$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft File: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft (raw, json) Hash identifier: iK1Fqf9bcgU3/77cy8iVnlz09T3yY/WehCvc29pyWYU= Subject key identifier: ED:3D:8D:14:68:A5:01:B6:89:DC:0B:E4:74:2B:64:5C:3B:C0:DF:9B Authority key identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E Certificate issuer: /CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Certificate serial: 3A0B7C2A00F8F16FDC5CF72206BDB2A463A4C589 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft Manifest number: BE Signing time: Sun 20 Sep 2026 15:31:13 +0000 Manifest this update: Sun 20 Sep 2026 15:26:13 +0000 Manifest next update: Mon 21 Sep 2026 18:44:13 +0000 Files and hashes: 1: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: tUv0W4gMiS1vhejBIsoiDaLo6/xoWf91YpxI7rtj5ao=) 2: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: Y4fdfPd8CGZXfJi8zT1Xs61mqy3uc8h/5nYm+/f9TOQ=) 3: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: j+lgNwhd7sTPpzvBZDbz7MtwJzwdtzVrzUiO5CTg4C0=) 4: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl (hash: n7rTVCG6iGwHXq5To02TkecW044ioJ6kFI4LYGTaSaQ=) 5: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: VvKS0B4ZLReXOTrvcAhygsCJwutg9GJIYxL7J1Tdiis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0b:7c:2a:00:f8:f1:6f:dc:5c:f7:22:06:bd:b2:a4:63:a4:c5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Validity Not Before: Sep 20 15:26:13 2026 GMT Not After : Sep 21 18:44:13 2026 GMT Subject: CN=ED3D8D1468A501B689DC0BE4742B645C3BC0DF9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:90:5c:27:53:d3:9c:ba:35:f8:91:94:d0:8f: 0d:2c:b7:ee:f6:db:11:e9:6c:e3:86:1e:91:88:4b: 0b:02:ae:2e:7d:f6:b2:c8:45:d4:f6:6a:93:ea:19: e7:32:63:26:ec:c9:c7:a6:7c:11:d2:aa:ef:28:c1: 87:ed:fe:bc:56:7d:50:e3:2f:78:0d:31:e0:d8:a0: 62:ee:8f:13:3c:e7:3d:84:b8:9a:d8:bb:86:79:bf: 41:47:e1:94:93:23:d8:d9:03:e4:4e:64:23:0f:b3: 1e:10:f1:a3:c7:84:18:fc:3d:11:22:65:d1:02:17: 60:f9:6d:f7:40:bc:4b:8f:29:ba:f6:89:3e:fb:7d: a4:26:8e:37:68:4c:5c:6e:6d:ca:5c:e7:7e:16:db: b0:59:57:39:fb:29:46:12:52:d6:ae:54:b9:48:a6: dc:80:31:8c:96:d3:ac:ef:18:08:93:d6:0b:06:58: 16:9a:ac:57:7c:f1:f4:fd:8f:65:12:27:93:59:4a: 4c:57:89:ac:a1:3a:05:8f:93:61:36:05:a7:83:b0: b5:3c:32:e2:f9:c0:b1:1e:71:d7:5b:1d:89:7a:16: f4:c1:b4:ae:9c:f7:ac:14:b3:62:28:a8:d5:ab:60: 50:92:eb:48:d9:40:dd:05:ad:87:ea:a4:10:b8:91: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3D:8D:14:68:A5:01:B6:89:DC:0B:E4:74:2B:64:5C:3B:C0:DF:9B X509v3 Authority Key Identifier: keyid:8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:83:9d:69:7a:5b:c4:79:59:47:59:33:e8:56:00:4b:07:1d: 92:83:8e:5c:bd:2d:aa:0d:18:0e:5d:91:f1:19:48:43:19:63: 21:f7:34:52:9d:36:1c:77:43:eb:ab:ec:fb:93:57:82:1a:24: da:d0:0c:33:d7:86:34:ab:f6:10:22:22:c5:c5:62:52:89:77: 05:74:02:8e:69:81:de:f4:1f:ce:ab:a8:e5:76:b0:cd:06:9c: b3:2d:ee:b9:ab:57:f7:46:9c:89:5b:4a:fe:9e:fa:09:03:ec: bd:d1:0d:85:41:3c:96:fc:07:c6:f7:50:90:75:c8:98:f5:bb: 29:01:3a:b7:dc:a3:00:eb:5f:e0:14:b4:9f:0f:ee:03:80:40: 7d:f4:3c:85:72:ca:a0:6e:2d:06:1a:50:a0:4a:7e:74:69:4d: e4:1c:2b:22:84:b8:62:96:75:d6:59:ef:46:7e:ea:5d:36:3e: fc:66:7d:41:5b:f9:48:9a:4c:ee:fa:ec:e9:7c:a3:27:bb:f5: c9:04:43:5b:f6:5e:76:75:bd:3c:51:b2:1e:3f:4b:03:fc:ee: 7e:53:08:72:e3:54:dd:30:b3:fb:0b:52:a5:0a:a8:8c:1e:ed: 0d:e8:4f:bf:c3:10:0a:3c:99:c2:db:59:45:21:45:43:6a:08: 16:e2:90:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOgt8KgD48W/cXPciBr2ypGOkxYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEy OUJBMUQ4RTAeFw0yNjA5MjAxNTI2MTNaFw0yNjA5MjExODQ0MTNaMDMxMTAvBgNV BAMTKEVEM0Q4RDE0NjhBNTAxQjY4OURDMEJFNDc0MkI2NDVDM0JDMERGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkFwnU9OcujX4kZTQjw0st+72 2xHpbOOGHpGISwsCri599rLIRdT2apPqGecyYybsycemfBHSqu8owYft/rxWfVDj L3gNMeDYoGLujxM85z2EuJrYu4Z5v0FH4ZSTI9jZA+ROZCMPsx4Q8aPHhBj8PREi ZdECF2D5bfdAvEuPKbr2iT77faQmjjdoTFxubcpc534W27BZVzn7KUYSUtauVLlI ptyAMYyW06zvGAiT1gsGWBaarFd88fT9j2USJ5NZSkxXiayhOgWPk2E2BaeDsLU8 MuL5wLEecddbHYl6FvTBtK6c96wUs2IoqNWrYFCS60jZQN0FrYfqpBC4kSqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7T2NFGilAbaJ3AvkdCtkXDvA35swHwYDVR0j BBgwFoAUjNb8AlX9HtF/2Cz6i2bSSim6HY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZlNjNjZDItZmIzYy00MWIyLWI5NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1 NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEyOUJBMUQ4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q2RkMwMjU1RkQxRUQxN0ZEODJDRkE4QjY2RDI0QTI5QkEx RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQy NEEyOUJBMUQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByDnWl6W8R5WUdZM+hWAEsHHZKDjly9LaoN GA5dkfEZSEMZYyH3NFKdNhx3Q+ur7PuTV4IaJNrQDDPXhjSr9hAiIsXFYlKJdwV0 Ao5pgd70H86rqOV2sM0GnLMt7rmrV/dGnIlbSv6e+gkD7L3RDYVBPJb8B8b3UJB1 yJj1uykBOrfcowDrX+AUtJ8P7gOAQH30PIVyyqBuLQYaUKBKfnRpTeQcKyKEuGKW ddZZ70Z+6l02PvxmfUFb+UiaTO767Ol8oye79ckEQ1v2XnZ1vTxRsh4/SwP87n5T CHLjVN0ws/sLUqUKqIwe7Q3oT7/DEAo8mcLbWUUhRUNqCBbikKU= -----END CERTIFICATE-----Generated at Mon Sep 21 06:07:09 2026 by rpki-client