$ rpki-client -vvvf rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft File: 82B8687B1ED233C41017803198B332BD9A4DB403.mft (raw, json) Hash identifier: 8ndV1n1x4PTZo+2vmrCqw8DHQFtC0cG4ogw+BHb61BE= Subject key identifier: 3A:3F:8A:F3:C7:42:33:4D:09:0C:05:79:00:EA:66:E8:DF:98:E6:1D Authority key identifier: 82:B8:68:7B:1E:D2:33:C4:10:17:80:31:98:B3:32:BD:9A:4D:B4:03 Certificate issuer: /CN=82B8687B1ED233C41017803198B332BD9A4DB403 Certificate serial: 20787718BE7F1DE5062BBD50F75E52187270E892 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B8687B1ED233C41017803198B332BD9A4DB403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:29:37 +0000 Manifest this update: Mon 21 Sep 2026 02:24:37 +0000 Manifest next update: Tue 22 Sep 2026 05:52:37 +0000 Files and hashes: 1: 82B8687B1ED233C41017803198B332BD9A4DB403.crl (hash: XHOq+8q0+QqW4sujvcfd8OM0HURSScoXmLVtJZpkKRY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.crl rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B8687B1ED233C41017803198B332BD9A4DB403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:78:77:18:be:7f:1d:e5:06:2b:bd:50:f7:5e:52:18:72:70:e8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82B8687B1ED233C41017803198B332BD9A4DB403 Validity Not Before: Sep 21 02:24:37 2026 GMT Not After : Sep 22 05:52:37 2026 GMT Subject: CN=3A3F8AF3C742334D090C057900EA66E8DF98E61D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:8a:8b:4c:1d:13:76:7c:6a:d8:8c:77:c1: 13:67:c6:47:d0:cc:42:a4:4d:49:89:51:19:78:b3: e6:50:ea:28:b8:57:f2:3a:52:29:77:05:1f:41:92: 4c:ab:29:69:52:9c:a2:af:91:7f:cc:dc:4d:8b:b2: d3:3d:8c:46:6a:6a:f5:f7:e9:ba:e5:59:ff:99:e6: bc:8a:0f:d4:34:ed:53:4b:8e:c7:7c:96:49:7d:6d: 7f:6a:45:bb:11:40:3b:d2:e1:86:6a:83:1b:e7:41: 4b:6c:70:18:af:98:2d:83:5a:08:3d:31:81:76:08: c2:50:ef:2c:a4:90:82:8b:e5:03:53:df:5c:27:2f: 3d:14:2d:23:a8:b1:72:da:88:88:37:4d:d9:b0:2a: 00:b9:76:8d:9a:09:ca:20:e9:c5:43:68:a8:ed:ed: 53:9d:fb:2e:cb:f0:69:4b:18:de:f2:25:ce:8a:1e: 57:8c:18:a0:20:27:11:4a:2b:9e:ea:d7:fe:af:70: ca:3f:f5:0f:63:74:02:52:00:6b:1c:20:c6:82:ef: dd:e5:75:3f:aa:c9:7d:50:98:12:8f:0a:19:c1:ea: 6a:1e:9d:7a:bf:96:7b:00:f0:53:f2:67:42:40:d0: 55:77:5f:e1:08:3a:01:ff:0b:2d:8d:21:4a:55:61: d9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3F:8A:F3:C7:42:33:4D:09:0C:05:79:00:EA:66:E8:DF:98:E6:1D X509v3 Authority Key Identifier: keyid:82:B8:68:7B:1E:D2:33:C4:10:17:80:31:98:B3:32:BD:9A:4D:B4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B8687B1ED233C41017803198B332BD9A4DB403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ab:ad:76:21:87:7b:0f:77:db:4b:de:3c:ab:0e:75:4e:e6: 61:fc:8f:81:48:79:b8:a2:00:69:ba:53:99:11:6f:ae:6c:62: ea:5e:1a:3b:bb:2c:2c:c1:3e:cf:f0:24:97:ee:51:06:d0:78: 08:0d:bb:da:9b:4d:88:8f:a4:e2:61:94:11:57:f4:e1:d6:4b: f9:2c:23:3b:1e:26:40:dd:14:3e:cc:ff:44:df:0a:d8:26:1e: fd:88:51:9d:d6:48:f0:35:ea:78:70:d0:7b:54:bc:cf:8f:a7: 98:5f:03:04:5b:cb:51:64:cf:d6:3a:e0:e4:19:85:31:be:a4: 46:b5:9c:6a:1f:a3:1a:99:0f:ee:6c:5d:8a:55:e7:1d:d4:42: 39:e5:fe:13:47:0a:aa:13:0c:cc:1b:63:31:59:f2:3e:24:3b: b8:a2:3d:26:e2:30:e9:91:76:aa:0c:92:a5:5c:c6:f1:ff:b7: 1b:1e:cc:b8:6f:ee:21:82:84:51:6f:20:42:fb:60:98:bd:39: aa:16:c4:15:2a:88:ea:b5:f2:bf:27:d4:2b:f0:90:f4:c1:1f: ff:10:da:6f:15:08:ad:5a:75:73:6b:04:1b:06:12:52:8f:52: 7c:a9:77:4b:d7:bc:04:dc:4c:10:0b:9d:de:1f:9a:21:9f:16: d7:6a:55:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHh3GL5/HeUGK71Q915SGHJw6JIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCODY4N0IxRUQyMzNDNDEwMTc4MDMxOThCMzMyQkQ5 QTREQjQwMzAeFw0yNjA5MjEwMjI0MzdaFw0yNjA5MjIwNTUyMzdaMDMxMTAvBgNV BAMTKDNBM0Y4QUYzQzc0MjMzNEQwOTBDMDU3OTAwRUE2NkU4REY5OEU2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3koqLTB0Tdnxq2Ix3wRNnxkfQ zEKkTUmJURl4s+ZQ6ii4V/I6Uil3BR9BkkyrKWlSnKKvkX/M3E2LstM9jEZqavX3 6brlWf+Z5ryKD9Q07VNLjsd8lkl9bX9qRbsRQDvS4YZqgxvnQUtscBivmC2DWgg9 MYF2CMJQ7yykkIKL5QNT31wnLz0ULSOosXLaiIg3TdmwKgC5do2aCcog6cVDaKjt 7VOd+y7L8GlLGN7yJc6KHleMGKAgJxFKK57q1/6vcMo/9Q9jdAJSAGscIMaC793l dT+qyX1QmBKPChnB6moenXq/lnsA8FPyZ0JA0FV3X+EIOgH/Cy2NIUpVYdmxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOj+K88dCM00JDAV5AOpm6N+Y5h0wHwYDVR0j BBgwFoAUgrhoex7SM8QQF4AxmLMyvZpNtAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFjZjU2NTctZWNkYy00ZDk3LWE1OWMtYjY3NmNlNTNjOGExLzAvODJCODY4N0Ix RUQyMzNDNDEwMTc4MDMxOThCMzMyQkQ5QTREQjQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MkI4Njg3QjFFRDIzM0M0MTAxNzgwMzE5OEIzMzJCRDlBNERC NDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFjZjU2NTctZWNkYy00ZDk3LWE1 OWMtYjY3NmNlNTNjOGExLzAvODJCODY4N0IxRUQyMzNDNDEwMTc4MDMxOThCMzMy QkQ5QTREQjQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAerrXYhh3sPd9tL3jyrDnVO5mH8j4FIebii AGm6U5kRb65sYupeGju7LCzBPs/wJJfuUQbQeAgNu9qbTYiPpOJhlBFX9OHWS/ks IzseJkDdFD7M/0TfCtgmHv2IUZ3WSPA16nhw0HtUvM+Pp5hfAwRby1Fkz9Y64OQZ hTG+pEa1nGofoxqZD+5sXYpV5x3UQjnl/hNHCqoTDMwbYzFZ8j4kO7iiPSbiMOmR dqoMkqVcxvH/txsezLhv7iGChFFvIEL7YJi9OaoWxBUqiOq18r8n1CvwkPTBH/8Q 2m8VCK1adXNrBBsGElKPUnypd0vXvATcTBALnd4fmiGfFtdqVTs= -----END CERTIFICATE-----Generated at Mon Sep 21 17:49:48 2026 by rpki-client