$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft File: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft (raw, json) Hash identifier: c8rXRJLE3Am1gS3SJ7JcZFn/TOOW4cxZ/frOokZQHYM= Subject key identifier: 6E:05:4A:5D:6B:62:02:59:1C:E0:F9:99:84:A0:75:C0:CC:A4:61:00 Authority key identifier: 88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 Certificate issuer: /CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Certificate serial: 55E7E8E11F72431E73789127528BDBE4461061ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 08:34:09 +0000 Manifest this update: Thu 17 Sep 2026 08:29:09 +0000 Manifest next update: Fri 18 Sep 2026 08:57:09 +0000 Files and hashes: 1: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl (hash: 50awsjPQRHxn+zbla0tXeHNg9HyS1ePWoeuxDTrD7FA=) 2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: wyx8uHuSuItOBpo5Sy4M68blXovUWUC/+3CgkbnFTv8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e7:e8:e1:1f:72:43:1e:73:78:91:27:52:8b:db:e4:46:10:61:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Validity Not Before: Sep 17 08:29:09 2026 GMT Not After : Sep 18 08:57:09 2026 GMT Subject: CN=6E054A5D6B6202591CE0F99984A075C0CCA46100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:eb:be:47:63:9a:38:06:17:e0:82:98:3b: af:d0:ca:d9:b0:96:56:66:64:c3:91:ed:35:ea:14: 99:08:33:03:05:5f:a0:12:34:13:4b:3b:dc:f5:31: d9:7d:73:f3:76:33:72:1b:e3:b2:91:71:cd:30:58: dd:04:2a:84:b3:d3:ff:95:98:e7:73:41:37:34:32: 79:ec:19:4d:64:d7:26:21:e8:75:c9:6c:99:8f:d7: 5e:9a:9a:27:2c:86:a2:40:80:0b:57:55:58:b1:aa: b1:72:77:a9:dc:36:f6:db:3c:73:fc:c9:87:27:37: 94:81:4c:78:76:99:81:ea:9d:19:ec:e6:43:4c:f6: 3b:3e:b4:08:62:73:a0:3b:1b:cb:d7:ea:0e:38:f1: c9:b7:09:9f:b0:15:73:26:24:f7:ef:a3:ec:9d:f8: 30:c0:cf:e0:c9:7e:cf:4c:2e:e4:e8:34:9c:48:41: 5f:ff:11:57:7f:e7:67:fc:e6:a0:f9:10:ef:0f:9c: 28:c6:ea:f3:39:c6:36:4e:06:98:52:c1:40:77:c8: a1:0e:8b:90:0b:35:d3:74:63:af:97:fe:29:5a:1e: 01:76:a8:79:58:c1:87:1d:7b:e8:19:38:07:e4:2e: 78:94:2e:be:ca:17:7c:7b:56:a3:e1:34:e0:b3:69: c5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:05:4A:5D:6B:62:02:59:1C:E0:F9:99:84:A0:75:C0:CC:A4:61:00 X509v3 Authority Key Identifier: keyid:88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9b:73:fa:b6:c7:f8:54:86:72:a8:5e:da:16:60:e9:37:82: e0:97:39:17:e5:22:ee:7c:b0:ab:e7:a6:35:88:95:c9:c1:63: a1:76:df:4b:a6:7d:45:33:db:bf:98:ec:36:fa:f5:c2:14:4f: 19:45:4c:7a:43:0c:33:b0:a3:d0:dc:d3:40:27:ce:b6:7f:64: 6f:ee:eb:51:95:6f:c8:58:1f:1a:a9:58:8c:e5:29:49:5f:d6: 46:26:c9:e4:c5:32:ed:f6:0a:19:30:6a:48:7d:ff:a5:8f:98: 88:5c:f9:7e:8c:4b:ab:a8:c2:f3:fc:43:e7:20:84:44:0c:f2: 2e:1d:86:79:5e:a6:f0:51:9e:e3:5c:e1:1d:55:cb:73:08:e7: 39:cb:0a:51:ca:c7:4d:5b:ec:63:ac:52:f8:27:37:d7:14:c1: 83:47:93:ee:94:c3:ef:9e:dd:f6:a1:c7:8f:d1:d1:14:9c:a6: 1f:72:4e:af:9b:06:b3:dc:55:b6:e3:9f:de:0b:21:2e:d1:78: d3:de:74:b9:d7:29:14:f7:06:16:9f:b8:26:74:8f:9a:c0:1e: f6:d6:60:e2:8d:54:d0:bf:d1:40:ec:72:3f:cf:26:34:a6:a1: 5a:76:f4:f5:51:28:4b:cf:b6:b8:3b:fb:6c:72:4b:16:40:a2: b4:99:d6:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVefo4R9yQx5zeJEnUovb5EYQYe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5 MEVGREY1MzAeFw0yNjA5MTcwODI5MDlaFw0yNjA5MTgwODU3MDlaMDMxMTAvBgNV BAMTKDZFMDU0QTVENkI2MjAyNTkxQ0UwRjk5OTg0QTA3NUMwQ0NBNDYxMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4huu+R2OaOAYX4IKYO6/Qytmw llZmZMOR7TXqFJkIMwMFX6ASNBNLO9z1Mdl9c/N2M3Ib47KRcc0wWN0EKoSz0/+V mOdzQTc0MnnsGU1k1yYh6HXJbJmP116amicshqJAgAtXVVixqrFyd6ncNvbbPHP8 yYcnN5SBTHh2mYHqnRns5kNM9js+tAhic6A7G8vX6g448cm3CZ+wFXMmJPfvo+yd +DDAz+DJfs9MLuToNJxIQV//EVd/52f85qD5EO8PnCjG6vM5xjZOBphSwUB3yKEO i5ALNdN0Y6+X/ilaHgF2qHlYwYcde+gZOAfkLniULr7KF3x7VqPhNOCzacVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbgVKXWtiAlkc4PmZhKB1wMykYQAwHwYDVR0j BBgwFoAUiEeP3KwWWxWepa/f1cCtgJDv31MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZiNDY2YzYtMzc0My00OTVmLWIxYTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENB QzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5MEVGREY1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODQ3OEZEQ0FDMTY1QjE1OUVBNUFGREZENUMwQUQ4MDkwRUZE RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFE ODA5MEVGREY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2bc/q2x/hUhnKoXtoWYOk3guCXORflIu58 sKvnpjWIlcnBY6F230umfUUz27+Y7Db69cIUTxlFTHpDDDOwo9Dc00AnzrZ/ZG/u 61GVb8hYHxqpWIzlKUlf1kYmyeTFMu32Chkwakh9/6WPmIhc+X6MS6uowvP8Q+cg hEQM8i4dhnlepvBRnuNc4R1Vy3MI5znLClHKx01b7GOsUvgnN9cUwYNHk+6Uw++e 3fahx4/R0RScph9yTq+bBrPcVbbjn94LIS7ReNPedLnXKRT3BhafuCZ0j5rAHvbW YOKNVNC/0UDscj/PJjSmoVp29PVRKEvPtrg7+2xySxZAorSZ1iY= -----END CERTIFICATE-----Generated at Thu Sep 17 15:09:25 2026 by rpki-client