$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft File: 521B83183A9325633BB6ADA03FF17A79CADB35DF.mft (raw, json) Hash identifier: kBwkVrkqDgCwOGYLPnNldtkWioVx4svaQ8/ca4W5cZg= Subject key identifier: F8:33:8B:13:BC:E8:3F:7B:0F:4C:2C:E5:8F:00:A3:AF:60:E8:C1:FF Authority key identifier: 52:1B:83:18:3A:93:25:63:3B:B6:AD:A0:3F:F1:7A:79:CA:DB:35:DF Certificate issuer: /CN=521B83183A9325633BB6ADA03FF17A79CADB35DF Certificate serial: 36E19424339F46392F2B83C0BAAAB277BE2BC41E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:02:14 +0000 Manifest this update: Thu 17 Sep 2026 06:57:14 +0000 Manifest next update: Fri 18 Sep 2026 08:37:14 +0000 Files and hashes: 1: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: JaucgXEEHyqtYGuJV6Iibo3lc6NtVibWI1nY7MEIhPI=) 2: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: 6wZBUy40gkIb1BF7mQfsPCPQYb0RKrN3BToc6rY80DQ=) 3: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: TTP/IyS3Nws7WQbB4mb0u1b9tLXn20HyAh2jtbcNLlc=) 4: 521B83183A9325633BB6ADA03FF17A79CADB35DF.crl (hash: hZU1QyxybACsckc4KTI6Qt4jg0Eu9ugWlzMt9oDW/84=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.crl rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e1:94:24:33:9f:46:39:2f:2b:83:c0:ba:aa:b2:77:be:2b:c4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521B83183A9325633BB6ADA03FF17A79CADB35DF Validity Not Before: Sep 17 06:57:14 2026 GMT Not After : Sep 18 08:37:14 2026 GMT Subject: CN=F8338B13BCE83F7B0F4C2CE58F00A3AF60E8C1FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:3a:ad:51:28:dc:c0:b8:c0:3a:e0:c1:6b: 46:16:82:1a:85:04:0a:20:66:86:7c:20:94:a1:93: 72:99:32:e6:68:3d:e7:6a:81:d3:c6:73:32:c9:a4: 4e:1b:92:97:16:18:f2:09:12:47:10:cd:99:81:e1: b7:c6:ab:4f:a7:1d:39:58:a8:37:43:a5:ff:5b:51: 67:ab:fe:ad:3d:5c:3c:6f:99:c4:d2:86:1e:ad:63: 73:ef:21:28:0d:eb:94:ca:a7:85:85:ff:dc:98:39: a6:c4:25:65:fb:9f:5f:fb:22:e4:03:71:e6:4f:af: 45:0e:23:ac:bc:1f:bf:03:70:09:ca:d6:00:26:32: 76:3f:e9:31:43:c0:08:54:4c:95:55:c8:ae:6b:21: cf:1c:0e:7e:5f:9d:dc:fe:79:6d:c9:d2:22:61:f2: 26:7a:28:7c:a6:66:74:58:12:57:db:da:5f:b6:ee: 8d:d0:58:d0:5d:65:cd:36:e6:dc:63:16:b1:34:69: 03:8e:c8:8b:96:42:94:21:69:7e:d2:30:2a:bb:8e: 22:46:c0:be:7e:ce:c5:0d:9d:96:81:38:02:30:fd: aa:33:7a:34:bc:30:c9:37:f0:89:ae:a3:ff:7f:bd: f0:d0:22:f3:8a:40:50:08:cd:3e:b9:42:a1:dd:36: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:33:8B:13:BC:E8:3F:7B:0F:4C:2C:E5:8F:00:A3:AF:60:E8:C1:FF X509v3 Authority Key Identifier: keyid:52:1B:83:18:3A:93:25:63:3B:B6:AD:A0:3F:F1:7A:79:CA:DB:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:be:77:b6:bf:9e:f9:43:2e:20:97:58:13:5d:e3:ed:d6:78: 67:59:74:9a:41:9d:01:a2:07:5e:6e:a2:ac:2e:70:cc:c7:a3: 22:04:0d:23:aa:fa:71:a8:9a:b5:05:75:54:9f:34:ab:0f:e3: 9c:03:e2:22:c3:f4:67:1a:4b:60:26:0e:df:25:ea:87:22:f2: 33:0f:73:a1:1f:53:a2:83:08:e2:97:c5:1e:ec:2f:12:84:34: 62:39:1a:41:74:a3:57:99:e0:95:bf:ed:56:38:79:2a:a5:25: 89:ff:32:13:a4:d8:02:d4:58:f3:87:70:5e:5b:45:11:aa:cd: 37:b0:cf:85:5b:8d:6d:6f:2d:42:2e:f4:ec:50:fe:ca:39:1d: d6:9a:8d:77:bb:6c:fd:77:3e:92:c8:d8:29:fd:fd:8b:ea:17: ed:e4:1e:79:90:0b:ab:23:7d:7a:be:66:d8:8f:81:1f:0e:c6: 4e:19:5d:6e:c6:73:6e:80:94:7a:86:41:cf:0e:0a:1b:ad:ae: ff:08:49:ac:b1:ff:90:ec:8e:a1:b7:df:db:14:35:15:a1:ea: 68:c0:8a:c5:fe:e1:64:3f:1f:ae:90:7b:39:e5:cb:46:88:77: 74:61:7f:45:10:30:eb:6b:35:47:ae:e7:bf:b0:02:25:86:a8: 7e:a1:59:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNuGUJDOfRjkvK4PAuqqyd74rxB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxQjgzMTgzQTkzMjU2MzNCQjZBREEwM0ZGMTdBNzlD QURCMzVERjAeFw0yNjA5MTcwNjU3MTRaFw0yNjA5MTgwODM3MTRaMDMxMTAvBgNV BAMTKEY4MzM4QjEzQkNFODNGN0IwRjRDMkNFNThGMDBBM0FGNjBFOEMxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNizqtUSjcwLjAOuDBa0YWghqF BAogZoZ8IJShk3KZMuZoPedqgdPGczLJpE4bkpcWGPIJEkcQzZmB4bfGq0+nHTlY qDdDpf9bUWer/q09XDxvmcTShh6tY3PvISgN65TKp4WF/9yYOabEJWX7n1/7IuQD ceZPr0UOI6y8H78DcAnK1gAmMnY/6TFDwAhUTJVVyK5rIc8cDn5fndz+eW3J0iJh 8iZ6KHymZnRYElfb2l+27o3QWNBdZc025txjFrE0aQOOyIuWQpQhaX7SMCq7jiJG wL5+zsUNnZaBOAIw/aozejS8MMk38Imuo/9/vfDQIvOKQFAIzT65QqHdNrHlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+DOLE7zoP3sPTCzljwCjr2Dowf8wHwYDVR0j BBgwFoAUUhuDGDqTJWM7tq2gP/F6ecrbNd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM5MmY4OTktZTgzYy00NzA2LWE5YTEtODIyNTZiZDQ4MjM2LzAvNTIxQjgzMTgz QTkzMjU2MzNCQjZBREEwM0ZGMTdBNzlDQURCMzVERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjFCODMxODNBOTMyNTYzM0JCNkFEQTAzRkYxN0E3OUNBREIz NURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvNTIxQjgzMTgzQTkzMjU2MzNCQjZBREEwM0ZGMTdB NzlDQURCMzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKm+d7a/nvlDLiCXWBNd4+3WeGdZdJpBnQGi B15uoqwucMzHoyIEDSOq+nGomrUFdVSfNKsP45wD4iLD9GcaS2AmDt8l6oci8jMP c6EfU6KDCOKXxR7sLxKENGI5GkF0o1eZ4JW/7VY4eSqlJYn/MhOk2ALUWPOHcF5b RRGqzTewz4VbjW1vLUIu9OxQ/so5HdaajXe7bP13PpLI2Cn9/YvqF+3kHnmQC6sj fXq+ZtiPgR8Oxk4ZXW7Gc26AlHqGQc8OChutrv8ISayx/5DsjqG339sUNRWh6mjA isX+4WQ/H66Qeznly0aId3Rhf0UQMOtrNUeu57+wAiWGqH6hWe8= -----END CERTIFICATE-----Generated at Thu Sep 17 10:57:35 2026 by rpki-client