$ rpki-client -vvvf rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft File: 8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft (raw, json) Hash identifier: Q5Vn3kx4yk6r0yCmOMQCACRUB8cEmIJn51mX3bfnJuM= Subject key identifier: 22:69:78:0C:AE:CA:69:CF:A4:F3:FE:7C:B5:E3:19:B6:6C:38:99:55 Authority key identifier: 8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC Certificate issuer: /CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC Certificate serial: 78D4BE44A2D426218CE5F5C6A572B32FD86C1D3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft Manifest number: C8 Signing time: Mon 28 Sep 2026 07:09:04 +0000 Manifest this update: Mon 28 Sep 2026 07:04:04 +0000 Manifest next update: Tue 29 Sep 2026 09:15:04 +0000 Files and hashes: 1: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: fGKw2WFahFPpQMw21POO2xmihiDm+uI9kc4e8STtyBE=) 2: 8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl (hash: /d7MzQzc/Mj7dyk7jGwZZLzbwIG8Y3vCHXtoYcNr4vg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 09:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d4:be:44:a2:d4:26:21:8c:e5:f5:c6:a5:72:b3:2f:d8:6c:1d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC Validity Not Before: Sep 28 07:04:04 2026 GMT Not After : Sep 29 09:15:04 2026 GMT Subject: CN=2269780CAECA69CFA4F3FE7CB5E319B66C389955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:98:44:e6:24:5e:46:3c:b6:28:4f:80:43: 34:3e:9a:60:5d:d9:57:eb:87:66:20:36:1b:ec:79: ee:f2:c3:13:32:e6:10:a3:6c:b2:6d:a2:51:5c:f7: 75:42:9c:10:99:74:de:f2:9e:ce:ed:62:b7:da:7b: f4:36:a1:0b:07:a1:9e:0c:d8:e7:ca:3b:96:d2:a1: d5:28:01:a5:5a:eb:61:59:41:a8:44:00:be:f0:78: e7:ee:0a:72:90:f7:cb:c2:2b:aa:15:ce:51:38:f4: 3b:89:c5:b3:bb:9a:0f:06:0f:33:d9:23:05:89:60: 8b:0e:7b:25:63:75:4b:e1:05:65:49:24:1b:25:a7: ff:89:89:18:e9:d9:89:31:47:2a:6d:a7:5f:c4:9f: b9:ce:b0:86:bd:9e:0d:fa:81:9b:9f:27:cf:cd:61: 30:94:55:30:64:e8:1a:88:02:8a:04:5d:99:f3:75: 6b:7a:de:31:31:89:4f:86:1e:b1:0d:86:36:6b:17: ce:13:ef:dd:c7:26:fe:f0:8a:aa:95:b2:ce:53:8b: 61:67:85:37:89:00:29:a6:3b:c1:50:45:65:1e:50: 63:9f:f8:db:4d:15:24:40:9e:7a:3d:84:f9:d2:7b: 66:cd:7e:c9:9b:66:e6:83:ff:e1:f4:db:b0:36:fd: f0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:69:78:0C:AE:CA:69:CF:A4:F3:FE:7C:B5:E3:19:B6:6C:38:99:55 X509v3 Authority Key Identifier: keyid:8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f9:01:ef:81:90:3c:18:79:ed:19:e3:79:3a:b7:63:d1:7b:5b: 5a:a9:a7:73:f7:c3:94:25:67:b5:af:21:23:f7:5a:49:a1:ca: 1e:45:ef:df:5c:ec:14:45:6b:6e:15:52:d4:a5:fd:26:c6:a6: b9:21:79:b3:1a:db:4b:78:91:11:03:02:3e:3a:c6:ca:93:00: 2b:8e:00:30:06:21:8c:8f:15:13:9a:6c:47:64:84:c0:29:ff: 1d:05:18:9f:66:a1:13:23:5a:e3:07:4e:c1:55:b8:76:10:1a: 3d:5a:89:51:c8:27:7e:8b:d4:37:bf:3a:8c:8d:97:61:cd:df: 29:d5:cd:51:58:2b:07:4a:9f:66:e0:29:55:df:a3:3c:51:a4: 13:fd:5c:49:4d:5c:d2:d2:ad:fa:04:54:d7:54:16:eb:55:5f: 58:b5:48:c5:46:8a:7c:62:13:65:5f:73:e8:3c:28:0c:e9:06: 63:1c:89:80:d6:55:07:d1:97:58:cc:76:5f:47:11:75:54:1b: 67:9a:27:c4:d5:8f:a1:e6:b2:81:2c:9a:56:05:d9:b3:f0:a0: 79:c2:5e:bc:63:0e:fe:6b:d9:66:b4:f5:3f:b6:b7:9a:13:8c: e0:5c:ea:70:78:44:a0:c1:6f:c1:b8:02:ab:13:0f:7c:51:74: 70:51:1c:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNS+RKLUJiGM5fXGpXKzL9hsHT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUxMzEyNDVFMzhFODQ1QkUyQTIxOEY5OTI4RUFENTMw RkZGRkVBQzAeFw0yNjA5MjgwNzA0MDRaFw0yNjA5MjkwOTE1MDRaMDMxMTAvBgNV BAMTKDIyNjk3ODBDQUVDQTY5Q0ZBNEYzRkU3Q0I1RTMxOUI2NkMzODk5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiq5hE5iReRjy2KE+AQzQ+mmBd 2Vfrh2YgNhvsee7ywxMy5hCjbLJtolFc93VCnBCZdN7yns7tYrfae/Q2oQsHoZ4M 2OfKO5bSodUoAaVa62FZQahEAL7weOfuCnKQ98vCK6oVzlE49DuJxbO7mg8GDzPZ IwWJYIsOeyVjdUvhBWVJJBslp/+JiRjp2YkxRyptp1/En7nOsIa9ng36gZufJ8/N YTCUVTBk6BqIAooEXZnzdWt63jExiU+GHrENhjZrF84T793HJv7wiqqVss5Ti2Fn hTeJACmmO8FQRWUeUGOf+NtNFSRAnno9hPnSe2bNfsmbZuaD/+H027A2/fDJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIml4DK7Kac+k8/58teMZtmw4mVUwHwYDVR0j BBgwFoAUjhMSReOOhFviohj5ko6tUw///qwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjcyOTA3ZDMtYmUyNC00ZGE4LTk2YmItZjEyMjhmYzk5MjA1LzAvOEUxMzEyNDVF MzhFODQ1QkUyQTIxOEY5OTI4RUFENTMwRkZGRkVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTEzMTI0NUUzOEU4NDVCRTJBMjE4Rjk5MjhFQUQ1MzBGRkZG RUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2 YmItZjEyMjhmYzk5MjA1LzAvOEUxMzEyNDVFMzhFODQ1QkUyQTIxOEY5OTI4RUFE NTMwRkZGRkVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPkB74GQPBh57RnjeTq3Y9F7W1qpp3P3w5Ql Z7WvISP3Wkmhyh5F799c7BRFa24VUtSl/SbGprkhebMa20t4kREDAj46xsqTACuO ADAGIYyPFROabEdkhMAp/x0FGJ9moRMjWuMHTsFVuHYQGj1aiVHIJ36L1De/OoyN l2HN3ynVzVFYKwdKn2bgKVXfozxRpBP9XElNXNLSrfoEVNdUFutVX1i1SMVGinxi E2Vfc+g8KAzpBmMciYDWVQfRl1jMdl9HEXVUG2eaJ8TVj6HmsoEsmlYF2bPwoHnC XrxjDv5r2Wa09T+2t5oTjOBc6nB4RKDBb8G4AqsTD3xRdHBRHLc= -----END CERTIFICATE-----Generated at Mon Sep 28 19:52:44 2026 by rpki-client