$ rpki-client -vvvf rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft File: 083DF9FCF3773A042D5A64A6401BE726552524C0.mft (raw, json) Hash identifier: PmJl0Jg6WIeFmkvHyuORuJUyYgWdUDJsHdDgbfAEQag= Subject key identifier: EB:1C:89:84:1A:0C:F6:37:5D:36:D7:79:4B:FF:D3:89:F7:2C:DA:CC Authority key identifier: 08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0 Certificate issuer: /CN=083DF9FCF3773A042D5A64A6401BE726552524C0 Certificate serial: 0CD61F92339A724C5E4096F7A2D8CC4E7D2B785C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft Manifest number: BE Signing time: Wed 23 Sep 2026 11:15:05 +0000 Manifest this update: Wed 23 Sep 2026 11:10:05 +0000 Manifest next update: Thu 24 Sep 2026 13:25:05 +0000 Files and hashes: 1: 083DF9FCF3773A042D5A64A6401BE726552524C0.crl (hash: PaWwkJ5b/k9oHHvDerdyLVSyOWuN93ggdsNEKED9qV4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.crl rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d6:1f:92:33:9a:72:4c:5e:40:96:f7:a2:d8:cc:4e:7d:2b:78:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=083DF9FCF3773A042D5A64A6401BE726552524C0 Validity Not Before: Sep 23 11:10:05 2026 GMT Not After : Sep 24 13:25:05 2026 GMT Subject: CN=EB1C89841A0CF6375D36D7794BFFD389F72CDACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ba:1a:91:3e:7f:42:49:40:71:9a:60:70:b9: d4:b1:2a:11:49:21:06:08:2c:09:77:19:4a:d2:79: 65:7e:31:85:61:45:2e:7b:d0:1f:27:a2:17:38:c9: 06:75:36:3c:ae:04:56:30:03:e7:b2:43:3e:35:23: 59:96:c3:e1:a3:01:b9:44:85:a8:dd:2e:ba:00:cb: 21:6b:52:10:28:2f:cf:fd:82:63:20:e4:1e:fc:1d: 0a:c2:85:fa:c3:8e:e4:2b:eb:cb:ff:a5:a4:5c:7a: bc:a1:34:61:12:66:3a:5a:06:92:17:79:de:4c:9e: 44:10:82:31:00:05:8d:de:fd:9c:e8:07:d8:24:30: b4:7c:71:a4:39:90:37:8e:6d:d7:7e:69:23:cc:eb: e9:af:a1:7d:b2:04:5d:2f:3f:36:6a:bb:93:b2:69: 00:00:18:2e:c3:1f:e8:91:f3:7a:8b:56:86:2b:a0: fe:5f:9a:a0:f3:00:e9:2d:3a:f9:fa:90:71:85:b7: 9a:9e:42:4e:5f:1a:a8:fc:28:26:9b:77:f9:29:18: 25:2d:78:de:52:53:d8:71:d2:9d:20:67:56:a3:f6: d4:4e:5f:be:16:69:2c:bf:78:35:9b:48:94:3e:e9: 07:7f:8d:ac:a1:4c:44:32:e9:3c:bf:60:55:c9:f1: f2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1C:89:84:1A:0C:F6:37:5D:36:D7:79:4B:FF:D3:89:F7:2C:DA:CC X509v3 Authority Key Identifier: keyid:08:3D:F9:FC:F3:77:3A:04:2D:5A:64:A6:40:1B:E7:26:55:25:24:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/083DF9FCF3773A042D5A64A6401BE726552524C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/235225a6-05d3-444c-bf3f-11e3ef7b6a15/0/083DF9FCF3773A042D5A64A6401BE726552524C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:61:72:08:22:0c:c4:da:69:9a:4c:7b:32:76:2d:42:66:69: 6e:33:bf:a9:29:07:60:be:9c:b5:49:0c:ad:d2:6f:79:fb:af: 65:c2:93:5f:9a:4a:63:2b:fd:c1:aa:b6:41:bc:7b:aa:27:d1: 66:71:c9:32:1f:15:51:16:31:58:fd:df:2a:49:18:fb:3e:c9: 37:2c:2a:22:ed:48:cd:c8:79:fc:81:17:f1:41:a6:9b:b6:0e: ba:43:1c:92:9a:79:1b:45:da:75:62:6d:55:98:07:3b:20:20: 30:c5:0e:ab:85:73:75:77:1d:ec:b1:a4:50:01:c9:9c:5b:17: d6:28:07:32:2c:be:d3:98:6a:71:75:35:3b:fb:3d:9d:d7:38: 67:51:0c:c6:6c:32:6d:06:80:87:9f:72:45:85:07:5f:50:2a: 68:fa:b6:74:32:74:af:4e:be:a7:d6:40:58:28:10:6d:c1:bb: fb:40:fd:13:78:c5:36:dd:2b:5e:67:bf:2e:c2:e4:2a:02:11: 85:6b:73:7e:15:3e:b2:a2:f7:f9:2f:85:3d:eb:79:58:e2:7a: d6:9f:37:54:7c:5c:a1:f9:73:ef:10:30:90:15:a1:ba:5d:62: 4b:16:4d:bb:e0:2b:30:22:4e:75:7f:3c:09:1c:65:53:a6:3b: a7:f6:ca:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNYfkjOackxeQJb3otjMTn0reFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgzREY5RkNGMzc3M0EwNDJENUE2NEE2NDAxQkU3MjY1 NTI1MjRDMDAeFw0yNjA5MjMxMTEwMDVaFw0yNjA5MjQxMzI1MDVaMDMxMTAvBgNV BAMTKEVCMUM4OTg0MUEwQ0Y2Mzc1RDM2RDc3OTRCRkZEMzg5RjcyQ0RBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSuhqRPn9CSUBxmmBwudSxKhFJ IQYILAl3GUrSeWV+MYVhRS570B8nohc4yQZ1NjyuBFYwA+eyQz41I1mWw+GjAblE hajdLroAyyFrUhAoL8/9gmMg5B78HQrChfrDjuQr68v/paRceryhNGESZjpaBpIX ed5MnkQQgjEABY3e/ZzoB9gkMLR8caQ5kDeObdd+aSPM6+mvoX2yBF0vPzZqu5Oy aQAAGC7DH+iR83qLVoYroP5fmqDzAOktOvn6kHGFt5qeQk5fGqj8KCabd/kpGCUt eN5SU9hx0p0gZ1aj9tROX74WaSy/eDWbSJQ+6Qd/jayhTEQy6Ty/YFXJ8fIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6xyJhBoM9jddNtd5S//Tifcs2swwHwYDVR0j BBgwFoAUCD35/PN3OgQtWmSmQBvnJlUlJMAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM1MjI1YTYtMDVkMy00NDRjLWJmM2YtMTFlM2VmN2I2YTE1LzAvMDgzREY5RkNG Mzc3M0EwNDJENUE2NEE2NDAxQkU3MjY1NTI1MjRDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODNERjlGQ0YzNzczQTA0MkQ1QTY0QTY0MDFCRTcyNjU1MjUy NEMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM1MjI1YTYtMDVkMy00NDRjLWJm M2YtMTFlM2VmN2I2YTE1LzAvMDgzREY5RkNGMzc3M0EwNDJENUE2NEE2NDAxQkU3 MjY1NTI1MjRDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEthcggiDMTaaZpMezJ2LUJmaW4zv6kpB2C+ nLVJDK3Sb3n7r2XCk1+aSmMr/cGqtkG8e6on0WZxyTIfFVEWMVj93ypJGPs+yTcs KiLtSM3IefyBF/FBppu2DrpDHJKaeRtF2nVibVWYBzsgIDDFDquFc3V3HeyxpFAB yZxbF9YoBzIsvtOYanF1NTv7PZ3XOGdRDMZsMm0GgIefckWFB19QKmj6tnQydK9O vqfWQFgoEG3Bu/tA/RN4xTbdK15nvy7C5CoCEYVrc34VPrKi9/kvhT3reVjietaf N1R8XKH5c+8QMJAVobpdYksWTbvgKzAiTnV/PAkcZVOmO6f2ylo= -----END CERTIFICATE-----Generated at Wed Sep 23 19:34:58 2026 by rpki-client