$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft File: 82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft (raw, json) Hash identifier: kpuJZp57IxIHBv7gUwO+lfcgpTBt4O5nKMJ0HxWi/tM= Subject key identifier: A0:70:C6:8D:10:E5:43:49:B7:B5:27:FD:9D:2C:7B:1B:9C:A9:8E:9F Authority key identifier: 82:FA:49:59:8B:B9:63:2C:D8:CF:41:FE:DD:F7:4B:BD:3D:33:D1:9C Certificate issuer: /CN=82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C Certificate serial: 6D251601ACB85FEE77C6E88C2B6D45053E11D603 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:46:58 +0000 Manifest this update: Thu 17 Sep 2026 06:41:58 +0000 Manifest next update: Fri 18 Sep 2026 07:33:58 +0000 Files and hashes: 1: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: Pw1FDuvNFB/fEPdpOIzgZ9rEMUiJuheIjiIKjMXwLBk=) 2: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: Pa7xSWWS5opiR5HJKTxnGB9FqTjFCEEh6zjt74RworE=) 3: 82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl (hash: vehrAuMKYKbGZUBMd7e6n5Lv4FER+iJ0KAOzamHpiuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:25:16:01:ac:b8:5f:ee:77:c6:e8:8c:2b:6d:45:05:3e:11:d6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C Validity Not Before: Sep 17 06:41:58 2026 GMT Not After : Sep 18 07:33:58 2026 GMT Subject: CN=A070C68D10E54349B7B527FD9D2C7B1B9CA98E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:97:2f:43:5d:ea:7d:80:01:71:d2:34:27:dd: 96:03:1c:78:92:20:e4:05:9c:9a:eb:f1:5e:09:6c: 5c:12:de:b3:66:0e:6c:83:56:96:04:9a:e2:66:ca: bd:53:89:01:15:5d:b7:cc:91:83:4f:c0:68:2a:82: 83:f7:53:fd:1a:e0:08:cc:df:d2:c7:7f:19:29:b1: 9d:6f:9c:d7:56:f9:6d:f0:05:c2:5a:25:7c:6f:b2: a5:f9:3f:0b:bf:dd:c1:90:18:9f:75:ea:8b:0b:9d: 91:43:95:f1:2e:ae:74:eb:c0:77:d6:46:9c:57:10: 35:81:46:b2:fc:f3:1a:ab:8e:c6:b9:94:69:76:f5: dc:b6:5b:74:81:dc:f9:07:87:85:6e:91:88:58:66: fc:83:4d:7f:cf:2c:b2:f4:eb:09:6f:c6:6e:31:c3: 88:80:e7:64:d0:c5:5a:69:9a:3f:2f:c0:02:04:b8: 61:0f:77:ee:36:9d:26:dc:19:79:ec:ca:a2:f0:bf: 41:c5:70:86:38:08:5c:c3:fe:bc:b4:b6:e3:10:b8: d2:82:eb:b0:84:b1:7f:d5:64:22:82:1e:30:55:16: 3a:04:7f:d4:8b:b3:46:03:72:1d:6a:4c:4a:44:79: b2:ca:22:82:66:de:24:c6:31:b2:91:72:bc:30:50: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:70:C6:8D:10:E5:43:49:B7:B5:27:FD:9D:2C:7B:1B:9C:A9:8E:9F X509v3 Authority Key Identifier: keyid:82:FA:49:59:8B:B9:63:2C:D8:CF:41:FE:DD:F7:4B:BD:3D:33:D1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7d:2c:c1:a9:c0:15:98:62:02:71:8b:5f:da:ed:dc:16:17: 94:bf:f3:79:f8:10:2c:e5:e2:09:09:aa:32:91:ae:48:38:e9: ab:0d:15:47:47:cd:96:26:a5:56:7a:63:bc:3e:5a:5c:03:60: 64:ec:d9:1d:bf:f1:e1:9f:44:05:0d:6b:bd:80:fa:70:36:b4: d1:68:e2:50:c2:2a:b9:ca:7f:48:d5:87:44:42:d5:e3:3b:d9: f3:b8:3a:32:a7:fe:0e:fb:87:ac:74:28:84:35:53:dd:a6:7c: 2c:cf:9f:6e:b3:d1:57:37:a5:59:b0:86:05:55:83:e7:f5:24: c1:42:17:94:df:b8:63:c4:9f:21:b8:20:55:19:e8:cd:ef:7f: 7a:b8:1d:46:c1:1e:27:4a:97:8d:79:1b:39:3f:d8:b3:dd:59: 1a:21:de:0f:18:36:13:0d:18:8b:54:93:fe:d7:f4:28:bb:05: 98:21:b4:56:1b:5c:f7:d3:2b:aa:1c:fd:b4:3d:81:80:2c:10: 6b:9a:66:6f:33:57:10:68:ad:fa:94:87:b2:95:3e:29:91:c7: 0a:5a:4f:4a:86:3b:ba:1c:7f:d0:ec:97:ae:fe:b8:25:3c:d3: 42:78:0b:a9:2b:51:0e:d5:01:2d:6e:ba:73:1a:71:85:e1:ca: 73:30:1f:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSUWAay4X+53xuiMK21FBT4R1gMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJGQTQ5NTk4QkI5NjMyQ0Q4Q0Y0MUZFRERGNzRCQkQz RDMzRDE5QzAeFw0yNjA5MTcwNjQxNThaFw0yNjA5MTgwNzMzNThaMDMxMTAvBgNV BAMTKEEwNzBDNjhEMTBFNTQzNDlCN0I1MjdGRDlEMkM3QjFCOUNBOThFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDely9DXep9gAFx0jQn3ZYDHHiS IOQFnJrr8V4JbFwS3rNmDmyDVpYEmuJmyr1TiQEVXbfMkYNPwGgqgoP3U/0a4AjM 39LHfxkpsZ1vnNdW+W3wBcJaJXxvsqX5Pwu/3cGQGJ916osLnZFDlfEurnTrwHfW RpxXEDWBRrL88xqrjsa5lGl29dy2W3SB3PkHh4VukYhYZvyDTX/PLLL06wlvxm4x w4iA52TQxVppmj8vwAIEuGEPd+42nSbcGXnsyqLwv0HFcIY4CFzD/ry0tuMQuNKC 67CEsX/VZCKCHjBVFjoEf9SLs0YDch1qTEpEebLKIoJm3iTGMbKRcrwwUCmjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoHDGjRDlQ0m3tSf9nSx7G5ypjp8wHwYDVR0j BBgwFoAUgvpJWYu5YyzYz0H+3fdLvT0z0ZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZkNzAzNDYtNWJkZi00OTYxLWE3NGYtNTVhZTg1NTY3MmExLzAvODJGQTQ5NTk4 QkI5NjMyQ0Q4Q0Y0MUZFRERGNzRCQkQzRDMzRDE5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MkZBNDk1OThCQjk2MzJDRDhDRjQxRkVEREY3NEJCRDNEMzNE MTlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvODJGQTQ5NTk4QkI5NjMyQ0Q4Q0Y0MUZFRERGNzRC QkQzRDMzRDE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC59LMGpwBWYYgJxi1/a7dwWF5S/83n4ECzl 4gkJqjKRrkg46asNFUdHzZYmpVZ6Y7w+WlwDYGTs2R2/8eGfRAUNa72A+nA2tNFo 4lDCKrnKf0jVh0RC1eM72fO4OjKn/g77h6x0KIQ1U92mfCzPn26z0Vc3pVmwhgVV g+f1JMFCF5TfuGPEnyG4IFUZ6M3vf3q4HUbBHidKl415Gzk/2LPdWRoh3g8YNhMN GItUk/7X9Ci7BZghtFYbXPfTK6oc/bQ9gYAsEGuaZm8zVxBorfqUh7KVPimRxwpa T0qGO7ocf9Dsl67+uCU800J4C6krUQ7VAS1uunMacYXhynMwH6M= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:31 2026 by rpki-client