$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft File: 228D8D937BBC58B186163CE4DD0333EF171136B5.mft (raw, json) Hash identifier: kDYGI8VazBMTyAa+DuW5sKxZwXLUkjNiVaCV2+h1y+A= Subject key identifier: 93:8A:4A:19:E4:C5:11:F9:22:32:DA:AD:33:36:63:0D:50:56:F1:5B Authority key identifier: 22:8D:8D:93:7B:BC:58:B1:86:16:3C:E4:DD:03:33:EF:17:11:36:B5 Certificate issuer: /CN=228D8D937BBC58B186163CE4DD0333EF171136B5 Certificate serial: 62E7F6B82F08EB74A0F7A1F26855DDD8981F77E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:41:49 +0000 Manifest this update: Thu 17 Sep 2026 02:36:49 +0000 Manifest next update: Fri 18 Sep 2026 06:32:49 +0000 Files and hashes: 1: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: MTpdy0CYG7SIZe6cOf6a6b9EOLMRkXO/tTUBIEJ2xwQ=) 2: 228D8D937BBC58B186163CE4DD0333EF171136B5.crl (hash: M5h691mOTLISADh+qxN3CBN+XbS4/1Jt0bIYKGms8A0=) 3: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: Dk+nSXFZDNacuokslAhQOKnR2rRHLun2ihG3BWOPCgU=) 4: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: JM/02KXvppUFA6M2lfoMyS0PaD1KXTG0P2tE2Kswrq4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.crl rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e7:f6:b8:2f:08:eb:74:a0:f7:a1:f2:68:55:dd:d8:98:1f:77:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228D8D937BBC58B186163CE4DD0333EF171136B5 Validity Not Before: Sep 17 02:36:49 2026 GMT Not After : Sep 18 06:32:49 2026 GMT Subject: CN=938A4A19E4C511F92232DAAD3336630D5056F15B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:f5:1d:a7:63:3d:da:e2:14:cf:c3:e9:51: 74:f4:0b:53:23:6c:c1:c5:8a:bb:f6:ee:0d:17:c8: d7:78:1d:16:b9:59:18:83:3c:98:4c:4b:aa:d6:5f: 37:13:ad:db:df:f1:17:ed:cf:17:c0:4b:f6:89:95: b8:76:ee:b3:e7:b5:2d:96:81:a6:c3:18:a3:6d:a9: 61:dc:95:49:f3:4e:27:35:2a:79:77:b4:b3:88:13: 5f:a6:b9:a5:3a:a1:58:5f:c6:ca:79:ff:3a:00:93: 63:6f:98:7e:76:0d:61:c2:13:55:ad:86:57:f2:9d: 7d:c4:fb:23:3c:f7:fe:50:0d:6e:e4:cd:13:b2:b3: 26:30:95:0c:6e:40:36:d4:bc:0b:07:97:f6:d9:14: 41:2e:49:b1:56:cb:69:ca:4b:f5:77:87:24:76:7e: f6:0e:f9:ee:db:af:5b:57:08:01:88:4f:e6:55:a8: 4f:fb:0a:f2:6a:04:aa:7b:02:0e:28:b0:ac:36:12: 70:07:6b:90:3e:c2:35:bf:37:c2:b0:a2:92:77:bc: 3e:95:4b:ad:4d:d2:a7:9a:75:2f:37:6f:df:7e:13: 17:ba:5e:6e:a9:69:eb:90:23:14:94:ae:6e:07:b6: dd:f0:d2:bc:e5:26:3b:a4:86:50:13:52:fb:f6:40: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8A:4A:19:E4:C5:11:F9:22:32:DA:AD:33:36:63:0D:50:56:F1:5B X509v3 Authority Key Identifier: keyid:22:8D:8D:93:7B:BC:58:B1:86:16:3C:E4:DD:03:33:EF:17:11:36:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:76:28:b6:cc:e5:34:6e:3c:8c:2a:78:57:4d:9a:61:35:a4: 48:dd:55:36:83:2e:48:ee:da:70:67:65:e5:0e:06:e5:d5:e3: 3a:b4:60:cf:5e:88:84:da:ed:2b:29:33:93:8e:a7:16:99:25: e1:2f:62:8b:9d:d6:a2:31:ee:66:fc:64:9e:82:3f:bf:d6:ab: 95:b3:8d:21:52:bf:1c:72:f1:6f:d3:c3:69:16:f3:2a:b0:40: ae:d6:6d:fa:81:5d:21:47:52:a5:d4:2f:d9:47:c3:28:a9:6e: ee:19:20:55:99:39:b0:92:98:87:29:4e:f7:1d:f3:2b:c0:b6: f3:0f:f9:52:85:8f:76:43:62:70:b1:de:ef:b8:19:36:ac:78: 3f:61:04:48:a2:6f:06:de:1e:50:f0:79:43:ee:3f:0c:cd:2f: d1:f0:82:b3:f8:04:d8:8a:24:21:79:d1:3c:9d:e8:28:c8:4d: c4:40:d3:3c:84:bc:30:2d:26:c6:2e:ed:6b:b9:c7:4a:90:b7: 8f:e9:41:3e:56:53:5e:d5:73:94:af:58:8e:01:f9:b1:b5:bc: 23:79:94:fc:86:58:68:29:63:44:bc:35:b1:a9:a0:10:ea:fc: 44:46:29:4d:3a:08:17:bb:9b:e4:b7:14:37:8c:29:4b:50:fa: ce:8f:67:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYuf2uC8I63Sg96HyaFXd2Jgfd+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RDhEOTM3QkJDNThCMTg2MTYzQ0U0REQwMzMzRUYx NzExMzZCNTAeFw0yNjA5MTcwMjM2NDlaFw0yNjA5MTgwNjMyNDlaMDMxMTAvBgNV BAMTKDkzOEE0QTE5RTRDNTExRjkyMjMyREFBRDMzMzY2MzBENTA1NkYxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FPUdp2M92uIUz8PpUXT0C1Mj bMHFirv27g0XyNd4HRa5WRiDPJhMS6rWXzcTrdvf8RftzxfAS/aJlbh27rPntS2W gabDGKNtqWHclUnzTic1Knl3tLOIE1+muaU6oVhfxsp5/zoAk2NvmH52DWHCE1Wt hlfynX3E+yM89/5QDW7kzROysyYwlQxuQDbUvAsHl/bZFEEuSbFWy2nKS/V3hyR2 fvYO+e7br1tXCAGIT+ZVqE/7CvJqBKp7Ag4osKw2EnAHa5A+wjW/N8KwopJ3vD6V S61N0qeadS83b99+Exe6Xm6paeuQIxSUrm4Htt3w0rzlJjukhlATUvv2QK/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk4pKGeTFEfkiMtqtMzZjDVBW8VswHwYDVR0j BBgwFoAUIo2Nk3u8WLGGFjzk3QMz7xcRNrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDliODk5YWMtNDg3MC00ZTI4LThlNGUtMmMyMzc1MmE0YTYwLzAvMjI4RDhEOTM3 QkJDNThCMTg2MTYzQ0U0REQwMzMzRUYxNzExMzZCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjhEOEQ5MzdCQkM1OEIxODYxNjNDRTRERDAzMzNFRjE3MTEz NkI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMjI4RDhEOTM3QkJDNThCMTg2MTYzQ0U0REQwMzMz RUYxNzExMzZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABF2KLbM5TRuPIwqeFdNmmE1pEjdVTaDLkju 2nBnZeUOBuXV4zq0YM9eiITa7SspM5OOpxaZJeEvYoud1qIx7mb8ZJ6CP7/Wq5Wz jSFSvxxy8W/Tw2kW8yqwQK7WbfqBXSFHUqXUL9lHwyipbu4ZIFWZObCSmIcpTvcd 8yvAtvMP+VKFj3ZDYnCx3u+4GTaseD9hBEiibwbeHlDweUPuPwzNL9HwgrP4BNiK JCF50Tyd6CjITcRA0zyEvDAtJsYu7Wu5x0qQt4/pQT5WU17Vc5SvWI4B+bG1vCN5 lPyGWGgpY0S8NbGpoBDq/ERGKU06CBe7m+S3FDeMKUtQ+s6PZ1U= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:36 2026 by rpki-client