$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft File: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft (raw, json) Hash identifier: yXfHnWszE3rY9NxiStCT8TehsJxd/Fznsn2Cc2Xk868= Subject key identifier: 66:DC:A2:77:CB:7E:DA:A9:C7:FD:46:96:9B:75:C3:32:26:82:FC:F0 Authority key identifier: 82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F Certificate issuer: /CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Certificate serial: 5A4BF0EBA5198D41E52663548488A06E0B01AE30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 14:01:24 +0000 Manifest this update: Wed 16 Sep 2026 13:56:24 +0000 Manifest next update: Thu 17 Sep 2026 16:04:24 +0000 Files and hashes: 1: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: dcn7JjA5cMl377hf4qH/uXB97TvgtDVrGSS8WaneiPA=) 2: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl (hash: 4NlcDG8qmOf001t5b54Ny/Ju3dOae8DqcNxJpaRyPK8=) 3: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: J9Ppr3YgZsd8hgKwRlpPASzO8XUT6qbE4ua4z+T5rRI=) 4: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: sAJt4KOFRGK6/p9H5qEjBboJGlbpIE0n8tuPpLq/ACA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4b:f0:eb:a5:19:8d:41:e5:26:63:54:84:88:a0:6e:0b:01:ae:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Validity Not Before: Sep 16 13:56:24 2026 GMT Not After : Sep 17 16:04:24 2026 GMT Subject: CN=66DCA277CB7EDAA9C7FD46969B75C3322682FCF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:eb:40:1d:29:8a:b9:66:c1:5b:5d:b6:12: 7a:15:df:df:bd:e7:c9:05:d0:c2:14:6c:db:a3:cf: f1:77:ae:df:71:0e:5a:80:15:67:3b:cc:40:e0:5f: fc:9c:5e:1b:37:d2:3f:07:6b:a4:dd:2b:07:9d:af: 71:2a:59:79:b0:2f:3f:3f:95:1c:45:6c:23:27:fb: b6:84:cc:a7:b0:b2:8b:54:3c:8e:36:28:cb:13:73: 7f:be:09:40:db:9c:84:47:29:ee:6e:37:84:54:3a: 5d:af:ec:37:9b:ad:5a:ed:0a:9f:a0:7b:7a:d5:3c: af:9b:b3:9f:55:54:f7:41:ff:e5:e0:bd:bd:95:5d: a7:12:a4:95:85:c2:1c:54:bb:b5:8c:74:dc:a5:37: 30:f2:88:49:ee:a1:da:51:51:67:2b:d7:b4:07:25: 52:3e:6d:95:0d:58:60:47:1d:2f:df:e7:2d:67:88: be:fe:f3:84:11:d7:40:8e:35:67:57:8a:fe:62:a6: e6:7f:7c:6c:a3:71:70:f3:c0:03:02:73:9c:f6:a8: 68:21:7a:f9:92:8b:8b:65:1c:47:bf:d1:db:f9:18: 16:78:ae:bf:ad:65:63:f7:26:f0:47:4c:43:f8:11: 0d:5d:b6:3b:33:6c:9f:43:26:77:74:d4:f5:7e:1b: 91:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DC:A2:77:CB:7E:DA:A9:C7:FD:46:96:9B:75:C3:32:26:82:FC:F0 X509v3 Authority Key Identifier: keyid:82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:5b:f8:9f:ca:81:58:e0:b7:ba:55:d4:5f:05:d9:9f:09:77: af:ee:33:d4:b8:3f:1c:03:65:aa:07:1c:4c:fb:73:cd:09:55: 65:2f:bd:49:13:25:56:3f:50:e8:5d:67:3b:9d:f4:d1:f1:44: 31:5a:47:13:c1:29:95:f0:40:04:66:99:37:38:3d:78:0d:c1: 78:2b:4b:63:5c:a5:6d:bf:a6:bc:51:18:cd:86:27:c1:81:6b: 36:fd:3e:23:c2:fe:db:fd:45:e0:fc:04:28:53:a7:12:50:e4: b2:b6:7d:56:a0:63:1d:ab:e6:b7:4c:b0:0f:1c:bb:c1:2b:73: 07:9c:a2:90:df:74:46:d2:78:ac:1d:bb:61:71:b8:ce:11:0d: b0:49:42:52:86:ea:04:46:24:9c:22:23:91:fb:e4:ed:19:82: c8:55:e6:f4:a7:c6:d6:ba:dd:73:c4:bd:c9:24:f9:45:b4:37: b0:75:a9:73:9d:3b:e8:f6:92:e8:0e:e6:15:dd:3b:5c:f8:4f: 1b:69:a7:1b:00:8f:a2:e6:b9:a0:19:97:31:10:ee:21:fe:7e: d6:bb:c6:a8:f5:53:73:34:37:96:52:f4:8d:de:4e:a2:80:60: f6:e6:1d:2f:3b:1f:34:fa:ce:71:da:f3:50:ec:bd:43:0f:42: d0:cc:3b:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWkvw66UZjUHlJmNUhIigbgsBrjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVB MUM0MEY2RjAeFw0yNjA5MTYxMzU2MjRaFw0yNjA5MTcxNjA0MjRaMDMxMTAvBgNV BAMTKDY2RENBMjc3Q0I3RURBQTlDN0ZENDY5NjlCNzVDMzMyMjY4MkZDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxetAHSmKuWbBW122EnoV39+9 58kF0MIUbNujz/F3rt9xDlqAFWc7zEDgX/ycXhs30j8Ha6TdKwedr3EqWXmwLz8/ lRxFbCMn+7aEzKewsotUPI42KMsTc3++CUDbnIRHKe5uN4RUOl2v7DebrVrtCp+g e3rVPK+bs59VVPdB/+Xgvb2VXacSpJWFwhxUu7WMdNylNzDyiEnuodpRUWcr17QH JVI+bZUNWGBHHS/f5y1niL7+84QR10CONWdXiv5ipuZ/fGyjcXDzwAMCc5z2qGgh evmSi4tlHEe/0dv5GBZ4rr+tZWP3JvBHTEP4EQ1dtjszbJ9DJnd01PV+G5EHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZtyid8t+2qnH/UaWm3XDMiaC/PAwHwYDVR0j BBgwFoAUgotiPppEPot+ldSli14pZaHED28wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFmMGY0MjMtM2JlZC00OTM4LTlmODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5 QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVBMUM0MEY2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjhCNjIzRTlBNDQzRThCN0U5NUQ0QTU4QjVFMjk2NUExQzQw RjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5 NjVBMUM0MEY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxb+J/KgVjgt7pV1F8F2Z8Jd6/uM9S4PxwD ZaoHHEz7c80JVWUvvUkTJVY/UOhdZzud9NHxRDFaRxPBKZXwQARmmTc4PXgNwXgr S2NcpW2/prxRGM2GJ8GBazb9PiPC/tv9ReD8BChTpxJQ5LK2fVagYx2r5rdMsA8c u8ErcwecopDfdEbSeKwdu2FxuM4RDbBJQlKG6gRGJJwiI5H75O0ZgshV5vSnxta6 3XPEvckk+UW0N7B1qXOdO+j2kugO5hXdO1z4TxtppxsAj6LmuaAZlzEQ7iH+fta7 xqj1U3M0N5ZS9I3eTqKAYPbmHS87HzT6znHa81DsvUMPQtDMO+I= -----END CERTIFICATE-----Generated at Thu Sep 17 09:28:40 2026 by rpki-client