$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft File: 82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft (raw, json) Hash identifier: r6AhkVTh9EiGwjc4cKQ6K9Wi+Neyj6KitiECYMshqLw= Subject key identifier: 8C:3C:85:66:F4:2B:7E:4D:ED:E1:06:9E:C3:A2:8C:AA:EC:B0:8F:A9 Authority key identifier: 82:FA:49:59:8B:B9:63:2C:D8:CF:41:FE:DD:F7:4B:BD:3D:33:D1:9C Certificate issuer: /CN=82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C Certificate serial: 64DA6B2D26849D5765E10425B42F6D6391E5D9ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:16:02 +0000 Manifest this update: Wed 23 Sep 2026 20:11:02 +0000 Manifest next update: Thu 24 Sep 2026 23:16:02 +0000 Files and hashes: 1: 82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl (hash: TRp6qWcIsG4S2yK5bppbBnwygFBOaROEIT3RzMxsxG4=) 2: 3130332e3234352e3232352e302f32342d3234203d3e20313331373635.roa (hash: Pa7xSWWS5opiR5HJKTxnGB9FqTjFCEEh6zjt74RworE=) 3: 3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (hash: Pw1FDuvNFB/fEPdpOIzgZ9rEMUiJuheIjiIKjMXwLBk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:da:6b:2d:26:84:9d:57:65:e1:04:25:b4:2f:6d:63:91:e5:d9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C Validity Not Before: Sep 23 20:11:02 2026 GMT Not After : Sep 24 23:16:02 2026 GMT Subject: CN=8C3C8566F42B7E4DEDE1069EC3A28CAAECB08FA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:6f:25:0c:d5:1e:fe:20:17:48:ab:f8:18: 5c:9e:aa:f9:68:5a:96:b1:f5:79:bc:4e:37:50:c4: 75:b0:a4:d1:49:19:30:44:e8:92:8b:20:71:05:58: 1a:1a:03:79:c0:de:52:73:68:19:1b:b2:eb:48:4b: 88:d8:16:85:0f:c3:68:fc:ca:e3:00:6c:6c:f9:0f: b4:43:6c:aa:d0:81:b6:95:04:16:3e:79:8e:a3:e6: 5f:74:d2:6a:25:20:65:ea:95:61:f9:c4:4a:03:9d: 3b:6a:ff:c2:ef:5e:79:fc:2f:d0:80:e3:e8:8e:99: 7e:95:d1:ca:6a:8a:9f:23:d8:a8:21:41:ff:17:19: cd:5b:4c:1f:d5:4f:46:bd:ed:75:0d:30:a8:33:22: 53:6b:5e:15:c1:f5:ed:f7:de:66:40:f5:a9:a4:65: 8d:f9:b5:ca:74:ee:bc:b3:b5:fe:61:94:cb:42:ce: a3:33:76:85:a2:68:87:0f:41:62:74:b3:a4:b0:7c: e8:72:a3:08:8d:e0:ca:36:29:d4:ff:1f:28:54:bf: 70:04:ea:77:fe:97:c0:3a:4e:42:97:f9:88:b3:4e: 69:5c:bb:a7:c6:a1:ce:14:9c:49:5e:fa:f9:1b:f3: d1:4e:89:eb:ab:b5:ae:af:64:38:f3:b2:57:d3:dc: ed:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3C:85:66:F4:2B:7E:4D:ED:E1:06:9E:C3:A2:8C:AA:EC:B0:8F:A9 X509v3 Authority Key Identifier: keyid:82:FA:49:59:8B:B9:63:2C:D8:CF:41:FE:DD:F7:4B:BD:3D:33:D1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/82FA49598BB9632CD8CF41FEDDF74BBD3D33D19C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d3:53:54:21:53:2b:fa:4d:cc:c4:77:48:85:4e:22:bd:fa: 28:d1:39:a1:f4:37:ea:14:78:70:9b:f5:d1:2a:ea:98:79:b2: 51:a4:39:88:d9:7a:40:83:40:db:51:ce:29:02:5f:d0:74:0f: 4e:41:e8:d5:70:92:fa:9b:3e:c4:ad:2a:3b:cf:96:6c:81:8f: 52:0c:b3:6d:38:a0:9b:3b:14:16:92:22:e7:67:bf:83:12:0d: 78:fb:bc:dd:f4:db:95:64:73:f8:53:7d:23:9c:50:6c:74:4a: 1a:7d:76:73:7e:7f:a0:ee:7e:3d:5e:37:8e:24:46:ef:fb:fd: 73:31:6f:d6:41:76:31:cd:4c:82:21:8c:b7:d2:93:d1:28:89: 2a:48:b7:19:c5:4a:85:b7:e4:51:de:f2:2c:92:eb:40:bc:23: 6a:58:b0:3a:f4:fe:31:3e:b1:27:dc:2e:b5:b0:48:43:ca:16: 5e:61:a9:80:ef:29:ee:2d:c9:df:ab:97:af:48:cd:c3:6c:24: a7:96:52:e6:cc:b1:23:96:9b:6c:2a:8f:3d:0b:38:65:39:09: ce:01:d9:99:47:57:0c:21:8b:01:d3:74:2d:16:15:95:4f:91: 2f:bd:18:5b:b8:4a:1e:c4:18:20:e4:d0:37:1f:78:6c:75:86: 52:cb:a8:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZNprLSaEnVdl4QQltC9tY5Hl2e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJGQTQ5NTk4QkI5NjMyQ0Q4Q0Y0MUZFRERGNzRCQkQz RDMzRDE5QzAeFw0yNjA5MjMyMDExMDJaFw0yNjA5MjQyMzE2MDJaMDMxMTAvBgNV BAMTKDhDM0M4NTY2RjQyQjdFNERFREUxMDY5RUMzQTI4Q0FBRUNCMDhGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMTW8lDNUe/iAXSKv4GFyeqvlo Wpax9Xm8TjdQxHWwpNFJGTBE6JKLIHEFWBoaA3nA3lJzaBkbsutIS4jYFoUPw2j8 yuMAbGz5D7RDbKrQgbaVBBY+eY6j5l900molIGXqlWH5xEoDnTtq/8LvXnn8L9CA 4+iOmX6V0cpqip8j2KghQf8XGc1bTB/VT0a97XUNMKgzIlNrXhXB9e333mZA9amk ZY35tcp07ryztf5hlMtCzqMzdoWiaIcPQWJ0s6SwfOhyowiN4Mo2KdT/HyhUv3AE 6nf+l8A6TkKX+YizTmlcu6fGoc4UnEle+vkb89FOieurta6vZDjzslfT3O07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjDyFZvQrfk3t4Qaew6KMquywj6kwHwYDVR0j BBgwFoAUgvpJWYu5YyzYz0H+3fdLvT0z0ZwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZkNzAzNDYtNWJkZi00OTYxLWE3NGYtNTVhZTg1NTY3MmExLzAvODJGQTQ5NTk4 QkI5NjMyQ0Q4Q0Y0MUZFRERGNzRCQkQzRDMzRDE5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MkZBNDk1OThCQjk2MzJDRDhDRjQxRkVEREY3NEJCRDNEMzNE MTlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZkNzAzNDYtNWJkZi00OTYxLWE3 NGYtNTVhZTg1NTY3MmExLzAvODJGQTQ5NTk4QkI5NjMyQ0Q4Q0Y0MUZFRERGNzRC QkQzRDMzRDE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXTU1QhUyv6TczEd0iFTiK9+ijROaH0N+oU eHCb9dEq6ph5slGkOYjZekCDQNtRzikCX9B0D05B6NVwkvqbPsStKjvPlmyBj1IM s204oJs7FBaSIudnv4MSDXj7vN3025Vkc/hTfSOcUGx0Shp9dnN+f6Dufj1eN44k Ru/7/XMxb9ZBdjHNTIIhjLfSk9EoiSpItxnFSoW35FHe8iyS60C8I2pYsDr0/jE+ sSfcLrWwSEPKFl5hqYDvKe4tyd+rl69IzcNsJKeWUubMsSOWm2wqjz0LOGU5Cc4B 2ZlHVwwhiwHTdC0WFZVPkS+9GFu4Sh7EGCDk0DcfeGx1hlLLqAw= -----END CERTIFICATE-----Generated at Thu Sep 24 03:45:33 2026 by rpki-client