$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft File: 82619591421B67CACDA4E6A0B166011B7E6D1D21.mft (raw, json) Hash identifier: 7PJkhar5tNal1nzDtvkrnZEGAUaAGTMI7uEWVCcwm3w= Subject key identifier: 5A:9F:9E:5F:49:51:45:1C:E4:9D:81:77:CC:23:3F:DC:EB:B4:69:03 Authority key identifier: 82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21 Certificate issuer: /CN=82619591421B67CACDA4E6A0B166011B7E6D1D21 Certificate serial: 6CDA1BC2D9BCB7E531D389D562E77AF2F5E8D640 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 14:44:18 +0000 Manifest this update: Wed 23 Sep 2026 14:39:18 +0000 Manifest next update: Thu 24 Sep 2026 15:13:18 +0000 Files and hashes: 1: 82619591421B67CACDA4E6A0B166011B7E6D1D21.crl (hash: +lvKBt04PE2kBGUjAGQHZV4jow2gQsYNhAi4kJgz3vM=) 2: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: g/f5oiN6iiOkoRtweFIMN236eVeurXuFpLSe3yBaq5U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:da:1b:c2:d9:bc:b7:e5:31:d3:89:d5:62:e7:7a:f2:f5:e8:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82619591421B67CACDA4E6A0B166011B7E6D1D21 Validity Not Before: Sep 23 14:39:18 2026 GMT Not After : Sep 24 15:13:18 2026 GMT Subject: CN=5A9F9E5F4951451CE49D8177CC233FDCEBB46903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:db:0e:1f:40:31:1b:46:d6:c1:35:02:92:09: 96:ab:3c:83:c5:0f:27:8e:a6:39:fc:99:c4:82:2e: cc:8b:20:33:38:39:2c:ce:fe:83:4c:67:58:d6:96: 37:67:4e:68:4f:8a:67:2c:6e:ef:3e:76:1e:a4:b4: 56:ea:19:cf:5d:79:62:d5:a3:0b:5a:fa:2e:a6:8e: d3:d1:8b:9d:4d:2f:39:3b:8c:c3:e4:36:24:55:df: fb:1b:14:46:98:71:6b:45:4c:5a:18:bf:e7:8d:a2: 26:a2:3e:0b:ea:c9:02:7c:c0:c3:ea:00:ad:7a:3b: c1:51:0e:43:22:76:e5:35:df:9f:bf:b7:59:7f:5f: ee:83:49:d2:98:c5:aa:c1:bb:d4:a7:75:48:4f:6f: 34:fd:2d:1f:1a:e1:04:59:78:5b:45:11:bf:85:a2: 7c:bb:81:31:89:a5:e2:67:eb:ce:a4:37:69:55:a7: c8:c0:fd:ce:98:b8:55:88:72:48:7e:cd:f0:61:54: f9:30:64:56:0b:c2:a2:ea:16:1d:aa:b0:be:60:67: a2:79:b6:de:b4:7b:8c:9d:ee:d7:47:4d:0f:e3:51: e7:d0:8a:3c:db:f6:11:18:5e:48:9f:d9:95:9e:e4: ac:3e:dd:75:82:26:d6:be:ec:77:8d:83:97:12:34: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9F:9E:5F:49:51:45:1C:E4:9D:81:77:CC:23:3F:DC:EB:B4:69:03 X509v3 Authority Key Identifier: keyid:82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8c:b1:9a:ab:12:77:cf:1b:8e:52:0b:4d:e7:04:f6:dd:3a: 30:cc:8f:b8:c0:18:77:e4:c5:fb:90:56:47:b3:3a:da:4a:83: ac:47:6c:13:14:2b:55:db:bd:8d:ac:11:a0:05:a3:eb:86:a7: 81:cd:a9:85:07:50:c7:8e:a7:ec:f8:d9:ff:81:2a:00:3a:61: 56:a9:e7:9a:90:10:a7:ef:66:17:60:85:b0:66:45:64:a6:f1: 01:1a:e0:5b:00:3f:cc:11:59:69:2c:67:8a:d4:04:a6:89:a9: 5e:78:e0:95:19:b6:9b:93:72:4d:0f:9d:e9:85:68:f8:43:ef: 05:5c:7d:16:87:c4:8f:b7:52:c3:c6:c5:4c:d2:f8:0b:79:8a: 68:e6:68:37:2f:c0:a1:4f:89:38:c1:ad:7a:b1:be:0c:11:c3: d2:5f:85:51:ae:1c:26:eb:e6:ba:f7:d8:2a:67:89:85:51:d9: f8:d4:7b:42:66:28:69:5e:cc:87:37:27:4d:f8:71:f7:c2:71: 5e:30:92:06:5c:5e:dc:35:b8:04:ad:34:e7:8c:d6:35:3e:51: 30:f0:46:d5:4c:76:4a:3a:54:d5:6a:4a:54:90:cf:9d:ce:79: ca:c2:3e:d5:59:a9:33:ef:be:54:1b:a7:8f:3b:5c:60:98:bd: 6f:1d:c9:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNobwtm8t+Ux04nVYud68vXo1kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI2MTk1OTE0MjFCNjdDQUNEQTRFNkEwQjE2NjAxMUI3 RTZEMUQyMTAeFw0yNjA5MjMxNDM5MThaFw0yNjA5MjQxNTEzMThaMDMxMTAvBgNV BAMTKDVBOUY5RTVGNDk1MTQ1MUNFNDlEODE3N0NDMjMzRkRDRUJCNDY5MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2w4fQDEbRtbBNQKSCZarPIPF DyeOpjn8mcSCLsyLIDM4OSzO/oNMZ1jWljdnTmhPimcsbu8+dh6ktFbqGc9deWLV owta+i6mjtPRi51NLzk7jMPkNiRV3/sbFEaYcWtFTFoYv+eNoiaiPgvqyQJ8wMPq AK16O8FRDkMiduU135+/t1l/X+6DSdKYxarBu9SndUhPbzT9LR8a4QRZeFtFEb+F ony7gTGJpeJn686kN2lVp8jA/c6YuFWIckh+zfBhVPkwZFYLwqLqFh2qsL5gZ6J5 tt60e4yd7tdHTQ/jUefQijzb9hEYXkif2ZWe5Kw+3XWCJta+7HeNg5cSNMCRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWp+eX0lRRRzknYF3zCM/3Ou0aQMwHwYDVR0j BBgwFoAUgmGVkUIbZ8rNpOagsWYBG35tHSEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTBmNzhiZDQtYzE5Yi00ZDQwLWFhNTQtZWQ4ZDdiYzc3MmNhLzAvODI2MTk1OTE0 MjFCNjdDQUNEQTRFNkEwQjE2NjAxMUI3RTZEMUQyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MjYxOTU5MTQyMUI2N0NBQ0RBNEU2QTBCMTY2MDExQjdFNkQx RDIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvODI2MTk1OTE0MjFCNjdDQUNEQTRFNkEwQjE2NjAx MUI3RTZEMUQyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWMsZqrEnfPG45SC03nBPbdOjDMj7jAGHfk xfuQVkezOtpKg6xHbBMUK1XbvY2sEaAFo+uGp4HNqYUHUMeOp+z42f+BKgA6YVap 55qQEKfvZhdghbBmRWSm8QEa4FsAP8wRWWksZ4rUBKaJqV544JUZtpuTck0PnemF aPhD7wVcfRaHxI+3UsPGxUzS+At5imjmaDcvwKFPiTjBrXqxvgwRw9JfhVGuHCbr 5rr32CpniYVR2fjUe0JmKGlezIc3J034cffCcV4wkgZcXtw1uAStNOeM1jU+UTDw RtVMdko6VNVqSlSQz53OecrCPtVZqTPvvlQbp487XGCYvW8dyUg= -----END CERTIFICATE-----Generated at Thu Sep 24 06:06:38 2026 by rpki-client