$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft File: 228D8D937BBC58B186163CE4DD0333EF171136B5.mft (raw, json) Hash identifier: wuxhfIPwOgjRdUnmoolQNeXy5+BrGyUzdXiHrW8kohM= Subject key identifier: B5:07:0F:2D:BF:E1:32:F4:DE:C3:5A:BA:1E:DD:4C:01:CC:C8:A5:65 Authority key identifier: 22:8D:8D:93:7B:BC:58:B1:86:16:3C:E4:DD:03:33:EF:17:11:36:B5 Certificate issuer: /CN=228D8D937BBC58B186163CE4DD0333EF171136B5 Certificate serial: 651BBB16EB9B70B95B7A42BD8DCD4558DCC69C4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 00:00:46 +0000 Manifest this update: Wed 23 Sep 2026 23:55:46 +0000 Manifest next update: Fri 25 Sep 2026 03:50:46 +0000 Files and hashes: 1: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: MTpdy0CYG7SIZe6cOf6a6b9EOLMRkXO/tTUBIEJ2xwQ=) 2: 228D8D937BBC58B186163CE4DD0333EF171136B5.crl (hash: iRtfOiu2XN5ABOKbV00Hw4uc/qsFh+XB9Dq9zk12RBw=) 3: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: Dk+nSXFZDNacuokslAhQOKnR2rRHLun2ihG3BWOPCgU=) 4: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: JM/02KXvppUFA6M2lfoMyS0PaD1KXTG0P2tE2Kswrq4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.crl rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1b:bb:16:eb:9b:70:b9:5b:7a:42:bd:8d:cd:45:58:dc:c6:9c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228D8D937BBC58B186163CE4DD0333EF171136B5 Validity Not Before: Sep 23 23:55:46 2026 GMT Not After : Sep 25 03:50:46 2026 GMT Subject: CN=B5070F2DBFE132F4DEC35ABA1EDD4C01CCC8A565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bd:3a:56:26:72:1f:68:d0:08:25:2f:39:39: 9f:e4:c9:54:e5:6b:55:39:a0:52:8a:3c:0e:7b:03: 9a:02:60:dc:3d:48:f9:55:33:b7:3e:c5:34:20:94: ef:a5:1f:c1:1a:9f:fd:88:9e:ea:59:19:ca:e3:b5: 96:83:56:a4:13:8c:8b:df:0d:10:32:73:a2:2d:83: 02:5b:b4:c3:cc:11:d1:1a:b6:49:26:42:bf:0d:0b: 81:cd:15:82:47:c1:1c:6f:e5:9a:48:a1:e3:d6:b9: df:07:14:18:22:0e:76:12:ba:2c:7c:cc:b1:b1:eb: 5c:c9:95:1a:ce:3f:f5:56:30:2f:36:55:56:00:ec: b6:af:c5:be:dc:72:7d:d4:6c:85:68:23:d5:93:84: c8:8c:e2:d5:3f:c8:d6:a8:38:a1:79:b1:fd:94:0a: 2a:6f:78:ad:f8:33:47:ba:92:c9:af:a1:3a:ec:71: d6:3a:da:c9:ff:75:91:df:89:36:be:20:70:76:77: b3:a7:e1:be:de:30:df:6f:66:4a:c1:51:e2:5f:2d: 60:e5:0a:a4:da:4c:45:18:bd:6c:de:e9:a6:a8:b7: d5:10:6b:72:28:38:05:9e:62:b6:06:ef:74:d9:ae: aa:7b:c6:d2:94:2a:6f:10:46:dc:fa:dc:d7:74:0c: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:07:0F:2D:BF:E1:32:F4:DE:C3:5A:BA:1E:DD:4C:01:CC:C8:A5:65 X509v3 Authority Key Identifier: keyid:22:8D:8D:93:7B:BC:58:B1:86:16:3C:E4:DD:03:33:EF:17:11:36:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/228D8D937BBC58B186163CE4DD0333EF171136B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/228D8D937BBC58B186163CE4DD0333EF171136B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:26:a5:a5:7a:4d:a1:11:66:e8:f7:de:7d:c0:8a:b9:26:60: 6a:4e:de:29:01:70:8c:bd:8e:ef:eb:da:73:19:b6:f5:88:e4: 3c:2b:79:36:3f:39:5f:72:01:37:cf:13:46:03:0c:64:6b:f4: 9d:6f:75:5d:d3:d2:f1:cc:ea:7f:cb:44:e5:d4:8c:0d:d3:f1: af:4f:9b:43:e7:45:f0:64:96:f4:1b:b7:45:86:ad:dc:e8:66: db:e8:93:c1:b4:68:7a:65:03:64:6d:91:2c:61:e8:ef:35:6c: be:3b:e8:06:90:f3:22:24:b2:20:bd:ac:6b:6e:26:4b:03:8a: 2d:2b:78:91:75:07:10:16:91:d8:1c:3d:8d:01:db:f7:77:41: 5d:5e:9c:53:3c:2a:c2:da:c3:f6:56:2e:46:da:2b:cc:22:67: cc:31:41:b1:51:f3:23:96:04:83:ae:e7:df:69:de:20:40:5f: 30:76:94:9a:5e:cc:8e:89:8d:86:0e:a8:84:86:18:bb:65:61: e3:3b:66:94:48:a7:d2:e3:8f:02:2e:e4:17:4e:ed:20:e1:52: c4:ba:c4:be:03:30:74:33:08:89:c7:f4:e6:a8:55:b2:46:48: c5:a7:d1:62:f1:ff:9a:ca:49:ef:c0:cb:b7:b2:8c:fe:99:78: c7:6d:d8:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRu7FuubcLlbekK9jc1FWNzGnEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RDhEOTM3QkJDNThCMTg2MTYzQ0U0REQwMzMzRUYx NzExMzZCNTAeFw0yNjA5MjMyMzU1NDZaFw0yNjA5MjUwMzUwNDZaMDMxMTAvBgNV BAMTKEI1MDcwRjJEQkZFMTMyRjRERUMzNUFCQTFFREQ0QzAxQ0NDOEE1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdvTpWJnIfaNAIJS85OZ/kyVTl a1U5oFKKPA57A5oCYNw9SPlVM7c+xTQglO+lH8Ean/2InupZGcrjtZaDVqQTjIvf DRAyc6ItgwJbtMPMEdEatkkmQr8NC4HNFYJHwRxv5ZpIoePWud8HFBgiDnYSuix8 zLGx61zJlRrOP/VWMC82VVYA7Lavxb7ccn3UbIVoI9WThMiM4tU/yNaoOKF5sf2U CipveK34M0e6ksmvoTrscdY62sn/dZHfiTa+IHB2d7On4b7eMN9vZkrBUeJfLWDl CqTaTEUYvWze6aaot9UQa3IoOAWeYrYG73TZrqp7xtKUKm8QRtz63Nd0DEqvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtQcPLb/hMvTew1q6Ht1MAczIpWUwHwYDVR0j BBgwFoAUIo2Nk3u8WLGGFjzk3QMz7xcRNrUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDliODk5YWMtNDg3MC00ZTI4LThlNGUtMmMyMzc1MmE0YTYwLzAvMjI4RDhEOTM3 QkJDNThCMTg2MTYzQ0U0REQwMzMzRUYxNzExMzZCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjhEOEQ5MzdCQkM1OEIxODYxNjNDRTRERDAzMzNFRjE3MTEz NkI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMjI4RDhEOTM3QkJDNThCMTg2MTYzQ0U0REQwMzMz RUYxNzExMzZCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8mpaV6TaERZuj33n3AirkmYGpO3ikBcIy9 ju/r2nMZtvWI5DwreTY/OV9yATfPE0YDDGRr9J1vdV3T0vHM6n/LROXUjA3T8a9P m0PnRfBklvQbt0WGrdzoZtvok8G0aHplA2RtkSxh6O81bL476AaQ8yIksiC9rGtu JksDii0reJF1BxAWkdgcPY0B2/d3QV1enFM8KsLaw/ZWLkbaK8wiZ8wxQbFR8yOW BIOu599p3iBAXzB2lJpezI6JjYYOqISGGLtlYeM7ZpRIp9LjjwIu5BdO7SDhUsS6 xL4DMHQzCInH9OaoVbJGSMWn0WLx/5rKSe/Ay7eyjP6ZeMdt2P4= -----END CERTIFICATE-----Generated at Thu Sep 24 03:45:16 2026 by rpki-client