:d5:6c:1c: 59:03:9c:da:41:98:ee:01:b4:35:6d:c4:ae:4c:b3: 90:0e:ab:79:9a:61:69:af:8c:64:eb:93:6a:e8:f0: 49:f7:17:49:3c:05:c5:65:54:db:34:e3:3c:dd:cf: f9:f5:e3:16:8d:57:a2:4a:7c:99:a0:aa:20:66:e4: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B9:18:5A:D0:DF:33:70:01:67:B7:72:8E:A9:29:84:75:56:DE:FA X509v3 Authority Key Identifier: keyid:88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8e:2c:12:08:d4:3d:63:4e:78:b7:6c:c6:46:cb:ee:33:82: e9:54:8b:8d:e6:29:fd:2e:23:3d:a5:ad:be:60:4b:ad:5d:02: e6:47:3e:87:22:6f:db:57:52:88:e4:bb:8d:ea:34:a4:3e:c3: 2e:75:81:a6:ea:e9:6f:7b:b2:dd:c6:a1:4f:ee:a4:b8:72:c7: 62:a0:6e:c1:f0:b2:dc:28:d4:2a:27:74:31:81:ab:6b:4f:8e: 30:83:aa:55:2c:22:3c:38:1f:bc:44:28:90:3b:93:72:e6:6a: 72:39:71:19:74:27:36:06:e5:03:40:20:3f:c6:7d:62:04:fc: 60:39:bf:70:17:4e:69:43:76:42:94:e4:7e:90:15:7d:83:48: c4:e8:be:56:83:28:6e:f7:1d:9b:e9:4d:b9:37:19:a6:2b:2d: 6f:fb:e8:af:14:26:3a:14:40:a2:f9:a6:b0:d8:a3:bf:6b:70: aa:0e:88:b8:b3:cb:ee:2d:fc:0b:f4:fa:14:0c:be:24:f6:ad: 0a:3f:d5:18:c7:de:05:8b:41:91:19:22:8e:d1:8c:0a:da:21: 65:93:65:a0:4a:b2:6d:a7:8e:1f:b1:61:6b:72:20:88:8f:bc: eb:0d:ca:49:7b:98:47:41:d8:66:3b:d9:1e:6c:06:24:ef:83: 64:ac:f6:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFgP5ytRm4/plbT3Tot+0+5dAYE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVG NjM0NjYzMzAeFw0yNjA5MjExMjAxMTlaFw0yNjA5MjIxMjM2MTlaMDMxMTAvBgNV BAMTKDlFQjkxODVBRDBERjMzNzAwMTY3Qjc3MjhFQTkyOTg0NzU1NkRFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv9twEObt9aZniaGutrOIxHDi1 xqq1CUHkWhCNBD/H/a6rhIv4P/EMg30a3wIioi6+CTtbynJDI67HuKiSGpo9+STL 17Gy7FrrErVV+9XlfC3SklLOQxjqrOf7mmCiM8h3sevxBaSW5ndcBMO/2/OtYL+H Gxr0Q60wXpSWQ6HMBbY7+203+XjfAhP6e3yqcbz5phmXdaAMDPTkdsa0myEJWmtL APNoPAEx7mu7Y7ZPELrqe09ekWU8PLXlp9GHnNVsHFkDnNpBmO4BtDVtxK5Ms5AO q3maYWmvjGTrk2ro8En3F0k8BcVlVNs04zzdz/n14xaNV6JKfJmgqiBm5LD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnrkYWtDfM3ABZ7dyjqkphHVW3vowHwYDVR0j BBgwFoAUiDsRGDI8zFc26oGPzPr6pfY0ZjMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMzI5NjctZDU1OC00YTM0LWJlOGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgz MjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVGNjM0NjYzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODNCMTExODMyM0NDQzU3MzZFQTgxOEZDQ0ZBRkFBNUY2MzQ2 NjMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZB QTVGNjM0NjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImOLBII1D1jTni3bMZGy+4zgulUi43mKf0u Iz2lrb5gS61dAuZHPocib9tXUojku43qNKQ+wy51gabq6W97st3GoU/upLhyx2Kg bsHwstwo1CondDGBq2tPjjCDqlUsIjw4H7xEKJA7k3LmanI5cRl0JzYG5QNAID/G fWIE/GA5v3AXTmlDdkKU5H6QFX2DSMTovlaDKG73HZvpTbk3GaYrLW/76K8UJjoU QKL5prDYo79rcKoOiLizy+4t/Av0+hQMviT2rQo/1RjH3gWLQZEZIo7RjAraIWWT ZaBKsm2njh+xYWtyIIiPvOsNykl7mEdB2GY72R5sBiTvg2Ss9u0= -----END CERTIFICATE-----Generated at Mon Sep 21 19:12:27 2026 by rpki-client