$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft File: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft (raw, json) Hash identifier: 9dyO6aYuoSEt3X9lchGwxjLmwq88tjTCekSAhjAMxUM= Subject key identifier: 21:B6:83:C6:E0:20:EC:6C:33:BF:CF:9D:2D:A6:9C:DB:46:2A:1D:0C Authority key identifier: 88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 Certificate issuer: /CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Certificate serial: 70B3BF5DEFF1147C9FB069F86B6B071238B78278 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 10:09:04 +0000 Manifest this update: Tue 22 Sep 2026 10:04:04 +0000 Manifest next update: Wed 23 Sep 2026 13:34:04 +0000 Files and hashes: 1: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl (hash: DyQvH0ZwHKnEwDgBTnkOz87JCNIawAlxeJWU9xMU5Y8=) 2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: wyx8uHuSuItOBpo5Sy4M68blXovUWUC/+3CgkbnFTv8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 13:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b3:bf:5d:ef:f1:14:7c:9f:b0:69:f8:6b:6b:07:12:38:b7:82:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Validity Not Before: Sep 22 10:04:04 2026 GMT Not After : Sep 23 13:34:04 2026 GMT Subject: CN=21B683C6E020EC6C33BFCF9D2DA69CDB462A1D0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:9f:50:ab:5d:66:f9:65:f6:07:a2:44:a5: 84:07:7f:4a:d9:50:dc:45:71:0d:17:e9:da:f3:0b: ed:34:6a:4d:7b:05:62:43:b9:43:74:10:7a:5f:c5: fe:35:4b:92:ec:d1:db:dc:5a:f9:7a:d1:3c:23:64: 0a:17:85:58:fd:b4:78:be:db:29:26:c6:fb:9c:7e: 77:47:5f:c5:70:b5:63:09:96:7b:6e:6b:a5:54:44: b4:4d:b7:fc:0c:9f:85:e1:56:8b:7b:ac:eb:b6:28: c4:01:7b:84:51:82:57:51:21:d7:c8:97:56:0a:62: bd:a6:4a:67:fb:9d:46:65:89:fe:34:3c:0d:07:d6: a5:53:b1:b0:23:c0:33:b3:d0:32:e5:6c:00:11:c4: 49:fc:33:4d:99:d9:96:a4:d6:fc:03:7b:38:4d:f7: 94:05:74:3a:92:7b:29:0f:19:0d:a2:d3:6d:64:0e: da:d5:2d:ef:5e:4e:78:97:62:d2:2c:30:eb:e8:e9: 59:42:85:ab:e3:78:57:8a:5c:f7:59:bd:ee:c8:00: 6b:1e:10:64:a6:ae:a2:52:de:d6:79:20:63:d3:26: 5d:b3:a2:79:c7:55:fc:98:37:36:1b:d9:3c:8b:70: 29:a3:79:91:71:7a:d1:3a:f9:af:3c:67:e7:71:45: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B6:83:C6:E0:20:EC:6C:33:BF:CF:9D:2D:A6:9C:DB:46:2A:1D:0C X509v3 Authority Key Identifier: keyid:88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:12:5e:98:4c:23:c6:cd:3e:98:5b:09:c5:21:25:e7:f8:0e: ea:5f:70:df:ac:06:47:8e:f9:85:b1:27:75:33:4f:fe:28:ef: 62:c2:00:60:50:a5:c6:c5:ac:91:58:36:65:d3:2f:d7:f9:b1: 22:65:7d:38:21:66:1a:25:2c:4c:c7:34:76:78:e1:f1:78:7b: d2:82:ed:dd:c6:ec:57:62:cf:9c:63:2e:66:f7:43:30:a3:39: 86:7d:be:53:8e:7f:58:51:bf:6e:9e:76:67:64:18:b5:bc:dc: 11:37:a8:f8:d3:74:e7:18:9f:ef:c6:40:e1:6c:40:4c:9d:4e: 3a:52:9f:ea:f9:10:b5:51:c8:2f:ff:49:4f:c9:1c:99:8a:3c: 6b:72:c2:5f:19:2f:8c:84:eb:dd:2f:e0:a2:c9:fc:28:ea:27: e8:09:f0:13:0f:ac:95:a2:a2:d9:33:d4:a1:da:56:bc:d7:42: e4:9d:9b:7d:a6:b5:40:a9:6b:a0:9b:94:6a:3e:32:0a:a5:fa: 91:24:4f:88:3f:08:3f:05:3b:55:7a:9e:1b:0f:4d:56:66:d5: 82:f2:6d:bf:a0:5d:27:40:aa:ee:7e:62:81:d5:e7:bb:92:10: 13:cf:3e:db:ef:f8:bf:34:49:41:76:f3:55:7c:8e:e8:6d:f0: 8a:65:2a:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLO/Xe/xFHyfsGn4a2sHEji3gngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5 MEVGREY1MzAeFw0yNjA5MjIxMDA0MDRaFw0yNjA5MjMxMzM0MDRaMDMxMTAvBgNV BAMTKDIxQjY4M0M2RTAyMEVDNkMzM0JGQ0Y5RDJEQTY5Q0RCNDYyQTFEMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi8p9Qq11m+WX2B6JEpYQHf0rZ UNxFcQ0X6drzC+00ak17BWJDuUN0EHpfxf41S5Ls0dvcWvl60TwjZAoXhVj9tHi+ 2ykmxvucfndHX8VwtWMJlntua6VURLRNt/wMn4XhVot7rOu2KMQBe4RRgldRIdfI l1YKYr2mSmf7nUZlif40PA0H1qVTsbAjwDOz0DLlbAARxEn8M02Z2Zak1vwDezhN 95QFdDqSeykPGQ2i021kDtrVLe9eTniXYtIsMOvo6VlChavjeFeKXPdZve7IAGse EGSmrqJS3tZ5IGPTJl2zonnHVfyYNzYb2TyLcCmjeZFxetE6+a88Z+dxRXdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIbaDxuAg7Gwzv8+dLaac20YqHQwwHwYDVR0j BBgwFoAUiEeP3KwWWxWepa/f1cCtgJDv31MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZiNDY2YzYtMzc0My00OTVmLWIxYTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENB QzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5MEVGREY1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODQ3OEZEQ0FDMTY1QjE1OUVBNUFGREZENUMwQUQ4MDkwRUZE RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFE ODA5MEVGREY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMSXphMI8bNPphbCcUhJef4DupfcN+sBkeO +YWxJ3UzT/4o72LCAGBQpcbFrJFYNmXTL9f5sSJlfTghZholLEzHNHZ44fF4e9KC 7d3G7Fdiz5xjLmb3QzCjOYZ9vlOOf1hRv26edmdkGLW83BE3qPjTdOcYn+/GQOFs QEydTjpSn+r5ELVRyC//SU/JHJmKPGtywl8ZL4yE690v4KLJ/CjqJ+gJ8BMPrJWi otkz1KHaVrzXQuSdm32mtUCpa6CblGo+Mgql+pEkT4g/CD8FO1V6nhsPTVZm1YLy bb+gXSdAqu5+YoHV57uSEBPPPtvv+L80SUF281V8juht8IplKgA= -----END CERTIFICATE-----Generated at Wed Sep 23 05:03:09 2026 by rpki-client