$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft File: 521B83183A9325633BB6ADA03FF17A79CADB35DF.mft (raw, json) Hash identifier: A1KlAWla8K+wfLhzQkKGZHvhrDvrLGFlVF2R0x14Aiw= Subject key identifier: DE:D2:E6:AB:A3:84:41:81:25:EF:B5:5C:19:44:BA:77:46:C6:69:60 Authority key identifier: 52:1B:83:18:3A:93:25:63:3B:B6:AD:A0:3F:F1:7A:79:CA:DB:35:DF Certificate issuer: /CN=521B83183A9325633BB6ADA03FF17A79CADB35DF Certificate serial: 79B83B83354E576E38F69EF9325B3A3E0C38CF90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 21:32:16 +0000 Manifest this update: Thu 24 Sep 2026 21:27:16 +0000 Manifest next update: Fri 25 Sep 2026 22:17:16 +0000 Files and hashes: 1: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: 6wZBUy40gkIb1BF7mQfsPCPQYb0RKrN3BToc6rY80DQ=) 2: 521B83183A9325633BB6ADA03FF17A79CADB35DF.crl (hash: sk5/KADjVdCNvfqkHFhaOSXSudk6nuRqv0WleJleXfc=) 3: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: TTP/IyS3Nws7WQbB4mb0u1b9tLXn20HyAh2jtbcNLlc=) 4: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: JaucgXEEHyqtYGuJV6Iibo3lc6NtVibWI1nY7MEIhPI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.crl rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 22:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b8:3b:83:35:4e:57:6e:38:f6:9e:f9:32:5b:3a:3e:0c:38:cf:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521B83183A9325633BB6ADA03FF17A79CADB35DF Validity Not Before: Sep 24 21:27:16 2026 GMT Not After : Sep 25 22:17:16 2026 GMT Subject: CN=DED2E6ABA384418125EFB55C1944BA7746C66960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5b:cc:c0:d2:3a:33:d6:44:af:af:b1:a0:c7: 87:2d:42:db:13:49:1e:09:60:6b:94:aa:54:a7:27: a7:a7:7b:47:37:08:ea:41:46:b1:c4:b9:9d:f6:59: a4:64:5c:ff:bc:7c:c9:6b:37:d5:23:ff:9d:1d:3a: 32:38:08:21:34:ea:8f:ca:68:5b:00:f2:ca:49:aa: e3:8b:75:23:f0:f4:f0:56:fc:f8:61:15:50:83:8f: e8:e4:ab:a9:e2:97:be:65:3c:24:4c:34:cd:8e:21: 39:2f:b7:47:18:f0:11:e8:f7:96:b3:23:7c:83:23: d5:db:c2:61:e3:c1:a7:a3:ca:94:38:3e:66:32:72: 5e:77:69:95:c4:04:88:eb:61:d4:ed:a8:f1:59:ff: 6c:57:32:84:e3:82:5f:4f:13:e7:d9:eb:f5:27:b7: 7a:84:ff:4e:e6:f4:ad:aa:f3:c3:bd:97:70:80:3c: 9d:49:0e:68:a5:99:90:cd:76:5c:43:f7:3e:5e:5f: 8a:a1:77:57:a2:6b:b5:1f:e4:f4:c8:33:b4:50:38: 92:32:1b:9b:2b:d1:c4:cb:42:76:be:19:61:a9:b2: 21:98:fa:f0:80:48:83:2c:94:09:54:c2:d3:26:ac: a8:10:71:d3:ed:b1:41:87:c0:06:37:4b:3d:23:93: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D2:E6:AB:A3:84:41:81:25:EF:B5:5C:19:44:BA:77:46:C6:69:60 X509v3 Authority Key Identifier: keyid:52:1B:83:18:3A:93:25:63:3B:B6:AD:A0:3F:F1:7A:79:CA:DB:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/521B83183A9325633BB6ADA03FF17A79CADB35DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/521B83183A9325633BB6ADA03FF17A79CADB35DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:31:09:c8:86:04:b6:6a:af:b4:a2:29:88:67:cd:80:99:dc: b4:3f:46:c1:63:8b:25:9f:13:f9:0b:08:38:e4:39:ca:55:1f: ed:07:6a:f3:59:88:90:81:f5:90:c1:08:69:4e:fd:4c:0b:ec: bc:9f:b7:f3:7b:1f:93:02:36:3a:cc:c5:8f:30:5e:1a:6c:38: fa:32:6d:3a:8f:c0:5c:a6:d0:00:e0:59:6f:b8:29:f8:dd:08: ee:3f:a3:e8:d3:cb:09:86:a0:b2:30:ae:da:7f:d3:16:38:ce: 5c:09:9a:74:1d:35:40:73:08:15:cb:0d:f8:0d:17:2b:c0:70: ca:d8:f6:49:43:03:9c:c7:56:a6:0e:52:f9:32:3a:a3:a9:3d: 83:24:71:95:2f:93:53:01:0d:8e:0b:48:8f:b0:2a:f9:31:35: 71:da:61:09:3a:a3:d6:e7:55:7d:3f:0e:ab:e4:e9:74:62:37: 00:a4:b2:8d:b4:d1:81:5d:67:97:b0:fb:ef:40:4c:d4:6b:e0: db:86:26:7c:c4:df:aa:8b:42:f5:47:26:5b:ca:5f:96:cc:70: a0:bc:d7:2f:01:b0:e1:b2:c5:88:df:42:e2:6a:72:54:c6:22: 59:3c:2a:6e:f0:1f:c7:c3:d4:16:71:7a:ed:29:4a:09:c0:45: 3b:b4:9a:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebg7gzVOV2449p75Mls6Pgw4z5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxQjgzMTgzQTkzMjU2MzNCQjZBREEwM0ZGMTdBNzlD QURCMzVERjAeFw0yNjA5MjQyMTI3MTZaFw0yNjA5MjUyMjE3MTZaMDMxMTAvBgNV BAMTKERFRDJFNkFCQTM4NDQxODEyNUVGQjU1QzE5NDRCQTc3NDZDNjY5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwW8zA0joz1kSvr7Ggx4ctQtsT SR4JYGuUqlSnJ6ene0c3COpBRrHEuZ32WaRkXP+8fMlrN9Uj/50dOjI4CCE06o/K aFsA8spJquOLdSPw9PBW/PhhFVCDj+jkq6nil75lPCRMNM2OITkvt0cY8BHo95az I3yDI9XbwmHjwaejypQ4PmYycl53aZXEBIjrYdTtqPFZ/2xXMoTjgl9PE+fZ6/Un t3qE/07m9K2q88O9l3CAPJ1JDmilmZDNdlxD9z5eX4qhd1eia7Uf5PTIM7RQOJIy G5sr0cTLQna+GWGpsiGY+vCASIMslAlUwtMmrKgQcdPtsUGHwAY3Sz0jk3jlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3tLmq6OEQYEl77VcGUS6d0bGaWAwHwYDVR0j BBgwFoAUUhuDGDqTJWM7tq2gP/F6ecrbNd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM5MmY4OTktZTgzYy00NzA2LWE5YTEtODIyNTZiZDQ4MjM2LzAvNTIxQjgzMTgz QTkzMjU2MzNCQjZBREEwM0ZGMTdBNzlDQURCMzVERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjFCODMxODNBOTMyNTYzM0JCNkFEQTAzRkYxN0E3OUNBREIz NURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvNTIxQjgzMTgzQTkzMjU2MzNCQjZBREEwM0ZGMTdB NzlDQURCMzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANQxCciGBLZqr7SiKYhnzYCZ3LQ/RsFjiyWf E/kLCDjkOcpVH+0HavNZiJCB9ZDBCGlO/UwL7Lyft/N7H5MCNjrMxY8wXhpsOPoy bTqPwFym0ADgWW+4KfjdCO4/o+jTywmGoLIwrtp/0xY4zlwJmnQdNUBzCBXLDfgN FyvAcMrY9klDA5zHVqYOUvkyOqOpPYMkcZUvk1MBDY4LSI+wKvkxNXHaYQk6o9bn VX0/Dqvk6XRiNwCkso200YFdZ5ew++9ATNRr4NuGJnzE36qLQvVHJlvKX5bMcKC8 1y8BsOGyxYjfQuJqclTGIlk8Km7wH8fD1BZxeu0pSgnARTu0mo4= -----END CERTIFICATE-----Generated at Fri Sep 25 08:51:47 2026 by rpki-client