$ rpki-client -vvvf rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft File: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft (raw, json) Hash identifier: XuOdNFQRRXKDF7CwnXSvT2gXaBPclTwsnsvzci/EcPk= Subject key identifier: 48:9C:ED:CA:87:07:32:C9:1E:72:54:37:6B:07:A6:C5:BD:0B:E6:ED Authority key identifier: 88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97 Certificate issuer: /CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97 Certificate serial: 275B9EAB62695A47E3FE08D04606D2EF28A1FE2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 11:27:47 +0000 Manifest this update: Thu 17 Sep 2026 11:22:47 +0000 Manifest next update: Fri 18 Sep 2026 15:22:47 +0000 Files and hashes: 1: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl (hash: EC5l2SAng07pzZljZlsrsrDAqw2kUyVqkpN3tayiR7c=) 2: 3130332e31312e32322e302f32332d3234203d3e203538333930.roa (hash: 81p6B3Tk5Za1NJUs2uCoetypfDjnwptAX9451IsBrBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:5b:9e:ab:62:69:5a:47:e3:fe:08:d0:46:06:d2:ef:28:a1:fe:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97 Validity Not Before: Sep 17 11:22:47 2026 GMT Not After : Sep 18 15:22:47 2026 GMT Subject: CN=489CEDCA870732C91E7254376B07A6C5BD0BE6ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:18:e3:fb:96:fe:d1:ea:10:97:47:13:b5: b3:41:36:b3:b1:d0:a0:4f:2b:22:8a:4a:ee:fe:f5: 0b:86:c6:d5:2d:f0:67:02:55:53:49:73:d0:9e:3b: 3b:b8:89:5a:99:0f:2a:2d:fa:32:e5:d0:01:84:ce: 48:93:ed:e4:64:42:02:6b:53:f4:89:b0:85:c5:8e: 7b:47:c8:57:d2:35:a6:e3:92:ac:f9:57:c2:40:b9: d1:7d:98:ce:7d:3a:6f:e0:8d:35:9d:b3:1a:31:f4: 69:9a:78:d7:61:49:a6:0d:97:1a:6b:ad:e4:6f:98: 2e:44:57:e5:e8:36:e0:b9:a4:cb:11:64:9f:a1:b9: c7:f3:79:cb:db:a6:25:d6:0f:6e:19:04:27:a6:f5: 75:a0:a2:4b:ce:c3:e5:ab:de:c8:13:ab:fe:ca:eb: 70:83:85:57:1f:8a:38:68:d2:34:90:1c:3f:0b:3c: 79:57:dc:6f:4d:41:78:ab:b7:d3:7b:48:4d:4b:ec: 57:3d:88:8d:b5:56:d3:fc:b7:68:b7:8b:d1:05:50: 99:2f:26:d9:99:9a:96:a2:46:9c:f1:8d:1e:c9:44: 57:06:e1:07:7d:3c:c6:8b:d8:65:1e:29:ed:17:9c: 6a:08:ea:a5:b6:b7:85:25:ba:f6:af:90:61:87:97: 48:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9C:ED:CA:87:07:32:C9:1E:72:54:37:6B:07:A6:C5:BD:0B:E6:ED X509v3 Authority Key Identifier: keyid:88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:01:2d:17:77:13:d4:b3:d6:4a:5a:80:aa:2f:07:68:40:07: 1d:97:19:39:a0:9a:13:e5:58:9a:2a:23:e3:2a:3d:fc:93:c6: 75:24:fc:65:1f:78:a5:de:dd:42:9c:98:49:6d:a0:1e:60:5f: 79:83:8d:1b:1d:d4:bd:d5:b5:ee:3c:25:d9:84:ed:54:58:26: 72:73:f1:e9:63:21:b0:cb:73:31:86:47:d5:d6:09:4e:2c:fe: 02:d3:74:24:1e:91:47:be:ec:61:8a:a9:3b:e1:db:54:49:a6: 1a:01:a6:c3:45:2f:d2:57:5e:a3:03:7d:a2:58:88:0f:36:89: 0c:82:07:25:c9:df:98:51:5a:71:bc:98:66:7f:08:64:86:af: bc:8d:2e:43:b2:32:fd:b0:04:e2:61:cd:43:d4:91:10:dc:b5: ea:8a:7f:b2:7d:87:39:a7:38:0e:f8:cb:c5:2d:90:12:ca:13: 11:7e:ce:02:7b:a5:0b:c6:eb:d8:fb:a0:44:cb:b3:a3:c5:f0: 01:78:e7:a8:90:ab:7d:aa:1a:4c:cc:d6:86:86:a5:5a:29:9a: 22:8f:e6:09:76:19:b9:3b:c1:14:b1:d9:92:74:7a:dc:68:b5: 8e:ba:fb:0e:7a:cb:6e:bb:c9:74:b9:fb:3f:81:d7:e9:c1:6a: 32:85:b1:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1ueq2JpWkfj/gjQRgbS7yih/i0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0RTIzNjVFNEI4QUYwNUM0NEJENjQ5RDVCNDI5NjhF NDhCOEE5NzAeFw0yNjA5MTcxMTIyNDdaFw0yNjA5MTgxNTIyNDdaMDMxMTAvBgNV BAMTKDQ4OUNFRENBODcwNzMyQzkxRTcyNTQzNzZCMDdBNkM1QkQwQkU2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsYxjj+5b+0eoQl0cTtbNBNrOx 0KBPKyKKSu7+9QuGxtUt8GcCVVNJc9CeOzu4iVqZDyot+jLl0AGEzkiT7eRkQgJr U/SJsIXFjntHyFfSNabjkqz5V8JAudF9mM59Om/gjTWdsxox9GmaeNdhSaYNlxpr reRvmC5EV+XoNuC5pMsRZJ+hucfzecvbpiXWD24ZBCem9XWgokvOw+Wr3sgTq/7K 63CDhVcfijho0jSQHD8LPHlX3G9NQXirt9N7SE1L7Fc9iI21VtP8t2i3i9EFUJkv JtmZmpaiRpzxjR7JRFcG4Qd9PMaL2GUeKe0XnGoI6qW2t4UluvavkGGHl0jbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSJztyocHMskeclQ3awemxb0L5u0wHwYDVR0j BBgwFoAUiE4jZeS4rwXES9ZJ1bQpaOSLipcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg3YWRlOWYtNmI3OS00NzIzLTk5NDktOTZkZTdlNDFkYjcwLzAvODg0RTIzNjVF NEI4QUYwNUM0NEJENjQ5RDVCNDI5NjhFNDhCOEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODRFMjM2NUU0QjhBRjA1QzQ0QkQ2NDlENUI0Mjk2OEU0OEI4 QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg3YWRlOWYtNmI3OS00NzIzLTk5 NDktOTZkZTdlNDFkYjcwLzAvODg0RTIzNjVFNEI4QUYwNUM0NEJENjQ5RDVCNDI5 NjhFNDhCOEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEBLRd3E9Sz1kpagKovB2hABx2XGTmgmhPl WJoqI+MqPfyTxnUk/GUfeKXe3UKcmEltoB5gX3mDjRsd1L3Vte48JdmE7VRYJnJz 8eljIbDLczGGR9XWCU4s/gLTdCQekUe+7GGKqTvh21RJphoBpsNFL9JXXqMDfaJY iA82iQyCByXJ35hRWnG8mGZ/CGSGr7yNLkOyMv2wBOJhzUPUkRDcteqKf7J9hzmn OA74y8UtkBLKExF+zgJ7pQvG69j7oETLs6PF8AF456iQq32qGkzM1oaGpVopmiKP 5gl2Gbk7wRSx2ZJ0etxotY66+w56y267yXS5+z+B1+nBajKFsVQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:11:41 2026 by rpki-client