$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft File: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft (raw, json) Hash identifier: inBY2DzQ3bvlrswIBb4H0zq49INLDA5nPwhBN2HzgSw= Subject key identifier: 95:1C:D5:38:1F:66:41:95:45:09:18:B6:2E:2D:9B:79:F1:F9:10:F7 Authority key identifier: 82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F Certificate issuer: /CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Certificate serial: 6FC78E42C29F4E7917A407A72516D857094AA0BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 17:07:47 +0000 Manifest this update: Mon 21 Sep 2026 17:02:47 +0000 Manifest next update: Tue 22 Sep 2026 18:24:47 +0000 Files and hashes: 1: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: J9Ppr3YgZsd8hgKwRlpPASzO8XUT6qbE4ua4z+T5rRI=) 2: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: sAJt4KOFRGK6/p9H5qEjBboJGlbpIE0n8tuPpLq/ACA=) 3: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: dcn7JjA5cMl377hf4qH/uXB97TvgtDVrGSS8WaneiPA=) 4: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl (hash: j+D4YKPbrtI8Tuaz4J95UtP5eqqOTX2cUIRkV14QvCM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c7:8e:42:c2:9f:4e:79:17:a4:07:a7:25:16:d8:57:09:4a:a0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Validity Not Before: Sep 21 17:02:47 2026 GMT Not After : Sep 22 18:24:47 2026 GMT Subject: CN=951CD5381F664195450918B62E2D9B79F1F910F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:cd:e8:90:d9:a5:14:af:b7:45:28:5a:2c: c5:1b:89:d0:0d:e0:4b:65:ed:45:0d:b6:36:0b:c6: ea:3f:a7:d1:96:b2:2a:10:e9:25:ce:40:79:3c:40: 5b:1e:64:fd:19:5b:7d:af:96:24:16:cd:68:28:8a: 6a:95:d5:ff:40:24:6c:73:f2:0b:aa:0c:ec:bf:62: e9:63:f1:47:50:90:48:82:44:af:18:12:4e:fa:50: 6d:93:36:cc:e5:8c:e2:59:41:b2:c3:14:64:d5:14: 40:c1:1c:19:ae:c5:75:85:85:aa:38:d8:52:df:39: c4:b8:6b:f5:58:05:17:05:e3:69:17:54:cb:05:4c: 96:de:58:89:e0:47:c6:62:f7:f3:3f:25:e4:7b:d8: 32:2f:1f:0b:19:24:e5:cf:76:3e:64:7d:20:a3:3e: c5:cc:28:95:f2:47:11:28:96:b0:46:8f:ef:af:47: 9a:96:53:5c:81:e1:2e:e9:e9:ac:45:94:eb:2e:ce: 12:64:a7:eb:6e:5e:45:46:3c:19:a6:a5:8c:b6:3e: 7e:f5:d7:06:29:24:69:c4:69:c5:d0:30:5c:c4:3f: cb:9a:8d:ec:a6:4a:7c:64:45:2f:00:0a:34:7c:63: 8f:66:4d:19:8e:d8:61:2f:b9:e0:52:de:62:b1:87: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1C:D5:38:1F:66:41:95:45:09:18:B6:2E:2D:9B:79:F1:F9:10:F7 X509v3 Authority Key Identifier: keyid:82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e6:9d:47:6f:df:a6:3d:a2:e4:2d:05:ed:de:cd:97:79:c5: 0d:ef:b2:17:d5:1e:15:7c:72:7e:ad:ff:88:7d:05:2a:06:b7: 93:4d:45:93:33:26:b8:96:02:dc:91:d7:f5:f4:10:e3:7f:87: 28:40:75:24:0a:e3:cc:46:cd:ce:49:4a:4a:ab:f5:2e:02:60: 9b:95:14:0d:33:0e:a5:34:bf:03:b1:3c:a9:26:3f:7e:59:65: 4c:c2:4d:03:f6:ce:78:57:f0:8d:bf:ba:60:8d:80:d2:a3:4b: 0c:3e:a1:db:45:62:16:d6:9d:ce:17:ea:57:1e:4e:1e:4e:2a: 28:60:80:f7:73:f7:70:88:35:6b:1e:77:24:5a:6f:88:2c:3a: 86:67:95:8c:00:0c:25:ff:fd:f4:84:93:9b:41:f1:ad:ec:98: e7:c4:cf:89:d4:4c:7a:be:4d:eb:ea:f2:1b:33:c2:0e:95:49: 21:d4:eb:6c:c6:de:e0:8c:1e:1c:3e:a6:b8:43:b1:ef:c3:f5: 80:8c:03:37:4e:c9:71:da:ac:f1:8c:d1:49:b2:05:1b:65:2f: 1f:05:db:d4:5d:05:f1:92:3e:95:0c:93:11:5a:2a:cb:ac:77: 70:30:33:5b:c5:ca:71:c6:44:72:73:ee:53:63:4f:f7:9e:ea: ab:a2:af:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb8eOQsKfTnkXpAenJRbYVwlKoLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVB MUM0MEY2RjAeFw0yNjA5MjExNzAyNDdaFw0yNjA5MjIxODI0NDdaMDMxMTAvBgNV BAMTKDk1MUNENTM4MUY2NjQxOTU0NTA5MThCNjJFMkQ5Qjc5RjFGOTEwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVs3okNmlFK+3RShaLMUbidAN 4Etl7UUNtjYLxuo/p9GWsioQ6SXOQHk8QFseZP0ZW32vliQWzWgoimqV1f9AJGxz 8guqDOy/Yulj8UdQkEiCRK8YEk76UG2TNszljOJZQbLDFGTVFEDBHBmuxXWFhao4 2FLfOcS4a/VYBRcF42kXVMsFTJbeWIngR8Zi9/M/JeR72DIvHwsZJOXPdj5kfSCj PsXMKJXyRxEolrBGj++vR5qWU1yB4S7p6axFlOsuzhJkp+tuXkVGPBmmpYy2Pn71 1wYpJGnEacXQMFzEP8uajeymSnxkRS8ACjR8Y49mTRmO2GEvueBS3mKxh4DpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlRzVOB9mQZVFCRi2Li2befH5EPcwHwYDVR0j BBgwFoAUgotiPppEPot+ldSli14pZaHED28wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFmMGY0MjMtM2JlZC00OTM4LTlmODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5 QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVBMUM0MEY2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjhCNjIzRTlBNDQzRThCN0U5NUQ0QTU4QjVFMjk2NUExQzQw RjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5 NjVBMUM0MEY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLmnUdv36Y9ouQtBe3ezZd5xQ3vshfVHhV8 cn6t/4h9BSoGt5NNRZMzJriWAtyR1/X0EON/hyhAdSQK48xGzc5JSkqr9S4CYJuV FA0zDqU0vwOxPKkmP35ZZUzCTQP2znhX8I2/umCNgNKjSww+odtFYhbWnc4X6lce Th5OKihggPdz93CINWsedyRab4gsOoZnlYwADCX//fSEk5tB8a3smOfEz4nUTHq+ Tevq8hszwg6VSSHU62zG3uCMHhw+prhDse/D9YCMAzdOyXHarPGM0UmyBRtlLx8F 29RdBfGSPpUMkxFaKsusd3AwM1vFynHGRHJz7lNjT/ee6quir4s= -----END CERTIFICATE-----Generated at Tue Sep 22 05:17:14 2026 by rpki-client