$ rpki-client -vvvf rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft File: 083DF9FCF3773A042D5A64A6401BE726552524C0.mft (raw, json) Hash identifier: I4gddbEokeio7ePWHp0kOzIUkHsXf9i3v+vkUp5zABo= Subject key identifier: 2B:F6:1A:27:57:DE:9D:7F:02:B0:5F:34:B8:55:05:AA:B7:67:A0:11 Authority key identifier: 08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0 Certificate issuer: /CN=083DF9FCF3773A042D5A64A6401BE726552524C0 Certificate serial: 5E7720554931587FA25920F2D57CF3843BFCF930 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft Manifest number: B6 Signing time: Thu 17 Sep 2026 02:36:45 +0000 Manifest this update: Thu 17 Sep 2026 02:31:45 +0000 Manifest next update: Fri 18 Sep 2026 06:27:45 +0000 Files and hashes: 1: 083DF9FCF3773A042D5A64A6401BE726552524C0.crl (hash: YEer8tMRWHW9MlONSFsEG0dKdhxh2ui+VQiSa9UoiRA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.crl rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:77:20:55:49:31:58:7f:a2:59:20:f2:d5:7c:f3:84:3b:fc:f9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=083DF9FCF3773A042D5A64A6401BE726552524C0 Validity Not Before: Sep 17 02:31:45 2026 GMT Not After : Sep 18 06:27:45 2026 GMT Subject: CN=2BF61A2757DE9D7F02B05F34B85505AAB767A011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:a5:c4:9d:5e:ba:25:5b:a2:93:9f:32:2c: 3d:65:ed:f9:4f:51:2c:7a:7a:c3:a1:3a:1c:6b:78: f7:6f:1a:95:99:1e:a8:15:eb:ab:96:41:e4:34:75: 71:a8:e4:45:c1:73:aa:38:d0:e4:aa:2c:12:27:3b: 63:33:b4:30:b3:dc:b8:96:31:2f:7d:08:07:00:4e: 48:48:81:54:d0:88:c3:b7:89:71:30:07:89:75:88: 74:e7:6e:fb:b6:71:9d:c9:6a:17:ab:bb:e8:b0:e4: 7d:e7:70:75:97:3e:e1:6a:98:46:07:32:8c:5f:31: e0:e0:4d:e3:7e:52:c8:a0:fb:f9:e3:7c:fe:b2:e2: 71:89:94:aa:cb:61:de:71:45:76:bf:75:51:b7:fc: ee:1e:72:37:26:7f:f7:87:e8:74:c2:c6:da:05:66: 05:73:f0:38:84:08:b1:ed:84:47:36:f0:54:52:c2: 12:5b:87:df:22:ac:c4:fd:ad:8c:ce:24:b4:ad:0c: 9e:2f:3b:f0:61:e6:a0:7b:33:95:87:87:72:f9:6f: a0:b6:45:34:c6:99:7b:3b:d7:ca:a4:c2:fc:97:1f: 0f:bb:ba:32:10:40:fd:19:7d:20:33:42:46:91:54: 27:c1:25:db:ac:2d:3b:f4:97:ef:d9:7c:e4:d3:2c: 0f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F6:1A:27:57:DE:9D:7F:02:B0:5F:34:B8:55:05:AA:B7:67:A0:11 X509v3 Authority Key Identifier: keyid:08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:84:59:c5:d5:44:e5:f2:05:44:4b:3a:73:7e:7d:f1:05:0d: 40:7a:b3:59:fc:c9:9e:19:e7:d7:aa:f0:bd:fd:8d:e4:f8:80: 5a:f6:c2:ab:c2:5f:ab:c5:d9:13:87:f7:75:0b:34:60:50:4f: 04:2b:4a:08:38:48:95:a7:99:9a:ed:48:85:59:e4:e0:c6:3e: 35:35:e0:47:34:5b:d9:09:50:68:f9:fa:a2:17:4c:a7:fd:34: ee:5b:f3:ea:d7:47:f8:80:0e:40:37:92:34:2a:c3:32:58:68: 00:e8:04:33:15:e1:a0:48:5c:1d:72:9a:0b:b9:57:2e:31:b3: fb:a4:dc:67:ef:07:55:e8:95:84:dc:54:e3:8b:ac:f9:ea:d3: 70:3d:2e:e8:c0:9c:29:9e:43:84:a9:53:03:e9:a2:fa:f0:2c: d6:b9:e0:4e:4d:40:eb:53:97:e8:8e:1c:f7:41:4b:d2:fe:93: 93:40:0b:d5:b0:78:f5:45:b5:d5:5c:d5:f5:67:76:22:49:b5: bd:f7:45:12:f0:b0:6d:d7:59:7c:c8:89:35:50:95:c1:32:d0: d0:79:7b:8b:41:e4:88:1b:9e:10:ef:f8:1d:95:75:61:d5:76: 21:03:ce:d7:2e:b2:b6:8f:7f:58:51:49:26:21:47:80:88:1e: f9:f7:b1:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXncgVUkxWH+iWSDy1XzzhDv8+TAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzREY5RkNGMzc3M0EwNDJENUE2NEE2NDAxQkU3MjY1 NTI1MjRDMDAeFw0yNjA5MTcwMjMxNDVaFw0yNjA5MTgwNjI3NDVaMDMxMTAvBgNV BAMTKDJCRjYxQTI3NTdERTlEN0YwMkIwNUYzNEI4NTUwNUFBQjc2N0EwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuq6XEnV66JVuik58yLD1l7flP USx6esOhOhxrePdvGpWZHqgV66uWQeQ0dXGo5EXBc6o40OSqLBInO2MztDCz3LiW MS99CAcATkhIgVTQiMO3iXEwB4l1iHTnbvu2cZ3Jaheru+iw5H3ncHWXPuFqmEYH MoxfMeDgTeN+Usig+/njfP6y4nGJlKrLYd5xRXa/dVG3/O4ecjcmf/eH6HTCxtoF ZgVz8DiECLHthEc28FRSwhJbh98irMT9rYzOJLStDJ4vO/Bh5qB7M5WHh3L5b6C2 RTTGmXs718qkwvyXHw+7ujIQQP0ZfSAzQkaRVCfBJdusLTv0l+/ZfOTTLA9pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK/YaJ1fenX8CsF80uFUFqrdnoBEwHwYDVR0j BBgwFoAUCD35/PN3OgQtWmSmQBvnJlUlJMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM1MjI1YTYtMDVkMy00NDRjLWJmM2YtMTFlM2VmN2I2YTE1LzAvMDgzREY5RkNG Mzc3M0EwNDJENUE2NEE2NDAxQkU3MjY1NTI1MjRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODNERjlGQ0YzNzczQTA0MkQ1QTY0QTY0MDFCRTcyNjU1MjUy NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMDgzREY5RkNGMzc3M0EwNDJENUE2NEE2NDAxQkU3 MjY1NTI1MjRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyEWcXVROXyBURLOnN+ffEFDUB6s1n8yZ4Z 59eq8L39jeT4gFr2wqvCX6vF2ROH93ULNGBQTwQrSgg4SJWnmZrtSIVZ5ODGPjU1 4Ec0W9kJUGj5+qIXTKf9NO5b8+rXR/iADkA3kjQqwzJYaADoBDMV4aBIXB1ymgu5 Vy4xs/uk3GfvB1XolYTcVOOLrPnq03A9LujAnCmeQ4SpUwPpovrwLNa54E5NQOtT l+iOHPdBS9L+k5NAC9WwePVFtdVc1fVndiJJtb33RRLwsG3XWXzIiTVQlcEy0NB5 e4tB5IgbnhDv+B2VdWHVdiEDztcusraPf1hRSSYhR4CIHvn3sbA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:32:36 2026 by rpki-client