$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft File: D88374740C8E344956042586CFB98762292C9BED.mft (raw, json) Hash identifier: AgE4WxYMDruJ2cisiE1ZbV07PWtaGjSZ2qtwIyByu5w= Subject key identifier: 76:08:B6:F2:EA:3E:2D:4E:AE:0A:67:D5:51:87:ED:BA:16:8F:F5:3E Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED Certificate serial: 323BCF44370BAE17CCEEFDDEEBBEBC10BC734C3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 14:08:29 +0000 Manifest this update: Thu 24 Sep 2026 14:03:29 +0000 Manifest next update: Fri 25 Sep 2026 17:58:29 +0000 Files and hashes: 1: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: lP4x2eURdSlbv1g2ymW9KzMnGg6tWIQJ2QaIxsnxvtg=) 2: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: 5Is2TaaRgt6RZbxF5fTOe8DOSBDKMRf8+8dK8LxpkgM=) 3: D88374740C8E344956042586CFB98762292C9BED.crl (hash: EE7IELFY4uP5cCWL13YheU+lgyu96JD2xc+3nRtxUx4=) 4: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: pi4GpQEqsy5D0pG1/itP4Rd3gKkO+zB1DmoOxM7Tnmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3b:cf:44:37:0b:ae:17:cc:ee:fd:de:eb:be:bc:10:bc:73:4c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88374740C8E344956042586CFB98762292C9BED Validity Not Before: Sep 24 14:03:29 2026 GMT Not After : Sep 25 17:58:29 2026 GMT Subject: CN=7608B6F2EA3E2D4EAE0A67D55187EDBA168FF53E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:a8:ec:94:22:58:7b:0c:84:ca:83:9f:62: cf:bf:f1:9b:9b:6a:9a:42:fc:bd:d7:53:31:ba:44: 09:aa:7c:d8:02:da:9c:af:c9:c2:50:c8:1a:4f:30: b9:69:3a:94:2d:53:6b:17:e5:f0:47:67:24:fe:09: c7:56:da:f1:75:dc:4e:78:19:b2:57:c5:cb:a5:a4: 82:4a:a2:9e:a1:54:b7:de:39:9b:bc:3b:ed:40:1a: f5:50:92:4b:2e:14:1f:c0:c2:2e:78:da:d9:ec:9f: e2:97:83:41:69:22:be:be:57:43:33:2f:fa:08:9f: 81:b8:cb:98:0c:ed:79:19:42:75:7a:9e:34:49:29: 29:7f:96:59:1c:d7:29:ee:c6:61:bd:19:d3:28:f4: 37:d7:7b:a6:d9:1c:f7:d2:19:b9:5d:b7:df:84:c1: b5:ac:e0:c0:20:d2:3e:a9:96:13:cf:45:72:25:63: 50:cd:61:8a:3f:5b:08:d1:dc:f6:e0:8c:b1:d5:ae: cf:12:c9:d3:f0:8e:b9:b9:94:2b:24:74:bd:b9:7e: ea:55:96:30:47:52:93:cf:58:3b:54:c0:0d:31:41: 8b:83:f0:7f:4e:36:e3:be:c3:87:37:37:1b:b6:b5: 2a:37:0f:59:d8:03:9b:ff:c7:00:76:3f:ec:92:c8: 0f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:08:B6:F2:EA:3E:2D:4E:AE:0A:67:D5:51:87:ED:BA:16:8F:F5:3E X509v3 Authority Key Identifier: keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ad:c8:a7:22:ac:5d:66:2a:dc:d6:e4:b8:53:c4:4c:cb:02: b5:42:aa:1d:1f:00:68:d8:5f:89:25:b2:30:e0:67:a7:43:c9: 24:e7:f5:35:b7:63:c0:b6:f2:44:55:7e:07:69:37:ac:76:18: 08:83:63:77:29:7d:76:83:74:97:46:e4:3e:bd:25:a1:d8:32: 1b:f2:87:7c:d9:90:1f:5b:38:68:b6:29:8d:dd:7f:f8:13:f1: af:79:9e:da:b4:5a:64:2a:5e:65:ea:47:3c:95:e4:a7:f0:6f: 74:05:9f:e8:b1:b8:65:73:2f:60:4f:b3:80:24:fe:83:30:f0: 35:3c:f9:c2:d6:e2:ab:3c:a5:91:cf:aa:38:ac:dd:f6:10:e2: 87:a1:d7:3e:f5:b0:aa:e5:66:4e:9f:f3:5a:68:39:d6:91:3f: ba:68:b4:aa:16:4d:b1:6d:6a:ee:79:a1:2e:13:22:5d:39:92: e6:24:80:e2:bf:40:e4:e5:bb:80:59:c5:e9:2b:a6:a6:ce:cd: 99:06:c5:d2:fc:ec:d8:14:dd:cd:39:5b:e5:6d:ba:4e:3c:a6: 9d:53:64:c4:b0:e1:1c:07:e1:4e:ef:05:82:1f:4e:82:cb:f9: 06:38:48:dc:9e:a1:67:71:ad:a3:47:22:c9:b3:6c:37:4b:ff: e1:9a:e8:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjvPRDcLrhfM7v3e6768ELxzTDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIy OTJDOUJFRDAeFw0yNjA5MjQxNDAzMjlaFw0yNjA5MjUxNzU4MjlaMDMxMTAvBgNV BAMTKDc2MDhCNkYyRUEzRTJENEVBRTBBNjdENTUxODdFREJBMTY4RkY1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPE6jslCJYewyEyoOfYs+/8Zub appC/L3XUzG6RAmqfNgC2pyvycJQyBpPMLlpOpQtU2sX5fBHZyT+CcdW2vF13E54 GbJXxculpIJKop6hVLfeOZu8O+1AGvVQkksuFB/Awi542tnsn+KXg0FpIr6+V0Mz L/oIn4G4y5gM7XkZQnV6njRJKSl/llkc1ynuxmG9GdMo9DfXe6bZHPfSGbldt9+E wbWs4MAg0j6plhPPRXIlY1DNYYo/WwjR3PbgjLHVrs8SydPwjrm5lCskdL25fupV ljBHUpPPWDtUwA0xQYuD8H9ONuO+w4c3Nxu2tSo3D1nYA5v/xwB2P+ySyA/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdgi28uo+LU6uCmfVUYftuhaP9T4wHwYDVR0j BBgwFoAU2IN0dAyONElWBCWGz7mHYiksm+0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWViZTdhZDgtZTE1Yy00MDE0LWJmYjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQw QzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIyOTJDOUJFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODgzNzQ3NDBDOEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5MkM5 QkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3 NjIyOTJDOUJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCtyKcirF1mKtzW5LhTxEzLArVCqh0fAGjY X4klsjDgZ6dDySTn9TW3Y8C28kRVfgdpN6x2GAiDY3cpfXaDdJdG5D69JaHYMhvy h3zZkB9bOGi2KY3df/gT8a95ntq0WmQqXmXqRzyV5Kfwb3QFn+ixuGVzL2BPs4Ak /oMw8DU8+cLW4qs8pZHPqjis3fYQ4oeh1z71sKrlZk6f81poOdaRP7potKoWTbFt au55oS4TIl05kuYkgOK/QOTlu4BZxekrpqbOzZkGxdL87NgU3c05W+Vtuk48pp1T ZMSw4RwH4U7vBYIfToLL+QY4SNyeoWdxraNHIsmzbDdL/+Ga6GQ= -----END CERTIFICATE-----Generated at Fri Sep 25 01:02:45 2026 by rpki-client