$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft File: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft (raw, json) Hash identifier: GKdcq2J0Bd3Q1hCT8pjEM+sW8/pREzCgjDW0H+Ho/Ig= Subject key identifier: EA:87:B0:5C:14:58:46:D4:6C:BE:B3:C8:AA:EB:97:82:9D:8C:2E:CF Authority key identifier: 88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 Certificate issuer: /CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Certificate serial: 67EC94C0202CBFD99B22885B44927A3F288DE419 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft Manifest number: C1 Signing time: Mon 21 Sep 2026 17:48:34 +0000 Manifest this update: Mon 21 Sep 2026 17:43:34 +0000 Manifest next update: Tue 22 Sep 2026 19:46:34 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 0+nHSjmEBtHrdpW5swBsy/CGgBdToecJRrJ4YRQ1Ieo=) 2: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: YJRCBupflF/I8POF8sMQ3AXgFo1nrT6mZHr4XrUFzvU=) 3: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: l0DIBrvHKOmdXYA8EMn7r3ept4hzvTyfATy5T2AkXgc=) 4: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl (hash: N8YG9WPpYVrt4SkCc94jXDZFVYn1h4ZcsbGa4QdCeAk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ec:94:c0:20:2c:bf:d9:9b:22:88:5b:44:92:7a:3f:28:8d:e4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Validity Not Before: Sep 21 17:43:34 2026 GMT Not After : Sep 22 19:46:34 2026 GMT Subject: CN=EA87B05C145846D46CBEB3C8AAEB97829D8C2ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:71:90:52:fc:86:ae:b4:b6:01:ce:96:f7:a9: 7f:bb:55:81:ee:4a:d0:0d:12:fb:06:84:60:cd:72: 6e:56:b3:aa:aa:41:21:c7:8d:a0:27:f7:b1:55:4a: 95:85:62:0a:82:0e:f7:dc:b4:00:55:ad:eb:bf:76: d9:2d:21:1c:62:d6:7d:ec:ec:3d:f6:13:df:7f:e6: 42:c8:5b:98:32:2d:f2:fa:0b:50:92:ad:bb:8e:9d: 21:bb:85:2e:82:82:45:67:a0:ef:74:89:49:7b:cf: 2a:f6:33:54:a5:f9:1f:6a:95:c5:67:a4:3c:14:67: 6a:aa:7f:bf:bb:6d:c6:5d:1b:01:c9:52:f2:89:77: 4f:4c:71:de:af:ef:06:f9:8e:47:21:28:b8:26:0a: ec:14:64:19:71:47:6b:90:4a:68:29:af:88:49:a2: 49:97:cd:6b:ff:69:a9:2b:7d:42:60:10:09:d9:aa: 0b:9b:e0:65:d7:78:0e:a4:47:95:36:b4:a5:64:90: 27:0a:ed:68:f5:e7:4c:de:e2:ec:7d:41:dc:dc:32: 07:77:8c:2e:1b:c8:d2:56:40:be:00:9c:43:35:9b: ea:53:34:8f:6e:68:e2:21:3c:f7:eb:b0:df:d7:db: 72:f2:70:13:e7:da:3e:3e:02:07:3b:d1:06:d2:bf: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:87:B0:5C:14:58:46:D4:6C:BE:B3:C8:AA:EB:97:82:9D:8C:2E:CF X509v3 Authority Key Identifier: keyid:88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:68:4e:5b:3e:19:4a:2d:cc:e9:78:3e:82:f2:bb:9d:3e:e7: fe:52:dd:8c:6c:00:63:9d:c8:7a:5f:fd:7d:7d:02:24:29:43: b8:0e:fe:39:d7:fc:a3:6b:6c:25:69:f9:3b:8b:8a:01:b8:de: cc:1f:57:fa:9c:ba:92:5a:73:52:95:d6:29:0b:11:ff:ab:2d: fd:65:f0:d6:6f:45:a3:8e:57:52:5b:5f:e0:e6:0d:7a:b0:e9: 52:83:4d:25:f5:d4:9b:77:cc:88:48:df:1c:68:2c:cb:4e:08: 29:4f:4f:a9:23:3c:ad:1b:a3:40:46:01:48:b8:2b:1a:55:19: 09:94:83:88:3f:98:64:4c:05:06:72:f2:a8:38:f6:d7:7b:24: ab:9d:57:6f:22:cd:cc:0f:e5:a0:35:49:62:c9:13:28:05:a0: 2b:99:35:75:7c:41:59:3e:e0:f0:7d:2c:53:7e:0a:01:25:d7: d0:21:39:2a:5e:1c:b4:88:7f:2b:2c:b3:12:ec:06:b2:97:ab: 20:a4:54:7d:eb:4e:fc:0a:03:cf:0e:5f:58:1a:be:2b:cd:79: 19:e4:b5:5d:f1:ff:0e:6f:f3:99:bf:62:99:4a:3b:d4:a2:cc: bd:cb:04:0e:79:10:78:66:59:79:f8:da:5f:13:e9:84:8e:95: 10:1f:5c:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+yUwCAsv9mbIohbRJJ6PyiN5BkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1 QzRGMjk4NTAeFw0yNjA5MjExNzQzMzRaFw0yNjA5MjIxOTQ2MzRaMDMxMTAvBgNV BAMTKEVBODdCMDVDMTQ1ODQ2RDQ2Q0JFQjNDOEFBRUI5NzgyOUQ4QzJFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcZBS/IautLYBzpb3qX+7VYHu StANEvsGhGDNcm5Ws6qqQSHHjaAn97FVSpWFYgqCDvfctABVreu/dtktIRxi1n3s 7D32E99/5kLIW5gyLfL6C1CSrbuOnSG7hS6CgkVnoO90iUl7zyr2M1Sl+R9qlcVn pDwUZ2qqf7+7bcZdGwHJUvKJd09Mcd6v7wb5jkchKLgmCuwUZBlxR2uQSmgpr4hJ okmXzWv/aakrfUJgEAnZqgub4GXXeA6kR5U2tKVkkCcK7Wj150ze4ux9QdzcMgd3 jC4byNJWQL4AnEM1m+pTNI9uaOIhPPfrsN/X23LycBPn2j4+Agc70QbSv0I3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6oewXBRYRtRsvrPIquuXgp2MLs8wHwYDVR0j BBgwFoAUiGPUPCzTbp3ijH5V8YkcwlxPKYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVlOTQwMTQtODdmYS00YmMyLWIxYzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0My Q0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1QzRGMjk4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODYzRDQzQzJDRDM2RTlERTI4QzdFNTVGMTg5MUNDMjVDNEYy OTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFD QzI1QzRGMjk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhoTls+GUotzOl4PoLyu50+5/5S3YxsAGOd yHpf/X19AiQpQ7gO/jnX/KNrbCVp+TuLigG43swfV/qcupJac1KV1ikLEf+rLf1l 8NZvRaOOV1JbX+DmDXqw6VKDTSX11Jt3zIhI3xxoLMtOCClPT6kjPK0bo0BGAUi4 KxpVGQmUg4g/mGRMBQZy8qg49td7JKudV28izcwP5aA1SWLJEygFoCuZNXV8QVk+ 4PB9LFN+CgEl19AhOSpeHLSIfysssxLsBrKXqyCkVH3rTvwKA88OX1gavivNeRnk tV3x/w5v85m/YplKO9SizL3LBA55EHhmWXn42l8T6YSOlRAfXMM= -----END CERTIFICATE-----Generated at Mon Sep 21 19:44:55 2026 by rpki-client