$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft File: 83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft (raw, json) Hash identifier: +3xV4NdOhMAAPSCgINMbblmFUNkCYLQmZo0phozzBW8= Subject key identifier: 9A:EC:F6:B8:11:EA:9B:2D:5B:70:F9:6E:04:4E:22:9F:78:56:AB:5B Authority key identifier: 83:C5:DA:82:3B:49:3E:A9:7E:C4:89:00:03:D1:D6:60:CA:EA:5E:D2 Certificate issuer: /CN=83C5DA823B493EA97EC4890003D1D660CAEA5ED2 Certificate serial: 4021DD26DFABEB19F1592FB5D4F556041623F6CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft Manifest number: BF Signing time: Sun 20 Sep 2026 21:33:39 +0000 Manifest this update: Sun 20 Sep 2026 21:28:39 +0000 Manifest next update: Tue 22 Sep 2026 00:52:39 +0000 Files and hashes: 1: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: Pl9ASfx3Yd6SHdsYRmX1Tr27V4CYohbU5XT4mL5KknA=) 2: 83C5DA823B493EA97EC4890003D1D660CAEA5ED2.crl (hash: LdmjBStGEOCiawRmLz7/B5koeCIyhqCE+B2A9eDv7Yg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.crl rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:21:dd:26:df:ab:eb:19:f1:59:2f:b5:d4:f5:56:04:16:23:f6:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83C5DA823B493EA97EC4890003D1D660CAEA5ED2 Validity Not Before: Sep 20 21:28:39 2026 GMT Not After : Sep 22 00:52:39 2026 GMT Subject: CN=9AECF6B811EA9B2D5B70F96E044E229F7856AB5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:12:4e:69:54:99:36:a1:ee:f0:30:e2:72: 0c:cc:8a:c4:9d:d1:92:fe:b1:69:76:b6:14:de:7c: 1c:05:bc:f9:01:87:4e:2a:e4:4f:32:f1:d8:de:32: 11:73:65:4b:b7:e4:7a:74:5f:8c:d2:ad:69:b8:c2: 74:22:15:04:c3:74:ae:04:17:04:9e:b7:ea:b8:0c: 04:4d:c7:39:8c:34:b3:ac:85:60:25:55:f2:c3:3c: 3d:a8:8e:f7:82:1e:32:65:19:de:ce:09:38:e8:3d: cd:41:9a:a5:ce:64:7a:8f:43:58:1e:c9:e6:4a:72: 7a:18:0b:9a:6e:c1:14:0d:d3:49:44:22:41:49:00: 19:30:f0:12:a3:7e:10:54:ae:56:e7:5c:32:4a:f2: 06:60:05:25:3a:2e:48:ec:37:18:cf:b8:db:21:c8: f2:f4:bc:cb:58:e7:e5:f1:01:da:7a:68:dd:08:05: b1:9f:de:54:48:8f:50:96:2b:40:30:0d:d9:30:9f: ef:33:88:45:36:72:c7:e2:55:ac:2c:f1:ab:ba:5e: 18:99:63:41:40:29:49:c0:5a:ff:0b:a7:dd:17:b5: 54:90:f1:e1:91:17:e0:e5:96:48:19:84:ec:73:68: 44:eb:d8:24:ff:d2:9b:67:a8:6a:78:5b:da:13:6f: 3d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EC:F6:B8:11:EA:9B:2D:5B:70:F9:6E:04:4E:22:9F:78:56:AB:5B X509v3 Authority Key Identifier: keyid:83:C5:DA:82:3B:49:3E:A9:7E:C4:89:00:03:D1:D6:60:CA:EA:5E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:09:ec:ad:58:d8:5b:1e:4c:cd:db:12:4d:1f:06:b8:53:59: c5:49:3d:b1:03:f0:75:27:a9:20:4d:7f:f9:5a:0a:80:31:32: 22:3d:0a:f7:2f:32:10:37:eb:c3:01:94:e0:7a:44:d5:af:aa: ea:95:e5:71:02:12:13:9d:0c:1a:f4:4a:87:33:24:69:2a:e0: 8b:58:1b:27:41:0f:1e:a6:3a:b5:2a:90:3d:0f:4e:82:08:23: 47:05:38:8b:e6:3d:82:56:31:0b:3c:33:10:dc:d9:04:c0:0f: 70:22:a7:74:6a:5e:63:a6:34:20:f6:67:6d:e1:76:a6:7c:b9: 28:88:29:7c:a2:a5:cd:cd:f5:a5:44:f2:46:0a:36:25:40:58: 66:5c:5c:96:16:b2:50:e9:5e:78:c3:3a:75:59:93:4b:c5:14: 74:e0:55:5c:16:4c:b0:60:1c:65:bd:e0:18:d9:c2:b9:84:11: 73:ff:81:ef:32:d5:7e:78:09:fb:59:47:dd:f1:c8:33:b4:ae: d8:10:94:e0:f7:52:66:3a:40:6e:b7:1b:26:ff:37:25:e1:64: cf:0d:8a:35:3c:b1:b9:43:b7:9b:be:10:7c:16:a9:d6:f2:72: 08:9c:26:8f:68:53:79:ad:38:66:db:e5:fe:18:fe:0b:3a:a0: 95:6d:0d:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCHdJt+r6xnxWS+11PVWBBYj9swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNDNURBODIzQjQ5M0VBOTdFQzQ4OTAwMDNEMUQ2NjBD QUVBNUVEMjAeFw0yNjA5MjAyMTI4MzlaFw0yNjA5MjIwMDUyMzlaMDMxMTAvBgNV BAMTKDlBRUNGNkI4MTFFQTlCMkQ1QjcwRjk2RTA0NEUyMjlGNzg1NkFCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHlBJOaVSZNqHu8DDicgzMisSd 0ZL+sWl2thTefBwFvPkBh04q5E8y8djeMhFzZUu35Hp0X4zSrWm4wnQiFQTDdK4E FwSet+q4DARNxzmMNLOshWAlVfLDPD2ojveCHjJlGd7OCTjoPc1BmqXOZHqPQ1ge yeZKcnoYC5puwRQN00lEIkFJABkw8BKjfhBUrlbnXDJK8gZgBSU6LkjsNxjPuNsh yPL0vMtY5+XxAdp6aN0IBbGf3lRIj1CWK0AwDdkwn+8ziEU2csfiVaws8au6XhiZ Y0FAKUnAWv8Lp90XtVSQ8eGRF+DllkgZhOxzaETr2CT/0ptnqGp4W9oTbz3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmuz2uBHqmy1bcPluBE4in3hWq1swHwYDVR0j BBgwFoAUg8XagjtJPql+xIkAA9HWYMrqXtIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmIyNWYwZWItM2M0ZC00ZmM3LWIzYTQtYWRiMjI5N2RlNmNmLzAvODNDNURBODIz QjQ5M0VBOTdFQzQ4OTAwMDNEMUQ2NjBDQUVBNUVEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84M0M1REE4MjNCNDkzRUE5N0VDNDg5MDAwM0QxRDY2MENBRUE1 RUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvODNDNURBODIzQjQ5M0VBOTdFQzQ4OTAwMDNEMUQ2 NjBDQUVBNUVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMJ7K1Y2FseTM3bEk0fBrhTWcVJPbED8HUn qSBNf/laCoAxMiI9CvcvMhA368MBlOB6RNWvquqV5XECEhOdDBr0SoczJGkq4ItY GydBDx6mOrUqkD0PToIII0cFOIvmPYJWMQs8MxDc2QTAD3Aip3RqXmOmNCD2Z23h dqZ8uSiIKXyipc3N9aVE8kYKNiVAWGZcXJYWslDpXnjDOnVZk0vFFHTgVVwWTLBg HGW94BjZwrmEEXP/ge8y1X54CftZR93xyDO0rtgQlOD3UmY6QG63Gyb/NyXhZM8N ijU8sblDt5u+EHwWqdbycgicJo9oU3mtOGbb5f4Y/gs6oJVtDWc= -----END CERTIFICATE-----Generated at Mon Sep 21 15:36:03 2026 by rpki-client