$ rpki-client -vvvf rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft File: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft (raw, json) Hash identifier: 4DyiWqKT76x+CSwO4FnJ+r9tFkRf8s5OztVC9LDpcDY= Subject key identifier: 0D:AC:A0:BA:33:B0:01:0C:D9:9B:2C:96:A9:3A:5C:AD:18:F8:D6:ED Authority key identifier: 88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97 Certificate issuer: /CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97 Certificate serial: 30AF49ABB393FDDB12E420502BEA3618BAC43073 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft Manifest number: CA Signing time: Thu 01 Oct 2026 06:39:15 +0000 Manifest this update: Thu 01 Oct 2026 06:34:15 +0000 Manifest next update: Fri 02 Oct 2026 09:43:15 +0000 Files and hashes: 1: 884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl (hash: hdT+vY4iC2zeUi6zqg7hZRaIQPWy52pbPoA4PdUHSn8=) 2: 3130332e31312e32322e302f32332d3234203d3e203538333930.roa (hash: 81p6B3Tk5Za1NJUs2uCoetypfDjnwptAX9451IsBrBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 07:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:af:49:ab:b3:93:fd:db:12:e4:20:50:2b:ea:36:18:ba:c4:30:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884E2365E4B8AF05C44BD649D5B42968E48B8A97 Validity Not Before: Oct 1 06:34:15 2026 GMT Not After : Oct 2 09:43:15 2026 GMT Subject: CN=0DACA0BA33B0010CD99B2C96A93A5CAD18F8D6ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0d:b9:32:65:66:2d:55:30:d1:60:d7:33:34: 8f:69:a3:7d:4b:a6:25:a4:72:55:12:d4:fe:22:45: fa:ec:a4:58:08:00:89:77:ea:06:1d:8d:bc:d2:12: 71:c5:75:d4:a9:f4:6f:df:54:f1:5f:3b:0b:af:89: 1c:c0:f4:3c:0a:4e:0e:67:2a:3f:56:33:f1:b1:5d: 52:e7:8d:ff:f1:e9:f1:5e:f3:39:3f:ec:17:ab:e0: 4b:da:66:56:3e:82:f7:6d:b0:2e:c0:45:6a:4f:44: fd:00:91:81:aa:10:ab:59:1c:72:e0:2f:7c:78:e4: c5:55:da:c9:5c:09:72:69:84:fe:d4:28:ea:a2:54: 9e:a7:f7:22:1e:51:0f:5d:80:46:85:af:b2:0c:2e: f2:01:0c:2f:45:b0:4c:34:03:c9:02:0b:7b:d5:63: 06:6f:85:c2:fb:01:05:87:95:b2:56:e6:9d:26:4c: 6c:98:f6:a8:da:de:96:2f:2e:34:5e:b8:56:92:70: a5:1a:ac:90:e7:75:47:e0:4a:08:08:2f:f9:3d:39: 8a:1c:ec:5c:56:3f:37:41:90:7f:10:2e:9a:fb:c3: 8e:2c:73:73:cf:55:df:0b:f6:8b:c9:26:9e:26:b9: ce:f0:fd:1c:76:a6:e4:24:b4:bb:fe:04:51:e5:a9: 35:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AC:A0:BA:33:B0:01:0C:D9:9B:2C:96:A9:3A:5C:AD:18:F8:D6:ED X509v3 Authority Key Identifier: keyid:88:4E:23:65:E4:B8:AF:05:C4:4B:D6:49:D5:B4:29:68:E4:8B:8A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/884E2365E4B8AF05C44BD649D5B42968E48B8A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/884E2365E4B8AF05C44BD649D5B42968E48B8A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:a4:a3:3a:f1:81:75:20:c2:0f:7c:b2:08:51:f6:34:27:ab: 57:67:98:8b:34:45:7b:fd:a6:91:f8:b0:ac:3f:72:e8:56:b9: f3:21:1b:14:2b:2c:de:5d:c7:24:46:c9:b8:7f:af:5c:54:ef: 57:af:f2:dd:f4:27:5d:08:da:69:a7:0e:d0:86:25:a1:2c:cd: c2:38:12:fd:71:30:42:1f:5b:1a:f9:d3:20:ce:30:51:e7:4d: ee:e5:73:a1:5e:e4:5f:df:7c:ee:fa:99:7c:4c:7c:29:7b:55: ac:8e:89:88:2f:99:f9:47:61:0b:d7:24:56:10:73:bb:a2:5a: b1:d5:47:4e:e5:d7:7b:a1:a8:07:fd:60:ed:f9:ad:58:0f:e9: 81:27:dd:3b:ea:82:98:c7:05:b7:68:80:99:1f:4e:d4:77:62: ea:e7:25:86:f2:f6:64:59:0a:fe:98:96:f6:59:be:e5:76:a9: 2c:8c:ab:82:dc:c6:71:21:62:00:64:0f:f1:0e:e3:47:e8:e7: 05:59:bc:7a:7f:ee:de:df:24:80:6a:9b:9b:c6:3e:c9:df:03: 1d:1a:57:53:c7:82:25:47:e2:8a:5e:d4:c8:c2:c7:2c:23:29: 1b:3b:e7:a9:e5:7f:16:03:1a:68:fb:7f:8c:70:eb:37:29:09: 6a:d9:14:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMK9Jq7OT/dsS5CBQK+o2GLrEMHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0RTIzNjVFNEI4QUYwNUM0NEJENjQ5RDVCNDI5NjhF NDhCOEE5NzAeFw0yNjEwMDEwNjM0MTVaFw0yNjEwMDIwOTQzMTVaMDMxMTAvBgNV BAMTKDBEQUNBMEJBMzNCMDAxMENEOTlCMkM5NkE5M0E1Q0FEMThGOEQ2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTDbkyZWYtVTDRYNczNI9po31L piWkclUS1P4iRfrspFgIAIl36gYdjbzSEnHFddSp9G/fVPFfOwuviRzA9DwKTg5n Kj9WM/GxXVLnjf/x6fFe8zk/7Ber4EvaZlY+gvdtsC7ARWpPRP0AkYGqEKtZHHLg L3x45MVV2slcCXJphP7UKOqiVJ6n9yIeUQ9dgEaFr7IMLvIBDC9FsEw0A8kCC3vV YwZvhcL7AQWHlbJW5p0mTGyY9qja3pYvLjReuFaScKUarJDndUfgSggIL/k9OYoc 7FxWPzdBkH8QLpr7w44sc3PPVd8L9ovJJp4muc7w/Rx2puQktLv+BFHlqTULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDaygujOwAQzZmyyWqTpcrRj41u0wHwYDVR0j BBgwFoAUiE4jZeS4rwXES9ZJ1bQpaOSLipcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg3YWRlOWYtNmI3OS00NzIzLTk5NDktOTZkZTdlNDFkYjcwLzAvODg0RTIzNjVF NEI4QUYwNUM0NEJENjQ5RDVCNDI5NjhFNDhCOEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODRFMjM2NUU0QjhBRjA1QzQ0QkQ2NDlENUI0Mjk2OEU0OEI4 QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg3YWRlOWYtNmI3OS00NzIzLTk5 NDktOTZkZTdlNDFkYjcwLzAvODg0RTIzNjVFNEI4QUYwNUM0NEJENjQ5RDVCNDI5 NjhFNDhCOEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSkozrxgXUgwg98sghR9jQnq1dnmIs0RXv9 ppH4sKw/cuhWufMhGxQrLN5dxyRGybh/r1xU71ev8t30J10I2mmnDtCGJaEszcI4 Ev1xMEIfWxr50yDOMFHnTe7lc6Fe5F/ffO76mXxMfCl7VayOiYgvmflHYQvXJFYQ c7uiWrHVR07l13uhqAf9YO35rVgP6YEn3TvqgpjHBbdogJkfTtR3YurnJYby9mRZ Cv6YlvZZvuV2qSyMq4LcxnEhYgBkD/EO40fo5wVZvHp/7t7fJIBqm5vGPsnfAx0a V1PHgiVH4ope1MjCxywjKRs756nlfxYDGmj7f4xw6zcpCWrZFLY= -----END CERTIFICATE-----Generated at Thu Oct 1 10:51:40 2026 by rpki-client