$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft File: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft (raw, json) Hash identifier: uoDiFeV8/h0FagDXU5c2bRU/FKM6AxDi/rv9fNOJuKc= Subject key identifier: 22:E2:62:43:08:5D:9F:5C:C1:B3:32:11:D2:87:A0:07:D9:E9:6D:17 Authority key identifier: 8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D Certificate issuer: /CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Certificate serial: 3AB06427D6E77A040B9BF15AFE2AD6BDD1787ABD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft Manifest number: BF Signing time: Tue 22 Sep 2026 04:47:22 +0000 Manifest this update: Tue 22 Sep 2026 04:42:22 +0000 Manifest next update: Wed 23 Sep 2026 05:37:22 +0000 Files and hashes: 1: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl (hash: v5d+RwL2q63iM98+D7P8782t/BQ/1A9hMjskt3ch0Wk=) 2: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: NY8uhqteE/p2Oynj2juQDQqNJOeFUT9zptMVOdrA1BE=) 3: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: 7H5ayDey2sF8s3x7vuViq2lu5YPxfK0ha8SKey7N61Q=) 4: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: LvhMo9Ji9pG6mVQPdJp//+4N2gdaqqVMar2Fp2RKr1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b0:64:27:d6:e7:7a:04:0b:9b:f1:5a:fe:2a:d6:bd:d1:78:7a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Validity Not Before: Sep 22 04:42:22 2026 GMT Not After : Sep 23 05:37:22 2026 GMT Subject: CN=22E26243085D9F5CC1B33211D287A007D9E96D17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:5d:43:a0:15:ac:86:c2:13:3b:01:3e:60: 45:9a:a5:05:9e:09:db:91:a9:fc:c8:5f:48:c7:cc: 58:63:8b:53:28:35:42:d2:84:6c:61:da:e3:24:92: fb:7e:bd:02:79:02:05:a9:2b:75:73:35:01:7f:5a: 42:05:a8:af:16:1d:07:16:36:8e:82:10:90:41:1c: bb:fd:ac:1a:31:61:f3:13:12:3f:58:65:de:1a:94: 73:82:bf:96:6d:12:a6:20:7a:ba:52:e4:85:22:e6: 61:77:a9:46:1c:1b:9e:ec:56:1b:88:c6:c6:af:23: 0d:0b:21:b3:63:5f:68:01:89:d7:28:cb:fc:82:f0: ab:8e:ec:83:88:63:19:06:5c:85:f4:08:1c:94:86: 4b:f7:23:d7:64:df:5c:ba:27:04:d0:36:bd:0c:6b: a1:35:7f:d5:32:fd:6e:13:f9:02:29:e1:26:16:2c: 8a:7a:be:a0:a2:c7:75:18:71:1c:2a:ad:f5:33:eb: b7:fd:c8:80:33:a3:ae:c2:e6:2d:fe:7e:44:1c:5a: db:ec:d9:7e:62:3a:ab:ae:da:2e:a5:f3:c5:c4:d9: 98:f9:6d:27:10:13:6a:81:6f:63:19:8c:7c:e8:18: a3:c4:8b:c1:93:a1:f8:eb:3f:ff:84:a4:45:cc:52: c2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E2:62:43:08:5D:9F:5C:C1:B3:32:11:D2:87:A0:07:D9:E9:6D:17 X509v3 Authority Key Identifier: keyid:8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b8:6c:65:bd:71:1c:2f:2b:13:8b:1e:78:94:c3:a5:5a:db: af:a9:fd:9c:3c:36:87:7c:93:eb:50:b5:fc:30:ba:3f:f6:7c: b0:91:a8:4d:b0:07:57:66:09:1a:59:a5:79:15:be:a1:37:af: ec:31:b3:8f:ba:23:5b:de:e0:4e:3a:c3:af:ed:72:ad:64:d4: 84:dc:1d:2b:4a:2d:22:51:18:af:e2:76:5e:11:94:7f:9f:12: 48:d0:ed:ff:a0:e9:a4:3b:3d:ae:d7:e9:1e:97:fa:67:aa:64: 71:9d:4b:53:1a:93:c6:9d:20:fe:c0:41:7a:7b:37:a1:84:f9: 8f:25:ef:61:75:ad:52:05:9b:cb:af:cd:d8:88:63:65:f1:48: 22:e2:2d:db:b8:4f:fc:b3:cf:fe:00:eb:7a:90:bd:01:c7:de: 58:54:b6:c0:53:8c:02:08:71:c8:e0:82:f7:21:e4:df:ee:84: 99:2f:e6:26:45:15:87:20:3d:8e:e9:c1:18:05:03:36:49:b6: 6b:e1:85:3b:60:8e:6f:4e:4f:ff:69:28:0d:72:f1:cb:86:95: da:85:b6:40:ca:0a:23:3d:e8:20:2f:d7:28:cd:e9:99:d9:0a: 2b:36:aa:84:23:b0:12:e2:4f:f3:ed:8b:60:7d:b0:b6:e6:fb: 23:5b:d9:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrBkJ9bnegQLm/Fa/irWvdF4er0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3 NkY1QkIyRDAeFw0yNjA5MjIwNDQyMjJaFw0yNjA5MjMwNTM3MjJaMDMxMTAvBgNV BAMTKDIyRTI2MjQzMDg1RDlGNUNDMUIzMzIxMUQyODdBMDA3RDlFOTZEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaz11DoBWshsITOwE+YEWapQWe CduRqfzIX0jHzFhji1MoNULShGxh2uMkkvt+vQJ5AgWpK3VzNQF/WkIFqK8WHQcW No6CEJBBHLv9rBoxYfMTEj9YZd4alHOCv5ZtEqYgerpS5IUi5mF3qUYcG57sVhuI xsavIw0LIbNjX2gBidcoy/yC8KuO7IOIYxkGXIX0CByUhkv3I9dk31y6JwTQNr0M a6E1f9Uy/W4T+QIp4SYWLIp6vqCix3UYcRwqrfUz67f9yIAzo67C5i3+fkQcWtvs 2X5iOquu2i6l88XE2Zj5bScQE2qBb2MZjHzoGKPEi8GTofjrP/+EpEXMUsJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIuJiQwhdn1zBszIR0oegB9npbRcwHwYDVR0j BBgwFoAUi+JoRlzjv16w3zYT/r3Twnb1uy0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmZDlhNTgtYTkwNi00MDI5LTkyZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1 Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3NkY1QkIyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkUyNjg0NjVDRTNCRjVFQjBERjM2MTNGRUJERDNDMjc2RjVC QjJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQz QzI3NkY1QkIyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEy4bGW9cRwvKxOLHniUw6Va26+p/Zw8Nod8 k+tQtfwwuj/2fLCRqE2wB1dmCRpZpXkVvqE3r+wxs4+6I1ve4E46w6/tcq1k1ITc HStKLSJRGK/idl4RlH+fEkjQ7f+g6aQ7Pa7X6R6X+meqZHGdS1Mak8adIP7AQXp7 N6GE+Y8l72F1rVIFm8uvzdiIY2XxSCLiLdu4T/yzz/4A63qQvQHH3lhUtsBTjAII ccjggvch5N/uhJkv5iZFFYcgPY7pwRgFAzZJtmvhhTtgjm9OT/9pKA1y8cuGldqF tkDKCiM96CAv1yjN6ZnZCis2qoQjsBLiT/Pti2B9sLbm+yNb2Y0= -----END CERTIFICATE-----Generated at Tue Sep 22 13:19:29 2026 by rpki-client