$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft File: 872E319F800BA2C6B4EF39E67C02FA78A219796F.mft (raw, json) Hash identifier: iRZsqIOYOxSI4EjncQYiSkQKObclkcNf4/Fzh/HqZo0= Subject key identifier: 3D:46:91:61:69:92:5D:34:71:4C:ED:30:AF:D3:5D:8D:87:BA:4A:41 Authority key identifier: 87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F Certificate issuer: /CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Certificate serial: 2BAE6CB01921722F54FC78B4C13FB53EFF881DDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft Manifest number: CD Signing time: Sat 03 Oct 2026 10:59:14 +0000 Manifest this update: Sat 03 Oct 2026 10:54:14 +0000 Manifest next update: Sun 04 Oct 2026 12:06:14 +0000 Files and hashes: 1: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: OvRyOsYLEGBYlmYssyFcgvhpHbvbSdqAPtYyX5hS8EY=) 2: 872E319F800BA2C6B4EF39E67C02FA78A219796F.crl (hash: IRIPhFfHudLUXsdNi9NyRrF8OTzMiuPgMOBV/0G6Gfs=) 3: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: PGq4Tr5WM4VAyh7qw47RLuSMNDSTpWd9mtnYf8tmUA0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 12:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ae:6c:b0:19:21:72:2f:54:fc:78:b4:c1:3f:b5:3e:ff:88:1d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Validity Not Before: Oct 3 10:54:14 2026 GMT Not After : Oct 4 12:06:14 2026 GMT Subject: CN=3D46916169925D34714CED30AFD35D8D87BA4A41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:c4:26:cf:39:f1:ed:36:8b:42:1f:ce:92: 50:f7:c9:f6:d7:ca:ca:a0:67:d9:c7:37:4c:0d:2a: 48:f2:28:eb:b0:70:6f:c9:79:73:7a:5d:a1:4e:78: 78:39:e9:0e:28:47:4d:ba:5c:5f:e8:2c:9e:4b:96: 92:51:e6:c4:62:28:dd:88:38:5f:ec:b2:21:b6:64: 3a:7f:5f:62:1f:d6:11:b3:9f:05:52:40:f5:b5:65: 76:97:ad:f9:f0:cd:67:3d:c0:1c:df:8e:18:3e:50: ba:2e:6d:36:e4:2b:42:c3:3d:74:b4:6d:d6:e2:09: c4:1a:ee:b5:dd:49:f5:43:ae:dd:df:de:56:94:c8: c9:59:7c:6f:4f:b3:a1:a7:41:e9:6f:ea:20:43:c7: d3:89:0d:cc:23:3e:2a:c8:45:27:05:b7:4a:3f:3e: d0:09:ec:59:ef:4c:e7:64:d8:ec:75:74:1b:1a:09: ad:73:16:0c:58:2e:1f:b7:0d:8b:4c:c1:0d:f7:6b: df:38:32:0c:dc:82:43:27:87:26:cf:7a:9d:24:b4: 4a:42:80:42:54:be:85:63:61:83:6d:75:6c:93:5e: c2:9b:81:8d:fc:aa:67:6d:57:29:82:06:88:7a:66: f5:7e:03:fb:d3:2c:f8:37:8b:ce:fe:a2:1f:9d:f9: f6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:46:91:61:69:92:5D:34:71:4C:ED:30:AF:D3:5D:8D:87:BA:4A:41 X509v3 Authority Key Identifier: keyid:87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3b:2a:e8:e3:81:5c:5d:be:e9:a7:d6:3d:09:2f:32:1f:f2: 30:e7:a9:50:4f:d9:12:00:84:70:d1:d9:1b:0b:12:11:08:61: 3b:c7:b4:1c:d1:00:bd:ea:cd:51:5b:61:47:1e:fe:9b:6a:fe: 74:91:35:14:8e:47:0d:ef:bd:b1:1a:97:5f:dc:fa:1d:a0:cc: 08:9b:3a:5b:12:ae:6a:fa:0b:8a:d8:3a:4b:a4:ed:9c:bb:46: 7f:ba:19:53:42:68:53:e0:fb:ec:c5:bd:c9:b7:6a:32:69:a4: 27:df:6b:78:51:25:e2:65:42:f6:17:dc:9d:fb:78:2d:b3:1e: 3d:8b:85:bb:17:69:1d:b7:78:b7:78:6a:07:b7:a7:b7:4e:9e: 13:39:3a:d1:6b:40:19:55:72:12:1d:c2:e1:53:cd:c6:61:5c: cc:99:b9:88:c9:24:8d:68:c4:ad:e5:7b:28:94:3f:e7:74:0c: ef:11:09:ca:72:d0:17:50:c2:a2:13:f4:af:96:96:fc:06:00: 1f:89:82:d2:0c:d3:67:94:4c:53:75:a5:70:f6:c4:29:80:e3: 40:d6:f5:f5:51:af:ac:61:c0:d5:33:fc:0d:12:e2:80:cd:a3: 77:17:b0:25:8c:22:5c:a7:54:25:69:04:50:8f:c6:58:9c:6c: a6:65:8f:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK65ssBkhci9U/Hi0wT+1Pv+IHdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhB MjE5Nzk2RjAeFw0yNjEwMDMxMDU0MTRaFw0yNjEwMDQxMjA2MTRaMDMxMTAvBgNV BAMTKDNENDY5MTYxNjk5MjVEMzQ3MTRDRUQzMEFGRDM1RDhEODdCQTRBNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrsQmzznx7TaLQh/OklD3yfbX ysqgZ9nHN0wNKkjyKOuwcG/JeXN6XaFOeHg56Q4oR026XF/oLJ5LlpJR5sRiKN2I OF/ssiG2ZDp/X2If1hGznwVSQPW1ZXaXrfnwzWc9wBzfjhg+ULoubTbkK0LDPXS0 bdbiCcQa7rXdSfVDrt3f3laUyMlZfG9Ps6GnQelv6iBDx9OJDcwjPirIRScFt0o/ PtAJ7FnvTOdk2Ox1dBsaCa1zFgxYLh+3DYtMwQ33a984MgzcgkMnhybPep0ktEpC gEJUvoVjYYNtdWyTXsKbgY38qmdtVymCBoh6ZvV+A/vTLPg3i87+oh+d+fbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPUaRYWmSXTRxTO0wr9NdjYe6SkEwHwYDVR0j BBgwFoAUhy4xn4ALosa07znmfAL6eKIZeW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMwNWFiMzAtNTY1My00MmJjLTljM2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4 MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhBMjE5Nzk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzJFMzE5RjgwMEJBMkM2QjRFRjM5RTY3QzAyRkE3OEEyMTk3 OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZB NzhBMjE5Nzk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAk7KujjgVxdvumn1j0JLzIf8jDnqVBP2RIA hHDR2RsLEhEIYTvHtBzRAL3qzVFbYUce/ptq/nSRNRSORw3vvbEal1/c+h2gzAib OlsSrmr6C4rYOkuk7Zy7Rn+6GVNCaFPg++zFvcm3ajJppCffa3hRJeJlQvYX3J37 eC2zHj2LhbsXaR23eLd4age3p7dOnhM5OtFrQBlVchIdwuFTzcZhXMyZuYjJJI1o xK3leyiUP+d0DO8RCcpy0BdQwqIT9K+WlvwGAB+JgtIM02eUTFN1pXD2xCmA40DW 9fVRr6xhwNUz/A0S4oDNo3cXsCWMIlynVCVpBFCPxlicbKZljzs= -----END CERTIFICATE-----Generated at Sat Oct 3 20:05:31 2026 by rpki-client