$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft File: 988BEA205B597B525439E1C7DF548E148BDF5DE3.mft (raw, json) Hash identifier: fMNkandqr/RV2zljng1L706lqgc6pScfSFAzlllE3oQ= Subject key identifier: 0C:70:23:27:2D:08:42:67:2A:BB:52:DC:8D:23:A5:61:1B:3F:B4:A0 Authority key identifier: 98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 Certificate issuer: /CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Certificate serial: 1E48B70C000F9FE39C3AF5E71146B1B3FEAFBFFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 23:58:04 +0000 Manifest this update: Wed 02 Sep 2026 23:53:04 +0000 Manifest next update: Fri 04 Sep 2026 01:34:04 +0000 Files and hashes: 1: 988BEA205B597B525439E1C7DF548E148BDF5DE3.crl (hash: Mq0mKy4yQ8xlfgKRM2kPG6F6fgzyKrxxPwgx3v8WU9s=) 2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: KyMbOLP8QXcvGQ9MezBY9LjyWg2SLWeZUDh4Qo5TXWQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:48:b7:0c:00:0f:9f:e3:9c:3a:f5:e7:11:46:b1:b3:fe:af:bf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Validity Not Before: Sep 2 23:53:04 2026 GMT Not After : Sep 4 01:34:04 2026 GMT Subject: CN=0C7023272D0842672ABB52DC8D23A5611B3FB4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8b:59:96:2a:8c:b6:63:9b:24:83:56:15:35: e6:16:b3:8e:1f:7b:9e:fc:9f:02:a6:26:df:70:4b: 2b:02:8a:39:bc:8e:66:3f:8d:70:10:4c:3a:02:0d: b2:42:e4:8e:b4:e2:fb:f5:54:63:29:32:9c:c6:34: ef:0a:8f:c6:56:39:4f:a5:04:13:cf:57:42:2b:7d: da:06:83:68:b4:ca:aa:b6:84:9d:56:fd:9d:63:33: 64:81:3f:77:81:7d:e2:3d:3f:a0:03:c8:b6:00:ae: 93:03:3e:d2:5b:b5:31:1f:34:83:dc:14:c4:cc:ee: c6:14:a3:cf:b2:a3:bc:43:31:aa:bd:d0:fb:73:e4: 68:3c:5d:4c:6d:84:a9:a0:71:c9:a2:f9:b5:36:80: 86:5b:fc:58:71:86:4f:d8:06:bf:2e:9d:d6:a6:fb: c4:71:3a:15:34:4e:8e:67:5e:e7:d2:1b:2e:07:94: e9:f9:6a:3f:94:9d:16:83:0f:14:c7:02:8e:db:be: 9b:e2:33:1b:2f:b8:56:27:9e:1a:74:95:ff:8d:67: 88:47:e6:41:fe:f7:f0:5d:6f:9d:20:75:64:64:f6: a6:6d:41:e7:ff:e8:e6:7a:57:cb:bb:21:48:04:87: 79:17:c5:8f:28:d5:b5:6d:26:b6:eb:53:07:87:bb: f3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:70:23:27:2D:08:42:67:2A:BB:52:DC:8D:23:A5:61:1B:3F:B4:A0 X509v3 Authority Key Identifier: keyid:98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2b:92:da:31:38:74:b1:ee:da:7b:2d:83:27:d3:b7:30:30: 1a:4d:8d:6e:54:3e:b2:a9:47:89:a4:2e:02:1f:9e:99:74:ad: 2e:76:bb:a3:88:bf:4e:f2:a5:33:85:d2:7d:77:2e:bc:50:0a: af:00:b5:a5:4a:0f:b3:f0:11:1e:82:7e:c8:b8:7a:7b:77:4c: e0:18:18:4c:12:bf:3a:7d:93:99:34:04:da:36:bf:5e:49:b2: c2:86:4d:d4:f3:37:c6:cb:58:e2:68:66:5b:9a:03:55:60:d4: 0a:c8:e4:ec:b3:85:54:a3:41:01:3f:ed:ab:23:b9:8b:f3:cc: 18:2d:49:9d:7a:ee:37:f7:9b:35:92:9c:0a:2e:45:31:7c:b9: 77:f6:d6:3a:ab:b1:45:52:5c:9e:26:ae:36:aa:5d:58:d4:f7: d4:67:7e:aa:29:e3:0f:7d:ab:c0:fc:ff:9d:8c:67:9f:4d:d0: 44:2a:4f:75:0c:23:6b:69:85:c9:17:85:20:6d:15:93:a1:65: 86:37:14:fa:8b:c3:f8:d7:92:8f:e5:be:a7:92:b3:b1:53:fd: 23:ac:56:9f:5c:35:1b:14:dc:fb:f2:a4:23:12:db:61:d4:aa: 6f:e6:2f:fd:6d:68:90:21:5b:2b:1b:90:55:1d:8f:9b:31:8d: 0a:5f:7e:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHki3DAAPn+OcOvXnEUaxs/6vv/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4 QkRGNURFMzAeFw0yNjA5MDIyMzUzMDRaFw0yNjA5MDQwMTM0MDRaMDMxMTAvBgNV BAMTKDBDNzAyMzI3MkQwODQyNjcyQUJCNTJEQzhEMjNBNTYxMUIzRkI0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQi1mWKoy2Y5skg1YVNeYWs44f e578nwKmJt9wSysCijm8jmY/jXAQTDoCDbJC5I604vv1VGMpMpzGNO8Kj8ZWOU+l BBPPV0IrfdoGg2i0yqq2hJ1W/Z1jM2SBP3eBfeI9P6ADyLYArpMDPtJbtTEfNIPc FMTM7sYUo8+yo7xDMaq90Ptz5Gg8XUxthKmgccmi+bU2gIZb/Fhxhk/YBr8undam +8RxOhU0To5nXufSGy4HlOn5aj+UnRaDDxTHAo7bvpviMxsvuFYnnhp0lf+NZ4hH 5kH+9/Bdb50gdWRk9qZtQef/6OZ6V8u7IUgEh3kXxY8o1bVtJrbrUweHu/OTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDHAjJy0IQmcqu1LcjSOlYRs/tKAwHwYDVR0j BBgwFoAUmIvqIFtZe1JUOeHH31SOFIvfXeMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBhNzhjMDYtMWQ2ZS00M2I2LWJmMzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1 QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4QkRGNURFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODhCRUEyMDVCNTk3QjUyNTQzOUUxQzdERjU0OEUxNDhCREY1 REUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhF MTQ4QkRGNURFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcrktoxOHSx7tp7LYMn07cwMBpNjW5UPrKp R4mkLgIfnpl0rS52u6OIv07ypTOF0n13LrxQCq8AtaVKD7PwER6Cfsi4ent3TOAY GEwSvzp9k5k0BNo2v15JssKGTdTzN8bLWOJoZluaA1Vg1ArI5OyzhVSjQQE/7asj uYvzzBgtSZ167jf3mzWSnAouRTF8uXf21jqrsUVSXJ4mrjaqXVjU99Rnfqop4w99 q8D8/52MZ59N0EQqT3UMI2tphckXhSBtFZOhZYY3FPqLw/jXko/lvqeSs7FT/SOs Vp9cNRsU3PvypCMS22HUqm/mL/1taJAhWysbkFUdj5sxjQpffiE= -----END CERTIFICATE-----Generated at Thu Sep 3 07:37:44 2026 by rpki-client