$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft File: 88505636AC2C683A0A15AF1041DEF625BB5D7643.mft (raw, json) Hash identifier: OZRmyeJHhuVqgKL/7H3bOfvzSIvHQt7Bf88KfTN9Jio= Subject key identifier: 2F:46:B3:F5:6F:9C:C9:75:76:06:FE:FE:71:CC:81:8F:43:3F:F3:E1 Authority key identifier: 88:50:56:36:AC:2C:68:3A:0A:15:AF:10:41:DE:F6:25:BB:5D:76:43 Certificate issuer: /CN=88505636AC2C683A0A15AF1041DEF625BB5D7643 Certificate serial: 171EAC86E1236DE278249E8B279C3A4944C9C78A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft Manifest number: BE Signing time: Tue 22 Sep 2026 02:44:57 +0000 Manifest this update: Tue 22 Sep 2026 02:39:57 +0000 Manifest next update: Wed 23 Sep 2026 05:13:57 +0000 Files and hashes: 1: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: dgjaOdjpIeK7j+dAUIzTx198JF2memFCrb9q8a6+v0c=) 2: 88505636AC2C683A0A15AF1041DEF625BB5D7643.crl (hash: I96DlA24drRJcBCoTRF7/Sj39TfX8Pw5qC8wE/OdPQ4=) 3: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: EBf2wSQkajGGPJlM2meU3WwUz7lzn4ofe8fel+KfemQ=) 4: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: ev2m6+xbvR7mwpXdtEeo7OjxoqRgr494Tm2SeygBLMQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.crl rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:1e:ac:86:e1:23:6d:e2:78:24:9e:8b:27:9c:3a:49:44:c9:c7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88505636AC2C683A0A15AF1041DEF625BB5D7643 Validity Not Before: Sep 22 02:39:57 2026 GMT Not After : Sep 23 05:13:57 2026 GMT Subject: CN=2F46B3F56F9CC9757606FEFE71CC818F433FF3E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e9:2a:a8:6e:65:cc:01:b0:3e:17:c8:9e:9f: 33:53:28:27:9d:2b:76:8a:df:84:b2:49:64:7c:54: ee:e0:d2:f7:92:6c:c2:70:28:e5:e6:c0:2f:42:56: 20:33:71:e0:62:5f:f4:ba:c5:c9:bd:83:8c:ef:c0: 6e:38:9e:12:70:b2:a8:2f:37:59:96:1f:39:a7:3f: 54:7d:79:80:e3:3b:fa:39:2c:d0:4c:df:46:bf:5a: 1c:dd:d0:f2:25:fd:6f:52:70:0d:fd:fb:17:30:fc: 99:08:37:24:57:80:62:fa:8f:e8:ec:9d:8d:c9:1d: a1:20:77:3a:8e:54:8e:a0:eb:66:b2:68:86:9f:4c: 15:4a:95:b3:f6:0c:1a:6b:24:2c:f9:66:fe:7e:26: f6:e8:08:be:52:e4:fd:f7:86:29:d8:5b:d7:93:72: 04:52:83:fa:18:f9:0e:53:e3:ae:71:da:a3:60:58: 2b:11:40:49:f1:d8:82:65:0d:b4:37:42:4f:1c:ba: ce:eb:a1:1f:b4:96:2c:4d:7a:0a:a3:fd:80:01:2a: 7e:64:ab:58:20:6a:73:30:f7:cc:52:03:bb:45:9b: 09:b3:af:ff:69:6d:dd:9a:d9:c3:be:a5:d8:0a:33: 17:51:04:ce:84:ab:de:60:a7:e9:11:49:3b:d0:2e: 59:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:46:B3:F5:6F:9C:C9:75:76:06:FE:FE:71:CC:81:8F:43:3F:F3:E1 X509v3 Authority Key Identifier: keyid:88:50:56:36:AC:2C:68:3A:0A:15:AF:10:41:DE:F6:25:BB:5D:76:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a5:12:39:15:d9:ee:7e:a3:25:c2:01:09:99:81:e3:11:12: 1d:81:c0:83:14:ea:a4:23:5c:d8:08:d0:ef:45:9a:01:fb:6e: c3:ac:83:82:b3:b2:84:18:2a:48:34:f2:0e:22:52:92:69:eb: 1f:05:ae:f0:d6:c3:90:27:7b:7d:41:39:24:ae:67:f6:a0:55: cc:1f:ad:4f:59:62:f0:fb:b8:6d:47:2c:23:1b:7d:bf:df:29: d6:db:db:04:0f:1e:81:bb:1d:c4:3b:c5:24:91:53:a4:84:b0: ba:e1:a8:40:e9:20:80:f7:49:b7:29:61:00:52:ca:e6:d0:4f: de:d4:61:bd:31:02:81:8d:cc:88:4d:52:b3:0a:ad:92:3a:43: 20:c3:a4:e3:8e:b4:1b:70:b5:e4:0b:65:cd:f6:ae:c6:b8:0b: 29:99:bc:1c:e6:bb:61:52:a9:ae:71:5b:8a:90:85:e3:cf:c1: 07:29:b4:61:cf:8a:f9:43:2b:e1:20:46:17:81:46:b7:b5:c2: c4:2f:92:06:b3:78:42:f7:84:66:ec:86:df:3a:28:fc:51:a9: 4f:5a:32:cc:11:c0:af:38:0c:4b:58:2e:4e:4a:48:4f:62:81: d1:0f:27:10:5b:81:7d:8e:ee:c3:f4:8f:46:c8:0f:2d:11:be: 66:d6:9d:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFx6shuEjbeJ4JJ6LJ5w6SUTJx4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1MDU2MzZBQzJDNjgzQTBBMTVBRjEwNDFERUY2MjVC QjVENzY0MzAeFw0yNjA5MjIwMjM5NTdaFw0yNjA5MjMwNTEzNTdaMDMxMTAvBgNV BAMTKDJGNDZCM0Y1NkY5Q0M5NzU3NjA2RkVGRTcxQ0M4MThGNDMzRkYzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe6SqobmXMAbA+F8ienzNTKCed K3aK34SySWR8VO7g0veSbMJwKOXmwC9CViAzceBiX/S6xcm9g4zvwG44nhJwsqgv N1mWHzmnP1R9eYDjO/o5LNBM30a/Whzd0PIl/W9ScA39+xcw/JkINyRXgGL6j+js nY3JHaEgdzqOVI6g62ayaIafTBVKlbP2DBprJCz5Zv5+JvboCL5S5P33hinYW9eT cgRSg/oY+Q5T465x2qNgWCsRQEnx2IJlDbQ3Qk8cus7roR+0lixNegqj/YABKn5k q1gganMw98xSA7tFmwmzr/9pbd2a2cO+pdgKMxdRBM6Eq95gp+kRSTvQLllbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL0az9W+cyXV2Bv7+ccyBj0M/8+EwHwYDVR0j BBgwFoAUiFBWNqwsaDoKFa8QQd72JbtddkMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmU1ZmRmNmMtMGQwMS00OTJiLTgwMDQtYTQ4ZWU1YTEyNDc0LzAvODg1MDU2MzZB QzJDNjgzQTBBMTVBRjEwNDFERUY2MjVCQjVENzY0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODUwNTYzNkFDMkM2ODNBMEExNUFGMTA0MURFRjYyNUJCNUQ3 NjQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvODg1MDU2MzZBQzJDNjgzQTBBMTVBRjEwNDFERUY2 MjVCQjVENzY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACalEjkV2e5+oyXCAQmZgeMREh2BwIMU6qQj XNgI0O9FmgH7bsOsg4KzsoQYKkg08g4iUpJp6x8FrvDWw5Ane31BOSSuZ/agVcwf rU9ZYvD7uG1HLCMbfb/fKdbb2wQPHoG7HcQ7xSSRU6SEsLrhqEDpIID3SbcpYQBS yubQT97UYb0xAoGNzIhNUrMKrZI6QyDDpOOOtBtwteQLZc32rsa4CymZvBzmu2FS qa5xW4qQhePPwQcptGHPivlDK+EgRheBRre1wsQvkgazeEL3hGbsht86KPxRqU9a MswRwK84DEtYLk5KSE9igdEPJxBbgX2O7sP0j0bIDy0RvmbWncE= -----END CERTIFICATE-----Generated at Tue Sep 22 22:08:47 2026 by rpki-client