$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft File: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft (raw, json) Hash identifier: SWqX1cA1r+Mw5feLN7Fgu7XdIDBB/NaTeqqKcmQwOpE= Subject key identifier: BC:DD:47:D3:B0:DD:AD:82:72:CA:10:35:EE:C0:3F:44:85:C1:8B:4E Authority key identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 Certificate issuer: /CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Certificate serial: 2384FEAC0E5AB9B9FB496A18979FD15D2379F2E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft Manifest number: 92 Signing time: Wed 19 Aug 2026 22:36:16 +0000 Manifest this update: Wed 19 Aug 2026 22:31:16 +0000 Manifest next update: Thu 20 Aug 2026 23:24:16 +0000 Files and hashes: 1: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: Jbbv7LheQBY4j7uxSO+OAvKD/NoLJjSel5LCZW8mlwI=) 2: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: L6oL2whYFSSKY1+OlvsQBxpegvioTL+JL/PrizaKM4w=) 3: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: dz8GDvSUHBxefCxM449tm0eNclhVLJnu4XpLW3XQ1J8=) 4: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl (hash: BocnnDDtpeR8qFHI1fc9038JfG4IJvq9nR8KRkvTUWA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 23:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:84:fe:ac:0e:5a:b9:b9:fb:49:6a:18:97:9f:d1:5d:23:79:f2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Validity Not Before: Aug 19 22:31:16 2026 GMT Not After : Aug 20 23:24:16 2026 GMT Subject: CN=BCDD47D3B0DDAD8272CA1035EEC03F4485C18B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:f1:aa:cc:9c:db:09:27:44:e8:ac:5a:3c: e9:7b:7e:82:21:06:a1:9a:e6:f5:2e:d0:db:a0:37: 04:de:c8:d3:b6:77:cd:b8:ce:a9:25:13:28:b3:3d: 1d:11:e4:59:77:e1:93:83:bf:94:18:a4:66:3b:76: 83:88:ac:c1:a1:28:72:89:18:ea:99:1a:3b:8a:85: a8:cd:b7:3e:b9:64:fa:34:7f:67:d3:dd:3f:4f:5f: ff:88:ec:38:9d:de:19:32:ee:98:55:e4:68:2f:80: 80:f5:ba:8a:11:8e:5b:5c:3c:76:b1:28:53:91:e2: c5:09:3b:df:73:39:ee:6e:84:13:bb:e9:ea:f9:4c: d6:a1:68:21:fc:ae:2e:26:29:23:a7:c3:46:c5:1a: 6b:9b:49:be:64:6a:04:ed:47:65:2f:3f:46:36:fa: 60:ac:28:83:2e:79:f0:5a:57:e4:f2:ee:4f:c2:23: 8d:43:2b:6e:ee:de:e4:37:05:e3:36:12:de:95:8e: 24:dd:d1:2d:8e:08:26:fc:99:6b:4e:00:90:da:75: b9:33:1c:be:a6:6a:54:1f:05:c4:c8:5e:46:e4:04: 28:9e:7d:56:d5:7a:fe:30:c9:bc:46:14:7f:54:ac: 9c:1d:97:f2:bb:49:c1:99:c7:6a:e7:fa:1b:b5:c6: 39:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DD:47:D3:B0:DD:AD:82:72:CA:10:35:EE:C0:3F:44:85:C1:8B:4E X509v3 Authority Key Identifier: keyid:D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:3e:a6:a9:3d:56:66:8d:56:b5:b1:b8:d4:a8:fe:df:a1:a0: fb:89:c9:d4:93:05:7d:5f:98:92:85:08:8e:b8:f6:14:fa:10: 92:60:82:f1:6a:68:70:61:d8:5c:52:5d:bf:9e:74:2c:74:b9: eb:25:c7:4c:73:bb:20:18:6c:1e:92:a3:33:f0:ef:0d:56:ad: a5:cb:72:b6:b2:9a:d9:f8:d5:3c:1b:83:e0:5a:e2:b4:07:2b: 16:52:b4:6f:e3:e1:62:80:63:2a:b3:b9:da:22:72:7d:23:ec: ec:6e:33:24:0e:bd:ff:0e:ef:64:30:29:99:9d:25:d9:e5:00: de:60:92:ec:5b:20:f0:ba:e1:f8:47:d3:80:b5:ad:bd:69:e6: 6c:cc:ea:1c:c2:cc:df:f3:5e:aa:16:ff:80:e0:2a:08:6e:1b: d7:4e:95:47:6a:d7:77:bc:b6:46:cd:50:52:f4:21:26:9d:62: e7:50:d4:26:0a:06:b5:7b:4e:84:18:84:4f:35:51:33:00:3f: 68:8a:11:8a:ac:7c:e9:39:57:ef:f1:bb:bc:4d:0b:12:ff:6b: a7:9b:a9:0e:c6:0e:9f:d1:71:fb:f4:5a:15:3c:ac:b5:f0:8b: 9c:08:95:77:4d:2e:33:00:fd:ee:ec:7e:55:5d:61:95:16:f4: 4e:5c:0b:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4T+rA5aubn7SWoYl5/RXSN58ugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBC REYzRkQ4OTAeFw0yNjA4MTkyMjMxMTZaFw0yNjA4MjAyMzI0MTZaMDMxMTAvBgNV BAMTKEJDREQ0N0QzQjBEREFEODI3MkNBMTAzNUVFQzAzRjQ0ODVDMThCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IfGqzJzbCSdE6KxaPOl7foIh BqGa5vUu0NugNwTeyNO2d824zqklEyizPR0R5Fl34ZODv5QYpGY7doOIrMGhKHKJ GOqZGjuKhajNtz65ZPo0f2fT3T9PX/+I7Did3hky7phV5GgvgID1uooRjltcPHax KFOR4sUJO99zOe5uhBO76er5TNahaCH8ri4mKSOnw0bFGmubSb5kagTtR2UvP0Y2 +mCsKIMuefBaV+Ty7k/CI41DK27u3uQ3BeM2Et6VjiTd0S2OCCb8mWtOAJDadbkz HL6malQfBcTIXkbkBCiefVbVev4wybxGFH9UrJwdl/K7ScGZx2rn+hu1xjnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvN1H07DdrYJyyhA17sA/RIXBi04wHwYDVR0j BBgwFoAU0oJVBnmOSO5Pa9C3yKS5gL3z/YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMxZTgwZDQtNmViZS00OTJjLWEwYzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3 OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBCREYzRkQ4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjgyNTUwNjc5OEU0OEVFNEY2QkQwQjdDOEE0Qjk4MEJERjNG RDg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5 ODBCREYzRkQ4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADM+pqk9VmaNVrWxuNSo/t+hoPuJydSTBX1f mJKFCI649hT6EJJggvFqaHBh2FxSXb+edCx0ueslx0xzuyAYbB6SozPw7w1WraXL craymtn41Twbg+Ba4rQHKxZStG/j4WKAYyqzudoicn0j7OxuMyQOvf8O72QwKZmd JdnlAN5gkuxbIPC64fhH04C1rb1p5mzM6hzCzN/zXqoW/4DgKghuG9dOlUdq13e8 tkbNUFL0ISadYudQ1CYKBrV7ToQYhE81UTMAP2iKEYqsfOk5V+/xu7xNCxL/a6eb qQ7GDp/Rcfv0WhU8rLXwi5wIlXdNLjMA/e7sflVdYZUW9E5cCzM= -----END CERTIFICATE-----Generated at Thu Aug 20 07:06:00 2026 by rpki-client