$ rpki-client -vvvf rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft File: 885F36F281B0D4CC516E3818323CB9C1F30AF373.mft (raw, json) Hash identifier: vVfD/2+sUUvbQ1nFYfhzUCtcZRJpwG4dQVu4pM3Qus0= Subject key identifier: 66:4E:76:10:46:82:9F:5F:CF:E9:DC:43:FF:E6:EE:6A:9D:BE:DE:4B Authority key identifier: 88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73 Certificate issuer: /CN=885F36F281B0D4CC516E3818323CB9C1F30AF373 Certificate serial: 6C1B5E97C7BDDE3993D224D2D76F122C9040A302 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft Manifest number: 9B Signing time: Wed 26 Aug 2026 03:15:28 +0000 Manifest this update: Wed 26 Aug 2026 03:10:28 +0000 Manifest next update: Thu 27 Aug 2026 05:35:28 +0000 Files and hashes: 1: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: 7FbZ5pEtfFRoEPaeAL7hu5dTo4RHGPeRroJ1/nBeqOo=) 2: 885F36F281B0D4CC516E3818323CB9C1F30AF373.crl (hash: ctbUEGo0It/HNx6vmUOVxnKj6EEkeI/O/D0uv/262dU=) 3: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: OhU6QiMCF4ACcpqhynxB56U3zBuIn9qNb0BYC0SetEg=) 4: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: vKe09VJpirx3d8Vkqz6gLuC+DkGeanu2r5WmGCErId4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 05:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1b:5e:97:c7:bd:de:39:93:d2:24:d2:d7:6f:12:2c:90:40:a3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885F36F281B0D4CC516E3818323CB9C1F30AF373 Validity Not Before: Aug 26 03:10:28 2026 GMT Not After : Aug 27 05:35:28 2026 GMT Subject: CN=664E761046829F5FCFE9DC43FFE6EE6A9DBEDE4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:55:90:15:89:6c:64:22:60:b5:bd:f9:c0:67: 10:d0:31:ce:a4:45:12:67:7b:35:1a:c3:79:73:97: 9f:4f:72:fd:89:a4:59:df:ad:4c:56:07:ff:6c:02: 5f:73:54:ab:28:2b:ee:1e:f1:c1:75:e4:5f:64:e1: 03:bc:24:70:01:a1:57:a4:71:f7:df:63:e7:0c:09: d1:f5:59:1a:fe:dc:44:93:f3:f8:e6:5c:f6:5f:fe: 23:16:98:17:d4:c7:9e:1b:ed:34:81:3a:9f:41:06: 42:4c:0e:ea:e4:cb:cf:a6:4a:9b:f8:dd:9f:25:f9: b2:11:77:64:e2:65:71:56:fd:8b:64:a6:05:e5:22: cb:10:91:bd:7b:a6:20:5b:18:05:0a:3f:c2:61:2d: 72:e1:7b:d1:96:85:47:f2:7b:ff:ff:26:ee:f6:64: a4:02:55:c7:b8:6e:af:95:7c:12:ce:d9:fa:e1:e3: 36:65:85:66:d1:38:ac:3e:6a:29:00:47:3e:9a:7e: a1:e8:fa:3f:25:d1:65:96:70:cb:60:70:d0:36:c7: d1:6d:e0:7a:e9:2e:d4:69:94:f2:5c:fd:45:16:04: 82:53:5b:ac:de:e4:08:97:bf:5f:61:fa:31:8c:0d: 3c:10:00:ab:be:36:ad:60:f0:c7:9e:b0:1f:9c:fb: e4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4E:76:10:46:82:9F:5F:CF:E9:DC:43:FF:E6:EE:6A:9D:BE:DE:4B X509v3 Authority Key Identifier: keyid:88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:4a:95:c6:23:b4:8b:4c:f6:3d:38:f5:79:8a:0b:01:fb:5c: e1:43:b0:03:a9:93:7d:0b:05:f5:98:11:19:74:f1:76:f2:b8: 87:bf:0d:f9:b6:90:3f:6d:2e:d8:9f:d4:56:51:98:5b:2d:e0: b4:c9:48:8d:2d:1b:a4:95:fe:be:f0:aa:c2:12:09:e3:50:84: 04:08:3b:bd:c6:4d:c1:c0:89:01:87:a7:d9:f8:5c:dd:d2:71: 97:5b:bf:f8:ac:1b:93:8e:4d:c0:c9:de:28:1e:2e:c9:f0:e3: c2:9f:16:b1:7d:d7:60:b0:46:a7:b7:71:55:ca:a5:54:ed:ce: 72:be:f4:53:fb:51:c1:b0:be:42:b7:b3:18:27:2a:c0:98:fb: cd:d1:a4:63:f8:59:00:fc:02:30:2c:b8:e5:91:05:3b:09:87: 68:2b:d6:0e:a9:ee:6c:13:21:03:5d:ed:0d:6f:ca:ee:3d:89: b6:5f:7b:4b:71:3f:28:82:5e:06:d2:30:e6:a6:c5:52:76:f6: 1d:e7:5f:a4:e1:b1:f5:71:33:c4:7b:51:91:86:26:bf:47:0a: 08:05:c8:89:62:15:94:ca:16:13:a0:39:9c:f7:95:ff:7e:73: 20:f6:8b:be:b8:e6:cf:47:b1:0f:08:53:e4:e8:01:62:3f:8e: 34:04:f9:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBtel8e93jmT0iTS128SLJBAowIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1RjM2RjI4MUIwRDRDQzUxNkUzODE4MzIzQ0I5QzFG MzBBRjM3MzAeFw0yNjA4MjYwMzEwMjhaFw0yNjA4MjcwNTM1MjhaMDMxMTAvBgNV BAMTKDY2NEU3NjEwNDY4MjlGNUZDRkU5REM0M0ZGRTZFRTZBOURCRURFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVZAViWxkImC1vfnAZxDQMc6k RRJnezUaw3lzl59Pcv2JpFnfrUxWB/9sAl9zVKsoK+4e8cF15F9k4QO8JHABoVek cfffY+cMCdH1WRr+3EST8/jmXPZf/iMWmBfUx54b7TSBOp9BBkJMDurky8+mSpv4 3Z8l+bIRd2TiZXFW/YtkpgXlIssQkb17piBbGAUKP8JhLXLhe9GWhUfye///Ju72 ZKQCVce4bq+VfBLO2frh4zZlhWbROKw+aikARz6afqHo+j8l0WWWcMtgcNA2x9Ft 4HrpLtRplPJc/UUWBIJTW6ze5AiXv19h+jGMDTwQAKu+Nq1g8MeesB+c++SrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZk52EEaCn1/P6dxD/+buap2+3kswHwYDVR0j BBgwFoAUiF828oGw1MxRbjgYMjy5wfMK83MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUyMjI2ZWEtNWUyNi00ZWE1LWE2ODktNDc1N2FkMDVmOTUyLzAvODg1RjM2RjI4 MUIwRDRDQzUxNkUzODE4MzIzQ0I5QzFGMzBBRjM3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODVGMzZGMjgxQjBENENDNTE2RTM4MTgzMjNDQjlDMUYzMEFG MzczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvODg1RjM2RjI4MUIwRDRDQzUxNkUzODE4MzIzQ0I5 QzFGMzBBRjM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFKlcYjtItM9j049XmKCwH7XOFDsAOpk30L BfWYERl08XbyuIe/Dfm2kD9tLtif1FZRmFst4LTJSI0tG6SV/r7wqsISCeNQhAQI O73GTcHAiQGHp9n4XN3ScZdbv/isG5OOTcDJ3igeLsnw48KfFrF912CwRqe3cVXK pVTtznK+9FP7UcGwvkK3sxgnKsCY+83RpGP4WQD8AjAsuOWRBTsJh2gr1g6p7mwT IQNd7Q1vyu49ibZfe0txPyiCXgbSMOamxVJ29h3nX6ThsfVxM8R7UZGGJr9HCggF yIliFZTKFhOgOZz3lf9+cyD2i7645s9HsQ8IU+ToAWI/jjQE+YA= -----END CERTIFICATE-----Generated at Wed Aug 26 12:16:50 2026 by rpki-client