$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft File: 883B1118323CCC5736EA818FCCFAFAA5F6346633.mft (raw, json) Hash identifier: EEzIoziTJFY+mkSCqnPhSh+5TfDYSfaMew81ZX3mP3Q= Subject key identifier: F4:26:B9:D4:94:99:75:B0:B1:D7:60:CB:50:95:1C:D1:05:CC:38:45 Authority key identifier: 88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 Certificate issuer: /CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Certificate serial: 4109C783063A11B57C1479E3606C9557F0E11919 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:24:07 +0000 Manifest this update: Thu 17 Sep 2026 00:19:07 +0000 Manifest next update: Fri 18 Sep 2026 04:03:07 +0000 Files and hashes: 1: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: bFOzzHMeNiibUnZ6L+hq8KLmZQjQupaRQAA5Pf20Elk=) 2: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: XRMjBNqHnY6+jz0gyEQDgptcLtfFhiyGtn8MtQxlV6s=) 3: 883B1118323CCC5736EA818FCCFAFAA5F6346633.crl (hash: 3vvXZYuGlwZtvXj0HEwh7bHM1XwPm++f3ZSsL/n2BpM=) 4: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: cz+80lMPAlEnAUax/7iLVTXO0rUokGVs+fLA4W5hxnM=) 5: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: mn881aCiRGLWWEDnawAxEXshps2FtIWZ7qkAUnFIOiE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:09:c7:83:06:3a:11:b5:7c:14:79:e3:60:6c:95:57:f0:e1:19:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Validity Not Before: Sep 17 00:19:07 2026 GMT Not After : Sep 18 04:03:07 2026 GMT Subject: CN=F426B9D4949975B0B1D760CB50951CD105CC3845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:72:8d:f6:0e:8f:fc:00:d5:eb:e4:81:29: 5a:96:41:eb:43:d4:15:ab:ca:d1:e6:ba:4d:d3:ce: cf:05:c4:0f:01:7d:ef:db:c1:20:3d:2b:a9:5c:14: 7d:81:42:cb:79:b0:42:be:0f:8a:e2:0f:6e:12:16: ce:cd:70:bf:92:99:99:d8:db:f3:12:32:94:c8:07: da:02:88:1c:2e:d3:0c:3b:d4:6c:6d:6d:c8:b7:61: 25:1e:26:c9:7a:36:cf:45:25:ab:0f:34:73:3a:33: 45:46:5a:8b:c8:10:84:50:b4:a6:a3:8c:ba:ba:11: 95:ad:27:92:83:84:f8:28:b6:62:03:8d:0e:ec:71: c6:69:a8:34:a3:17:db:86:4e:76:b5:f7:7d:a5:ca: a2:ed:b6:71:12:07:bd:8a:39:0c:f9:3e:15:a4:97: f7:0e:16:f9:ef:93:14:fd:2e:19:dd:c7:8c:5e:3d: 96:1c:a4:2f:d3:2c:14:56:12:4c:97:e8:54:d2:91: 62:f5:b0:d6:38:3c:7c:d9:2b:8a:6a:8f:c9:1d:c5: 36:ff:39:4c:5d:9f:b5:47:6c:9f:dc:da:3f:b6:7c: a5:61:1c:6d:ec:0e:47:f8:c3:d7:61:7b:4c:be:7d: e8:42:cc:3d:1f:f2:c9:f0:38:10:3d:59:3b:39:ca: fa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:26:B9:D4:94:99:75:B0:B1:D7:60:CB:50:95:1C:D1:05:CC:38:45 X509v3 Authority Key Identifier: keyid:88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:29:8d:6c:5e:02:16:42:2c:19:32:c9:0c:ca:20:10:16:8d: 1f:d9:e8:45:1d:45:50:e8:d0:be:3d:6e:d0:9f:e5:de:45:39: c5:9d:22:28:ef:b0:b5:c8:68:ba:6d:08:90:fe:cf:38:88:37: 31:8f:98:90:4f:f4:9f:82:77:89:c4:e2:6f:ce:11:d7:33:aa: a4:ec:4a:e9:b4:6b:66:eb:d7:af:3b:46:e8:30:44:e7:dd:04: 80:9a:bf:d2:b4:43:d0:f9:3d:24:8e:aa:20:4f:18:a3:3c:03: 28:fb:41:58:8e:ce:33:52:b4:62:87:b7:40:14:cf:ec:83:f3: ca:b8:47:bd:a1:38:51:67:40:be:33:37:f6:e9:ca:88:43:13: 77:42:0b:de:8d:fe:f7:a7:50:59:a1:72:e1:95:c3:ca:d1:1b: 2c:bf:2c:07:ed:c9:2c:a5:d9:43:3b:36:99:49:01:10:e1:81: b9:46:c5:90:21:18:2c:24:c3:96:fb:b1:c5:e8:14:f8:44:b0: 95:cb:d5:11:a4:c6:1a:da:91:87:c3:5c:a7:1c:44:a1:c3:67: 4e:a8:55:24:98:9e:d0:5a:5f:09:d9:09:ac:94:bb:1d:95:b9: 99:b9:0f:dc:ae:91:b8:29:1b:47:1c:e7:35:3a:09:43:eb:73: 75:60:3e:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQnHgwY6EbV8FHnjYGyVV/DhGRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVG NjM0NjYzMzAeFw0yNjA5MTcwMDE5MDdaFw0yNjA5MTgwNDAzMDdaMDMxMTAvBgNV BAMTKEY0MjZCOUQ0OTQ5OTc1QjBCMUQ3NjBDQjUwOTUxQ0QxMDVDQzM4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cHKN9g6P/ADV6+SBKVqWQetD 1BWrytHmuk3Tzs8FxA8Bfe/bwSA9K6lcFH2BQst5sEK+D4riD24SFs7NcL+SmZnY 2/MSMpTIB9oCiBwu0ww71Gxtbci3YSUeJsl6Ns9FJasPNHM6M0VGWovIEIRQtKaj jLq6EZWtJ5KDhPgotmIDjQ7sccZpqDSjF9uGTna1932lyqLttnESB72KOQz5PhWk l/cOFvnvkxT9Lhndx4xePZYcpC/TLBRWEkyX6FTSkWL1sNY4PHzZK4pqj8kdxTb/ OUxdn7VHbJ/c2j+2fKVhHG3sDkf4w9dhe0y+fehCzD0f8snwOBA9WTs5yvrLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Ca51JSZdbCx12DLUJUc0QXMOEUwHwYDVR0j BBgwFoAUiDsRGDI8zFc26oGPzPr6pfY0ZjMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMzI5NjctZDU1OC00YTM0LWJlOGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgz MjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVGNjM0NjYzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODNCMTExODMyM0NDQzU3MzZFQTgxOEZDQ0ZBRkFBNUY2MzQ2 NjMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZB QTVGNjM0NjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIpjWxeAhZCLBkyyQzKIBAWjR/Z6EUdRVDo 0L49btCf5d5FOcWdIijvsLXIaLptCJD+zziINzGPmJBP9J+Cd4nE4m/OEdczqqTs Sum0a2br1687RugwROfdBICav9K0Q9D5PSSOqiBPGKM8Ayj7QViOzjNStGKHt0AU z+yD88q4R72hOFFnQL4zN/bpyohDE3dCC96N/venUFmhcuGVw8rRGyy/LAftySyl 2UM7NplJARDhgblGxZAhGCwkw5b7scXoFPhEsJXL1RGkxhrakYfDXKccRKHDZ06o VSSYntBaXwnZCayUux2VuZm5D9yukbgpG0cc5zU6CUPrc3VgPuk= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:01 2026 by rpki-client