$ rpki-client -vvvf rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft File: 82B8687B1ED233C41017803198B332BD9A4DB403.mft (raw, json) Hash identifier: UsU+BK/yOZuJchexJ3WIv8Jky679JYgCdYSWQMQD40U= Subject key identifier: 7E:3B:57:23:67:1E:0A:1B:C5:00:67:73:08:3C:D0:09:AF:CE:4D:CF Authority key identifier: 82:B8:68:7B:1E:D2:33:C4:10:17:80:31:98:B3:32:BD:9A:4D:B4:03 Certificate issuer: /CN=82B8687B1ED233C41017803198B332BD9A4DB403 Certificate serial: 7575D290F35F3A330117C0EEFE33AE5DC30D1A2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B8687B1ED233C41017803198B332BD9A4DB403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 15:34:36 +0000 Manifest this update: Fri 25 Sep 2026 15:29:36 +0000 Manifest next update: Sat 26 Sep 2026 17:38:36 +0000 Files and hashes: 1: 82B8687B1ED233C41017803198B332BD9A4DB403.crl (hash: M2w4pUaerE1x36SScmOxhUOAvxzroLccEklbPorImaE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.crl rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B8687B1ED233C41017803198B332BD9A4DB403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:75:d2:90:f3:5f:3a:33:01:17:c0:ee:fe:33:ae:5d:c3:0d:1a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82B8687B1ED233C41017803198B332BD9A4DB403 Validity Not Before: Sep 25 15:29:36 2026 GMT Not After : Sep 26 17:38:36 2026 GMT Subject: CN=7E3B5723671E0A1BC5006773083CD009AFCE4DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:62:f4:2a:4e:8b:bd:91:40:b2:28:29:98: 52:b7:df:6a:a6:c9:86:1e:ba:b9:f2:49:19:1f:1c: 82:2a:77:23:9e:fe:6e:fc:5f:e6:bc:49:1b:72:4b: 05:65:d8:57:dc:f3:6c:eb:0a:48:c3:19:09:f6:4e: b3:1a:41:d4:b5:cd:12:1f:30:8d:f5:8a:2f:bf:7b: eb:93:b4:d2:e0:33:a6:57:71:9d:80:f5:11:70:c6: ba:c6:d4:3a:a4:ae:fa:5b:be:f5:c6:ae:52:a9:74: 49:13:ec:d1:ca:a5:0f:8b:fd:c1:d4:24:56:82:1f: 39:db:6d:97:88:b3:ef:38:6d:9a:da:60:a3:2c:82: 91:7f:f0:8b:ad:f0:bd:c7:65:fc:8c:f4:d4:e8:a5: cc:4b:6d:05:17:76:66:bd:a9:67:7b:9c:6d:ad:ae: 6c:ee:80:fe:f3:3e:24:4c:1e:ed:b4:63:91:61:dd: b0:56:d2:7b:1c:f3:63:72:64:9a:43:55:93:45:53: 5f:a2:bc:52:d9:19:9f:79:bb:0b:26:e4:3d:4b:30: 2d:48:75:14:a5:00:9c:20:1d:6f:bf:e4:99:ab:57: e9:e0:a1:ee:9d:83:96:69:ba:14:ea:10:81:6e:ce: 97:2e:2d:3d:c7:d6:bb:92:4f:13:e4:a8:57:07:23: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3B:57:23:67:1E:0A:1B:C5:00:67:73:08:3C:D0:09:AF:CE:4D:CF X509v3 Authority Key Identifier: keyid:82:B8:68:7B:1E:D2:33:C4:10:17:80:31:98:B3:32:BD:9A:4D:B4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82B8687B1ED233C41017803198B332BD9A4DB403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/82B8687B1ED233C41017803198B332BD9A4DB403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:72:11:bf:c1:26:41:a9:5d:ea:ea:8b:bf:53:ad:0d:27:67: b0:e8:bf:06:3a:57:6b:68:2b:30:80:bb:bc:e8:c8:a3:ec:8a: 6c:d3:a2:8e:ed:41:d8:ad:be:4b:c2:81:77:49:83:2c:75:ae: c2:da:93:ae:a1:68:bc:fa:08:68:77:92:89:30:93:a4:bf:83: 7e:64:fe:cd:76:52:34:e6:11:f2:d4:b1:72:52:61:23:f8:0b: 5c:8e:ef:92:f9:02:bf:62:7a:9d:d0:7f:b8:8f:95:1d:e2:30: 82:92:e7:69:08:a3:0e:f8:5c:b3:a6:ec:29:23:1d:e1:97:8d: 76:e4:04:05:99:fc:84:1f:f6:dd:b2:11:0a:a0:c4:cf:1b:8c: 5a:a5:25:34:3d:e4:dc:d8:67:0a:34:b1:e5:9c:ca:3f:58:05: ff:c1:9d:5a:09:5a:39:80:a5:84:09:42:f1:e4:d2:be:bc:49: af:35:b2:92:bd:aa:00:19:b8:d2:d2:fc:eb:24:bd:79:f0:f2: 3e:18:0d:ee:16:e1:3e:b2:bd:15:03:56:fa:0d:70:7e:60:77: 85:d2:eb:da:66:3a:4f:52:ac:69:3b:00:29:85:5e:d2:5c:30: 40:c1:12:17:52:e1:6d:cf:5c:72:ba:05:f8:94:cb:e5:96:56: 52:ac:bc:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXXSkPNfOjMBF8Du/jOuXcMNGiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCODY4N0IxRUQyMzNDNDEwMTc4MDMxOThCMzMyQkQ5 QTREQjQwMzAeFw0yNjA5MjUxNTI5MzZaFw0yNjA5MjYxNzM4MzZaMDMxMTAvBgNV BAMTKDdFM0I1NzIzNjcxRTBBMUJDNTAwNjc3MzA4M0NEMDA5QUZDRTREQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/WL0Kk6LvZFAsigpmFK332qm yYYeurnySRkfHIIqdyOe/m78X+a8SRtySwVl2Ffc82zrCkjDGQn2TrMaQdS1zRIf MI31ii+/e+uTtNLgM6ZXcZ2A9RFwxrrG1DqkrvpbvvXGrlKpdEkT7NHKpQ+L/cHU JFaCHznbbZeIs+84bZraYKMsgpF/8Iut8L3HZfyM9NTopcxLbQUXdma9qWd7nG2t rmzugP7zPiRMHu20Y5Fh3bBW0nsc82NyZJpDVZNFU1+ivFLZGZ95uwsm5D1LMC1I dRSlAJwgHW+/5JmrV+ngoe6dg5ZpuhTqEIFuzpcuLT3H1ruSTxPkqFcHI91FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfjtXI2ceChvFAGdzCDzQCa/OTc8wHwYDVR0j BBgwFoAUgrhoex7SM8QQF4AxmLMyvZpNtAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFjZjU2NTctZWNkYy00ZDk3LWE1OWMtYjY3NmNlNTNjOGExLzAvODJCODY4N0Ix RUQyMzNDNDEwMTc4MDMxOThCMzMyQkQ5QTREQjQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MkI4Njg3QjFFRDIzM0M0MTAxNzgwMzE5OEIzMzJCRDlBNERC NDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFjZjU2NTctZWNkYy00ZDk3LWE1 OWMtYjY3NmNlNTNjOGExLzAvODJCODY4N0IxRUQyMzNDNDEwMTc4MDMxOThCMzMy QkQ5QTREQjQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFyEb/BJkGpXerqi79TrQ0nZ7DovwY6V2to KzCAu7zoyKPsimzToo7tQditvkvCgXdJgyx1rsLak66haLz6CGh3kokwk6S/g35k /s12UjTmEfLUsXJSYSP4C1yO75L5Ar9iep3Qf7iPlR3iMIKS52kIow74XLOm7Ckj HeGXjXbkBAWZ/IQf9t2yEQqgxM8bjFqlJTQ95NzYZwo0seWcyj9YBf/BnVoJWjmA pYQJQvHk0r68Sa81spK9qgAZuNLS/OskvXnw8j4YDe4W4T6yvRUDVvoNcH5gd4XS 69pmOk9SrGk7ACmFXtJcMEDBEhdS4W3PXHK6BfiUy+WWVlKsvK0= -----END CERTIFICATE-----Generated at Fri Sep 25 23:32:55 2026 by rpki-client