$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft File: 83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft (raw, json) Hash identifier: hWhwr7k6WAWchBtLK1zxu8f8QfxsqBG+Nc1ugmSxdPA= Subject key identifier: F8:E4:2E:E2:20:A1:B5:85:1D:2B:FC:41:3E:CC:94:42:81:B5:C8:6A Authority key identifier: 83:B2:DB:74:7B:ED:1A:E0:1D:D0:B8:AF:08:DF:AE:9B:FF:90:09:17 Certificate issuer: /CN=83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917 Certificate serial: 5B3A85CF41C08B4924C807095C71DFD2C7F1B9AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 19:53:36 +0000 Manifest this update: Wed 16 Sep 2026 19:48:36 +0000 Manifest next update: Thu 17 Sep 2026 22:17:36 +0000 Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 6EETEPKtzbYhkS8PCH/i18xxZFkGLUgPS/GSOlw9zjQ=) 2: 83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.crl (hash: VL3uJoR1tY7yKCNEepVNQEKhn3oras0azb40Dzv8Q+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.crl rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3a:85:cf:41:c0:8b:49:24:c8:07:09:5c:71:df:d2:c7:f1:b9:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917 Validity Not Before: Sep 16 19:48:36 2026 GMT Not After : Sep 17 22:17:36 2026 GMT Subject: CN=F8E42EE220A1B5851D2BFC413ECC944281B5C86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:d3:93:5f:10:e9:03:bb:c7:9a:c2:9e:03: 3f:ab:4e:cf:94:76:00:d2:4d:26:85:de:1f:59:0d: 3e:6f:fd:0e:e4:48:72:34:70:44:9b:d5:53:4a:d4: f9:47:d8:9a:01:64:1a:bc:d1:0e:0e:cc:d0:47:0f: 49:50:99:a1:cf:89:5b:f0:b5:37:03:ec:7d:6e:e1: e7:a1:24:0c:68:bc:9f:58:60:82:eb:31:55:3a:a0: 4d:b3:67:bc:75:ba:52:b9:36:37:cb:f0:02:0d:5c: b0:83:ba:2f:c5:b8:0a:94:91:82:8a:fd:a8:64:b1: 9a:a4:29:70:53:a3:bc:f7:1d:c6:e3:9e:d3:8e:9b: aa:b2:7f:e1:3d:55:fa:69:6a:06:e9:89:ce:a2:e0: 0e:15:f5:f7:28:32:9c:fb:4c:50:ce:27:46:21:76: 72:3b:3c:84:fe:9d:20:0c:fc:38:f4:4e:92:45:44: 39:68:7b:11:b0:cc:04:f0:2c:68:a0:24:99:29:c8: 0d:e4:49:96:6e:1f:9a:4e:0f:cb:99:bc:4b:89:80: 2f:bb:7e:b7:1a:c5:72:b1:c2:ec:13:10:86:87:4b: 74:05:75:a7:f0:d2:d0:7e:c9:f8:7b:67:0f:f0:d1: 55:f0:b4:b5:08:97:d9:93:7e:9e:b0:0b:d7:da:03: a7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E4:2E:E2:20:A1:B5:85:1D:2B:FC:41:3E:CC:94:42:81:B5:C8:6A X509v3 Authority Key Identifier: keyid:83:B2:DB:74:7B:ED:1A:E0:1D:D0:B8:AF:08:DF:AE:9B:FF:90:09:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/83B2DB747BED1AE01DD0B8AF08DFAE9BFF900917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e6:77:8a:df:f3:76:50:c1:c6:5c:39:ab:e8:47:b6:27:40: 7e:3c:55:25:42:7a:aa:41:26:e6:df:7d:bb:62:84:f4:dc:97: 88:44:f2:55:c3:a6:ef:c9:97:0f:6c:14:62:5a:0e:c3:1b:20: d2:4a:c5:2a:e5:53:42:ee:27:67:0a:26:46:7c:0d:86:ad:c7: 8b:f9:f3:cb:9d:59:22:69:de:b4:42:9d:14:44:f5:a0:16:94: 9b:99:7a:8b:58:43:57:5e:c6:c1:74:72:30:59:9b:d0:7e:9b: a6:16:35:d8:e0:52:97:40:d1:74:f9:ba:12:13:87:1e:29:7f: e8:06:05:f8:4d:4a:c0:c9:59:4e:1b:95:80:95:0a:fe:cc:6d: f5:a4:1d:f3:88:80:64:f2:3f:1d:2c:17:98:a4:96:d2:bf:f9: 5e:c8:3c:40:ad:1a:e9:d1:29:72:a3:ea:d7:29:6c:cf:7a:10: e6:4a:d3:39:1f:2c:37:fc:cf:50:53:5b:9d:ea:71:69:dc:66: 88:18:1b:9d:43:a3:fc:3c:82:74:1e:10:95:00:20:43:c8:9a: 41:18:6b:6b:9d:1b:57:98:74:e3:52:c5:05:b2:82:95:00:03: a4:6d:a2:32:05:b7:a0:d3:b6:f4:01:db:a6:de:3c:c5:34:9e: 13:52:b5:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzqFz0HAi0kkyAcJXHHf0sfxuaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNCMkRCNzQ3QkVEMUFFMDFERDBCOEFGMDhERkFFOUJG RjkwMDkxNzAeFw0yNjA5MTYxOTQ4MzZaFw0yNjA5MTcyMjE3MzZaMDMxMTAvBgNV BAMTKEY4RTQyRUUyMjBBMUI1ODUxRDJCRkM0MTNFQ0M5NDQyODFCNUM4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlNOTXxDpA7vHmsKeAz+rTs+U dgDSTSaF3h9ZDT5v/Q7kSHI0cESb1VNK1PlH2JoBZBq80Q4OzNBHD0lQmaHPiVvw tTcD7H1u4eehJAxovJ9YYILrMVU6oE2zZ7x1ulK5NjfL8AINXLCDui/FuAqUkYKK /ahksZqkKXBTo7z3HcbjntOOm6qyf+E9Vfppagbpic6i4A4V9fcoMpz7TFDOJ0Yh dnI7PIT+nSAM/Dj0TpJFRDloexGwzATwLGigJJkpyA3kSZZuH5pOD8uZvEuJgC+7 frcaxXKxwuwTEIaHS3QFdafw0tB+yfh7Zw/w0VXwtLUIl9mTfp6wC9faA6crAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+OQu4iChtYUdK/xBPsyUQoG1yGowHwYDVR0j BBgwFoAUg7LbdHvtGuAd0LivCN+um/+QCRcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI4ODc2MmMtM2ZjNS00OWNjLTk0OWEtNTk0YjMzMWExM2ExLzAvODNCMkRCNzQ3 QkVEMUFFMDFERDBCOEFGMDhERkFFOUJGRjkwMDkxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84M0IyREI3NDdCRUQxQUUwMUREMEI4QUYwOERGQUU5QkZGOTAw OTE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODNCMkRCNzQ3QkVEMUFFMDFERDBCOEFGMDhERkFF OUJGRjkwMDkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvmd4rf83ZQwcZcOavoR7YnQH48VSVCeqpB JubffbtihPTcl4hE8lXDpu/Jlw9sFGJaDsMbINJKxSrlU0LuJ2cKJkZ8DYatx4v5 88udWSJp3rRCnRRE9aAWlJuZeotYQ1dexsF0cjBZm9B+m6YWNdjgUpdA0XT5uhIT hx4pf+gGBfhNSsDJWU4blYCVCv7MbfWkHfOIgGTyPx0sF5ikltK/+V7IPECtGunR KXKj6tcpbM96EOZK0zkfLDf8z1BTW53qcWncZogYG51Do/w8gnQeEJUAIEPImkEY a2udG1eYdONSxQWygpUAA6RtojIFt6DTtvQB26bePMU0nhNStXM= -----END CERTIFICATE-----Generated at Thu Sep 17 14:47:35 2026 by rpki-client