$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft File: 988BEA205B597B525439E1C7DF548E148BDF5DE3.mft (raw, json) Hash identifier: 1KV2e+m1SYJPJ3KJCZCcTUd8JWJYLygnaCbCzjITKHA= Subject key identifier: 48:6F:99:F9:EC:3F:5B:CE:36:45:5A:6D:A3:EA:73:60:81:BC:80:75 Authority key identifier: 98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 Certificate issuer: /CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Certificate serial: 0B9719806BE37A28A784EB1D112B25F6876BB360 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 07:33:16 +0000 Manifest this update: Sat 24 Oct 2026 07:28:16 +0000 Manifest next update: Sun 25 Oct 2026 10:26:16 +0000 Files and hashes: 1: 988BEA205B597B525439E1C7DF548E148BDF5DE3.crl (hash: aTnxkCYv6H768NgKVYURxqvGyu+LL70TwdCOBd8kr10=) 2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: KyMbOLP8QXcvGQ9MezBY9LjyWg2SLWeZUDh4Qo5TXWQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:97:19:80:6b:e3:7a:28:a7:84:eb:1d:11:2b:25:f6:87:6b:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Validity Not Before: Oct 24 07:28:16 2026 GMT Not After : Oct 25 10:26:16 2026 GMT Subject: CN=486F99F9EC3F5BCE36455A6DA3EA736081BC8075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:0b:b0:c1:b4:10:ae:75:d3:98:90:e0:d9: 91:b4:97:de:d9:0c:a8:4e:b7:66:cd:c9:65:ca:d3: b4:2b:bd:73:e7:86:93:7d:2d:64:1b:0e:a7:f0:dc: 65:68:2d:95:99:8d:ef:fc:69:91:d6:80:60:5b:f9: 4b:70:9c:4d:b5:a8:ee:8f:97:56:5b:34:d5:7d:74: bf:ab:e9:bb:c5:98:89:c7:36:fd:73:a8:24:85:35: ca:48:7a:c9:bf:2a:89:51:65:27:a9:6e:a6:86:41: 46:d2:96:03:00:99:75:7d:21:33:9f:b2:57:5d:1b: d1:e3:ef:5f:b4:cf:5f:39:86:4f:12:08:d7:b7:72: 7a:62:ea:84:97:47:1a:ed:e4:29:7c:8b:c3:6b:a5: 98:47:53:47:d8:69:38:15:79:28:6d:22:42:f0:a6: 48:fa:ce:eb:04:fd:33:f7:f8:af:89:cc:37:63:85: c5:a7:9d:06:9b:76:6c:51:04:c9:93:26:c4:62:19: a2:f9:d9:20:e1:c1:71:55:7d:52:76:3d:1c:89:1f: f8:ad:89:5d:a3:60:b7:d7:63:a2:f4:94:f2:92:2a: dd:82:3e:76:e6:65:68:45:2b:49:c7:dd:ec:18:70: f5:70:c9:ac:4a:20:d7:16:08:d5:25:35:cd:41:84: df:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6F:99:F9:EC:3F:5B:CE:36:45:5A:6D:A3:EA:73:60:81:BC:80:75 X509v3 Authority Key Identifier: keyid:98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ee:50:e4:6c:9a:e6:ed:71:91:30:a6:0a:98:2b:b1:b5:17: 4a:e5:f8:e0:47:93:0f:e2:d3:3f:ce:23:95:9a:7b:1e:be:67: e7:7b:09:e3:75:a1:62:73:dc:6a:6c:18:07:8f:f8:5b:ee:96: 97:51:2c:74:28:4e:34:b4:04:39:76:2d:5f:74:0f:0a:46:80: 13:53:e8:61:a1:82:50:df:74:53:45:3d:51:a0:e6:79:55:f6: cb:37:e1:69:84:81:e8:44:c8:fa:e4:fd:5b:3c:e7:f6:a6:00: 57:20:95:af:78:fd:e7:60:9c:60:55:e9:d2:7c:4d:2a:54:dd: 7d:33:8f:5c:26:e8:6f:86:5c:d3:62:fc:da:fb:54:77:9c:71: 5d:9a:7c:9c:bd:ae:d2:ac:ba:3c:cd:84:da:bf:62:cf:f5:92: df:1b:65:2a:43:89:e1:11:ee:35:fe:c9:36:77:49:4e:05:5c: 3e:43:6d:51:fe:44:c0:9b:b6:ca:b3:ad:70:90:40:b6:3f:5e: 16:de:34:80:68:89:2f:f7:05:97:0d:30:59:cb:dc:6e:1a:91: 8b:5f:22:98:b3:a2:d0:48:ab:42:bf:01:f2:20:bc:94:01:e3: 64:42:67:03:50:41:c7:b9:cc:5b:c8:f1:92:5a:87:cd:84:7d: c1:a2:ae:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC5cZgGvjeiinhOsdESsl9odrs2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4 QkRGNURFMzAeFw0yNjEwMjQwNzI4MTZaFw0yNjEwMjUxMDI2MTZaMDMxMTAvBgNV BAMTKDQ4NkY5OUY5RUMzRjVCQ0UzNjQ1NUE2REEzRUE3MzYwODFCQzgwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7QuwwbQQrnXTmJDg2ZG0l97Z DKhOt2bNyWXK07QrvXPnhpN9LWQbDqfw3GVoLZWZje/8aZHWgGBb+UtwnE21qO6P l1ZbNNV9dL+r6bvFmInHNv1zqCSFNcpIesm/KolRZSepbqaGQUbSlgMAmXV9ITOf slddG9Hj71+0z185hk8SCNe3cnpi6oSXRxrt5Cl8i8NrpZhHU0fYaTgVeShtIkLw pkj6zusE/TP3+K+JzDdjhcWnnQabdmxRBMmTJsRiGaL52SDhwXFVfVJ2PRyJH/it iV2jYLfXY6L0lPKSKt2CPnbmZWhFK0nH3ewYcPVwyaxKINcWCNUlNc1BhN/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSG+Z+ew/W842RVpto+pzYIG8gHUwHwYDVR0j BBgwFoAUmIvqIFtZe1JUOeHH31SOFIvfXeMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBhNzhjMDYtMWQ2ZS00M2I2LWJmMzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1 QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4QkRGNURFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODhCRUEyMDVCNTk3QjUyNTQzOUUxQzdERjU0OEUxNDhCREY1 REUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhF MTQ4QkRGNURFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3uUORsmubtcZEwpgqYK7G1F0rl+OBHkw/i 0z/OI5Waex6+Z+d7CeN1oWJz3GpsGAeP+FvulpdRLHQoTjS0BDl2LV90DwpGgBNT 6GGhglDfdFNFPVGg5nlV9ss34WmEgehEyPrk/Vs85/amAFcgla94/edgnGBV6dJ8 TSpU3X0zj1wm6G+GXNNi/Nr7VHeccV2afJy9rtKsujzNhNq/Ys/1kt8bZSpDieER 7jX+yTZ3SU4FXD5DbVH+RMCbtsqzrXCQQLY/XhbeNIBoiS/3BZcNMFnL3G4akYtf IpizotBIq0K/AfIgvJQB42RCZwNQQce5zFvI8ZJah82EfcGirhw= -----END CERTIFICATE-----Generated at Sat Oct 24 20:44:42 2026 by rpki-client