$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft File: A828948E5E3657BBBB02A70735E06754A306A511.mft (raw, json) Hash identifier: lQWRTZelaK8G0SHWz5R+gnrhxjjqPbz2aVt4KtyRESI= Subject key identifier: F7:C6:2E:ED:C3:6C:22:33:B3:0A:E2:79:85:80:5C:92:8B:99:DD:7D Authority key identifier: A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 Certificate issuer: /CN=A828948E5E3657BBBB02A70735E06754A306A511 Certificate serial: 5022C53866224AC35F410B2290A5ACB0107CD3E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 22:43:37 +0000 Manifest this update: Thu 24 Sep 2026 22:38:37 +0000 Manifest next update: Sat 26 Sep 2026 01:29:37 +0000 Files and hashes: 1: A828948E5E3657BBBB02A70735E06754A306A511.crl (hash: vpfEaJh2Sq/xYjLaQw4VMvQuOoLgK1T2xEb2ARyAN0Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 01:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:22:c5:38:66:22:4a:c3:5f:41:0b:22:90:a5:ac:b0:10:7c:d3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A828948E5E3657BBBB02A70735E06754A306A511 Validity Not Before: Sep 24 22:38:37 2026 GMT Not After : Sep 26 01:29:37 2026 GMT Subject: CN=F7C62EEDC36C2233B30AE27985805C928B99DD7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5b:96:22:76:18:02:44:08:3f:85:9a:bb:3d: da:80:d3:51:99:71:22:d8:e7:a2:bb:59:7b:37:5f: 88:e1:db:93:32:f1:c9:6e:e2:8c:3f:45:9f:d1:9b: c7:6f:bf:f0:77:94:55:53:60:d6:db:72:94:43:fc: e2:96:00:1d:1a:10:70:aa:07:bb:5e:2a:c2:15:ba: 91:71:c4:6f:01:31:ce:ec:17:d6:ba:0d:98:9e:a3: 23:f2:14:ae:be:15:22:4f:4e:da:5e:e9:70:a9:cb: 58:c1:f6:29:2e:53:e3:ec:9b:32:b6:55:db:2e:db: cc:4a:49:f6:97:e8:d4:f8:3b:c0:39:b8:7b:25:00: d7:e0:bc:bb:e7:6a:e2:41:70:df:3f:80:e0:b5:3e: 05:36:90:30:16:b2:99:5d:c7:24:4d:4b:9a:1e:06: 33:1e:7a:77:6e:1f:92:00:cc:94:e1:aa:b9:20:b8: 69:4c:c7:31:c4:46:c8:8c:68:38:d0:d4:1a:aa:b1: 94:e0:05:8a:7c:65:c3:ad:a0:fe:4f:07:ff:15:5c: dd:36:a2:aa:73:e4:76:d5:bc:6c:cd:e6:78:d2:ad: ba:7d:52:08:b1:b3:36:c5:17:13:ca:c6:42:3d:fb: 36:ed:67:c2:d8:f4:41:9a:5b:be:8b:e2:37:5d:68: 10:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C6:2E:ED:C3:6C:22:33:B3:0A:E2:79:85:80:5C:92:8B:99:DD:7D X509v3 Authority Key Identifier: keyid:A8:28:94:8E:5E:36:57:BB:BB:02:A7:07:35:E0:67:54:A3:06:A5:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A828948E5E3657BBBB02A70735E06754A306A511.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/A828948E5E3657BBBB02A70735E06754A306A511.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:fc:de:b4:33:f7:bc:b7:b6:c7:02:37:15:87:b6:26:56:72: 4f:45:f4:82:c3:c8:41:69:a2:f4:ae:c8:21:37:68:4d:0c:ec: 22:84:93:d2:73:0f:fa:1a:11:d8:03:21:e1:03:60:4a:f1:6f: b2:1b:58:88:a1:67:f0:d0:0a:19:4e:e8:cb:d0:9b:83:b0:09: e2:3d:d3:4e:e1:f7:51:bc:c8:cb:bb:40:3c:55:f9:bc:ed:73: 86:ef:7e:8a:9b:bd:e1:84:f1:86:70:2d:50:10:d2:c1:46:c2: 00:e1:87:09:8f:11:5d:be:54:19:f3:2a:82:5c:db:3b:88:07: e9:5b:d1:f9:06:45:6e:86:c1:ca:1f:80:a3:0b:e7:59:b4:ba: cf:2e:de:c3:e2:40:3d:be:b5:41:e2:ca:fa:37:08:0e:19:48: de:4c:ab:bb:ce:fb:73:18:e7:23:41:d2:97:94:60:d4:3d:72: 79:e9:80:45:aa:54:28:d6:78:00:76:a5:f0:58:fa:45:94:b7: 51:6d:e8:52:37:f3:f2:09:b0:22:a2:1f:bf:0d:b9:b3:3f:0d: 02:9d:2f:5a:c1:5a:da:f6:57:11:55:ef:39:61:e0:b3:19:2e: a2:88:db:69:a1:7c:6c:eb:14:b1:79:64:f9:70:3e:5e:2d:7e: d2:b9:68:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUCLFOGYiSsNfQQsikKWssBB80+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRB MzA2QTUxMTAeFw0yNjA5MjQyMjM4MzdaFw0yNjA5MjYwMTI5MzdaMDMxMTAvBgNV BAMTKEY3QzYyRUVEQzM2QzIyMzNCMzBBRTI3OTg1ODA1QzkyOEI5OUREN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsW5YidhgCRAg/hZq7PdqA01GZ cSLY56K7WXs3X4jh25My8clu4ow/RZ/Rm8dvv/B3lFVTYNbbcpRD/OKWAB0aEHCq B7teKsIVupFxxG8BMc7sF9a6DZieoyPyFK6+FSJPTtpe6XCpy1jB9ikuU+PsmzK2 Vdsu28xKSfaX6NT4O8A5uHslANfgvLvnauJBcN8/gOC1PgU2kDAWspldxyRNS5oe BjMeenduH5IAzJThqrkguGlMxzHERsiMaDjQ1BqqsZTgBYp8ZcOtoP5PB/8VXN02 oqpz5HbVvGzN5njSrbp9UgixszbFFxPKxkI9+zbtZ8LY9EGaW76L4jddaBBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU98Yu7cNsIjOzCuJ5hYBckouZ3X0wHwYDVR0j BBgwFoAUqCiUjl42V7u7AqcHNeBnVKMGpREwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGJhNmQwNzItODM2MS00ZGRmLTgwMGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1 RTM2NTdCQkJCMDJBNzA3MzVFMDY3NTRBMzA2QTUxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODI4OTQ4RTVFMzY1N0JCQkIwMkE3MDczNUUwNjc1NEEzMDZB NTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvQTgyODk0OEU1RTM2NTdCQkJCMDJBNzA3MzVFMDY3 NTRBMzA2QTUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/83rQz97y3tscCNxWHtiZWck9F9ILDyEFp ovSuyCE3aE0M7CKEk9JzD/oaEdgDIeEDYErxb7IbWIihZ/DQChlO6MvQm4OwCeI9 007h91G8yMu7QDxV+bztc4bvfoqbveGE8YZwLVAQ0sFGwgDhhwmPEV2+VBnzKoJc 2zuIB+lb0fkGRW6GwcofgKML51m0us8u3sPiQD2+tUHiyvo3CA4ZSN5Mq7vO+3MY 5yNB0peUYNQ9cnnpgEWqVCjWeAB2pfBY+kWUt1Ft6FI38/IJsCKiH78NubM/DQKd L1rBWtr2VxFV7zlh4LMZLqKI22mhfGzrFLF5ZPlwPl4tftK5aOk= -----END CERTIFICATE-----Generated at Fri Sep 25 08:50:35 2026 by rpki-client