$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft File: A828948E5E3657BBBB02A70735E06754A306A511.mft (raw, json) Hash identifier: 75SyTXsoiJMSSC90DMoiYWGyPCh+L2DDHVyvWbpvxvs= Subject key identifier: 3C:73:C7:C5:00:3C:DC:34:EF:F7:96:79:FC:F6:B2:5D:B0:01:A8:3A Authority key identifier: A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 Certificate issuer: /CN=A828948E5E3657BBBB02A70735E06754A306A511 Certificate serial: 29CE24A1594AAC2F868FC5A37AECA0B2FA54DB5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft Manifest number: C4 Signing time: Mon 28 Sep 2026 04:40:51 +0000 Manifest this update: Mon 28 Sep 2026 04:35:51 +0000 Manifest next update: Tue 29 Sep 2026 06:41:51 +0000 Files and hashes: 1: A828948E5E3657BBBB02A70735E06754A306A511.crl (hash: 1YXu0tvlRS551aBkNw6lhse22j+S1UzZADWBWcOk7lc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 06:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ce:24:a1:59:4a:ac:2f:86:8f:c5:a3:7a:ec:a0:b2:fa:54:db:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A828948E5E3657BBBB02A70735E06754A306A511 Validity Not Before: Sep 28 04:35:51 2026 GMT Not After : Sep 29 06:41:51 2026 GMT Subject: CN=3C73C7C5003CDC34EFF79679FCF6B25DB001A83A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:7c:cd:ad:8b:e6:28:8b:7c:0c:9e:eb:ca: 3a:0e:8d:8e:2c:0c:67:d7:61:ac:9a:05:ee:ee:ac: 9a:6b:e3:c3:ce:64:68:5f:42:d5:83:67:0b:da:05: 4a:e3:41:a4:49:21:46:1d:e8:a1:72:8f:e8:10:dd: 0f:4b:36:a8:c2:ae:56:c7:08:fb:ce:dd:57:45:11: 68:08:0c:bd:8c:61:3e:15:f2:5f:5a:08:49:e2:c1: a1:87:91:c3:a2:bf:c6:ea:54:89:35:b0:d5:01:84: ce:cd:4b:ee:d5:6d:51:0d:11:cf:65:30:f2:1c:9a: 21:74:68:29:40:06:87:b3:b5:af:fe:0d:9d:14:c0: b5:ee:ee:35:0f:cb:b6:32:a1:52:ba:7c:7f:b2:97: 16:b1:4f:03:a5:64:98:c9:27:7e:bb:6e:4f:99:92: 82:f1:9f:9a:be:5f:81:11:a3:e1:36:18:01:cc:8a: 6a:fa:c6:b6:a6:9a:f2:05:a9:b3:9b:a9:3b:57:8b: cc:74:eb:32:6b:c8:9d:46:7a:8f:46:25:c9:da:51: 1e:bb:47:a5:da:c3:4f:42:bb:bd:cc:15:db:9f:07: 48:bc:e2:85:8f:40:59:36:b9:43:be:50:60:e4:7e: 5e:78:ef:b2:7d:df:5f:a5:79:f6:b6:12:4b:f9:df: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:73:C7:C5:00:3C:DC:34:EF:F7:96:79:FC:F6:B2:5D:B0:01:A8:3A X509v3 Authority Key Identifier: keyid:A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:aa:7f:48:fe:89:00:13:4d:79:7e:b5:2f:5b:0b:e1:0c:a8: ab:92:ac:81:a1:6b:a9:6a:10:de:c4:06:9b:87:9e:b9:f8:18: 90:ab:9a:e6:ed:7e:eb:6d:31:63:df:23:6b:17:4b:3f:39:03: cc:a5:2e:bd:08:6a:7a:f7:38:be:3a:89:b6:22:a4:c6:3a:4a: 0e:80:32:de:a9:ea:3d:cf:ab:93:6c:96:19:c7:81:06:92:39: e3:ec:58:e6:78:e9:5b:9c:b7:a3:14:36:67:0f:3f:a2:5d:98: 92:67:6e:1c:8a:3c:75:58:cb:df:72:57:a5:8c:da:54:ed:1b: 72:a3:25:f7:c8:4c:71:0f:ca:2c:33:7d:f7:82:f7:93:7e:a6: 17:19:52:e2:58:72:36:d1:f9:6f:df:55:3f:41:a3:7c:da:fc: 7d:ee:c2:88:aa:45:5d:11:31:bc:90:cc:66:7b:33:77:6a:94: f9:70:c1:51:bb:ea:09:b7:f0:6a:c8:7d:59:13:e9:78:0e:b7: f5:8b:a0:10:fe:cc:e3:c1:00:54:c4:32:14:0b:03:69:49:6f: ba:77:95:91:11:99:42:e2:54:2d:0c:4b:78:74:1d:67:37:76: 70:0e:db:14:5a:a3:41:b9:1c:52:c5:9e:14:da:f0:9b:8e:3b: fa:a3:67:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKc4koVlKrC+Gj8WjeuygsvpU21swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRB MzA2QTUxMTAeFw0yNjA5MjgwNDM1NTFaFw0yNjA5MjkwNjQxNTFaMDMxMTAvBgNV BAMTKDNDNzNDN0M1MDAzQ0RDMzRFRkY3OTY3OUZDRjZCMjVEQjAwMUE4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGnzNrYvmKIt8DJ7ryjoOjY4s DGfXYayaBe7urJpr48POZGhfQtWDZwvaBUrjQaRJIUYd6KFyj+gQ3Q9LNqjCrlbH CPvO3VdFEWgIDL2MYT4V8l9aCEniwaGHkcOiv8bqVIk1sNUBhM7NS+7VbVENEc9l MPIcmiF0aClABoezta/+DZ0UwLXu7jUPy7YyoVK6fH+ylxaxTwOlZJjJJ367bk+Z koLxn5q+X4ERo+E2GAHMimr6xrammvIFqbObqTtXi8x06zJryJ1Geo9GJcnaUR67 R6Xaw09Cu73MFdufB0i84oWPQFk2uUO+UGDkfl5477J931+lefa2Ekv537gZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPHPHxQA83DTv95Z5/PayXbABqDowHwYDVR0j BBgwFoAUqCiUjl42V7u7AqcHNeBnVKMGpREwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGJhNmQwNzItODM2MS00ZGRmLTgwMGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1 RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRBMzA2QTUxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODI4OTQ4RTVFMzY1N0JCQkIwMkE3MDczNUUwNjc1NEEzMDZB NTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3 NTRBMzA2QTUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmqf0j+iQATTXl+tS9bC+EMqKuSrIGha6lq EN7EBpuHnrn4GJCrmubtfuttMWPfI2sXSz85A8ylLr0Ianr3OL46ibYipMY6Sg6A Mt6p6j3Pq5NslhnHgQaSOePsWOZ46Vuct6MUNmcPP6JdmJJnbhyKPHVYy99yV6WM 2lTtG3KjJffITHEPyiwzffeC95N+phcZUuJYcjbR+W/fVT9Bo3za/H3uwoiqRV0R MbyQzGZ7M3dqlPlwwVG76gm38GrIfVkT6XgOt/WLoBD+zOPBAFTEMhQLA2lJb7p3 lZERmULiVC0MS3h0HWc3dnAO2xRao0G5HFLFnhTa8JuOO/qjZ5M= -----END CERTIFICATE-----Generated at Mon Sep 28 23:21:55 2026 by rpki-client