$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft File: 88505636AC2C683A0A15AF1041DEF625BB5D7643.mft (raw, json) Hash identifier: c4I1mn5qEdZsLO0XwfshS88xGKZpbYl9IMI24tcfG+M= Subject key identifier: A8:AD:07:6C:17:97:03:1F:2C:3C:16:6E:23:90:6B:84:5A:86:FB:B2 Authority key identifier: 88:50:56:36:AC:2C:68:3A:0A:15:AF:10:41:DE:F6:25:BB:5D:76:43 Certificate issuer: /CN=88505636AC2C683A0A15AF1041DEF625BB5D7643 Certificate serial: 19787C3828D3B0556D787A4ADA15244E42348CC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 10:22:38 +0000 Manifest this update: Sat 26 Sep 2026 10:17:38 +0000 Manifest next update: Sun 27 Sep 2026 13:44:38 +0000 Files and hashes: 1: 88505636AC2C683A0A15AF1041DEF625BB5D7643.crl (hash: 1Qv6M6CaJIVOplDGiDoCAxLFm0tP+wV2gnlUsaTqyFg=) 2: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: EBf2wSQkajGGPJlM2meU3WwUz7lzn4ofe8fel+KfemQ=) 3: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: ev2m6+xbvR7mwpXdtEeo7OjxoqRgr494Tm2SeygBLMQ=) 4: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: dgjaOdjpIeK7j+dAUIzTx198JF2memFCrb9q8a6+v0c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.crl rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:78:7c:38:28:d3:b0:55:6d:78:7a:4a:da:15:24:4e:42:34:8c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88505636AC2C683A0A15AF1041DEF625BB5D7643 Validity Not Before: Sep 26 10:17:38 2026 GMT Not After : Sep 27 13:44:38 2026 GMT Subject: CN=A8AD076C1797031F2C3C166E23906B845A86FBB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:6c:9f:8e:5d:0a:d5:12:34:96:92:a9:5a: 14:55:33:11:7e:78:4f:53:87:2f:27:1a:af:d6:0e: 86:77:c9:35:ae:61:af:04:42:b2:4e:8b:d8:06:91: 4e:98:8c:9f:46:55:c4:80:71:0b:76:2a:5e:6c:53: 58:78:24:57:d9:c5:e1:ed:10:a8:7d:97:3f:bb:ca: d9:ca:44:84:1a:1a:2c:e4:03:14:c8:26:6b:72:63: 7e:6a:88:9e:16:26:36:c5:9b:5a:31:9f:a4:c2:9c: 16:5a:1b:4f:06:63:de:9c:36:28:22:36:d4:85:77: ec:c1:56:84:11:16:ec:d5:3a:1f:5e:27:60:1e:1f: 9e:35:cd:25:f7:70:26:fe:9c:72:fc:37:8b:92:91: e9:74:d2:02:7d:cc:21:3f:04:c1:c0:12:cb:2c:03: e9:c8:b9:19:24:61:05:c7:bb:22:95:95:e1:e2:d2: e9:d9:85:6b:ca:22:9c:30:d4:15:b4:d1:8a:76:13: af:80:6b:7a:02:b5:b5:4d:d0:77:a8:0b:bc:85:a2: 20:80:d7:72:11:5c:f5:b3:0a:6c:30:31:13:e2:63: 16:94:81:98:b9:93:15:ff:71:3d:a1:ea:b5:83:9d: 45:6c:0c:db:5d:b9:f1:b7:74:ea:f1:62:9d:12:dd: f1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AD:07:6C:17:97:03:1F:2C:3C:16:6E:23:90:6B:84:5A:86:FB:B2 X509v3 Authority Key Identifier: keyid:88:50:56:36:AC:2C:68:3A:0A:15:AF:10:41:DE:F6:25:BB:5D:76:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88505636AC2C683A0A15AF1041DEF625BB5D7643.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/88505636AC2C683A0A15AF1041DEF625BB5D7643.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:30:dc:e0:54:8f:e4:5a:fe:02:c8:92:2c:09:26:56:12:ad: 3f:e5:e2:5e:49:fd:b6:4b:de:ac:9c:25:f7:0f:0b:72:40:2a: 91:c1:72:bd:f6:5d:aa:0e:ee:de:71:60:5f:a4:40:c8:79:86: 4d:6e:8b:11:50:5c:66:6b:20:7a:7f:d5:47:0b:55:3d:4b:eb: d8:20:b5:9a:36:f1:62:7d:7e:00:57:a3:d6:53:87:c3:9a:7b: 66:da:e2:58:f2:b4:9c:78:d2:7c:fc:36:4e:a5:a8:9e:5e:e0: 65:8b:fd:0f:92:3e:06:78:94:47:df:b2:a9:04:e3:ef:fc:4b: 9c:18:19:55:7e:65:1c:df:2b:33:47:8c:d4:43:d0:88:5f:a2: f0:f3:6a:2b:4d:a5:2f:59:95:ee:5e:0e:47:c0:56:dd:d3:ec: a1:b0:72:cc:60:0a:1c:d7:ef:30:46:f3:ef:98:f4:df:0a:05: 04:a1:e3:89:20:9f:20:95:24:ee:4d:0c:02:b6:d6:09:b1:cd: c1:34:af:fc:b7:ec:4c:23:22:c4:14:7d:0f:b5:2d:2f:d1:cf: 74:84:81:08:4d:6d:43:4f:9f:6a:5f:75:55:62:d8:1b:b7:a1: ae:e5:94:cf:11:30:e7:ab:1d:3d:10:25:23:8e:a6:65:25:56: 81:29:04:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXh8OCjTsFVteHpK2hUkTkI0jMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1MDU2MzZBQzJDNjgzQTBBMTVBRjEwNDFERUY2MjVC QjVENzY0MzAeFw0yNjA5MjYxMDE3MzhaFw0yNjA5MjcxMzQ0MzhaMDMxMTAvBgNV BAMTKEE4QUQwNzZDMTc5NzAzMUYyQzNDMTY2RTIzOTA2Qjg0NUE4NkZCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkGyfjl0K1RI0lpKpWhRVMxF+ eE9Thy8nGq/WDoZ3yTWuYa8EQrJOi9gGkU6YjJ9GVcSAcQt2Kl5sU1h4JFfZxeHt EKh9lz+7ytnKRIQaGizkAxTIJmtyY35qiJ4WJjbFm1oxn6TCnBZaG08GY96cNigi NtSFd+zBVoQRFuzVOh9eJ2AeH541zSX3cCb+nHL8N4uSkel00gJ9zCE/BMHAEsss A+nIuRkkYQXHuyKVleHi0unZhWvKIpww1BW00Yp2E6+Aa3oCtbVN0HeoC7yFoiCA 13IRXPWzCmwwMRPiYxaUgZi5kxX/cT2h6rWDnUVsDNtdufG3dOrxYp0S3fFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqK0HbBeXAx8sPBZuI5BrhFqG+7IwHwYDVR0j BBgwFoAUiFBWNqwsaDoKFa8QQd72JbtddkMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmU1ZmRmNmMtMGQwMS00OTJiLTgwMDQtYTQ4ZWU1YTEyNDc0LzAvODg1MDU2MzZB QzJDNjgzQTBBMTVBRjEwNDFERUY2MjVCQjVENzY0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODUwNTYzNkFDMkM2ODNBMEExNUFGMTA0MURFRjYyNUJCNUQ3 NjQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvODg1MDU2MzZBQzJDNjgzQTBBMTVBRjEwNDFERUY2 MjVCQjVENzY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAw3OBUj+Ra/gLIkiwJJlYSrT/l4l5J/bZL 3qycJfcPC3JAKpHBcr32XaoO7t5xYF+kQMh5hk1uixFQXGZrIHp/1UcLVT1L69gg tZo28WJ9fgBXo9ZTh8Oae2ba4ljytJx40nz8Nk6lqJ5e4GWL/Q+SPgZ4lEffsqkE 4+/8S5wYGVV+ZRzfKzNHjNRD0IhfovDzaitNpS9Zle5eDkfAVt3T7KGwcsxgChzX 7zBG8++Y9N8KBQSh44kgnyCVJO5NDAK21gmxzcE0r/y37EwjIsQUfQ+1LS/Rz3SE gQhNbUNPn2pfdVVi2Bu3oa7llM8RMOerHT0QJSOOpmUlVoEpBMw= -----END CERTIFICATE-----Generated at Sun Sep 27 03:45:18 2026 by rpki-client