$ rpki-client -vvvf rpki-rsync.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/83746D5838134AE55050C41F5D5CEB0C3F839FAA.mft File: 83746D5838134AE55050C41F5D5CEB0C3F839FAA.mft (raw, json) Hash identifier: D5SugQZwk727IgARcFz28o5hpe0gu7mA7UPikX42MLU= Subject key identifier: 7A:F0:A3:C5:B3:B0:4A:15:2D:A8:F6:04:FF:A7:16:9C:04:C1:4D:38 Authority key identifier: 83:74:6D:58:38:13:4A:E5:50:50:C4:1F:5D:5C:EB:0C:3F:83:9F:AA Certificate issuer: /CN=83746D5838134AE55050C41F5D5CEB0C3F839FAA Certificate serial: 31AADBF2AF9A34726F26805FA89EF0084224B5DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83746D5838134AE55050C41F5D5CEB0C3F839FAA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/83746D5838134AE55050C41F5D5CEB0C3F839FAA.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 12:08:24 +0000 Manifest this update: Wed 02 Sep 2026 12:03:24 +0000 Manifest next update: Thu 03 Sep 2026 14:36:24 +0000 Files and hashes: 1: 83746D5838134AE55050C41F5D5CEB0C3F839FAA.crl (hash: yO3srZFgOCkI6FzPfigXEeyuiPFXFQlS4I+ud9duVts=) 2: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: QV1AmdEqJoduwfMKnjSO4CyHE2Sz08SjmQ94K3Z6ddA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/83746D5838134AE55050C41F5D5CEB0C3F839FAA.crl rsync://rpki-rsync.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/83746D5838134AE55050C41F5D5CEB0C3F839FAA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83746D5838134AE55050C41F5D5CEB0C3F839FAA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 14:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:aa:db:f2:af:9a:34:72:6f:26:80:5f:a8:9e:f0:08:42:24:b5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83746D5838134AE55050C41F5D5CEB0C3F839FAA Validity Not Before: Sep 2 12:03:24 2026 GMT Not After : Sep 3 14:36:24 2026 GMT Subject: CN=7AF0A3C5B3B04A152DA8F604FFA7169C04C14D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:27:4d:44:66:fc:1d:0d:1d:b9:ec:ea:af: 03:32:ae:0d:db:b1:35:c6:6a:03:ec:64:41:ab:cf: 60:93:51:15:6e:53:54:2c:69:db:d3:12:d0:30:6b: fe:32:a5:8a:9c:bc:e5:6b:92:4d:f3:14:df:e8:ec: 08:36:86:d5:30:23:ad:dc:03:53:81:17:aa:f3:a1: 06:7f:5d:a5:fd:47:ba:80:c6:9c:03:e1:fe:fe:33: 8e:16:84:bb:d9:1d:05:0d:24:74:10:46:7c:15:9d: b7:8c:e4:b4:b6:6c:15:87:0a:3f:85:fe:80:4b:a9: 51:e6:37:3e:4a:d0:e9:48:ea:84:59:26:9b:d8:a9: 00:15:df:3c:7c:aa:d8:f0:5e:df:d1:4f:fc:b5:d9: 26:b5:c0:be:1f:89:67:b9:b5:f5:d6:54:47:ca:d6: df:8a:2d:63:fa:80:d1:91:97:f0:8f:8b:d7:4e:3d: 67:72:dd:03:e2:c0:70:a6:63:8f:7a:26:39:88:89: a0:39:4f:4a:0f:9a:ae:e4:31:4d:e8:9e:54:6a:d7: e4:d4:3d:0f:8b:4d:ec:f2:53:62:d3:a7:5e:f0:8a: 15:77:c9:bb:63:2f:1f:de:ac:1d:a6:a1:0d:a2:07: c1:1a:fd:f9:71:4e:57:53:7f:79:63:65:f4:55:99: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F0:A3:C5:B3:B0:4A:15:2D:A8:F6:04:FF:A7:16:9C:04:C1:4D:38 X509v3 Authority Key Identifier: keyid:83:74:6D:58:38:13:4A:E5:50:50:C4:1F:5D:5C:EB:0C:3F:83:9F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/83746D5838134AE55050C41F5D5CEB0C3F839FAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83746D5838134AE55050C41F5D5CEB0C3F839FAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/83746D5838134AE55050C41F5D5CEB0C3F839FAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:93:27:13:a0:d3:66:61:1d:41:8f:3c:ba:ed:db:b0:24:b0: e1:9c:b8:7e:d2:e6:06:eb:b8:92:a2:e4:a7:a4:87:44:f2:db: fe:78:b8:32:91:52:3b:15:46:b3:11:27:58:92:0a:62:4f:72: a8:98:5f:07:58:a9:96:f9:12:a1:e5:a0:08:c9:f8:8e:4e:f7: cf:27:30:7f:a2:e0:66:cf:e5:41:92:5c:99:4a:16:23:ec:46: 7e:b4:a2:ac:d7:f2:44:fc:b8:32:fe:0d:23:12:e1:4d:d7:b3: 5c:f8:5a:3d:43:ca:03:59:82:20:74:2c:1a:34:3e:5b:e1:75: ba:ce:eb:13:96:d6:0b:9e:7f:99:8e:27:a4:33:8e:32:e1:17: 16:15:26:8d:c8:34:5f:07:83:cf:c2:71:02:a9:1f:c5:5f:c8: d6:77:53:52:73:b7:6b:61:a5:34:f9:15:6c:80:cb:0c:0e:bc: 6f:01:07:57:d5:b0:e3:b1:df:c8:e0:d2:f1:78:92:07:d4:04: f3:a3:3c:d3:ff:70:02:10:28:a2:62:1e:15:b0:d1:06:20:3b: 8c:5c:09:b6:37:02:58:fa:62:a2:a1:18:b5:ca:1c:65:31:f8: 2e:50:6d:8b:29:c5:c8:6d:9d:88:64:9e:b8:11:ca:ac:e1:d8: ba:65:3d:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMarb8q+aNHJvJoBfqJ7wCEIktd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM3NDZENTgzODEzNEFFNTUwNTBDNDFGNUQ1Q0VCMEMz RjgzOUZBQTAeFw0yNjA5MDIxMjAzMjRaFw0yNjA5MDMxNDM2MjRaMDMxMTAvBgNV BAMTKDdBRjBBM0M1QjNCMDRBMTUyREE4RjYwNEZGQTcxNjlDMDRDMTREMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZydNRGb8HQ0duezqrwMyrg3b sTXGagPsZEGrz2CTURVuU1QsadvTEtAwa/4ypYqcvOVrkk3zFN/o7Ag2htUwI63c A1OBF6rzoQZ/XaX9R7qAxpwD4f7+M44WhLvZHQUNJHQQRnwVnbeM5LS2bBWHCj+F /oBLqVHmNz5K0OlI6oRZJpvYqQAV3zx8qtjwXt/RT/y12Sa1wL4fiWe5tfXWVEfK 1t+KLWP6gNGRl/CPi9dOPWdy3QPiwHCmY496JjmIiaA5T0oPmq7kMU3onlRq1+TU PQ+LTezyU2LTp17wihV3ybtjLx/erB2moQ2iB8Ea/flxTldTf3ljZfRVmTfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUevCjxbOwShUtqPYE/6cWnATBTTgwHwYDVR0j BBgwFoAUg3RtWDgTSuVQUMQfXVzrDD+Dn6owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQ4NDA3ZTMtMmNiMS00YzZlLThhZWItNWUwZDM1NWU4Yzk2LzAvODM3NDZENTgz ODEzNEFFNTUwNTBDNDFGNUQ1Q0VCMEMzRjgzOUZBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Mzc0NkQ1ODM4MTM0QUU1NTA1MEM0MUY1RDVDRUIwQzNGODM5 RkFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ4NDA3ZTMtMmNiMS00YzZlLThh ZWItNWUwZDM1NWU4Yzk2LzAvODM3NDZENTgzODEzNEFFNTUwNTBDNDFGNUQ1Q0VC MEMzRjgzOUZBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImTJxOg02ZhHUGPPLrt27AksOGcuH7S5gbr uJKi5Kekh0Ty2/54uDKRUjsVRrMRJ1iSCmJPcqiYXwdYqZb5EqHloAjJ+I5O988n MH+i4GbP5UGSXJlKFiPsRn60oqzX8kT8uDL+DSMS4U3Xs1z4Wj1DygNZgiB0LBo0 PlvhdbrO6xOW1guef5mOJ6QzjjLhFxYVJo3INF8Hg8/CcQKpH8VfyNZ3U1Jzt2th pTT5FWyAywwOvG8BB1fVsOOx38jg0vF4kgfUBPOjPNP/cAIQKKJiHhWw0QYgO4xc CbY3Alj6YqKhGLXKHGUx+C5QbYspxchtnYhknrgRyqzh2LplPcU= -----END CERTIFICATE-----Generated at Thu Sep 3 06:26:16 2026 by rpki-client