$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft File: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft (raw, json) Hash identifier: AokwDBnmNKiDjT1AvFLhJ7r3YntsA+FAsq0UULoy8AA= Subject key identifier: DE:A9:42:89:E3:2B:D3:36:23:0E:47:32:A4:38:1C:DA:38:A5:B0:FF Authority key identifier: 8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C Certificate issuer: /CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Certificate serial: 764C1884B4CE22818EA03E318A0B1CF97B082338 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 01:42:26 +0000 Manifest this update: Sat 26 Sep 2026 01:37:26 +0000 Manifest next update: Sun 27 Sep 2026 05:02:26 +0000 Files and hashes: 1: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl (hash: VUj1Gw6v2O8D+LXcTXIWB+E3+M9KamdKLh6hMoDcwq0=) 2: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: kAF9XX+k/l/rK1GEr+bjFHX1YeYovpaBVZcUfCaqwVQ=) 3: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: gHaL9xm6upsCMiwuTIzMiljzjIKdP3tM2s5bdfg68uM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 05:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4c:18:84:b4:ce:22:81:8e:a0:3e:31:8a:0b:1c:f9:7b:08:23:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Validity Not Before: Sep 26 01:37:26 2026 GMT Not After : Sep 27 05:02:26 2026 GMT Subject: CN=DEA94289E32BD336230E4732A4381CDA38A5B0FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:87:0b:5b:c1:3f:b3:1b:77:cb:5d:e0:70: 61:f8:03:db:d4:1d:a7:74:2d:e3:c8:b4:92:e8:f7: 2a:10:5d:d7:b3:9a:d2:cc:d6:f4:62:7a:24:0b:2e: 4c:36:52:5e:14:44:23:d1:74:c0:c4:d5:87:40:12: ba:db:b5:bf:15:23:51:f8:34:0e:42:b2:e6:dd:f4: 84:58:cf:73:bd:dd:fb:b6:e1:ea:fa:5c:99:24:58: 92:6d:33:0a:a0:90:5d:d0:e6:e2:7b:ae:17:8e:f2: 24:00:e9:58:8e:8c:67:f0:cc:40:76:0c:d2:fc:9c: 15:02:61:4e:7a:d3:e8:18:45:00:2f:b5:25:58:e4: f2:27:12:e0:b7:99:60:8a:25:e9:e8:6f:16:47:28: 81:7d:27:fb:93:24:84:69:7b:88:4a:9c:22:d1:0c: 32:16:2a:85:81:cf:0a:56:fd:66:2b:cd:96:78:9e: 74:96:67:6f:be:d7:24:84:d2:c2:0f:57:20:08:1f: 63:88:1a:bd:b7:15:f9:fc:c5:f8:eb:5c:c9:11:c6: 86:4e:e1:f9:53:e8:8f:36:8b:3b:d6:ee:f6:aa:d0: ab:ad:1d:1b:d1:a3:46:db:e7:74:95:74:a3:d6:b7: f3:49:74:59:fe:97:69:72:a0:bc:10:e1:ae:02:a5: 47:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A9:42:89:E3:2B:D3:36:23:0E:47:32:A4:38:1C:DA:38:A5:B0:FF X509v3 Authority Key Identifier: keyid:8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8b:4f:69:31:8c:8d:ee:79:28:e3:1e:5d:ff:95:31:66:aa: d2:19:3f:db:34:87:8e:fe:dd:d6:d0:8a:de:11:5b:78:c4:1a: 38:60:51:5b:1e:f9:8e:3e:6f:2c:5a:10:35:2b:fb:32:f2:d9: 99:0b:1f:1a:5b:49:3d:9e:b8:31:60:e5:2a:aa:7c:2d:0b:0a: 40:6b:60:93:5f:da:55:a6:5c:dd:00:6f:2b:0d:74:8e:3b:3e: 9c:d3:93:aa:f9:d5:a8:1e:32:69:6f:45:a7:f5:40:3b:34:01: ca:5f:06:5b:52:78:1c:a3:66:1f:f2:2a:c9:7e:c5:8b:7e:f6: be:c1:ce:56:b0:c0:fc:66:2f:6a:7a:0d:aa:2a:f6:7c:6a:46: b3:78:7b:60:e6:8f:d5:29:bf:a4:06:c4:37:9e:ed:df:c4:98: b4:41:0e:ec:2a:74:d4:e4:18:4f:47:ee:10:f1:8a:53:d9:ee: 4c:43:bc:8e:4f:55:19:e5:d3:ff:24:c7:96:b4:7c:a4:07:04: 7e:58:b9:3f:39:c8:02:ee:4a:31:8e:8c:56:52:60:bb:00:56: 3d:bb:de:fc:f4:6a:e0:4b:46:84:5a:96:77:17:bc:b6:9a:21: 56:81:f4:a6:3f:e0:45:ec:ca:2e:4c:60:60:52:eb:5e:d4:13: b0:bc:21:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkwYhLTOIoGOoD4xigsc+XsIIzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVC MTRDODk2QzAeFw0yNjA5MjYwMTM3MjZaFw0yNjA5MjcwNTAyMjZaMDMxMTAvBgNV BAMTKERFQTk0Mjg5RTMyQkQzMzYyMzBFNDczMkE0MzgxQ0RBMzhBNUIwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+IcLW8E/sxt3y13gcGH4A9vU Had0LePItJLo9yoQXdezmtLM1vRieiQLLkw2Ul4URCPRdMDE1YdAErrbtb8VI1H4 NA5Csubd9IRYz3O93fu24er6XJkkWJJtMwqgkF3Q5uJ7rheO8iQA6ViOjGfwzEB2 DNL8nBUCYU560+gYRQAvtSVY5PInEuC3mWCKJenobxZHKIF9J/uTJIRpe4hKnCLR DDIWKoWBzwpW/WYrzZZ4nnSWZ2++1ySE0sIPVyAIH2OIGr23Ffn8xfjrXMkRxoZO 4flT6I82izvW7vaq0KutHRvRo0bb53SVdKPWt/NJdFn+l2lyoLwQ4a4CpUfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3qlCieMr0zYjDkcypDgc2jilsP8wHwYDVR0j BBgwFoAUj/qLucCdxMpCyVyBfA/9lbFMiWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ1YWYyMmMtN2UzZS00MGI1LWFjNTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlD MDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVCMTRDODk2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBOEJCOUMwOURDNENBNDJDOTVDODE3QzBGRkQ5NUIxNEM4 OTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZE OTVCMTRDODk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+LT2kxjI3ueSjjHl3/lTFmqtIZP9s0h47+ 3dbQit4RW3jEGjhgUVse+Y4+byxaEDUr+zLy2ZkLHxpbST2euDFg5SqqfC0LCkBr YJNf2lWmXN0AbysNdI47PpzTk6r51ageMmlvRaf1QDs0AcpfBltSeByjZh/yKsl+ xYt+9r7BzlawwPxmL2p6Daoq9nxqRrN4e2Dmj9Upv6QGxDee7d/EmLRBDuwqdNTk GE9H7hDxilPZ7kxDvI5PVRnl0/8kx5a0fKQHBH5YuT85yALuSjGOjFZSYLsAVj27 3vz0auBLRoRalncXvLaaIVaB9KY/4EXsyi5MYGBS617UE7C8IX0= -----END CERTIFICATE-----Generated at Sat Sep 26 12:23:17 2026 by rpki-client