$ rpki-client -vvvf rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft File: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft (raw, json) Hash identifier: y1V2tkTnrWA0kFXjNHcfo3uVcA0eeoctPUR6f5EhGd4= Subject key identifier: 8A:55:A3:7C:12:81:07:63:1F:E8:DC:94:2B:81:4B:3F:12:9D:5A:7D Authority key identifier: 86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 Certificate issuer: /CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Certificate serial: 2865A2972C5E3AF5CA3675434832622C2C167A23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 00:51:45 +0000 Manifest this update: Thu 24 Sep 2026 00:46:45 +0000 Manifest next update: Fri 25 Sep 2026 03:55:45 +0000 Files and hashes: 1: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: V+R7emBXYGxGYC8TKAJDN/rKFNkkzGGzXMecTJssl6Q=) 2: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: A51y95Y2VvHOxleNisrOn7Mw2CXWlCwKbBD4RKfiRXo=) 3: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: buNf/KMT3H26jyT7kcH4G4XIVCs19dscJeFhejymKUs=) 4: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AiKeHz2pWrwnk84HIHiggHrF6Y+TQyS0iMZkjpVVcMY=) 5: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl (hash: GzbffHmzZ7QeUtGodo4iVEz4VFZCKQki9S/ZfTGI2C4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:65:a2:97:2c:5e:3a:f5:ca:36:75:43:48:32:62:2c:2c:16:7a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Validity Not Before: Sep 24 00:46:45 2026 GMT Not After : Sep 25 03:55:45 2026 GMT Subject: CN=8A55A37C128107631FE8DC942B814B3F129D5A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:70:da:fb:b5:6b:16:6f:0c:c5:61:2b:93: 06:62:68:60:cf:5a:8e:da:06:cb:55:68:53:f5:5f: 19:b0:13:b8:78:6c:48:55:b6:56:6e:c5:74:e6:90: d8:a0:6d:12:46:cd:79:f2:8a:33:c9:0f:96:94:f4: 9c:73:f6:ca:f4:f4:66:b3:ab:13:90:f8:a7:cd:e0: 01:0c:1f:1c:ce:7e:46:58:d1:82:8b:11:11:08:19: 40:52:90:25:b4:ac:ff:16:71:ae:b3:52:75:df:94: ff:6a:a0:ae:5d:3c:32:59:d9:6a:52:54:da:1c:62: 69:ac:e0:dc:06:d9:30:0e:e5:aa:1b:1a:77:17:cf: 91:74:77:71:df:8f:a6:a7:e0:73:66:fd:97:dd:59: ba:c1:70:ba:b8:f3:7f:fd:bb:6c:2c:9f:24:6c:b3: b0:38:d3:f9:b9:c4:b6:8a:ee:21:31:75:48:4a:8b: b5:74:d8:30:fe:48:fb:f0:33:d4:42:1f:01:aa:9a: ab:c7:35:a5:be:bd:53:ff:e4:7f:25:19:fc:68:73: b4:16:f2:fa:e5:a4:92:8b:93:7b:81:81:24:5e:1b: 74:36:d4:b1:76:c6:d2:94:ec:4f:e7:b6:b4:53:02: eb:35:04:a8:9a:39:12:dd:e6:df:da:f2:ca:da:60: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:55:A3:7C:12:81:07:63:1F:E8:DC:94:2B:81:4B:3F:12:9D:5A:7D X509v3 Authority Key Identifier: keyid:86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:4a:c5:87:7b:ed:6b:f8:98:6f:a8:43:d2:e5:04:7e:0f:81: 4e:a9:70:e7:4b:6f:85:4c:33:e4:a0:cd:f5:ac:ee:5e:0b:7c: 2b:de:de:43:99:b8:53:98:fe:81:e1:5e:c4:81:82:19:14:f5: 5c:35:8c:87:58:47:08:e0:f0:92:e0:8a:6f:61:88:de:ce:01: a0:5d:50:48:01:a9:76:86:15:0b:23:5b:0e:86:d2:45:e9:c1: 2e:67:87:f0:c3:b2:af:ce:d3:a2:1b:2f:a5:81:c1:12:0f:20: 48:a4:ea:f4:6f:f3:f6:35:24:6e:5e:6f:0a:ca:8a:67:51:b4: 60:20:55:53:07:4d:9b:97:c6:7a:d2:0e:2b:e5:d2:58:e9:25: 40:2b:c1:40:ce:33:60:f8:1c:16:51:76:55:36:9b:46:38:d9: 8c:1c:2c:e3:eb:44:dd:5d:b1:e0:d5:ec:54:dd:4d:56:36:2d: 1f:fe:bf:5e:b1:e8:63:6c:74:d6:d7:52:ff:88:71:04:df:eb: 33:a5:8b:1d:0b:1f:10:49:03:74:bd:e0:9f:3d:d4:f5:0e:3a: f8:80:de:ef:e2:85:0e:0b:98:f5:13:62:24:bd:96:b5:29:24: b8:88:80:e9:cc:f9:f2:0d:e8:52:f3:c0:6d:5d:f5:1a:b6:01: a5:3a:da:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKGWilyxeOvXKNnVDSDJiLCwWeiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQw QUQ5QzA3NzAeFw0yNjA5MjQwMDQ2NDVaFw0yNjA5MjUwMzU1NDVaMDMxMTAvBgNV BAMTKDhBNTVBMzdDMTI4MTA3NjMxRkU4REM5NDJCODE0QjNGMTI5RDVBN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMXDa+7VrFm8MxWErkwZiaGDP Wo7aBstVaFP1XxmwE7h4bEhVtlZuxXTmkNigbRJGzXnyijPJD5aU9Jxz9sr09Gaz qxOQ+KfN4AEMHxzOfkZY0YKLEREIGUBSkCW0rP8Wca6zUnXflP9qoK5dPDJZ2WpS VNocYmms4NwG2TAO5aobGncXz5F0d3Hfj6an4HNm/ZfdWbrBcLq483/9u2wsnyRs s7A40/m5xLaK7iExdUhKi7V02DD+SPvwM9RCHwGqmqvHNaW+vVP/5H8lGfxoc7QW 8vrlpJKLk3uBgSReG3Q21LF2xtKU7E/ntrRTAus1BKiaORLd5t/a8sraYI+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUilWjfBKBB2Mf6NyUK4FLPxKdWn0wHwYDVR0j BBgwFoAUhkTvXK/W/yx1ODO1iNbV5ArZwHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDJjYjBiM2EtNjkyZC00NDJlLTkzMDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNB RkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQwQUQ5QzA3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjQ0RUY1Q0FGRDZGRjJDNzUzODMzQjU4OEQ2RDVFNDBBRDlD MDc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1 RTQwQUQ5QzA3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVKxYd77Wv4mG+oQ9LlBH4PgU6pcOdLb4VM M+SgzfWs7l4LfCve3kOZuFOY/oHhXsSBghkU9Vw1jIdYRwjg8JLgim9hiN7OAaBd UEgBqXaGFQsjWw6G0kXpwS5nh/DDsq/O06IbL6WBwRIPIEik6vRv8/Y1JG5ebwrK imdRtGAgVVMHTZuXxnrSDivl0ljpJUArwUDOM2D4HBZRdlU2m0Y42YwcLOPrRN1d seDV7FTdTVY2LR/+v16x6GNsdNbXUv+IcQTf6zOlix0LHxBJA3S94J891PUOOviA 3u/ihQ4LmPUTYiS9lrUpJLiIgOnM+fIN6FLzwG1d9Rq2AaU62pg= -----END CERTIFICATE-----Generated at Thu Sep 24 10:14:14 2026 by rpki-client