$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft File: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft (raw, json) Hash identifier: N0txjBqo+pOuvY/1IEJ70gM8gVMSiOyRuyGclBZW1/c= Subject key identifier: 52:47:88:0C:98:5B:15:53:24:9E:BD:DC:57:50:82:33:E7:DB:18:A4 Authority key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 Certificate issuer: /CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Certificate serial: 1F891B7C9D19FA51A46B3DFD5EC9EC0705B33605 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft Manifest number: BE Signing time: Tue 22 Sep 2026 00:06:41 +0000 Manifest this update: Tue 22 Sep 2026 00:01:41 +0000 Manifest next update: Wed 23 Sep 2026 01:32:41 +0000 Files and hashes: 1: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: YXjtjwoesJUSGw40nC73us7OdL7eSn74JJVfMRae8cI=) 2: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl (hash: DmIbeggHhVXKm4aDIzPkT2EDYlqxs6p7Ir+nCBXkfOc=) 3: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: kq6A8cL9NTZnFPc2HUzKmlVXrKIf6u5lrw0WIGV14uo=) 4: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: lli6DgdKqwmEkLtB+BG1rU9nYBqGkyyXfGUHRRk2kyY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:89:1b:7c:9d:19:fa:51:a4:6b:3d:fd:5e:c9:ec:07:05:b3:36:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Validity Not Before: Sep 22 00:01:41 2026 GMT Not After : Sep 23 01:32:41 2026 GMT Subject: CN=5247880C985B1553249EBDDC57508233E7DB18A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cf:2b:28:cc:4f:14:e5:21:6a:6f:26:5a:1e: 94:3f:4c:4e:5b:11:ab:64:ad:f7:00:12:25:39:2b: 82:62:ce:ad:ec:4b:d0:a7:2e:69:bc:d3:e1:9a:9a: d9:60:f4:8b:92:d6:79:a2:5c:04:05:99:b6:c9:2e: e5:28:19:f2:96:c4:d5:1f:7d:4b:7c:44:0a:60:81: 19:1f:a2:d7:36:af:2d:1b:a4:82:03:49:c4:a0:86: dc:71:23:a3:cb:43:58:6d:cb:e5:90:d2:af:00:3e: 92:35:bc:e7:a2:d0:f0:df:83:f6:01:c4:fa:21:ac: d9:5c:04:fb:10:3f:a3:17:0f:08:a9:1c:80:b0:a7: 05:66:22:bd:a4:72:60:dd:fb:10:81:d8:27:fe:63: 2e:84:68:0c:63:1a:84:39:90:77:c1:3f:d5:d4:5e: 27:e2:54:d3:f6:82:f2:e6:e4:63:e0:29:54:ad:39: 86:a5:fa:68:92:70:be:bd:94:36:cf:33:36:5d:af: b4:85:e4:c1:00:70:f1:c3:7d:72:cd:19:3c:f5:86: 1d:98:a5:e0:ce:05:8c:e5:c0:fc:4d:6f:2b:ff:62: d5:45:03:bf:3d:8c:45:c3:24:e9:d0:52:2c:9f:bb: ba:09:e8:4e:7c:f1:8f:3c:7e:62:d4:2f:f8:b3:21: 18:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:47:88:0C:98:5B:15:53:24:9E:BD:DC:57:50:82:33:E7:DB:18:A4 X509v3 Authority Key Identifier: keyid:8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8d:3d:8c:03:a1:ac:d0:2b:7b:97:96:b8:61:de:56:8b:f3: 26:25:e6:7e:5e:12:fb:95:c4:7f:5c:38:90:13:80:30:7f:44: 6a:05:0a:dd:eb:f6:f8:d0:a1:46:db:e9:88:c8:86:e9:c2:34: ec:30:05:c7:96:0a:f5:ed:56:13:88:f9:1c:7e:6d:8e:77:80: 4d:e4:79:5a:af:cb:b2:79:dc:6c:13:c1:dd:16:9e:d4:18:1c: 3c:76:63:88:29:b6:e8:76:f7:c1:69:e5:f3:14:e2:de:2f:86: 52:48:b9:48:42:49:9c:2f:81:cb:e3:9e:06:87:ab:b7:25:44: 0a:7e:d5:b6:5e:c7:e5:f3:3e:f0:f1:48:4b:38:87:5f:e0:82: b0:de:4a:95:fc:1f:25:36:10:6b:4a:0a:d4:cb:02:6b:01:a2: ff:b5:07:ea:49:a3:e4:d6:06:1f:7f:fd:b1:f5:3e:f8:f1:86: a6:fb:58:67:c0:f8:60:9e:9e:8a:d6:47:93:a6:2c:cd:b7:f8: 14:1a:2c:1a:9a:38:28:0c:bc:0d:e7:f9:d8:40:dd:cb:96:9a: c0:6e:5b:09:a1:e5:8f:b9:71:10:42:80:71:46:73:c7:b1:91: a4:dd:d5:69:0d:00:29:5a:1d:d7:8f:c7:ca:69:d3:da:ec:96: 1c:16:d4:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4kbfJ0Z+lGkaz39XsnsBwWzNgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhD RjIyNTVEODAeFw0yNjA5MjIwMDAxNDFaFw0yNjA5MjMwMTMyNDFaMDMxMTAvBgNV BAMTKDUyNDc4ODBDOTg1QjE1NTMyNDlFQkREQzU3NTA4MjMzRTdEQjE4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzysozE8U5SFqbyZaHpQ/TE5b EatkrfcAEiU5K4Jizq3sS9CnLmm80+Gamtlg9IuS1nmiXAQFmbbJLuUoGfKWxNUf fUt8RApggRkfotc2ry0bpIIDScSghtxxI6PLQ1hty+WQ0q8APpI1vOei0PDfg/YB xPohrNlcBPsQP6MXDwipHICwpwVmIr2kcmDd+xCB2Cf+Yy6EaAxjGoQ5kHfBP9XU XifiVNP2gvLm5GPgKVStOYal+miScL69lDbPMzZdr7SF5MEAcPHDfXLNGTz1hh2Y peDOBYzlwPxNbyv/YtVFA789jEXDJOnQUiyfu7oJ6E588Y88fmLUL/izIRhLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUkeIDJhbFVMknr3cV1CCM+fbGKQwHwYDVR0j BBgwFoAUjqjsmRJT8GZfQUnV/kLD+M8iVdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM5MDg3ODItNDUyMC00NWI0LTk5ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkx MjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhDRjIyNTVEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUE4RUM5OTEyNTNGMDY2NUY0MTQ5RDVGRTQyQzNGOENGMjI1 NUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMz RjhDRjIyNTVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+NPYwDoazQK3uXlrhh3laL8yYl5n5eEvuV xH9cOJATgDB/RGoFCt3r9vjQoUbb6YjIhunCNOwwBceWCvXtVhOI+Rx+bY53gE3k eVqvy7J53GwTwd0WntQYHDx2Y4gptuh298Fp5fMU4t4vhlJIuUhCSZwvgcvjngaH q7clRAp+1bZex+XzPvDxSEs4h1/ggrDeSpX8HyU2EGtKCtTLAmsBov+1B+pJo+TW Bh9//bH1Pvjxhqb7WGfA+GCenorWR5OmLM23+BQaLBqaOCgMvA3n+dhA3cuWmsBu Wwmh5Y+5cRBCgHFGc8exkaTd1WkNAClaHdePx8pp09rslhwW1PY= -----END CERTIFICATE-----Generated at Tue Sep 22 18:16:44 2026 by rpki-client