$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft File: 83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft (raw, json) Hash identifier: LWP45aIqPliKi4rHyc7nuTuNcK2RVemHyCdGiLKOLwc= Subject key identifier: 97:1A:75:0F:77:41:E2:46:19:59:4C:EA:D2:0E:66:F6:D5:6C:26:69 Authority key identifier: 83:C5:DA:82:3B:49:3E:A9:7E:C4:89:00:03:D1:D6:60:CA:EA:5E:D2 Certificate issuer: /CN=83C5DA823B493EA97EC4890003D1D660CAEA5ED2 Certificate serial: 124B2340DBE2B0F5D1843CCD0F575B1559B17390 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft Manifest number: A7 Signing time: Wed 02 Sep 2026 19:36:50 +0000 Manifest this update: Wed 02 Sep 2026 19:31:50 +0000 Manifest next update: Thu 03 Sep 2026 23:17:50 +0000 Files and hashes: 1: 83C5DA823B493EA97EC4890003D1D660CAEA5ED2.crl (hash: k3qgryR4cZGIGBUntlZ17K+JOVvhKHUJZsXHKLsb7rc=) 2: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: Pl9ASfx3Yd6SHdsYRmX1Tr27V4CYohbU5XT4mL5KknA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.crl rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4b:23:40:db:e2:b0:f5:d1:84:3c:cd:0f:57:5b:15:59:b1:73:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83C5DA823B493EA97EC4890003D1D660CAEA5ED2 Validity Not Before: Sep 2 19:31:50 2026 GMT Not After : Sep 3 23:17:50 2026 GMT Subject: CN=971A750F7741E24619594CEAD20E66F6D56C2669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:06:71:fa:12:f1:e8:39:cf:e8:07:dd:8e: 79:de:cd:a1:43:b5:13:83:2f:50:3b:7f:3c:3e:3e: 6c:e5:d5:08:3c:7a:5b:f4:79:d6:16:b2:ea:31:d3: 58:0b:e8:74:96:c6:cf:22:ca:74:89:83:a1:22:1f: 6b:63:cc:13:f4:57:28:de:34:ec:e0:9f:f0:f6:cd: ac:55:c3:09:2f:9d:9f:c4:e4:1e:cf:0e:8d:54:11: ad:2f:2d:75:cc:22:16:bf:cd:89:9e:f7:84:9b:11: 7c:2c:81:68:63:bd:0a:29:b5:64:be:83:5b:b8:36: c3:e8:9c:1a:02:7d:f2:b1:9d:47:d9:a7:c8:70:94: 16:ac:ac:a4:90:a4:ef:fe:76:e0:22:86:e1:f1:08: 9b:76:d6:6f:e1:e0:7f:95:90:99:49:7e:a7:a7:7f: 09:40:c4:4b:ac:f5:17:4e:c5:b0:a7:fe:6a:1c:a5: ab:4d:35:fd:a0:54:fe:c2:ed:c6:c6:25:60:78:4b: c5:6a:54:4c:2c:da:01:59:c7:d8:59:c1:d4:50:91: fe:94:55:d6:fc:b1:98:de:fb:7a:cc:8f:15:09:0e: c9:97:7a:9c:73:cc:70:6f:32:fd:42:0e:96:2f:56: c0:fd:75:47:76:e4:87:d6:cb:74:25:8c:db:77:cf: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1A:75:0F:77:41:E2:46:19:59:4C:EA:D2:0E:66:F6:D5:6C:26:69 X509v3 Authority Key Identifier: keyid:83:C5:DA:82:3B:49:3E:A9:7E:C4:89:00:03:D1:D6:60:CA:EA:5E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/83C5DA823B493EA97EC4890003D1D660CAEA5ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e5:fe:d7:e7:e9:42:05:e8:05:63:d4:64:1b:e1:03:cc:42: 09:6b:d0:5e:a2:74:ca:85:0f:5b:c6:1e:2b:11:ae:63:b7:09: 79:26:02:17:d3:93:43:fe:98:75:31:34:52:c3:64:9d:8c:de: 37:99:df:e1:e9:21:49:c8:4e:b1:50:ea:45:ee:e0:39:06:9c: 89:2b:90:e5:cd:68:8b:bb:e5:b5:60:57:1b:4e:88:07:8a:2a: 38:4e:5f:f0:9e:f8:0b:c7:32:ae:78:b9:c0:5a:7b:9b:b5:b9: ce:e8:69:f9:64:af:0d:49:9a:1f:42:2a:e6:ab:97:cd:2a:b4: bc:f2:a3:64:b8:85:08:c7:dc:70:d3:53:26:2e:de:20:c3:e8: ba:68:a1:20:58:d0:36:d4:cb:ec:ae:81:0e:c9:48:ba:be:fc: fa:dc:c1:7d:87:bd:f7:22:d5:7c:a3:8e:0f:70:bc:80:cd:35: 44:ca:b5:ad:18:8e:ef:ff:35:07:4f:c3:56:42:5e:05:de:eb: e3:49:cb:38:8c:cb:70:e8:51:e3:fc:63:76:6d:67:9b:eb:7a: d9:b0:c7:29:66:82:e4:59:cd:52:0d:fa:4b:6c:74:49:fa:3c: e4:b6:fd:a3:ba:6c:7a:8b:7b:95:c3:97:15:e3:e9:e1:e5:d5: 73:47:36:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEksjQNvisPXRhDzND1dbFVmxc5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNDNURBODIzQjQ5M0VBOTdFQzQ4OTAwMDNEMUQ2NjBD QUVBNUVEMjAeFw0yNjA5MDIxOTMxNTBaFw0yNjA5MDMyMzE3NTBaMDMxMTAvBgNV BAMTKDk3MUE3NTBGNzc0MUUyNDYxOTU5NENFQUQyMEU2NkY2RDU2QzI2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJwZx+hLx6DnP6AfdjnnezaFD tRODL1A7fzw+Pmzl1Qg8elv0edYWsuox01gL6HSWxs8iynSJg6EiH2tjzBP0Vyje NOzgn/D2zaxVwwkvnZ/E5B7PDo1UEa0vLXXMIha/zYme94SbEXwsgWhjvQoptWS+ g1u4NsPonBoCffKxnUfZp8hwlBasrKSQpO/+duAihuHxCJt21m/h4H+VkJlJfqen fwlAxEus9RdOxbCn/mocpatNNf2gVP7C7cbGJWB4S8VqVEws2gFZx9hZwdRQkf6U Vdb8sZje+3rMjxUJDsmXepxzzHBvMv1CDpYvVsD9dUd25IfWy3QljNt3z2UDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlxp1D3dB4kYZWUzq0g5m9tVsJmkwHwYDVR0j BBgwFoAUg8XagjtJPql+xIkAA9HWYMrqXtIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmIyNWYwZWItM2M0ZC00ZmM3LWIzYTQtYWRiMjI5N2RlNmNmLzAvODNDNURBODIz QjQ5M0VBOTdFQzQ4OTAwMDNEMUQ2NjBDQUVBNUVEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84M0M1REE4MjNCNDkzRUE5N0VDNDg5MDAwM0QxRDY2MENBRUE1 RUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvODNDNURBODIzQjQ5M0VBOTdFQzQ4OTAwMDNEMUQ2 NjBDQUVBNUVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzl/tfn6UIF6AVj1GQb4QPMQglr0F6idMqF D1vGHisRrmO3CXkmAhfTk0P+mHUxNFLDZJ2M3jeZ3+HpIUnITrFQ6kXu4DkGnIkr kOXNaIu75bVgVxtOiAeKKjhOX/Ce+AvHMq54ucBae5u1uc7oaflkrw1Jmh9CKuar l80qtLzyo2S4hQjH3HDTUyYu3iDD6LpooSBY0DbUy+yugQ7JSLq+/PrcwX2Hvfci 1Xyjjg9wvIDNNUTKta0Yju//NQdPw1ZCXgXe6+NJyziMy3DoUeP8Y3ZtZ5vretmw xylmguRZzVIN+ktsdEn6POS2/aO6bHqLe5XDlxXj6eHl1XNHNp0= -----END CERTIFICATE-----Generated at Thu Sep 3 08:06:37 2026 by rpki-client