$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft File: 83B5C37E9FBCC271373337B3F35E92BE81C88790.mft (raw, json) Hash identifier: tZ8lDyXxFq+71UeMxycRTZNO0m7YzXYSQdbrxOixbNg= Subject key identifier: EC:70:1F:2F:31:8F:86:F4:3B:9B:D8:1A:5B:89:E5:85:62:4C:9F:DF Authority key identifier: 83:B5:C3:7E:9F:BC:C2:71:37:33:37:B3:F3:5E:92:BE:81:C8:87:90 Certificate issuer: /CN=83B5C37E9FBCC271373337B3F35E92BE81C88790 Certificate serial: 33EDD273E66BF1ED6A2569E4E7BB9D9A03D2B6B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B5C37E9FBCC271373337B3F35E92BE81C88790.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 08:31:12 +0000 Manifest this update: Thu 24 Sep 2026 08:26:12 +0000 Manifest next update: Fri 25 Sep 2026 09:31:12 +0000 Files and hashes: 1: 83B5C37E9FBCC271373337B3F35E92BE81C88790.crl (hash: zksOoLWkDpqUAqQ55CYqosyP151lYGzhG3CauZT7V4c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.crl rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B5C37E9FBCC271373337B3F35E92BE81C88790.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ed:d2:73:e6:6b:f1:ed:6a:25:69:e4:e7:bb:9d:9a:03:d2:b6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83B5C37E9FBCC271373337B3F35E92BE81C88790 Validity Not Before: Sep 24 08:26:12 2026 GMT Not After : Sep 25 09:31:12 2026 GMT Subject: CN=EC701F2F318F86F43B9BD81A5B89E585624C9FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:0c:41:df:77:f8:0e:2d:7d:4e:27:42:50: fe:67:68:c0:75:42:7e:10:7e:65:87:5c:c9:51:3c: 76:70:8f:49:70:92:a5:0a:0b:ac:17:63:de:c6:72: bc:a0:5a:22:15:e0:b8:51:75:4d:a0:35:16:86:4f: 71:de:58:32:a3:fa:10:ae:90:4b:04:a1:b2:0a:7b: 57:9e:31:a3:05:71:fc:4c:de:e4:70:7e:f3:72:0d: 13:78:ac:08:0a:20:e9:9a:f7:4b:8e:c1:6d:a4:16: 38:45:06:ed:d6:25:e5:73:e6:24:f9:73:58:51:20: 0b:03:4f:b1:5c:7a:89:a2:7b:a3:c7:e7:a0:7f:58: 2e:f5:fd:75:31:31:db:68:00:55:a3:83:e9:43:40: a7:2e:8c:e7:a9:10:87:48:aa:7b:b7:ec:80:3f:5e: 3e:7a:e8:22:d8:2a:62:0e:13:83:cc:87:61:5d:02: f5:4f:fd:11:7f:d1:af:53:04:15:3d:96:ff:af:5d: ce:f7:9b:dc:8e:17:a0:cd:9c:1b:7f:b2:33:e3:5f: a6:8f:bb:03:9f:25:8d:8d:25:e2:ba:0d:bf:4c:d8: 00:db:76:85:84:20:86:cc:ec:29:a1:16:f1:33:95: c4:9a:f5:57:de:30:4e:51:74:68:cb:14:13:17:18: ff:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:70:1F:2F:31:8F:86:F4:3B:9B:D8:1A:5B:89:E5:85:62:4C:9F:DF X509v3 Authority Key Identifier: keyid:83:B5:C3:7E:9F:BC:C2:71:37:33:37:B3:F3:5E:92:BE:81:C8:87:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/83B5C37E9FBCC271373337B3F35E92BE81C88790.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/83B5C37E9FBCC271373337B3F35E92BE81C88790.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b3:ff:60:fd:88:f1:78:00:88:18:3f:d6:21:19:ac:bc:b4: 0a:b0:26:49:99:a4:60:e6:f7:9e:d2:88:ae:47:68:2a:e3:73: 0e:13:6d:55:83:b8:a3:6a:6c:bf:f4:1e:49:70:e8:91:45:04: 2e:c8:f1:e7:02:41:49:87:39:b9:cf:34:6f:b1:a8:22:5e:fd: d7:7c:18:43:53:9c:19:02:0d:fa:e7:1d:f7:79:0a:fd:78:89: 91:24:41:06:0f:b3:81:1b:74:17:82:3d:b5:bc:09:50:6a:c8: c8:2b:29:48:6d:c3:cb:01:1b:b0:94:f4:27:41:dc:9b:b4:6b: 8d:b0:e7:66:80:67:80:3e:41:47:14:8f:e3:40:b4:9a:4b:40: 83:1b:d7:42:2d:e4:c3:88:49:10:95:5b:28:6d:a5:70:09:8e: ee:81:f9:ba:ab:66:e7:a9:a7:0d:f1:74:17:24:38:c3:10:4d: f6:b6:f1:9d:a3:ea:7b:83:db:cb:79:75:a0:f2:a0:81:d2:ed: 50:b8:84:98:17:49:ff:36:ef:b7:f7:bd:7c:58:48:67:7d:84: a4:0b:e5:c7:08:51:af:87:72:0a:27:55:9a:94:69:21:d0:c9: 10:52:18:5d:8a:84:7c:70:3b:4d:c0:93:30:e3:04:f3:a1:3b: 62:cc:5e:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+3Sc+Zr8e1qJWnk57udmgPStrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNCNUMzN0U5RkJDQzI3MTM3MzMzN0IzRjM1RTkyQkU4 MUM4ODc5MDAeFw0yNjA5MjQwODI2MTJaFw0yNjA5MjUwOTMxMTJaMDMxMTAvBgNV BAMTKEVDNzAxRjJGMzE4Rjg2RjQzQjlCRDgxQTVCODlFNTg1NjI0QzlGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0QxB33f4Di19TidCUP5naMB1 Qn4QfmWHXMlRPHZwj0lwkqUKC6wXY97GcrygWiIV4LhRdU2gNRaGT3HeWDKj+hCu kEsEobIKe1eeMaMFcfxM3uRwfvNyDRN4rAgKIOma90uOwW2kFjhFBu3WJeVz5iT5 c1hRIAsDT7Fceomie6PH56B/WC71/XUxMdtoAFWjg+lDQKcujOepEIdIqnu37IA/ Xj566CLYKmIOE4PMh2FdAvVP/RF/0a9TBBU9lv+vXc73m9yOF6DNnBt/sjPjX6aP uwOfJY2NJeK6Db9M2ADbdoWEIIbM7CmhFvEzlcSa9VfeME5RdGjLFBMXGP/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7HAfLzGPhvQ7m9gaW4nlhWJMn98wHwYDVR0j BBgwFoAUg7XDfp+8wnE3Mzez816SvoHIh5AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI3MmY3MWEtYjljMi00MDMzLTk2NzUtZDc3MDc2MDNhODJjLzAvODNCNUMzN0U5 RkJDQzI3MTM3MzMzN0IzRjM1RTkyQkU4MUM4ODc5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84M0I1QzM3RTlGQkNDMjcxMzczMzM3QjNGMzVFOTJCRTgxQzg4 NzkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvODNCNUMzN0U5RkJDQzI3MTM3MzMzN0IzRjM1RTky QkU4MUM4ODc5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6z/2D9iPF4AIgYP9YhGay8tAqwJkmZpGDm 957SiK5HaCrjcw4TbVWDuKNqbL/0Hklw6JFFBC7I8ecCQUmHObnPNG+xqCJe/dd8 GENTnBkCDfrnHfd5Cv14iZEkQQYPs4EbdBeCPbW8CVBqyMgrKUhtw8sBG7CU9CdB 3Ju0a42w52aAZ4A+QUcUj+NAtJpLQIMb10It5MOISRCVWyhtpXAJju6B+bqrZuep pw3xdBckOMMQTfa28Z2j6nuD28t5daDyoIHS7VC4hJgXSf8277f3vXxYSGd9hKQL 5ccIUa+HcgonVZqUaSHQyRBSGF2KhHxwO03AkzDjBPOhO2LMXkI= -----END CERTIFICATE-----Generated at Thu Sep 24 14:28:21 2026 by rpki-client