$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft File: 883B1118323CCC5736EA818FCCFAFAA5F6346633.mft (raw, json) Hash identifier: kJtu7bdeiNdz1zTnpvwlH6pyowdgkvJ5K77U3Uk5JC0= Subject key identifier: 7A:E5:CB:B6:16:56:45:F1:F6:C5:FB:E2:37:A6:F6:FC:B6:96:CF:2D Authority key identifier: 88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 Certificate issuer: /CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Certificate serial: 448A797815025D4A2BED075544A3F2B987712472 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 16:21:18 +0000 Manifest this update: Wed 23 Sep 2026 16:16:18 +0000 Manifest next update: Thu 24 Sep 2026 18:08:18 +0000 Files and hashes: 1: 883B1118323CCC5736EA818FCCFAFAA5F6346633.crl (hash: 7YpiXLls5dOi5HikWoiq57cMG0eqNh/arESMZ9D1upE=) 2: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: XRMjBNqHnY6+jz0gyEQDgptcLtfFhiyGtn8MtQxlV6s=) 3: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: mn881aCiRGLWWEDnawAxEXshps2FtIWZ7qkAUnFIOiE=) 4: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: cz+80lMPAlEnAUax/7iLVTXO0rUokGVs+fLA4W5hxnM=) 5: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: bFOzzHMeNiibUnZ6L+hq8KLmZQjQupaRQAA5Pf20Elk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8a:79:78:15:02:5d:4a:2b:ed:07:55:44:a3:f2:b9:87:71:24:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883B1118323CCC5736EA818FCCFAFAA5F6346633 Validity Not Before: Sep 23 16:16:18 2026 GMT Not After : Sep 24 18:08:18 2026 GMT Subject: CN=7AE5CBB6165645F1F6C5FBE237A6F6FCB696CF2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:82:a3:19:17:8d:3f:b2:61:d7:79:c4:bb: ed:15:b7:9c:d5:be:e6:8f:3d:41:07:ae:f5:c8:95: 14:e8:99:e0:c1:48:f8:38:09:84:06:47:ad:76:3b: 7b:50:80:fd:2d:b6:4e:d4:3a:5a:07:ab:72:20:9c: 60:90:8c:e0:c3:7c:55:26:1c:82:be:62:5c:7c:fc: 13:cc:bc:bd:d6:73:c9:b3:fa:45:b5:5d:61:2f:7d: 63:f6:98:75:80:56:d4:1c:76:ca:42:da:48:33:de: 83:8b:13:b0:eb:6d:dd:18:83:9e:61:03:8f:c1:9e: 83:bc:b8:cf:51:15:58:a0:5f:f4:9e:c0:7c:81:c6: d9:9b:84:4f:ff:e4:2a:2d:20:c2:17:1c:d8:57:45: a2:41:3a:56:ad:8a:ae:d1:5f:1f:32:d0:95:4e:ab: c4:4c:6a:66:6e:a8:db:3b:10:13:d7:6a:32:5c:52: 81:60:70:2f:91:d5:aa:20:2c:cb:35:0c:b1:3f:b8: c7:32:8d:29:3b:b9:c8:db:04:fb:54:a5:b8:38:96: d2:c9:38:c3:8e:96:bb:47:7a:bc:84:a6:0e:a2:0f: 24:18:0e:df:62:11:d8:5d:ac:f6:9e:6b:23:cb:2d: f4:97:3e:40:45:f8:ac:2f:b4:ad:fb:60:03:80:73: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E5:CB:B6:16:56:45:F1:F6:C5:FB:E2:37:A6:F6:FC:B6:96:CF:2D X509v3 Authority Key Identifier: keyid:88:3B:11:18:32:3C:CC:57:36:EA:81:8F:CC:FA:FA:A5:F6:34:66:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/883B1118323CCC5736EA818FCCFAFAA5F6346633.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/883B1118323CCC5736EA818FCCFAFAA5F6346633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:16:3c:7d:5f:a6:62:9d:d6:34:ef:15:3a:90:11:13:bf:f5: 02:cd:dd:73:cd:37:97:e4:83:52:99:7b:d5:70:58:2e:2d:8e: b7:1a:b8:60:78:d1:4e:c4:82:5b:14:c0:cc:46:a8:12:93:3b: 26:c6:ed:92:4a:39:92:fc:aa:6f:0c:53:59:6c:d9:86:b6:fe: ff:00:0d:24:b1:6f:b0:f9:29:12:37:e7:83:91:63:f3:22:2f: f9:b6:71:6a:8c:34:5a:37:16:07:40:34:a1:7a:e9:a2:56:42: 70:b6:80:25:a3:e3:b0:a0:6e:fb:61:fe:1c:de:53:d1:00:c9: 6b:ee:5d:7b:98:8b:e2:70:54:c1:7b:19:0b:6b:ca:30:33:70: 7f:1a:f6:42:ee:cc:6e:82:a4:e8:8e:1f:1d:ff:0b:8b:da:81: 80:d6:61:73:07:69:19:84:aa:db:1b:56:41:4e:db:27:02:e2: d0:a5:f8:92:87:14:2f:07:57:ca:4c:20:4c:31:da:04:d9:5f: b6:43:bd:54:6f:e9:77:a4:f0:6b:f9:17:3d:90:c9:39:ee:a1: 67:b2:d0:e6:77:a3:01:f0:c7:13:7c:0f:e0:e3:7e:e8:b7:67: 2f:c7:54:57:d7:8a:42:c1:97:3d:3b:d4:68:f2:9c:72:f0:51: 53:75:5e:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURIp5eBUCXUor7QdVRKPyuYdxJHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVG NjM0NjYzMzAeFw0yNjA5MjMxNjE2MThaFw0yNjA5MjQxODA4MThaMDMxMTAvBgNV BAMTKDdBRTVDQkI2MTY1NjQ1RjFGNkM1RkJFMjM3QTZGNkZDQjY5NkNGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCucYKjGReNP7Jh13nEu+0Vt5zV vuaPPUEHrvXIlRTomeDBSPg4CYQGR612O3tQgP0ttk7UOloHq3IgnGCQjODDfFUm HIK+Ylx8/BPMvL3Wc8mz+kW1XWEvfWP2mHWAVtQcdspC2kgz3oOLE7Drbd0Yg55h A4/BnoO8uM9RFVigX/SewHyBxtmbhE//5CotIMIXHNhXRaJBOlatiq7RXx8y0JVO q8RMamZuqNs7EBPXajJcUoFgcC+R1aogLMs1DLE/uMcyjSk7ucjbBPtUpbg4ltLJ OMOOlrtHeryEpg6iDyQYDt9iEdhdrPaeayPLLfSXPkBF+KwvtK37YAOAcz41AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeuXLthZWRfH2xfviN6b2/LaWzy0wHwYDVR0j BBgwFoAUiDsRGDI8zFc26oGPzPr6pfY0ZjMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWRhMzI5NjctZDU1OC00YTM0LWJlOGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgz MjNDQ0M1NzM2RUE4MThGQ0NGQUZBQTVGNjM0NjYzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODNCMTExODMyM0NDQzU3MzZFQTgxOEZDQ0ZBRkFBNUY2MzQ2 NjMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvODgzQjExMTgzMjNDQ0M1NzM2RUE4MThGQ0NGQUZB QTVGNjM0NjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwWPH1fpmKd1jTvFTqQERO/9QLN3XPNN5fk g1KZe9VwWC4tjrcauGB40U7EglsUwMxGqBKTOybG7ZJKOZL8qm8MU1ls2Ya2/v8A DSSxb7D5KRI354ORY/MiL/m2cWqMNFo3FgdANKF66aJWQnC2gCWj47Cgbvth/hze U9EAyWvuXXuYi+JwVMF7GQtryjAzcH8a9kLuzG6CpOiOHx3/C4vagYDWYXMHaRmE qtsbVkFO2ycC4tCl+JKHFC8HV8pMIEwx2gTZX7ZDvVRv6Xek8Gv5Fz2QyTnuoWey 0OZ3owHwxxN8D+Djfui3Zy/HVFfXikLBlz071GjynHLwUVN1XnY= -----END CERTIFICATE-----Generated at Thu Sep 24 00:50:06 2026 by rpki-client