$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft File: 8FFAA6656CAEB189705F03C7B4148624E4A80597.mft (raw, json) Hash identifier: hnTluOUhNpllqTeZMyVEH/KBjxcdak4MqE6cM2eLYnM= Subject key identifier: B8:C1:5E:AE:DC:62:BC:E1:1C:3C:25:5A:6B:F2:F9:7B:A5:57:B6:78 Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Certificate serial: 43FEC17C80F5C13E1C9D2F5A3FC302B4F9F0BBFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 10:49:34 +0000 Manifest this update: Wed 23 Sep 2026 10:44:34 +0000 Manifest next update: Thu 24 Sep 2026 13:12:34 +0000 Files and hashes: 1: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 5tE3feCM9vyNUB/qpwvXZKU/4/GsAVh0LYhHMntcLoo=) 2: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: j7IknYgKj7dl1bu8AJ/aQ/eLpW5VQAB5YDLHEEVUQxU=) 3: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: QgX53d3ZPmwqUeHqTZtdjccW/DQcVacKXuBLz3xuE+Q=) 4: 8FFAA6656CAEB189705F03C7B4148624E4A80597.crl (hash: EDjNkV9KT0b+3ny8i+qylHIhxdiMMgzppWRF+AkjsxE=) 5: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: 9g/ng/5n6hJoQNhHnUHUl6+xhhnGERFtgslQ205VyPU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fe:c1:7c:80:f5:c1:3e:1c:9d:2f:5a:3f:c3:02:b4:f9:f0:bb:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Validity Not Before: Sep 23 10:44:34 2026 GMT Not After : Sep 24 13:12:34 2026 GMT Subject: CN=B8C15EAEDC62BCE11C3C255A6BF2F97BA557B678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:79:32:53:e8:da:68:5c:34:ed:a2:65:b6: f5:21:61:4c:cd:4c:1b:85:70:67:86:c9:cc:8c:24: 9c:21:3c:ad:a3:1c:e8:62:e0:16:ba:33:a1:a5:f7: 5f:82:72:e1:f4:3e:69:7e:e4:27:fd:db:5a:22:74: 66:56:c1:4f:15:b4:17:89:25:50:14:4b:8a:25:b6: 39:31:3a:67:00:30:69:66:e7:d3:11:bd:2e:2a:64: 85:1e:74:2d:83:94:6b:55:a6:19:dd:05:e5:03:08: 07:09:47:60:dc:08:ca:10:4e:f3:fc:9f:e4:8a:0b: a7:96:d3:ec:b7:f6:60:03:20:52:b6:43:74:59:44: ba:82:14:63:3d:4d:b3:b7:9e:ca:a7:20:e4:9f:94: 1a:8e:6e:0b:54:f8:1e:71:a3:7f:79:63:f0:a9:93: db:eb:c4:b9:8f:a2:30:50:49:da:a2:61:49:73:b1: fe:4d:ca:95:2e:56:a6:b9:1c:b5:ae:a7:82:c9:f6: 12:9c:92:c8:1b:c1:26:29:de:45:33:cd:8c:11:5f: 1b:44:6d:fb:8e:22:c5:22:93:c2:fb:d3:18:ea:ca: e5:9c:44:7e:90:54:34:78:91:a4:b8:6a:81:0b:32: a6:1e:00:1b:dc:99:0a:37:59:4a:9f:b2:7c:1d:fe: 1d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C1:5E:AE:DC:62:BC:E1:1C:3C:25:5A:6B:F2:F9:7B:A5:57:B6:78 X509v3 Authority Key Identifier: keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ca:9d:bb:d4:e7:d7:2e:b8:37:d4:24:23:d5:5b:4c:4b:24: d6:98:5c:a6:61:d3:97:a0:1b:2c:cb:e0:35:f6:c1:ea:6a:92: cc:fc:b2:a5:b7:a9:f9:f3:46:0e:b9:0a:af:dc:69:ec:3f:ba: eb:8c:32:17:1a:40:8e:5b:c9:2c:61:78:6c:4d:78:df:4f:ae: 0c:4d:aa:ea:26:d5:89:44:fe:37:1b:1a:07:ff:00:4f:96:0e: 4f:b2:03:2f:15:e7:af:dc:4e:9a:54:36:0a:06:d0:fd:18:0d: aa:28:b8:6d:75:85:9e:2f:1e:dd:fe:f7:69:c4:89:f4:29:e6: d3:be:be:09:5a:8c:66:5e:bd:25:43:fa:0e:b3:14:b6:32:fd: 75:a1:3d:fb:be:81:3b:6e:9d:02:85:0d:4a:cc:9a:a2:8b:c8: 0c:86:96:ea:1c:d7:d3:54:b6:41:6d:02:fb:30:aa:12:cc:a1: dd:a6:dd:9c:9e:12:a4:2f:6b:92:20:f1:b4:dc:e3:ff:9d:76: be:58:98:56:82:35:56:a9:16:d8:34:0e:df:9c:3b:bf:99:5e: 86:7a:55:51:d3:7c:36:c9:e2:bf:df:b7:01:de:14:fe:85:7a: 40:b6:44:b3:46:90:ed:0e:03:0e:6b:b4:d2:ec:16:cb:1b:f0: 64:23:f2:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/7BfID1wT4cnS9aP8MCtPnwu/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRF NEE4MDU5NzAeFw0yNjA5MjMxMDQ0MzRaFw0yNjA5MjQxMzEyMzRaMDMxMTAvBgNV BAMTKEI4QzE1RUFFREM2MkJDRTExQzNDMjU1QTZCRjJGOTdCQTU1N0I2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHGnkyU+jaaFw07aJltvUhYUzN TBuFcGeGycyMJJwhPK2jHOhi4Ba6M6Gl91+CcuH0Pml+5Cf921oidGZWwU8VtBeJ JVAUS4oltjkxOmcAMGlm59MRvS4qZIUedC2DlGtVphndBeUDCAcJR2DcCMoQTvP8 n+SKC6eW0+y39mADIFK2Q3RZRLqCFGM9TbO3nsqnIOSflBqObgtU+B5xo395Y/Cp k9vrxLmPojBQSdqiYUlzsf5NypUuVqa5HLWup4LJ9hKcksgbwSYp3kUzzYwRXxtE bfuOIsUik8L70xjqyuWcRH6QVDR4kaS4aoELMqYeABvcmQo3WUqfsnwd/h1lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuMFertxivOEcPCVaa/L5e6VXtngwHwYDVR0j BBgwFoAUj/qmZWyusYlwXwPHtBSGJOSoBZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI4ODBkZWUtN2FhMi00YmU0LWJmMzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2 Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRFNEE4MDU5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBQTY2NTZDQUVCMTg5NzA1RjAzQzdCNDE0ODYyNEU0QTgw NTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2 MjRFNEE4MDU5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3KnbvU59cuuDfUJCPVW0xLJNaYXKZh05eg GyzL4DX2wepqksz8sqW3qfnzRg65Cq/caew/uuuMMhcaQI5bySxheGxNeN9PrgxN quom1YlE/jcbGgf/AE+WDk+yAy8V56/cTppUNgoG0P0YDaoouG11hZ4vHt3+92nE ifQp5tO+vglajGZevSVD+g6zFLYy/XWhPfu+gTtunQKFDUrMmqKLyAyGluoc19NU tkFtAvswqhLMod2m3ZyeEqQva5Ig8bTc4/+ddr5YmFaCNVapFtg0Dt+cO7+ZXoZ6 VVHTfDbJ4r/ftwHeFP6FekC2RLNGkO0OAw5rtNLsFssb8GQj8qQ= -----END CERTIFICATE-----Generated at Thu Sep 24 01:42:52 2026 by rpki-client