$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft File: 988BEA205B597B525439E1C7DF548E148BDF5DE3.mft (raw, json) Hash identifier: cHfqzLvcTdqblZ0JkVDdz6NL0nicl8ZdIahum2gEqIQ= Subject key identifier: CC:B4:8C:EB:AE:2A:25:3E:0E:23:87:AE:62:1B:DE:82:13:38:1F:08 Authority key identifier: 98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 Certificate issuer: /CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Certificate serial: 22EC813DF0BEB076B51E955D4041952692371CCA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft Manifest number: C8 Signing time: Tue 29 Sep 2026 04:50:34 +0000 Manifest this update: Tue 29 Sep 2026 04:45:34 +0000 Manifest next update: Wed 30 Sep 2026 07:27:34 +0000 Files and hashes: 1: 988BEA205B597B525439E1C7DF548E148BDF5DE3.crl (hash: riBVcJGVNoG7Znhg8WJyXb/S3HAKxHvJwver+RDrHWk=) 2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: KyMbOLP8QXcvGQ9MezBY9LjyWg2SLWeZUDh4Qo5TXWQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ec:81:3d:f0:be:b0:76:b5:1e:95:5d:40:41:95:26:92:37:1c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988BEA205B597B525439E1C7DF548E148BDF5DE3 Validity Not Before: Sep 29 04:45:34 2026 GMT Not After : Sep 30 07:27:34 2026 GMT Subject: CN=CCB48CEBAE2A253E0E2387AE621BDE8213381F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:2f:34:5d:f9:f4:e2:bd:23:30:bd:cb:90: 4f:7c:3c:c1:3d:c1:ba:45:8d:11:c0:71:8a:f8:f4: c2:09:79:67:ae:b7:7f:e8:44:d3:90:1d:30:43:55: b2:16:29:5e:c5:a5:e8:1b:cd:c8:61:a9:37:13:2c: 51:44:53:af:3f:90:d2:9a:41:9d:ac:f1:2d:76:cb: 65:b3:df:f0:33:4a:55:f0:65:cc:6d:c5:10:b4:03: 89:9b:09:9c:30:9f:2a:a2:68:09:ca:5d:57:64:1a: 61:8a:b3:d8:8a:9b:be:15:ce:54:0e:d5:0d:32:6f: b8:22:bb:eb:59:e4:1f:d1:ed:e2:67:e2:a4:2c:20: 71:b2:5b:fb:61:4d:c4:7c:41:0d:5c:7a:81:e0:e4: cf:b7:84:1f:29:eb:46:c3:f6:09:09:22:52:9f:16: fc:b3:7b:b1:ab:65:6d:7d:49:70:11:a1:77:c9:84: a2:64:c5:49:77:be:49:20:c1:f2:04:78:36:24:b6: 85:2b:11:24:60:0d:a8:85:75:50:a6:58:b7:8b:59: 53:a1:7c:7b:61:e7:b0:16:7d:2d:50:9d:2d:c3:93: 04:b6:e4:88:ec:ab:47:dd:35:bb:26:5c:a7:89:b6: 3d:82:af:1e:31:8d:79:37:45:95:62:c0:a7:15:67: b5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B4:8C:EB:AE:2A:25:3E:0E:23:87:AE:62:1B:DE:82:13:38:1F:08 X509v3 Authority Key Identifier: keyid:98:8B:EA:20:5B:59:7B:52:54:39:E1:C7:DF:54:8E:14:8B:DF:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/988BEA205B597B525439E1C7DF548E148BDF5DE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/988BEA205B597B525439E1C7DF548E148BDF5DE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0b:31:3b:8b:b8:ba:4f:e9:ac:ef:fe:7a:40:eb:cc:36:8c: 5a:85:e5:2b:f4:dc:c6:8e:f2:c2:8b:4d:37:63:b5:66:08:dc: 03:35:6c:38:9f:aa:eb:37:16:f7:25:aa:d8:d1:40:09:e5:0c: 14:82:8a:d8:df:13:a9:c7:1a:02:8d:31:98:5b:0d:55:ae:c2: 52:65:a9:c3:6d:65:b4:bb:fe:ff:05:c2:d2:0a:a7:41:c1:47: db:9d:a8:00:ed:29:e1:48:22:86:7f:8c:e6:11:0a:dc:59:0a: 7d:b9:e2:41:27:68:7f:e0:74:6d:a0:43:d9:f2:f3:c3:34:e1: 31:a3:27:ed:16:b4:b7:95:27:62:f3:21:10:04:70:15:79:41: 22:2e:bb:c5:11:02:c8:ef:51:ea:6f:7a:a7:d5:a0:52:a1:36: f3:83:16:84:66:46:bc:2d:5e:46:32:50:b8:11:a5:d7:c5:16: 28:7b:42:e2:b1:e1:ad:1e:72:7b:cd:df:76:fb:99:5e:db:43: f1:e3:59:40:f9:b2:81:f8:02:52:88:5f:85:89:ab:7c:9b:1a: a3:f8:ee:3c:bd:db:77:5d:55:b8:84:4c:6c:01:1b:87:70:23: 3b:90:3e:f6:45:1b:4c:9c:28:4b:7d:6c:00:97:24:57:c8:a9: 5d:77:b1:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuyBPfC+sHa1HpVdQEGVJpI3HMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4 QkRGNURFMzAeFw0yNjA5MjkwNDQ1MzRaFw0yNjA5MzAwNzI3MzRaMDMxMTAvBgNV BAMTKENDQjQ4Q0VCQUUyQTI1M0UwRTIzODdBRTYyMUJERTgyMTMzODFGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzES80Xfn04r0jML3LkE98PME9 wbpFjRHAcYr49MIJeWeut3/oRNOQHTBDVbIWKV7FpegbzchhqTcTLFFEU68/kNKa QZ2s8S12y2Wz3/AzSlXwZcxtxRC0A4mbCZwwnyqiaAnKXVdkGmGKs9iKm74VzlQO 1Q0yb7giu+tZ5B/R7eJn4qQsIHGyW/thTcR8QQ1ceoHg5M+3hB8p60bD9gkJIlKf Fvyze7GrZW19SXARoXfJhKJkxUl3vkkgwfIEeDYktoUrESRgDaiFdVCmWLeLWVOh fHth57AWfS1QnS3DkwS25Ijsq0fdNbsmXKeJtj2Crx4xjXk3RZViwKcVZ7WXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzLSM664qJT4OI4euYhveghM4HwgwHwYDVR0j BBgwFoAUmIvqIFtZe1JUOeHH31SOFIvfXeMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBhNzhjMDYtMWQ2ZS00M2I2LWJmMzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1 QjU5N0I1MjU0MzlFMUM3REY1NDhFMTQ4QkRGNURFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85ODhCRUEyMDVCNTk3QjUyNTQzOUUxQzdERjU0OEUxNDhCREY1 REUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTg4QkVBMjA1QjU5N0I1MjU0MzlFMUM3REY1NDhF MTQ4QkRGNURFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMLMTuLuLpP6azv/npA68w2jFqF5Sv03MaO 8sKLTTdjtWYI3AM1bDifqus3FvclqtjRQAnlDBSCitjfE6nHGgKNMZhbDVWuwlJl qcNtZbS7/v8FwtIKp0HBR9udqADtKeFIIoZ/jOYRCtxZCn254kEnaH/gdG2gQ9ny 88M04TGjJ+0WtLeVJ2LzIRAEcBV5QSIuu8URAsjvUepveqfVoFKhNvODFoRmRrwt XkYyULgRpdfFFih7QuKx4a0ecnvN33b7mV7bQ/HjWUD5soH4AlKIX4WJq3ybGqP4 7jy923ddVbiETGwBG4dwIzuQPvZFG0ycKEt9bACXJFfIqV13saI= -----END CERTIFICATE-----Generated at Tue Sep 29 13:17:35 2026 by rpki-client