$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft File: A828948E5E3657BBBB02A70735E06754A306A511.mft (raw, json) Hash identifier: 5wNxWXofTJn+h0HlH6K199MbCS3k5zIZfehmvKzsgFY= Subject key identifier: FD:75:97:33:AF:34:5B:EB:88:9C:D2:44:9B:75:E3:C7:5D:D9:CA:BE Authority key identifier: A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 Certificate issuer: /CN=A828948E5E3657BBBB02A70735E06754A306A511 Certificate serial: 1EFE2B73B4F9347194B9A71E5243A796F85510DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft Manifest number: B5 Signing time: Wed 16 Sep 2026 12:44:53 +0000 Manifest this update: Wed 16 Sep 2026 12:39:53 +0000 Manifest next update: Thu 17 Sep 2026 14:24:53 +0000 Files and hashes: 1: A828948E5E3657BBBB02A70735E06754A306A511.crl (hash: kIbeoEAhGGBkAR7VlDrbyVpzB6Loj4cT66qCP/jby9Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fe:2b:73:b4:f9:34:71:94:b9:a7:1e:52:43:a7:96:f8:55:10:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A828948E5E3657BBBB02A70735E06754A306A511 Validity Not Before: Sep 16 12:39:53 2026 GMT Not After : Sep 17 14:24:53 2026 GMT Subject: CN=FD759733AF345BEB889CD2449B75E3C75DD9CABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:14:eb:79:da:57:5a:6f:29:64:35:e6:fd: 53:9e:06:14:ec:49:92:04:c0:8a:6d:2f:7f:49:97: 07:12:b7:90:d3:20:4f:4a:87:0a:07:08:06:80:0e: 69:b0:b8:85:f3:ae:b4:bf:46:94:20:a0:6f:f9:21: 99:e8:46:65:77:7b:95:f1:bf:58:83:c2:53:62:cb: f0:2b:fe:31:e4:0f:b5:dc:04:f5:be:2b:37:70:ae: 1c:ba:82:c9:3e:55:04:27:3f:f9:2c:00:16:10:20: 11:da:58:9f:fa:23:2a:d1:7d:11:9d:97:a5:2b:f9: 66:2a:c8:9b:5e:8d:c1:b4:aa:c2:33:bb:ae:32:ba: 78:de:cc:b1:5f:67:b8:31:22:2e:a7:18:54:65:02: 64:0d:8e:f1:7a:4e:20:31:be:bf:24:fc:21:93:ed: 63:75:83:75:6a:d7:5e:ae:90:4a:f7:57:a1:01:13: 6b:bf:86:ba:f5:26:2c:92:08:e2:9b:c4:76:2b:7c: 02:11:b3:31:d3:f6:ed:7d:45:d8:58:85:e1:b2:4f: 4d:aa:97:b2:9c:78:50:c8:1a:ce:96:c3:93:66:01: 1a:b4:2c:b3:4e:dd:51:9a:e1:30:68:3b:54:e3:ab: e9:67:70:09:14:08:0a:0c:32:7d:0c:93:c6:9a:fd: db:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:75:97:33:AF:34:5B:EB:88:9C:D2:44:9B:75:E3:C7:5D:D9:CA:BE X509v3 Authority Key Identifier: keyid:A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:e4:83:31:46:9a:f7:16:b3:39:2d:29:31:fa:3b:bb:bd:29: 9c:91:c3:c2:ad:ea:93:e2:ea:d9:82:68:eb:2e:29:0d:57:83: 69:1d:e7:a5:bf:8f:d0:67:e0:32:3c:c0:c7:40:1e:39:62:36: 25:22:df:06:dc:2f:c6:67:22:9d:83:bc:f0:1b:80:f7:c6:95: ae:ea:de:6e:cf:d0:17:e2:e4:49:4e:c4:68:34:e4:99:93:1e: 5c:cf:ee:6c:df:c0:86:4b:e6:96:1c:f8:71:6f:79:80:ba:1a: 6a:bd:98:54:d6:38:2f:97:de:d3:04:15:4f:18:08:ce:cb:c5: 25:99:29:1b:de:eb:a5:9c:e2:b9:10:50:1b:ca:71:53:79:64: fb:93:6b:ff:e1:1c:f7:f1:c6:c5:51:56:a3:be:cb:49:ce:7f: 06:3b:5e:79:bb:7b:f0:1d:fc:0a:0d:9e:59:ad:d0:b6:04:7c: 00:2c:17:88:cf:0c:13:31:b2:d6:7a:c9:9e:45:f9:c8:65:64: d3:cf:39:b9:38:54:1e:0e:ef:e1:10:70:64:2a:38:14:42:3b: 98:1c:b1:ce:fd:79:c6:b7:46:ff:a9:19:d7:f9:51:e9:c7:11: c6:45:5a:5f:b8:56:ac:0a:25:b5:81:a3:0d:7b:32:2f:ae:25: 21:f1:d5:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHv4rc7T5NHGUuaceUkOnlvhVEN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRB MzA2QTUxMTAeFw0yNjA5MTYxMjM5NTNaFw0yNjA5MTcxNDI0NTNaMDMxMTAvBgNV BAMTKEZENzU5NzMzQUYzNDVCRUI4ODlDRDI0NDlCNzVFM0M3NUREOUNBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaRTredpXWm8pZDXm/VOeBhTs SZIEwIptL39JlwcSt5DTIE9KhwoHCAaADmmwuIXzrrS/RpQgoG/5IZnoRmV3e5Xx v1iDwlNiy/Ar/jHkD7XcBPW+Kzdwrhy6gsk+VQQnP/ksABYQIBHaWJ/6IyrRfRGd l6Ur+WYqyJtejcG0qsIzu64yunjezLFfZ7gxIi6nGFRlAmQNjvF6TiAxvr8k/CGT 7WN1g3Vq116ukEr3V6EBE2u/hrr1JiySCOKbxHYrfAIRszHT9u19RdhYheGyT02q l7KceFDIGs6Ww5NmARq0LLNO3VGa4TBoO1Tjq+lncAkUCAoMMn0Mk8aa/ds3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/XWXM680W+uInNJEm3Xjx13Zyr4wHwYDVR0j BBgwFoAUqCiUjl42V7u7AqcHNeBnVKMGpREwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGJhNmQwNzItODM2MS00ZGRmLTgwMGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1 RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRBMzA2QTUxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODI4OTQ4RTVFMzY1N0JCQkIwMkE3MDczNUUwNjc1NEEzMDZB NTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3 NTRBMzA2QTUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLkgzFGmvcWszktKTH6O7u9KZyRw8Kt6pPi 6tmCaOsuKQ1Xg2kd56W/j9Bn4DI8wMdAHjliNiUi3wbcL8ZnIp2DvPAbgPfGla7q 3m7P0Bfi5ElOxGg05JmTHlzP7mzfwIZL5pYc+HFveYC6Gmq9mFTWOC+X3tMEFU8Y CM7LxSWZKRve66Wc4rkQUBvKcVN5ZPuTa//hHPfxxsVRVqO+y0nOfwY7Xnm7e/Ad /AoNnlmt0LYEfAAsF4jPDBMxstZ6yZ5F+chlZNPPObk4VB4O7+EQcGQqOBRCO5gc sc79eca3Rv+pGdf5UenHEcZFWl+4VqwKJbWBow17Mi+uJSHx1bk= -----END CERTIFICATE-----Generated at Thu Sep 17 08:37:37 2026 by rpki-client