$ rpki-client -vvvf rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft File: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft (raw, json) Hash identifier: SSAQrTugz8sDc17g6HbJVzl7V/JRJLTltLuETA2lrZs= Subject key identifier: 18:4F:3D:FC:53:ED:B0:B1:DD:DB:FB:33:B9:07:05:9B:1C:0B:55:96 Authority key identifier: C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 Certificate issuer: /CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Certificate serial: 04C8CCD5537B3C5D67342D66F85F503929767D7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft Manifest number: BF Signing time: Mon 21 Sep 2026 14:54:58 +0000 Manifest this update: Mon 21 Sep 2026 14:49:58 +0000 Manifest next update: Tue 22 Sep 2026 17:25:58 +0000 Files and hashes: 1: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: oRViKlwXLb62v1XHH/P9v9PE35BuLaTpbEgB9nVLGXo=) 2: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: 1Jb72gV9Cql494HOmw4p+CcUceiPzhX48HtoigKm8xc=) 3: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: pBKVlpjSQfisARzQp/uCxR6vxT0fT2aUvnTqNxA3JGc=) 4: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl (hash: X+kwysu8JxOQYDB/M/3d11G9eYuId8LKziRPAOSCfWw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c8:cc:d5:53:7b:3c:5d:67:34:2d:66:f8:5f:50:39:29:76:7d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Validity Not Before: Sep 21 14:49:58 2026 GMT Not After : Sep 22 17:25:58 2026 GMT Subject: CN=184F3DFC53EDB0B1DDDBFB33B907059B1C0B5596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:81:83:68:08:d4:f3:e7:17:e9:c5:d0:74: 15:7f:51:9a:84:1d:d1:ab:ad:41:4b:04:b4:d0:0b: 0a:77:0f:d8:c6:e0:44:4d:28:aa:09:bf:9c:6c:ef: 02:17:5f:f0:bd:95:2d:52:53:83:fc:61:2b:b5:20: 8b:3d:0d:b2:79:e7:e9:f0:db:f4:21:39:6b:a8:70: e5:7b:75:59:2a:5d:3c:08:9c:c0:c0:45:d7:f8:68: 85:9c:f6:3f:87:3f:9b:07:60:4d:d8:9e:b1:59:51: 46:85:07:1c:53:64:28:7b:21:d4:3a:0f:33:e3:7d: 78:c6:73:fe:fc:d4:7e:95:64:2b:03:25:e5:a3:40: 3f:27:a5:bf:88:82:ad:ff:ae:21:17:ed:4f:d8:9d: f9:2d:f9:90:59:a1:01:4c:ad:ba:5c:91:4b:b8:77: 3d:4c:62:7a:5f:bf:73:e8:9f:c0:b1:81:cf:cb:ef: 8b:aa:0e:65:eb:95:e8:1c:a2:0c:3e:6a:5d:02:fc: 1c:ba:e2:df:1d:ce:eb:41:3e:d0:70:f3:50:d0:49: 2c:2e:b5:cf:8d:f4:bd:78:e9:82:37:65:b7:37:d9: 9f:e3:0a:6e:c0:e4:b8:8f:5c:4c:9e:8e:e6:dd:5d: 6d:43:ef:ab:88:10:90:04:60:2b:8c:8e:f1:72:fa: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4F:3D:FC:53:ED:B0:B1:DD:DB:FB:33:B9:07:05:9B:1C:0B:55:96 X509v3 Authority Key Identifier: keyid:C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a3:a3:61:b1:6a:83:35:b1:a4:d7:25:52:a8:9c:2d:41:49: 21:39:28:24:5f:52:c1:15:f1:1e:a8:7b:c4:22:8e:4a:d6:8a: 1e:c3:05:88:45:c7:87:46:ab:13:fd:07:b0:bb:92:58:e0:35: 98:3c:a4:3c:10:55:04:c0:0c:a0:d7:7f:6c:43:03:5e:6e:73: 90:b2:88:7b:af:64:3b:27:50:9a:3b:57:9d:55:62:30:4c:38: 28:42:46:59:19:0e:9b:41:f2:74:bc:39:22:62:63:0f:da:60: 4a:5c:5f:47:df:4e:b1:09:30:5d:fd:e3:22:fd:17:4b:4e:4d: 5c:12:49:d7:b4:d9:00:61:b7:c1:31:5b:b5:fe:b8:bc:15:dd: 8a:32:20:8e:34:24:bb:a3:93:13:c2:a7:ec:57:e2:75:e3:c3: a8:80:ab:94:5d:61:bc:1f:15:53:8b:ae:7e:a4:4a:34:99:2c: b2:62:ec:42:67:b4:b3:18:18:40:f4:2d:9e:76:35:a6:d3:27: 7b:da:e2:91:28:9c:2f:e2:1b:64:c5:d3:87:11:31:8e:ac:f4: d7:36:6d:0c:e5:58:86:e6:6c:af:23:18:59:31:8e:3b:06:df: ad:0c:e6:a6:95:a4:69:ff:32:f4:fe:33:49:a3:0e:7b:db:65: e2:25:c0:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMjM1VN7PF1nNC1m+F9QOSl2fXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2NDdFREY1RUZERTk3MTIyOUY1RDc2ODE4QjM5NTdB QTZEOEExNDAeFw0yNjA5MjExNDQ5NThaFw0yNjA5MjIxNzI1NThaMDMxMTAvBgNV BAMTKDE4NEYzREZDNTNFREIwQjFERERCRkIzM0I5MDcwNTlCMUMwQjU1OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jYGDaAjU8+cX6cXQdBV/UZqE HdGrrUFLBLTQCwp3D9jG4ERNKKoJv5xs7wIXX/C9lS1SU4P8YSu1IIs9DbJ55+nw 2/QhOWuocOV7dVkqXTwInMDARdf4aIWc9j+HP5sHYE3YnrFZUUaFBxxTZCh7IdQ6 DzPjfXjGc/781H6VZCsDJeWjQD8npb+Igq3/riEX7U/Ynfkt+ZBZoQFMrbpckUu4 dz1MYnpfv3Pon8Cxgc/L74uqDmXrlegcogw+al0C/By64t8dzutBPtBw81DQSSwu tc+N9L146YI3Zbc32Z/jCm7A5LiPXEyejubdXW1D76uIEJAEYCuMjvFy+hrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGE89/FPtsLHd2/szuQcFmxwLVZYwHwYDVR0j BBgwFoAUyGR+31796XEin112gYs5V6ptihQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVkMzhiNDItYjdjMi00MmI2LWEyZmMtNjc1ZGEyNTRjNzc2LzAvQzg2NDdFREY1 RUZERTk3MTIyOUY1RDc2ODE4QjM5NTdBQTZEOEExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODY0N0VERjVFRkRFOTcxMjI5RjVENzY4MThCMzk1N0FBNkQ4 QTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzg2NDdFREY1RUZERTk3MTIyOUY1RDc2ODE4QjM5 NTdBQTZEOEExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6jo2GxaoM1saTXJVKonC1BSSE5KCRfUsEV 8R6oe8QijkrWih7DBYhFx4dGqxP9B7C7kljgNZg8pDwQVQTADKDXf2xDA15uc5Cy iHuvZDsnUJo7V51VYjBMOChCRlkZDptB8nS8OSJiYw/aYEpcX0ffTrEJMF394yL9 F0tOTVwSSde02QBht8ExW7X+uLwV3YoyII40JLujkxPCp+xX4nXjw6iAq5RdYbwf FVOLrn6kSjSZLLJi7EJntLMYGED0LZ52NabTJ3va4pEonC/iG2TF04cRMY6s9Nc2 bQzlWIbmbK8jGFkxjjsG360M5qaVpGn/MvT+M0mjDnvbZeIlwOg= -----END CERTIFICATE-----Generated at Tue Sep 22 10:47:25 2026 by rpki-client