$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.mft File: 087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.mft (raw, json) Hash identifier: zzJy3JQqLSqfmgkkIWAQfY3VWIRI9rCHBxYs2Sz84Dg= Subject key identifier: 78:4A:A4:DE:EE:B3:98:86:E3:3C:B7:0D:09:CB:84:5B:20:E4:46:F4 Authority key identifier: 08:72:80:BD:A2:BB:97:42:B0:39:8E:4B:6A:7E:5B:48:F9:CC:16:6A Certificate issuer: /CN=087280BDA2BB9742B0398E4B6A7E5B48F9CC166A Certificate serial: 5AB3126DAEF76A487B8E1ACAA42BE760C5FBB798 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 00:51:51 +0000 Manifest this update: Thu 24 Sep 2026 00:46:51 +0000 Manifest next update: Fri 25 Sep 2026 03:58:51 +0000 Files and hashes: 1: 087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.crl (hash: 9xzWctdwLRMNIhV7Now3JfoUXfSkgPt9HdSgD4MGyKY=) 2: 3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (hash: +Kn7NvcOxuOrc3s9SNHAsksZnKXZGqDWI/dzX6hzXlQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.crl rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b3:12:6d:ae:f7:6a:48:7b:8e:1a:ca:a4:2b:e7:60:c5:fb:b7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=087280BDA2BB9742B0398E4B6A7E5B48F9CC166A Validity Not Before: Sep 24 00:46:51 2026 GMT Not After : Sep 25 03:58:51 2026 GMT Subject: CN=784AA4DEEEB39886E33CB70D09CB845B20E446F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:70:b6:70:2c:5a:12:51:8b:e8:36:7e:22: 8a:5d:aa:89:da:5f:98:75:20:23:b6:13:50:db:c1: 3d:be:3b:31:23:6d:0a:70:a9:95:12:64:57:d3:36: e3:fa:e6:e3:1a:84:ce:85:4c:4b:9d:90:14:28:ee: 35:e5:1a:7f:f4:ef:60:5e:1b:5b:ba:39:fd:79:9e: 3d:db:c9:cb:79:6f:18:27:7a:1f:c1:43:1b:de:b8: e5:86:9d:67:cf:10:98:e0:87:8c:87:fa:d0:25:99: da:bd:76:51:fd:d7:93:5a:e8:40:48:30:d6:1a:50: 25:9d:8f:9a:2b:bc:27:7a:2a:63:5f:8e:b2:b0:2f: d6:55:ee:18:db:55:ad:87:fc:e1:2f:16:66:19:a5: 9a:91:dc:f6:90:50:6f:aa:ec:c2:27:73:c7:b7:17: 2c:66:48:d6:4d:f4:6a:46:16:33:23:d2:79:93:ba: 46:1b:ca:40:84:99:8b:87:1d:3d:7a:49:5f:17:9f: fb:b0:54:bd:65:66:f4:b9:88:e9:e5:9f:90:8c:ff: 30:9f:db:f9:7d:36:1c:e2:1e:34:f7:ef:79:37:33: 84:d2:f9:8c:df:d7:3f:5f:fa:17:37:53:e2:2d:9a: 56:73:88:b2:9a:ef:38:33:46:bc:16:55:f1:c4:4d: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4A:A4:DE:EE:B3:98:86:E3:3C:B7:0D:09:CB:84:5B:20:E4:46:F4 X509v3 Authority Key Identifier: keyid:08:72:80:BD:A2:BB:97:42:B0:39:8E:4B:6A:7E:5B:48:F9:CC:16:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/087280BDA2BB9742B0398E4B6A7E5B48F9CC166A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:74:d8:f2:8e:75:ff:b8:e9:5f:78:93:92:9d:0f:b2:c4:4c: cc:e1:d6:d3:61:67:a2:f3:1c:70:b9:54:d8:d2:c3:2c:9f:f8: 72:cd:4b:b3:f8:f2:ad:21:1c:39:8a:6f:59:ed:75:a7:b4:9d: 59:c2:d4:7a:87:ab:35:7f:64:be:16:8f:f5:50:fa:43:5a:51: 71:98:77:bf:40:b3:84:47:e5:e3:fc:8b:c1:76:de:62:a1:d4: 7b:d8:f2:d1:17:00:28:de:b9:e1:7b:89:b0:bd:9c:bd:a4:c5: a0:3c:7f:3a:9c:cb:48:2e:49:16:ee:b0:85:0b:1a:2f:19:c4: 68:f4:7f:c4:dd:5d:50:31:ef:48:23:f2:44:0b:13:16:a5:84: df:40:1b:8d:3e:31:4a:e5:d5:e2:68:b9:b0:b2:e9:1b:ec:73: 01:8a:d5:32:32:60:ca:e5:60:b3:fc:4c:e5:e0:3e:7f:c8:d4: c5:fb:e7:f1:de:5c:a3:db:37:df:e0:09:05:d8:9a:b1:5f:79: bc:37:e1:23:8c:fe:5e:4b:c4:31:d4:ae:3d:07:41:d3:50:eb: e6:c0:dd:5c:db:6d:bb:4b:80:4b:e4:e4:8c:85:6f:b9:0e:08: 4b:e7:c1:51:85:62:b9:36:14:98:e3:97:cd:51:33:61:0a:02: 2c:5f:f5:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrMSba73akh7jhrKpCvnYMX7t5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3MjgwQkRBMkJCOTc0MkIwMzk4RTRCNkE3RTVCNDhG OUNDMTY2QTAeFw0yNjA5MjQwMDQ2NTFaFw0yNjA5MjUwMzU4NTFaMDMxMTAvBgNV BAMTKDc4NEFBNERFRUVCMzk4ODZFMzNDQjcwRDA5Q0I4NDVCMjBFNDQ2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0HC2cCxaElGL6DZ+Iopdqona X5h1ICO2E1DbwT2+OzEjbQpwqZUSZFfTNuP65uMahM6FTEudkBQo7jXlGn/072Be G1u6Of15nj3byct5bxgneh/BQxveuOWGnWfPEJjgh4yH+tAlmdq9dlH915Na6EBI MNYaUCWdj5orvCd6KmNfjrKwL9ZV7hjbVa2H/OEvFmYZpZqR3PaQUG+q7MInc8e3 FyxmSNZN9GpGFjMj0nmTukYbykCEmYuHHT16SV8Xn/uwVL1lZvS5iOnln5CM/zCf 2/l9NhziHjT373k3M4TS+Yzf1z9f+hc3U+ItmlZziLKa7zgzRrwWVfHETX2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeEqk3u6zmIbjPLcNCcuEWyDkRvQwHwYDVR0j BBgwFoAUCHKAvaK7l0KwOY5Lan5bSPnMFmowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjMxMmExNDYtZjk1NC00N2UzLWI5M2YtOTJjMmZlNmQ4OWVhLzAvMDg3MjgwQkRB MkJCOTc0MkIwMzk4RTRCNkE3RTVCNDhGOUNDMTY2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODcyODBCREEyQkI5NzQyQjAzOThFNEI2QTdFNUI0OEY5Q0Mx NjZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjMxMmExNDYtZjk1NC00N2UzLWI5 M2YtOTJjMmZlNmQ4OWVhLzAvMDg3MjgwQkRBMkJCOTc0MkIwMzk4RTRCNkE3RTVC NDhGOUNDMTY2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACt02PKOdf+46V94k5KdD7LETMzh1tNhZ6Lz HHC5VNjSwyyf+HLNS7P48q0hHDmKb1ntdae0nVnC1HqHqzV/ZL4Wj/VQ+kNaUXGY d79As4RH5eP8i8F23mKh1HvY8tEXACjeueF7ibC9nL2kxaA8fzqcy0guSRbusIUL Gi8ZxGj0f8TdXVAx70gj8kQLExalhN9AG40+MUrl1eJoubCy6RvscwGK1TIyYMrl YLP8TOXgPn/I1MX75/HeXKPbN9/gCQXYmrFfebw34SOM/l5LxDHUrj0HQdNQ6+bA 3VzbbbtLgEvk5IyFb7kOCEvnwVGFYrk2FJjjl81RM2EKAixf9Rg= -----END CERTIFICATE-----Generated at Thu Sep 24 11:34:35 2026 by rpki-client