$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft File: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft (raw, json) Hash identifier: zfkY5l51Ol0JXuqcWzD7JVy2bmuR34sfrXEVI4xGI1s= Subject key identifier: 83:EA:29:50:D1:5E:B6:48:1A:59:3A:BC:13:99:13:F4:8A:46:D8:F7 Authority key identifier: 82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F Certificate issuer: /CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Certificate serial: 349B915BA509515AFB19702C1CD6F2EA317FACE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 10:38:38 +0000 Manifest this update: Fri 25 Sep 2026 10:33:38 +0000 Manifest next update: Sat 26 Sep 2026 13:47:38 +0000 Files and hashes: 1: 828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl (hash: p+7jbz9QcbBa0bDoQ4BrJwQGtFCD5oAoOuxwsZJDAH8=) 2: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: sAJt4KOFRGK6/p9H5qEjBboJGlbpIE0n8tuPpLq/ACA=) 3: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: dcn7JjA5cMl377hf4qH/uXB97TvgtDVrGSS8WaneiPA=) 4: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: J9Ppr3YgZsd8hgKwRlpPASzO8XUT6qbE4ua4z+T5rRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 13:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9b:91:5b:a5:09:51:5a:fb:19:70:2c:1c:d6:f2:ea:31:7f:ac:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828B623E9A443E8B7E95D4A58B5E2965A1C40F6F Validity Not Before: Sep 25 10:33:38 2026 GMT Not After : Sep 26 13:47:38 2026 GMT Subject: CN=83EA2950D15EB6481A593ABC139913F48A46D8F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:c0:cc:d4:0a:12:d7:74:bb:e6:fa:23:03: 5e:cd:2a:d9:a7:b1:5d:7b:09:47:1c:b3:bf:a5:0e: d5:e5:fe:0f:df:94:53:6e:71:4c:81:58:c9:3b:dd: e1:9a:34:8e:6c:c4:4b:ff:6d:47:5a:00:26:b4:22: 26:f7:ad:c9:5d:fe:c3:d6:a2:b9:a8:e8:61:17:22: f5:69:3e:48:a3:65:69:59:3d:dd:85:13:85:f9:ea: 8a:72:ac:3c:6b:2f:10:49:35:d2:8f:9d:f1:fa:f4: a6:3d:25:39:06:0b:18:62:92:4f:78:3e:aa:c0:0c: 23:7a:a7:31:84:77:91:f6:da:74:04:a8:51:11:ae: 89:18:b7:b6:11:16:74:6e:95:e1:7a:7d:0b:4e:54: 6c:51:6e:50:07:b2:16:27:ff:4a:ac:7e:db:e1:f9: 99:27:08:0c:be:95:de:a6:23:21:32:e6:0e:c3:34: 23:56:e4:f0:d3:f8:18:b5:40:ab:6a:5f:8b:ca:0b: 9d:11:de:46:78:35:b8:9a:fa:c2:9f:e1:79:6c:84: 5b:65:b4:37:c2:a4:19:93:94:d9:dc:59:51:9b:b6: 79:c6:73:65:82:4f:94:0e:02:1d:13:21:ac:d7:9d: 61:d1:0c:c4:b0:a2:43:38:25:7b:84:11:26:15:2f: 3c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EA:29:50:D1:5E:B6:48:1A:59:3A:BC:13:99:13:F4:8A:46:D8:F7 X509v3 Authority Key Identifier: keyid:82:8B:62:3E:9A:44:3E:8B:7E:95:D4:A5:8B:5E:29:65:A1:C4:0F:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/828B623E9A443E8B7E95D4A58B5E2965A1C40F6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b5:e7:cf:4a:86:3b:22:82:d2:62:44:16:a8:25:c6:fb:ea: 2b:cc:2c:23:14:fe:5c:60:ca:95:28:05:e1:7b:40:e3:06:04: 6c:cb:ac:65:96:2f:86:45:0a:fb:d1:e6:3e:d1:37:d0:52:c2: 38:57:d9:dc:9c:f6:cc:df:74:08:2c:bc:08:c3:f0:2c:08:e5: 4b:6e:be:63:81:26:06:23:26:42:ca:bc:6d:23:92:b0:da:56: da:17:c2:b2:b7:d9:18:29:a4:92:f4:4a:36:4f:cc:19:1b:84: 9b:11:86:47:97:d0:47:4f:62:77:0b:72:21:cd:78:fa:5f:98: 33:f4:36:fe:38:8b:5c:ed:6a:37:cb:72:8a:b3:de:ca:3f:c3: b0:b0:2b:b4:6e:c4:64:59:67:86:d1:21:6e:6e:6c:7d:99:23: 39:dc:48:bb:7e:f1:b6:f1:aa:c0:75:a7:5d:dd:67:58:f7:38: 12:e9:44:d3:1c:ad:c4:01:87:53:1f:33:a9:bd:84:17:bc:d6: af:38:fc:20:0d:94:ad:24:db:5d:2a:e6:7f:fc:a8:10:11:ea: 11:75:28:db:c8:78:12:74:84:46:6a:cc:2a:c1:04:ea:ee:36: 4d:ec:21:e6:c9:78:a4:a7:e1:6e:60:16:64:83:1f:da:68:06: 47:0f:2d:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJuRW6UJUVr7GXAsHNby6jF/rOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVB MUM0MEY2RjAeFw0yNjA5MjUxMDMzMzhaFw0yNjA5MjYxMzQ3MzhaMDMxMTAvBgNV BAMTKDgzRUEyOTUwRDE1RUI2NDgxQTU5M0FCQzEzOTkxM0Y0OEE0NkQ4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAysDM1AoS13S75vojA17NKtmn sV17CUccs7+lDtXl/g/flFNucUyBWMk73eGaNI5sxEv/bUdaACa0Iib3rcld/sPW ormo6GEXIvVpPkijZWlZPd2FE4X56opyrDxrLxBJNdKPnfH69KY9JTkGCxhikk94 PqrADCN6pzGEd5H22nQEqFERrokYt7YRFnRuleF6fQtOVGxRblAHshYn/0qsftvh +ZknCAy+ld6mIyEy5g7DNCNW5PDT+Bi1QKtqX4vKC50R3kZ4Nbia+sKf4XlshFtl tDfCpBmTlNncWVGbtnnGc2WCT5QOAh0TIazXnWHRDMSwokM4JXuEESYVLzxHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg+opUNFetkgaWTq8E5kT9IpG2PcwHwYDVR0j BBgwFoAUgotiPppEPot+ldSli14pZaHED28wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFmMGY0MjMtM2JlZC00OTM4LTlmODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5 QTQ0M0U4QjdFOTVENEE1OEI1RTI5NjVBMUM0MEY2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MjhCNjIzRTlBNDQzRThCN0U5NUQ0QTU4QjVFMjk2NUExQzQw RjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvODI4QjYyM0U5QTQ0M0U4QjdFOTVENEE1OEI1RTI5 NjVBMUM0MEY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADm1589KhjsigtJiRBaoJcb76ivMLCMU/lxg ypUoBeF7QOMGBGzLrGWWL4ZFCvvR5j7RN9BSwjhX2dyc9szfdAgsvAjD8CwI5Utu vmOBJgYjJkLKvG0jkrDaVtoXwrK32RgppJL0SjZPzBkbhJsRhkeX0EdPYncLciHN ePpfmDP0Nv44i1ztajfLcoqz3so/w7CwK7RuxGRZZ4bRIW5ubH2ZIzncSLt+8bbx qsB1p13dZ1j3OBLpRNMcrcQBh1MfM6m9hBe81q84/CANlK0k210q5n/8qBAR6hF1 KNvIeBJ0hEZqzCrBBOruNk3sIebJeKSn4W5gFmSDH9poBkcPLT4= -----END CERTIFICATE-----Generated at Sat Sep 26 01:35:56 2026 by rpki-client