$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft File: 82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft (raw, json) Hash identifier: o9pJUlRtvXkWkkeLyaSAXA13AWXEEqwxAAY/hFW33BQ= Subject key identifier: 4F:F9:53:A7:36:99:64:64:B9:98:3D:4D:03:D7:A5:C3:BA:D5:A0:28 Authority key identifier: 82:FA:49:59:8B:B9:63:2C:D8:CF:41:FE:DD:F7:4B:BD:3D:33:D1:9C Certificate issuer: /CN=82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C Certificate serial: 46302946303DCD26CB128967EBEB9C5BFB1A956C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:31:52 +0000 Manifest this update: Mon 21 Sep 2026 12:26:52 +0000 Manifest next update: Tue 22 Sep 2026 14:06:52 +0000 Files and hashes: 1: 82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl (hash: 8ytC760uWMth6ksab0HZS8+xlQFhimopJ1Cqp8OSLuM=) 2: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: Pw1FDuvNFB/fEPdpOIzgZ9rEMUiJuheIjiIKjMXwLBk=) 3: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: Pa7xSWWS5opiR5HJKTxnGB9FqTjFCEEh6zjt74RworE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:30:29:46:30:3d:cd:26:cb:12:89:67:eb:eb:9c:5b:fb:1a:95:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C Validity Not Before: Sep 21 12:26:52 2026 GMT Not After : Sep 22 14:06:52 2026 GMT Subject: CN=4FF953A736996464B9983D4D03D7A5C3BAD5A028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bb:b9:b8:4c:59:41:48:03:5b:05:8a:81:02: bc:df:ea:a7:9b:f9:6f:2a:7c:ad:67:e5:34:0b:1f: ee:a4:f6:2d:45:c8:54:3d:40:70:18:fe:0d:81:0a: 3f:26:f7:f1:04:3c:b8:41:69:58:f2:64:cb:80:24: dc:6c:52:5a:ce:6b:13:ff:fc:ca:f7:01:af:0e:0d: 4d:4d:f9:68:67:38:d3:5b:12:10:11:f9:ec:ed:88: e8:b4:4c:9f:d4:fc:bb:71:ae:7f:8f:0a:02:48:e5: 03:a2:fc:34:a5:79:d6:b7:27:15:b0:73:5e:a4:e2: fc:68:ae:f4:a5:55:af:16:8c:b0:7f:16:5d:46:e2: c8:21:ae:bd:e2:de:93:90:2e:35:20:c3:80:35:f3: 7c:be:61:5a:ef:b4:be:ec:4f:63:64:e4:0c:17:17: af:89:bc:ae:68:25:08:2d:6e:1b:b3:0b:2a:b2:32: 4f:a8:4d:ae:f1:69:a0:c9:92:c1:cf:b8:45:e7:a5: 5b:d1:ac:5d:28:8d:ab:9b:78:13:b3:97:0e:a3:bc: fb:ec:02:6b:c2:52:dc:ea:e7:70:32:38:82:dc:7b: 23:40:c7:26:76:98:eb:05:7f:29:92:1b:e0:99:87: 9d:f8:54:21:73:ab:47:2b:8c:49:0c:18:b4:87:1f: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F9:53:A7:36:99:64:64:B9:98:3D:4D:03:D7:A5:C3:BA:D5:A0:28 X509v3 Authority Key Identifier: keyid:82:FA:49:59:8B:B9:63:2C:D8:CF:41:FE:DD:F7:4B:BD:3D:33:D1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:17:6a:e8:6e:56:e1:7e:05:f1:5c:d8:93:4f:1c:c8:77:57: 91:3c:28:b4:ed:7b:bb:d6:8f:f4:ef:a2:e8:9e:6e:d2:a0:8e: 2b:05:97:04:0a:5e:49:54:d7:86:60:87:29:d1:eb:86:06:a6: 0f:d8:43:9e:5a:18:4f:dc:d1:83:86:01:f4:9d:87:cc:4d:16: 8f:42:7a:f6:6b:63:3b:f7:cc:66:eb:7e:f3:19:1e:f5:fe:3f: d9:a4:d9:2d:1b:36:23:cd:a7:14:e4:4c:c2:dc:ed:4e:ca:5d: 98:87:77:70:eb:aa:c5:72:c1:a0:9a:d2:a7:37:55:71:5a:66: 2a:d8:9a:8b:2d:e1:6e:62:36:e1:8b:01:7a:66:76:6f:ee:64: 58:44:cc:7d:71:14:77:a8:d6:26:b1:f4:1f:2c:c9:39:d5:ff: 83:56:49:a0:9a:b9:86:53:c0:c9:31:7d:df:3b:67:9a:f4:22: 89:b3:47:b4:02:7f:da:5b:56:28:8b:c8:35:a2:89:b1:73:c3: 53:dc:68:7b:cc:0c:d8:fc:88:6a:31:1d:46:45:bb:77:28:8c: 55:03:c3:05:07:9f:8b:85:52:57:d3:6e:ae:04:27:2a:c7:75: 2a:98:d9:32:65:0c:e6:56:3d:73:1e:20:90:46:19:8b:6c:ae: 18:e8:43:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURjApRjA9zSbLEoln6+ucW/salWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJGQTQ5NTk4QkI5NjMyQ0Q4Q0Y0MUZFRERGNzRCQkQz RDMzRDE5QzAeFw0yNjA5MjExMjI2NTJaFw0yNjA5MjIxNDA2NTJaMDMxMTAvBgNV BAMTKDRGRjk1M0E3MzY5OTY0NjRCOTk4M0Q0RDAzRDdBNUMzQkFENUEwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvu7m4TFlBSANbBYqBArzf6qeb +W8qfK1n5TQLH+6k9i1FyFQ9QHAY/g2BCj8m9/EEPLhBaVjyZMuAJNxsUlrOaxP/ /Mr3Aa8ODU1N+WhnONNbEhAR+eztiOi0TJ/U/Ltxrn+PCgJI5QOi/DSleda3JxWw c16k4vxorvSlVa8WjLB/Fl1G4sghrr3i3pOQLjUgw4A183y+YVrvtL7sT2Nk5AwX F6+JvK5oJQgtbhuzCyqyMk+oTa7xaaDJksHPuEXnpVvRrF0ojaubeBOzlw6jvPvs AmvCUtzq53AyOILceyNAxyZ2mOsFfymSG+CZh534VCFzq0crjEkMGLSHH5uTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT/lTpzaZZGS5mD1NA9elw7rVoCgwHwYDVR0j BBgwFoAUgvpJWYu5YyzYz0H+3fdLvT0z0ZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZkNzAzNDYtNWJkZi00OTYxLWE3NGYtNTVhZTg1NTY3MmExLzAvODJGQTQ5NTk4 QkI5NjMyQ0Q4Q0Y0MUZFRERGNzRCQkQzRDMzRDE5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MkZBNDk1OThCQjk2MzJDRDhDRjQxRkVEREY3NEJCRDNEMzNE MTlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvODJGQTQ5NTk4QkI5NjMyQ0Q4Q0Y0MUZFRERGNzRC QkQzRDMzRDE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0XauhuVuF+BfFc2JNPHMh3V5E8KLTte7vW j/TvouiebtKgjisFlwQKXklU14ZghynR64YGpg/YQ55aGE/c0YOGAfSdh8xNFo9C evZrYzv3zGbrfvMZHvX+P9mk2S0bNiPNpxTkTMLc7U7KXZiHd3DrqsVywaCa0qc3 VXFaZirYmost4W5iNuGLAXpmdm/uZFhEzH1xFHeo1iax9B8syTnV/4NWSaCauYZT wMkxfd87Z5r0IomzR7QCf9pbViiLyDWiibFzw1PcaHvMDNj8iGoxHUZFu3cojFUD wwUHn4uFUlfTbq4EJyrHdSqY2TJlDOZWPXMeIJBGGYtsrhjoQ8Q= -----END CERTIFICATE-----Generated at Mon Sep 21 23:29:13 2026 by rpki-client