$ rpki-client -vvvf rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft File: 885F36F281B0D4CC516E3818323CB9C1F30AF373.mft (raw, json) Hash identifier: RfMINZvKYhDAq8T6wIhNo0K9cwUHTPfCLA/pBhY3Vfg= Subject key identifier: 93:D5:DB:B7:21:C8:F7:AB:5C:E2:AA:68:07:AA:70:C3:D5:91:AE:D7 Authority key identifier: 88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73 Certificate issuer: /CN=885F36F281B0D4CC516E3818323CB9C1F30AF373 Certificate serial: 3AAA21A63750A8105D669C2F1904BA6898993061 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 08:11:28 +0000 Manifest this update: Wed 23 Sep 2026 08:06:28 +0000 Manifest next update: Thu 24 Sep 2026 11:53:28 +0000 Files and hashes: 1: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: OhU6QiMCF4ACcpqhynxB56U3zBuIn9qNb0BYC0SetEg=) 2: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: vKe09VJpirx3d8Vkqz6gLuC+DkGeanu2r5WmGCErId4=) 3: 885F36F281B0D4CC516E3818323CB9C1F30AF373.crl (hash: otpSjs5Nq7mnJeZMW2WTayoUasY0hrkOO5GxfkQmogE=) 4: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: 7FbZ5pEtfFRoEPaeAL7hu5dTo4RHGPeRroJ1/nBeqOo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:aa:21:a6:37:50:a8:10:5d:66:9c:2f:19:04:ba:68:98:99:30:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885F36F281B0D4CC516E3818323CB9C1F30AF373 Validity Not Before: Sep 23 08:06:28 2026 GMT Not After : Sep 24 11:53:28 2026 GMT Subject: CN=93D5DBB721C8F7AB5CE2AA6807AA70C3D591AED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:7c:ca:81:2e:f0:21:f4:55:dd:b6:8b:84: 82:77:71:e3:4d:52:82:68:8a:55:f2:a0:79:05:cb: b0:c8:db:db:ab:f3:c1:f6:09:25:80:e3:c3:29:f7: e8:d2:7a:b5:65:39:81:e0:04:66:75:7b:5a:ce:6f: 72:c7:91:a5:85:3b:13:19:1b:d6:59:43:b0:e5:a8: c9:7d:4f:5a:71:b4:55:92:18:b2:62:e8:6c:16:90: 8a:82:67:da:be:07:95:f9:17:ca:07:2b:b8:31:57: d7:1b:8e:c9:5a:13:84:d9:56:4d:b2:d2:63:3e:a5: ab:7c:79:e5:6b:c1:ee:df:78:60:ca:0d:da:db:e2: 06:77:fa:58:e7:e4:2d:52:41:70:54:6a:e7:8c:15: 63:c8:d2:72:14:a2:9b:ce:63:20:fe:06:4b:19:89: c7:38:31:71:09:f4:1f:40:20:27:4a:1d:04:90:79: 5d:96:78:9c:a1:25:64:9a:d3:f7:ec:f2:ff:e0:a8: 2b:02:63:1b:03:67:e7:2b:f4:0c:27:4e:01:61:9d: 5a:04:ab:a7:91:99:6c:19:27:41:17:fc:6c:9c:dc: 99:85:0f:d7:10:50:97:25:de:65:cc:58:30:1b:80: e6:6c:02:5d:a5:6b:1a:eb:ed:b8:ce:ff:d7:bc:e2: f6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D5:DB:B7:21:C8:F7:AB:5C:E2:AA:68:07:AA:70:C3:D5:91:AE:D7 X509v3 Authority Key Identifier: keyid:88:5F:36:F2:81:B0:D4:CC:51:6E:38:18:32:3C:B9:C1:F3:0A:F3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/885F36F281B0D4CC516E3818323CB9C1F30AF373.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/885F36F281B0D4CC516E3818323CB9C1F30AF373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:79:9f:00:c1:f6:84:14:b3:31:53:34:8a:cf:bb:e0:4c:a5: d4:62:dc:34:13:8e:06:02:c8:d6:5b:58:54:6c:74:52:66:bc: 8f:2a:1e:32:36:a1:06:ed:ac:ad:5e:71:99:ca:d9:91:cc:20: 51:d0:dd:4b:13:54:1f:05:43:50:c9:de:bc:ad:f7:26:e2:65: b8:85:82:0a:23:c3:02:89:5d:21:c6:c0:a0:88:96:e3:c9:9d: fd:97:84:f2:cb:ed:44:bb:61:20:2d:f7:82:fc:85:d2:58:d8: 04:55:28:8f:fa:c5:5c:80:d8:f1:bd:ec:86:70:47:2a:09:0d: e9:cb:fc:26:fc:07:f8:09:6c:ee:2a:21:bc:11:35:b4:44:0a: 3f:91:a6:11:10:63:17:91:bd:53:51:3e:b3:21:bb:62:73:10: c0:6f:a2:71:cf:e3:4d:01:2e:96:42:88:06:d3:70:1c:ed:2f: 21:95:06:6a:e5:0a:9b:85:2e:24:de:00:4e:b1:19:60:1b:d8: 50:f4:7c:66:29:2f:50:a5:96:28:24:80:5d:1f:a1:17:86:bd: 65:45:74:65:ee:e5:7e:ad:1b:29:98:65:b7:17:0c:8a:e6:40: 09:8c:60:f7:b4:93:71:b9:55:08:ca:55:2a:e0:df:6e:7e:29: 81:fd:05:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqohpjdQqBBdZpwvGQS6aJiZMGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1RjM2RjI4MUIwRDRDQzUxNkUzODE4MzIzQ0I5QzFG MzBBRjM3MzAeFw0yNjA5MjMwODA2MjhaFw0yNjA5MjQxMTUzMjhaMDMxMTAvBgNV BAMTKDkzRDVEQkI3MjFDOEY3QUI1Q0UyQUE2ODA3QUE3MEMzRDU5MUFFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgXzKgS7wIfRV3baLhIJ3ceNN UoJoilXyoHkFy7DI29ur88H2CSWA48Mp9+jSerVlOYHgBGZ1e1rOb3LHkaWFOxMZ G9ZZQ7DlqMl9T1pxtFWSGLJi6GwWkIqCZ9q+B5X5F8oHK7gxV9cbjslaE4TZVk2y 0mM+pat8eeVrwe7feGDKDdrb4gZ3+ljn5C1SQXBUaueMFWPI0nIUopvOYyD+BksZ icc4MXEJ9B9AICdKHQSQeV2WeJyhJWSa0/fs8v/gqCsCYxsDZ+cr9AwnTgFhnVoE q6eRmWwZJ0EX/Gyc3JmFD9cQUJcl3mXMWDAbgOZsAl2laxrr7bjO/9e84vYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk9XbtyHI96tc4qpoB6pww9WRrtcwHwYDVR0j BBgwFoAUiF828oGw1MxRbjgYMjy5wfMK83MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTUyMjI2ZWEtNWUyNi00ZWE1LWE2ODktNDc1N2FkMDVmOTUyLzAvODg1RjM2RjI4 MUIwRDRDQzUxNkUzODE4MzIzQ0I5QzFGMzBBRjM3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODVGMzZGMjgxQjBENENDNTE2RTM4MTgzMjNDQjlDMUYzMEFG MzczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvODg1RjM2RjI4MUIwRDRDQzUxNkUzODE4MzIzQ0I5 QzFGMzBBRjM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABl5nwDB9oQUszFTNIrPu+BMpdRi3DQTjgYC yNZbWFRsdFJmvI8qHjI2oQbtrK1ecZnK2ZHMIFHQ3UsTVB8FQ1DJ3ryt9ybiZbiF ggojwwKJXSHGwKCIluPJnf2XhPLL7US7YSAt94L8hdJY2ARVKI/6xVyA2PG97IZw RyoJDenL/Cb8B/gJbO4qIbwRNbRECj+RphEQYxeRvVNRPrMhu2JzEMBvonHP400B LpZCiAbTcBztLyGVBmrlCpuFLiTeAE6xGWAb2FD0fGYpL1ClligkgF0foReGvWVF dGXu5X6tGymYZbcXDIrmQAmMYPe0k3G5VQjKVSrg325+KYH9Bec= -----END CERTIFICATE-----Generated at Thu Sep 24 02:42:45 2026 by rpki-client