$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft File: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft (raw, json) Hash identifier: AuRX10kag1jfNs23DWr8mbF8Hsjs15xWbxO4T8d6emQ= Subject key identifier: 79:47:20:D9:7C:93:66:BE:60:6C:78:06:C1:DD:81:EA:B5:EE:6C:9B Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 Certificate issuer: /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Certificate serial: 4166EBB42F9BF2597EA446B721A33D75EA3B9729 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 09:12:52 +0000 Manifest this update: Tue 22 Sep 2026 09:07:52 +0000 Manifest next update: Wed 23 Sep 2026 09:15:52 +0000 Files and hashes: 1: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl (hash: 8+sk1CU9hiXOiJ1yR+9qitglk8wBkEyrjOQsWy9k9JY=) 2: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: ABGORh4lWt4WpXDSQFC2AfJLsKMZzwquOOsUkRU5KZw=) 3: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: 4e1qd57hMv+OkXmKRzkE4lf5ZpRQjvmNHhGL7MHMPZQ=) 4: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: OJi67+qUPfc5UtqMYAV/z7dfCJOkcVNQkK5jTXZKwTQ=) 5: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: MdXlPd40mbCtjh7iBEjKVSFA2qec8G7HYFT+dNSNEB4=) 6: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: QKq/ZGAbqKpUm7CoKZ+QT0ihf4BxzPyawZc6Ixihqm0=) 7: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: 0kmlYn3U9dmyxdriKnU2KVYL6nRWvq4iRJ06VUJD99I=) 8: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: p8zNdOn26qSx4BGXz+vWlqG1YbrlG0OsNQVGyFkCQnw=) 9: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: ZkDRUzZF2wR3zLgrv+xtI4hjJvx2gIYYCb4LSNtWkmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:66:eb:b4:2f:9b:f2:59:7e:a4:46:b7:21:a3:3d:75:ea:3b:97:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Validity Not Before: Sep 22 09:07:52 2026 GMT Not After : Sep 23 09:15:52 2026 GMT Subject: CN=794720D97C9366BE606C7806C1DD81EAB5EE6C9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:34:9b:cd:2f:79:91:e8:9f:64:22:05:1b: 78:19:78:c2:05:a6:55:24:98:f9:f2:32:d4:49:44: 82:2b:87:c9:7f:d5:b2:b7:46:bc:d4:10:3b:ff:b6: 1b:3a:c0:e7:0a:f4:12:67:a8:02:b2:48:bd:77:51: 6e:df:76:18:68:ab:33:c4:52:3e:f8:63:14:2c:9d: 05:1a:8a:7b:86:fd:6d:f0:21:c0:a3:76:aa:d6:c4: 45:ab:29:28:66:94:37:39:ac:34:f7:fd:0e:24:41: 37:f9:59:61:17:6c:88:e5:e2:67:f7:5e:c1:37:dc: c7:66:c5:a8:96:1e:2e:f3:e4:76:90:cb:16:2d:7c: 2a:be:89:5d:36:54:0e:92:5b:35:01:e4:1d:47:dd: 81:17:89:b4:2b:29:f8:ac:f8:44:66:e6:b7:1e:03: 37:0e:04:df:31:49:72:ed:28:ee:9e:72:d1:88:15: 88:75:e0:8d:7b:d8:18:88:9a:d4:c6:bd:96:28:21: f0:4c:cf:b3:1e:38:d5:5b:95:e1:6b:95:6a:e1:7d: 64:e0:b5:7c:1c:23:67:35:13:6c:77:dc:f5:f5:ac: c0:d2:7d:d9:ac:b4:b4:79:d9:c3:dd:ab:55:b5:00: 74:8d:6c:35:a0:7d:fd:23:9b:b3:22:3b:52:5e:30: 99:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:47:20:D9:7C:93:66:BE:60:6C:78:06:C1:DD:81:EA:B5:EE:6C:9B X509v3 Authority Key Identifier: keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:04:9d:21:6c:66:7d:3c:5e:2b:cf:3a:65:81:f5:07:f0:f9: 4b:ef:d7:89:7b:dc:b2:eb:3f:8a:fe:5f:38:97:f4:6b:f3:61: 27:05:50:1c:55:67:32:59:c3:c5:0d:66:54:c8:ce:a6:2e:5f: e4:8e:ab:82:9c:7d:d5:38:91:68:cc:42:3f:1f:de:6f:e8:89: c3:53:e2:ce:1f:ba:ee:86:bf:4c:80:4b:ca:a4:82:eb:90:9b: 45:72:5e:40:2d:cd:52:72:d6:d1:29:a4:46:25:af:21:27:9a: a8:e0:3f:49:8d:53:e1:26:a0:a5:ea:5a:c6:16:11:9e:26:1f: df:ee:e0:c9:8d:e2:91:2d:e6:e8:49:c9:c6:ac:11:bc:36:a2: c7:da:8f:a9:5f:36:37:ae:b7:94:1c:b8:2a:8f:fa:c9:16:2d: f4:b8:d7:37:af:57:44:9f:dd:18:c9:9b:10:22:bc:22:ac:c8: f1:4b:af:43:3f:b9:ca:4b:a7:df:b8:ae:62:a3:35:3e:13:a4: 01:0b:be:ce:cc:f5:3f:7f:d7:0e:5e:6c:b6:ae:52:b7:1d:94: 50:80:ff:74:cc:ea:be:0b:1b:1d:5c:d1:98:02:22:49:65:e8: 2f:e0:4b:82:31:31:53:54:67:48:c5:e0:82:86:f4:b3:b5:6a: 1d:cc:ce:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWbrtC+b8ll+pEa3IaM9deo7lykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhBMEQz QkFEMUY5NDAeFw0yNjA5MjIwOTA3NTJaFw0yNjA5MjMwOTE1NTJaMDMxMTAvBgNV BAMTKDc5NDcyMEQ5N0M5MzY2QkU2MDZDNzgwNkMxREQ4MUVBQjVFRTZDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWDzSbzS95keifZCIFG3gZeMIF plUkmPnyMtRJRIIrh8l/1bK3RrzUEDv/ths6wOcK9BJnqAKySL13UW7fdhhoqzPE Uj74YxQsnQUainuG/W3wIcCjdqrWxEWrKShmlDc5rDT3/Q4kQTf5WWEXbIjl4mf3 XsE33MdmxaiWHi7z5HaQyxYtfCq+iV02VA6SWzUB5B1H3YEXibQrKfis+ERm5rce AzcOBN8xSXLtKO6ectGIFYh14I172BiImtTGvZYoIfBMz7MeONVbleFrlWrhfWTg tXwcI2c1E2x33PX1rMDSfdmstLR52cPdq1W1AHSNbDWgff0jm7MiO1JeMJmTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeUcg2XyTZr5gbHgGwd2B6rXubJswHwYDVR0j BBgwFoAUgRBXDOVdhRL8vfAoGfuKDTutH5QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE0OTYwODItYTBhYS00ODM2LWI1ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENF NTVEODUxMkZDQkRGMDI4MTlGQjhBMEQzQkFEMUY5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTEwNTcwQ0U1NUQ4NTEyRkNCREYwMjgxOUZCOEEwRDNCQUQx Rjk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhB MEQzQkFEMUY5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMEnSFsZn08XivPOmWB9Qfw+Uvv14l73LLr P4r+XziX9GvzYScFUBxVZzJZw8UNZlTIzqYuX+SOq4KcfdU4kWjMQj8f3m/oicNT 4s4fuu6Gv0yAS8qkguuQm0VyXkAtzVJy1tEppEYlryEnmqjgP0mNU+EmoKXqWsYW EZ4mH9/u4MmN4pEt5uhJycasEbw2osfaj6lfNjeut5QcuCqP+skWLfS41zevV0Sf 3RjJmxAivCKsyPFLr0M/ucpLp9+4rmKjNT4TpAELvs7M9T9/1w5ebLauUrcdlFCA /3TM6r4LGx1c0ZgCIkll6C/gS4IxMVNUZ0jF4IKG9LO1ah3Mzn4= -----END CERTIFICATE-----Generated at Tue Sep 22 15:05:13 2026 by rpki-client