$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft File: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft (raw, json) Hash identifier: gDU8s4nYWP0rwLO17Wg2//O7iIqY3JRgTcqZEcQc7Tc= Subject key identifier: FE:A4:8D:6D:64:5B:88:69:45:F6:A0:D4:C6:B4:CC:2B:85:3A:25:BA Authority key identifier: 80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 Certificate issuer: /CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Certificate serial: 7928EAA93AA6178A8D16C56D263559ECC8AE9A61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft Manifest number: BD Signing time: Mon 21 Sep 2026 03:30:49 +0000 Manifest this update: Mon 21 Sep 2026 03:25:49 +0000 Manifest next update: Tue 22 Sep 2026 04:22:49 +0000 Files and hashes: 1: AS139994.roa (hash: yvMW+tHCsBkuY1gG/yGlJ6JOSC3lCz//Xfli/4HGudE=) 2: AS17885.roa (hash: QDIkXwtnGbligvAEMFVpJlik2NMuLqD9yutNqqC9tvo=) 3: 8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl (hash: jh4hExzhsguU1ujJkJxGWYccX0ZlapQe2oMLBRExgGA=) 4: AS24203.roa (hash: elsc0fS7A3LxkWGHoyme7eZUKOvhFf04i/z5CF+hz8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:28:ea:a9:3a:a6:17:8a:8d:16:c5:6d:26:35:59:ec:c8:ae:9a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8076C56477B8FD54606E8F7BB95C1BCD953296A6 Validity Not Before: Sep 21 03:25:49 2026 GMT Not After : Sep 22 04:22:49 2026 GMT Subject: CN=FEA48D6D645B886945F6A0D4C6B4CC2B853A25BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7a:27:94:50:7f:81:f9:1b:b6:97:1c:86:30: 6e:75:82:38:32:76:41:2c:ad:9a:e8:9f:63:d8:9f: 67:3e:c9:9f:bc:bf:ff:5a:7a:9b:b9:45:cd:78:62: 6e:01:e4:f8:b3:36:94:a4:58:2f:88:a6:9d:f2:26: 17:ea:36:f9:4a:4d:e6:90:0d:1a:52:3b:57:7a:a5: ea:86:a4:46:db:a0:fa:02:91:85:ae:14:f8:67:ef: 84:8d:c0:3f:55:26:86:94:b7:f9:fa:8c:67:67:97: bc:10:0b:4d:94:3c:34:12:18:b9:08:a0:34:39:a2: 42:f7:18:5e:6e:dc:26:19:ae:35:0d:63:6e:89:7a: 90:73:d9:01:a7:d8:54:b0:38:62:46:d4:9c:cb:37: 1b:b3:0e:49:fa:68:f8:cc:7c:b5:09:a8:e3:bf:68: a0:26:1a:a8:e6:55:6e:b1:ff:94:71:89:6e:a6:64: 07:38:80:79:fe:86:9f:17:50:f1:2c:0d:83:2d:bc: 84:ba:30:1e:a9:c8:69:8c:c1:26:af:8b:15:22:5c: ba:0d:31:18:53:f5:54:4a:84:f3:3b:fc:0d:7f:61: cf:5e:43:8b:1f:04:47:46:bc:27:15:91:9a:d5:8c: 4f:d3:82:4b:b0:cf:32:8e:ee:97:b4:3e:ff:30:01: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A4:8D:6D:64:5B:88:69:45:F6:A0:D4:C6:B4:CC:2B:85:3A:25:BA X509v3 Authority Key Identifier: keyid:80:76:C5:64:77:B8:FD:54:60:6E:8F:7B:B9:5C:1B:CD:95:32:96:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/8076C56477B8FD54606E8F7BB95C1BCD953296A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:69:68:06:34:ac:5e:2c:d9:d6:b4:b1:8e:6a:a2:57:68:e2: dc:84:18:ac:da:c2:da:12:69:39:62:1c:01:ed:ea:1a:c1:8d: f8:d2:f5:c8:6f:8e:33:3b:b6:71:5a:7e:19:2c:05:57:4b:41: 60:db:e6:49:84:ed:9e:f4:5e:0c:05:73:20:8c:67:96:35:15: 2a:f5:c4:3d:44:b5:e7:5c:70:c0:16:10:ce:9e:90:bb:f3:c1: fc:8c:6e:5f:89:bd:a6:fa:3a:16:6f:ba:86:49:6b:54:44:4d: 93:bd:54:f9:ee:db:34:82:4e:fc:75:a6:be:73:3d:a4:30:13: 54:92:84:4b:f3:91:fd:1d:90:af:c8:98:fb:1a:0a:b6:8a:ab: 48:72:5a:c3:f7:e2:a7:a5:c4:0a:08:7e:f6:62:fd:40:d5:96: 84:d2:b1:ef:00:dc:3e:b6:ce:68:5d:08:9c:7d:88:d5:c6:e0: 70:89:60:eb:e6:db:09:ac:60:8e:d8:3d:37:13:6c:02:05:70: 8e:3a:75:d2:8b:37:e0:ee:77:3d:50:e5:e8:de:64:4f:dd:36: 95:bf:fe:a7:ef:ee:9c:2c:f0:de:d7:9d:2a:4e:0a:8a:6e:3e: 96:bf:a6:bb:fa:bd:f7:2a:94:d5:8f:b5:5e:13:09:68:97:82: e4:cb:b7:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSjqqTqmF4qNFsVtJjVZ7MiummEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5 NTMyOTZBNjAeFw0yNjA5MjEwMzI1NDlaFw0yNjA5MjIwNDIyNDlaMDMxMTAvBgNV BAMTKEZFQTQ4RDZENjQ1Qjg4Njk0NUY2QTBENEM2QjRDQzJCODUzQTI1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDueieUUH+B+Ru2lxyGMG51gjgy dkEsrZron2PYn2c+yZ+8v/9aepu5Rc14Ym4B5PizNpSkWC+Ipp3yJhfqNvlKTeaQ DRpSO1d6peqGpEbboPoCkYWuFPhn74SNwD9VJoaUt/n6jGdnl7wQC02UPDQSGLkI oDQ5okL3GF5u3CYZrjUNY26JepBz2QGn2FSwOGJG1JzLNxuzDkn6aPjMfLUJqOO/ aKAmGqjmVW6x/5RxiW6mZAc4gHn+hp8XUPEsDYMtvIS6MB6pyGmMwSavixUiXLoN MRhT9VRKhPM7/A1/Yc9eQ4sfBEdGvCcVkZrVjE/TgkuwzzKO7pe0Pv8wAe4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/qSNbWRbiGlF9qDUxrTMK4U6JbowHwYDVR0j BBgwFoAUgHbFZHe4/VRgbo97uVwbzZUylqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3 N0I4RkQ1NDYwNkU4RjdCQjk1QzFCQ0Q5NTMyOTZBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MDc2QzU2NDc3QjhGRDU0NjA2RThGN0JCOTVDMUJDRDk1MzI5 NkE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvODA3NkM1NjQ3N0I4RkQ1NDYwNkU4RjdCQjk1QzFC Q0Q5NTMyOTZBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5paAY0rF4s2da0sY5qoldo4tyEGKzawtoS aTliHAHt6hrBjfjS9chvjjM7tnFafhksBVdLQWDb5kmE7Z70XgwFcyCMZ5Y1FSr1 xD1EtedccMAWEM6ekLvzwfyMbl+Jvab6OhZvuoZJa1RETZO9VPnu2zSCTvx1pr5z PaQwE1SShEvzkf0dkK/ImPsaCraKq0hyWsP34qelxAoIfvZi/UDVloTSse8A3D62 zmhdCJx9iNXG4HCJYOvm2wmsYI7YPTcTbAIFcI46ddKLN+Dudz1Q5ejeZE/dNpW/ /qfv7pws8N7XnSpOCopuPpa/prv6vfcqlNWPtV4TCWiXguTLt1E= -----END CERTIFICATE-----Generated at Mon Sep 21 21:54:29 2026 by rpki-client