$ rpki-client -vvvf rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft File: 8828D395B775E6267ED1C496B6DA870C9DA36235.mft (raw, json) Hash identifier: RALydDXuFqZQEFpfw20Z2HNITHRCPv62/ZN7+ORGeA0= Subject key identifier: 5A:39:44:26:6E:95:E2:4F:AA:A2:B4:AE:DF:70:E2:51:D9:76:0C:EA Authority key identifier: 88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 Certificate issuer: /CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Certificate serial: 1FEA0FB91AF001DBB57874B2CC59121345460AA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 23:27:54 +0000 Manifest this update: Wed 16 Sep 2026 23:22:54 +0000 Manifest next update: Fri 18 Sep 2026 03:19:54 +0000 Files and hashes: 1: 8828D395B775E6267ED1C496B6DA870C9DA36235.crl (hash: xCafoMqmc9gjMg1JeAfNAf5HFjFPM1vMDFrH6zP3UMo=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: KKSmfUNkqalCLO37YcNIo/DR91Odj11Ccmn9dQDHPBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ea:0f:b9:1a:f0:01:db:b5:78:74:b2:cc:59:12:13:45:46:0a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Validity Not Before: Sep 16 23:22:54 2026 GMT Not After : Sep 18 03:19:54 2026 GMT Subject: CN=5A3944266E95E24FAAA2B4AEDF70E251D9760CEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:dd:e9:e1:2f:8b:a9:dd:e7:27:06:24:d6: 8a:1d:07:18:24:a9:38:ff:2a:79:20:8c:c3:6b:56: 55:02:21:8b:32:dc:3b:2b:82:1b:42:67:47:d5:e7: ee:f6:bb:42:87:36:4c:f9:f2:67:c2:4b:6d:e9:04: 5c:d4:40:10:db:d1:d3:4f:3c:10:bb:ba:df:b0:28: 8f:bf:d8:cb:0e:e8:3c:1e:76:f3:64:e8:2d:81:48: 52:00:94:02:90:8a:43:07:cf:b5:5c:28:e6:68:ad: a9:70:fc:90:00:5b:64:4c:4a:b9:0e:fb:6b:f0:55: 42:51:8f:9b:9c:59:cf:42:07:94:a3:02:2a:70:d9: c7:b0:d9:13:0d:ea:99:80:82:a7:d1:f5:dd:37:b0: 5d:2d:9b:51:ca:15:7f:92:1a:d7:81:2e:7d:4a:b1: 42:96:db:87:3f:79:eb:0d:31:d5:e5:29:a7:6d:8e: 25:3b:50:11:04:3d:ed:cf:fe:19:b8:c8:2c:1a:ad: da:88:92:7b:b2:36:46:86:1d:78:2b:1b:43:36:cf: 18:46:3f:60:33:aa:08:ff:8d:dd:20:7e:4c:4b:20: 18:b9:4e:a3:de:ad:c0:95:37:65:af:53:40:d7:00: b0:72:02:19:30:db:31:a5:79:7a:75:50:ac:1c:c7: d2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:39:44:26:6E:95:E2:4F:AA:A2:B4:AE:DF:70:E2:51:D9:76:0C:EA X509v3 Authority Key Identifier: keyid:88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d2:35:f3:24:25:18:af:d0:dd:29:9d:b2:46:e7:41:eb:8d: 86:89:25:dd:1e:ac:58:4c:9c:6f:e4:7e:d7:7b:ff:ee:98:68: bb:aa:26:37:de:13:89:43:99:ed:51:b0:0e:58:00:42:24:14: c7:11:ed:20:e3:4f:a4:d3:51:1b:ca:30:d3:de:14:5a:6c:26: 14:7c:27:b5:be:25:3c:31:8f:e4:4a:82:f6:a2:2b:85:7a:07: 65:b7:05:8b:bc:5d:7e:e8:24:71:5a:6c:49:c2:c0:3d:e5:e3: 75:b1:08:6e:75:28:08:b9:bb:40:15:cb:51:28:03:00:f5:15: ec:ea:74:4c:14:84:21:5b:e3:a3:d5:c9:93:84:67:c8:05:68: 81:ad:d7:2c:d0:ab:b6:39:ed:d3:05:0f:1b:af:a9:6e:2b:7c: 52:85:19:eb:dd:54:40:50:af:96:1c:9f:8b:d5:a8:63:c4:a6: 5a:80:3b:66:f0:5c:56:8d:0b:d4:40:be:33:4c:0a:18:eb:28: 29:20:52:5f:fb:14:9c:91:8f:ca:a1:ae:4f:6d:44:db:d3:f4: 60:c5:c2:c9:cd:e8:a6:8a:08:d4:0f:79:d3:02:bf:bc:d5:b0: 9c:e4:a7:b4:fa:01:fe:96:59:f6:c3:62:78:c7:c1:0a:33:8d: b8:2e:21:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+oPuRrwAdu1eHSyzFkSE0VGCqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5 REEzNjIzNTAeFw0yNjA5MTYyMzIyNTRaFw0yNjA5MTgwMzE5NTRaMDMxMTAvBgNV BAMTKDVBMzk0NDI2NkU5NUUyNEZBQUEyQjRBRURGNzBFMjUxRDk3NjBDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8i93p4S+Lqd3nJwYk1oodBxgk qTj/KnkgjMNrVlUCIYsy3DsrghtCZ0fV5+72u0KHNkz58mfCS23pBFzUQBDb0dNP PBC7ut+wKI+/2MsO6DwedvNk6C2BSFIAlAKQikMHz7VcKOZoralw/JAAW2RMSrkO +2vwVUJRj5ucWc9CB5SjAipw2cew2RMN6pmAgqfR9d03sF0tm1HKFX+SGteBLn1K sUKW24c/eesNMdXlKadtjiU7UBEEPe3P/hm4yCwardqIknuyNkaGHXgrG0M2zxhG P2Azqgj/jd0gfkxLIBi5TqPercCVN2WvU0DXALByAhkw2zGleXp1UKwcx9INAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjlEJm6V4k+qorSu33DiUdl2DOowHwYDVR0j BBgwFoAUiCjTlbd15iZ+0cSWttqHDJ2jYjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTljMjc2MjEtZTI5Ny00MTAwLTk3MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVC Nzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5REEzNjIzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODI4RDM5NUI3NzVFNjI2N0VEMUM0OTZCNkRBODcwQzlEQTM2 MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3 MEM5REEzNjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnSNfMkJRiv0N0pnbJG50HrjYaJJd0erFhM nG/kftd7/+6YaLuqJjfeE4lDme1RsA5YAEIkFMcR7SDjT6TTURvKMNPeFFpsJhR8 J7W+JTwxj+RKgvaiK4V6B2W3BYu8XX7oJHFabEnCwD3l43WxCG51KAi5u0AVy1Eo AwD1FezqdEwUhCFb46PVyZOEZ8gFaIGt1yzQq7Y57dMFDxuvqW4rfFKFGevdVEBQ r5Ycn4vVqGPEplqAO2bwXFaNC9RAvjNMChjrKCkgUl/7FJyRj8qhrk9tRNvT9GDF wsnN6KaKCNQPedMCv7zVsJzkp7T6Af6WWfbDYnjHwQozjbguIck= -----END CERTIFICATE-----Generated at Thu Sep 17 10:50:06 2026 by rpki-client