$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft File: D88374740C8E344956042586CFB98762292C9BED.mft (raw, json) Hash identifier: A8vEQO/0MUlzGAHEKqF4AbyPlQNPKaWBJO0a/AOqm7o= Subject key identifier: 7F:61:F0:A5:5C:A7:A5:E8:E8:C8:1C:62:30:0A:DE:FE:45:A4:B6:35 Authority key identifier: D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED Certificate issuer: /CN=D88374740C8E344956042586CFB98762292C9BED Certificate serial: 567FC2E5E123DBE8F844D118C6DF2B1F53248AD0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 21:17:27 +0000 Manifest this update: Wed 23 Sep 2026 21:12:27 +0000 Manifest next update: Thu 24 Sep 2026 22:06:27 +0000 Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: 5Is2TaaRgt6RZbxF5fTOe8DOSBDKMRf8+8dK8LxpkgM=) 2: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: pi4GpQEqsy5D0pG1/itP4Rd3gKkO+zB1DmoOxM7Tnmw=) 3: D88374740C8E344956042586CFB98762292C9BED.crl (hash: mwhAavRoS2WiUz/tTKm07SRHZEXegex0dyuOzDhMma4=) 4: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: lP4x2eURdSlbv1g2ymW9KzMnGg6tWIQJ2QaIxsnxvtg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7f:c2:e5:e1:23:db:e8:f8:44:d1:18:c6:df:2b:1f:53:24:8a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D88374740C8E344956042586CFB98762292C9BED Validity Not Before: Sep 23 21:12:27 2026 GMT Not After : Sep 24 22:06:27 2026 GMT Subject: CN=7F61F0A55CA7A5E8E8C81C62300ADEFE45A4B635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:e4:e1:ed:4a:15:0b:97:08:60:43:cf:d9: 42:f9:08:e2:fc:7a:9e:72:66:1c:75:9a:c5:54:b8: fd:1d:20:6c:39:01:71:40:50:bd:b3:8e:67:17:14: 7d:53:39:45:e1:67:7c:9d:36:a5:18:2a:29:67:e9: da:e7:d9:63:82:35:27:cf:c6:9c:1c:fc:28:5f:32: 9d:cd:13:5f:d2:58:a3:c1:59:51:e3:6f:78:f2:c6: 91:dd:41:c1:eb:f6:9b:47:ac:52:7e:75:6e:e6:9a: ef:c1:16:ea:8a:f1:79:d0:ed:09:47:1b:21:6b:c3: c6:4e:45:5f:df:e1:68:a0:ff:5b:86:f8:3e:aa:1c: af:c7:e1:db:a7:95:15:6b:d9:18:49:1e:aa:48:7a: 48:08:f9:7d:a6:ec:f7:85:b7:d5:c6:72:35:b9:ba: 29:ee:2a:28:e1:f4:09:9a:8c:50:73:cf:27:54:4a: 69:82:09:19:6c:45:0f:b7:98:21:ec:48:09:b3:f2: f6:90:76:51:e7:78:f8:90:7f:c7:bd:99:1f:41:ef: 1e:26:11:f8:34:a6:0a:f9:6a:c8:e4:66:19:3b:98: e0:f1:d3:7a:ee:35:4e:08:e0:da:0c:06:d8:79:ed: 47:7b:53:bc:fb:02:74:a9:02:87:9a:94:1e:d9:b6: b7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:61:F0:A5:5C:A7:A5:E8:E8:C8:1C:62:30:0A:DE:FE:45:A4:B6:35 X509v3 Authority Key Identifier: keyid:D8:83:74:74:0C:8E:34:49:56:04:25:86:CF:B9:87:62:29:2C:9B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D88374740C8E344956042586CFB98762292C9BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/D88374740C8E344956042586CFB98762292C9BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:63:00:fd:05:79:fe:bd:ba:30:8b:03:8a:e4:7d:fa:6d:f4: 6f:57:af:10:4b:00:0f:7c:1a:cd:6a:f2:2f:aa:a5:d5:29:07: 0e:d5:38:aa:e4:58:d0:75:c2:da:a7:30:70:6a:94:8f:d1:96: 89:58:d8:15:25:b9:cb:aa:8f:e2:b0:15:48:58:95:4c:65:af: 45:45:71:58:cd:46:c9:a9:0b:30:49:f1:5c:d2:12:e6:35:72: 32:c5:72:88:ea:74:d2:89:b0:91:99:a6:2b:a1:d6:df:ba:ec: 01:83:d1:21:0e:c7:06:a6:96:3d:a2:60:9a:9c:45:a4:cf:a2: 27:55:e2:b9:f5:2d:9c:ef:14:92:97:61:c7:df:36:4d:9b:09: 7a:53:2f:18:33:dd:57:1a:be:79:11:ca:fe:fc:83:4e:12:da: 3b:2a:7c:46:b3:0b:bf:8a:91:03:3f:49:cc:41:3d:51:36:d0: be:bb:4e:7b:44:8d:d6:a8:e3:57:22:b2:72:94:80:91:75:25: 91:81:ac:7b:c3:50:d4:2b:03:0c:20:51:0d:31:ad:54:43:d4: 98:83:5f:c1:3a:a6:77:0c:99:72:a5:82:a3:1b:ef:65:24:81: a0:b6:34:a2:30:27:dd:bd:66:7d:c2:84:d4:59:0e:91:74:a1: 36:78:88:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVn/C5eEj2+j4RNEYxt8rH1MkitAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIy OTJDOUJFRDAeFw0yNjA5MjMyMTEyMjdaFw0yNjA5MjQyMjA2MjdaMDMxMTAvBgNV BAMTKDdGNjFGMEE1NUNBN0E1RThFOEM4MUM2MjMwMEFERUZFNDVBNEI2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHneTh7UoVC5cIYEPP2UL5COL8 ep5yZhx1msVUuP0dIGw5AXFAUL2zjmcXFH1TOUXhZ3ydNqUYKiln6drn2WOCNSfP xpwc/ChfMp3NE1/SWKPBWVHjb3jyxpHdQcHr9ptHrFJ+dW7mmu/BFuqK8XnQ7QlH GyFrw8ZORV/f4Wig/1uG+D6qHK/H4dunlRVr2RhJHqpIekgI+X2m7PeFt9XGcjW5 uinuKijh9AmajFBzzydUSmmCCRlsRQ+3mCHsSAmz8vaQdlHnePiQf8e9mR9B7x4m Efg0pgr5asjkZhk7mODx03ruNU4I4NoMBth57Ud7U7z7AnSpAoealB7ZtrcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf2HwpVynpejoyBxiMAre/kWktjUwHwYDVR0j BBgwFoAU2IN0dAyONElWBCWGz7mHYiksm+0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWViZTdhZDgtZTE1Yy00MDE0LWJmYjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQw QzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3NjIyOTJDOUJFRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODgzNzQ3NDBDOEUzNDQ5NTYwNDI1ODZDRkI5ODc2MjI5MkM5 QkVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvRDg4Mzc0NzQwQzhFMzQ0OTU2MDQyNTg2Q0ZCOTg3 NjIyOTJDOUJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxjAP0Fef69ujCLA4rkffpt9G9XrxBLAA98 Gs1q8i+qpdUpBw7VOKrkWNB1wtqnMHBqlI/RlolY2BUlucuqj+KwFUhYlUxlr0VF cVjNRsmpCzBJ8VzSEuY1cjLFcojqdNKJsJGZpiuh1t+67AGD0SEOxwamlj2iYJqc RaTPoidV4rn1LZzvFJKXYcffNk2bCXpTLxgz3VcavnkRyv78g04S2jsqfEazC7+K kQM/ScxBPVE20L67TntEjdao41cisnKUgJF1JZGBrHvDUNQrAwwgUQ0xrVRD1JiD X8E6pncMmXKlgqMb72UkgaC2NKIwJ929Zn3ChNRZDpF0oTZ4iCw= -----END CERTIFICATE-----Generated at Thu Sep 24 07:37:11 2026 by rpki-client