$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft File: 82619591421B67CACDA4E6A0B166011B7E6D1D21.mft (raw, json) Hash identifier: u8/Fl2J2puqENN1Bw0G9I5Oa15akFYDEnSp1lKuo1Ck= Subject key identifier: D1:C8:1B:39:0B:CC:37:FA:B7:BD:CF:61:E2:55:2B:56:D0:84:F4:80 Authority key identifier: 82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21 Certificate issuer: /CN=82619591421B67CACDA4E6A0B166011B7E6D1D21 Certificate serial: 5E496A492E5C887E2993D88F69730B6E256575FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft Manifest number: BE Signing time: Tue 22 Sep 2026 02:03:58 +0000 Manifest this update: Tue 22 Sep 2026 01:58:58 +0000 Manifest next update: Wed 23 Sep 2026 05:23:58 +0000 Files and hashes: 1: 82619591421B67CACDA4E6A0B166011B7E6D1D21.crl (hash: 2c7UkG7oWiqMNZzFafbOopPdhNWHBtvQY/yNvAMX9ro=) 2: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: g/f5oiN6iiOkoRtweFIMN236eVeurXuFpLSe3yBaq5U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:49:6a:49:2e:5c:88:7e:29:93:d8:8f:69:73:0b:6e:25:65:75:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82619591421B67CACDA4E6A0B166011B7E6D1D21 Validity Not Before: Sep 22 01:58:58 2026 GMT Not After : Sep 23 05:23:58 2026 GMT Subject: CN=D1C81B390BCC37FAB7BDCF61E2552B56D084F480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:66:3d:ba:29:44:49:91:a3:06:17:29:23: 26:c0:08:0c:e3:ea:20:af:51:15:5b:bb:48:0b:07: 6c:21:7c:f6:e5:dd:0a:78:85:0e:a6:63:22:87:88: 09:28:72:15:91:be:2c:bd:5c:f8:f5:dd:e5:b9:9d: bf:51:1c:be:b5:21:07:e0:71:4c:e3:81:82:5e:4f: 60:13:e2:b3:29:4f:a5:5d:12:b4:45:01:20:41:f2: 82:33:f3:5c:6d:f6:d6:8d:7d:f5:bd:25:f5:82:ef: a0:73:fa:d8:ef:c6:4e:a3:42:eb:6e:6a:54:fa:de: 5e:0b:f8:b1:8b:80:a2:46:1d:74:17:da:9f:75:21: 29:74:81:b3:d4:b1:4e:e4:fc:d2:74:ec:78:ed:3e: bf:2f:db:bc:af:27:9c:8e:69:fb:ee:64:75:27:f7: aa:48:c0:44:52:4a:fe:77:73:d7:d5:c9:62:dc:10: 11:3f:dd:02:e1:0e:91:2b:bf:62:98:ed:f5:eb:b6: c7:37:bc:12:9f:de:25:15:13:c9:fc:02:4f:6e:76: 32:3b:6b:80:e5:20:35:6f:84:5c:2b:9e:fb:ba:24: 20:56:19:5e:8f:ab:54:87:3c:86:48:27:ad:92:8b: dd:5d:b7:b8:1c:d3:9e:8c:54:c2:d5:bd:cd:7e:7d: 98:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C8:1B:39:0B:CC:37:FA:B7:BD:CF:61:E2:55:2B:56:D0:84:F4:80 X509v3 Authority Key Identifier: keyid:82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6d:cc:b9:e7:1e:86:07:38:77:52:41:94:79:3a:da:51:14: 00:54:dd:50:c4:2e:38:36:a9:5c:a2:19:68:34:02:f2:ae:05: 9f:fa:fb:e8:9d:9d:6c:e7:ac:27:45:5b:35:bb:08:72:a3:84: 54:b6:9b:6c:11:f2:06:c2:81:6a:d9:0a:24:ed:e5:d7:39:b1: 90:38:79:4f:95:42:10:a7:ec:11:49:1b:52:9d:b8:85:bc:67: 58:e4:6d:ce:74:c1:dc:f6:1c:10:9e:27:4e:6d:b0:7f:80:70: 0e:4e:86:79:01:54:c7:f8:77:b1:ad:82:41:23:79:00:df:ce: d8:0a:21:8b:3a:d5:2a:87:7e:4b:30:db:5c:6d:1d:4d:26:8c: 22:b1:01:a3:32:e3:98:f9:cc:5e:63:78:7f:c2:a7:ed:f6:17: dc:da:4c:55:85:ac:72:e2:ce:e0:9d:b5:eb:3e:aa:3a:fb:86: a6:07:db:8c:b0:44:7d:b8:41:22:3f:c3:a6:36:e8:a3:88:1b: 9d:23:f9:6f:b3:2f:2c:06:19:af:69:3e:36:bc:11:17:16:84: e3:fa:5b:2c:1a:6b:a7:a5:38:10:6d:b1:56:30:5a:d0:54:14: 4c:c7:74:95:2f:d0:f9:8d:77:cd:d4:ad:87:fe:62:3a:1b:e3: 79:8d:f6:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXklqSS5ciH4pk9iPaXMLbiVldf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI2MTk1OTE0MjFCNjdDQUNEQTRFNkEwQjE2NjAxMUI3 RTZEMUQyMTAeFw0yNjA5MjIwMTU4NThaFw0yNjA5MjMwNTIzNThaMDMxMTAvBgNV BAMTKEQxQzgxQjM5MEJDQzM3RkFCN0JEQ0Y2MUUyNTUyQjU2RDA4NEY0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAmY9uilESZGjBhcpIybACAzj 6iCvURVbu0gLB2whfPbl3Qp4hQ6mYyKHiAkochWRviy9XPj13eW5nb9RHL61IQfg cUzjgYJeT2AT4rMpT6VdErRFASBB8oIz81xt9taNffW9JfWC76Bz+tjvxk6jQutu alT63l4L+LGLgKJGHXQX2p91ISl0gbPUsU7k/NJ07HjtPr8v27yvJ5yOafvuZHUn 96pIwERSSv53c9fVyWLcEBE/3QLhDpErv2KY7fXrtsc3vBKf3iUVE8n8Ak9udjI7 a4DlIDVvhFwrnvu6JCBWGV6Pq1SHPIZIJ62Si91dt7gc056MVMLVvc1+fZh9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0cgbOQvMN/q3vc9h4lUrVtCE9IAwHwYDVR0j BBgwFoAUgmGVkUIbZ8rNpOagsWYBG35tHSEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmNzhiZDQtYzE5Yi00ZDQwLWFhNTQtZWQ4ZDdiYzc3MmNhLzAvODI2MTk1OTE0 MjFCNjdDQUNEQTRFNkEwQjE2NjAxMUI3RTZEMUQyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MjYxOTU5MTQyMUI2N0NBQ0RBNEU2QTBCMTY2MDExQjdFNkQx RDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvODI2MTk1OTE0MjFCNjdDQUNEQTRFNkEwQjE2NjAx MUI3RTZEMUQyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxtzLnnHoYHOHdSQZR5OtpRFABU3VDELjg2 qVyiGWg0AvKuBZ/6++idnWznrCdFWzW7CHKjhFS2m2wR8gbCgWrZCiTt5dc5sZA4 eU+VQhCn7BFJG1KduIW8Z1jkbc50wdz2HBCeJ05tsH+AcA5OhnkBVMf4d7GtgkEj eQDfztgKIYs61SqHfksw21xtHU0mjCKxAaMy45j5zF5jeH/Cp+32F9zaTFWFrHLi zuCdtes+qjr7hqYH24ywRH24QSI/w6Y26KOIG50j+W+zLywGGa9pPja8ERcWhOP6 Wywaa6elOBBtsVYwWtBUFEzHdJUv0PmNd83UrYf+Yjob43mN9hQ= -----END CERTIFICATE-----Generated at Tue Sep 22 16:36:17 2026 by rpki-client