$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft File: 8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft (raw, json) Hash identifier: DOZYwAlMyYKj6aHDlkKAqkQK1YUbAiuV9tajrHNMfgM= Subject key identifier: 71:21:77:15:E2:0B:5F:25:61:71:74:02:8E:FA:8C:45:21:D8:FA:35 Authority key identifier: 8E:0F:94:08:1A:42:07:FE:B1:5C:B2:A5:99:7C:BB:73:85:43:C6:5E Certificate issuer: /CN=8E0F94081A4207FEB15CB2A5997CBB738543C65E Certificate serial: 70FBBFA3DFCBBA1DCADD755A327FB572FBA8ECB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 01:07:10 +0000 Manifest this update: Thu 24 Sep 2026 01:02:10 +0000 Manifest next update: Fri 25 Sep 2026 03:18:10 +0000 Files and hashes: 1: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: 77972k6MYcuZdjQWO5NsuORM4k9B55J3rC8Pahn1Zak=) 2: 8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl (hash: T8jF0GtS5yVmeOopU1nPSmuwWqrRtV21ZxFp1qGpb64=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fb:bf:a3:df:cb:ba:1d:ca:dd:75:5a:32:7f:b5:72:fb:a8:ec:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E0F94081A4207FEB15CB2A5997CBB738543C65E Validity Not Before: Sep 24 01:02:10 2026 GMT Not After : Sep 25 03:18:10 2026 GMT Subject: CN=71217715E20B5F25617174028EFA8C4521D8FA35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:47:cc:34:7f:d1:4f:72:ec:91:58:d9:64: d1:26:2a:4b:f6:0d:43:37:2b:0d:e9:19:28:c0:7f: 8d:dc:6f:f8:96:e5:e0:82:7a:ac:0d:16:98:e7:e2: 63:9d:9b:47:a5:31:ef:3a:59:12:df:db:9c:82:af: 27:63:07:14:64:a1:7f:f7:96:50:57:ff:43:7e:97: 0e:f5:9f:50:e8:07:14:94:74:de:36:eb:74:ce:82: e0:84:41:f5:1d:35:b9:e5:b3:36:41:5c:6b:d7:5d: 34:ee:0e:71:c3:14:e3:39:87:02:ca:30:e0:53:d6: 26:4b:e7:f6:da:b1:b5:78:b4:18:26:92:52:c9:d5: 06:2a:4b:25:de:b7:d7:ff:f3:a2:b6:51:8f:6d:2f: 65:11:04:f5:cf:d5:f1:39:4d:e2:f3:4e:eb:14:ca: cc:63:5c:d8:11:aa:66:cb:58:3a:71:1e:39:0b:c9: bc:50:bb:33:18:9e:5e:e3:ba:12:ed:1c:08:50:62: bf:4b:1c:98:62:1b:22:df:72:1d:b0:85:05:56:09: 37:06:0d:f9:9b:55:d1:34:64:b7:10:69:d5:4a:ec: 16:c8:18:2b:57:2d:f3:44:20:3b:37:51:9f:e7:80: 03:02:b3:f9:0d:fe:a8:0d:b4:c9:02:9b:2f:16:1c: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:21:77:15:E2:0B:5F:25:61:71:74:02:8E:FA:8C:45:21:D8:FA:35 X509v3 Authority Key Identifier: keyid:8E:0F:94:08:1A:42:07:FE:B1:5C:B2:A5:99:7C:BB:73:85:43:C6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:58:e7:91:c8:fc:04:98:22:de:23:2a:43:69:98:36:c7:91: ab:54:be:81:3e:2d:8a:a2:cf:23:3a:8a:37:5d:12:ad:49:b0: fc:00:aa:0e:c4:f4:d1:11:2c:3d:48:21:8c:fe:39:88:77:f5: 8f:a9:dc:3b:e6:3f:ff:70:81:68:21:7f:7a:1d:4b:00:81:0e: cd:78:34:bc:af:fa:a0:1f:66:94:28:eb:14:0a:19:97:b2:72: 73:75:2e:09:29:9a:89:e6:58:e9:12:4e:15:32:b8:cd:f4:81: e7:3e:34:5b:b8:f3:13:3c:5e:1b:d0:9c:fa:75:2e:1b:d5:08: 8a:aa:25:6e:c6:2d:6f:55:47:4f:78:92:8a:c7:d1:d5:29:d7: 6e:7c:70:d1:f2:75:92:7d:97:a7:2b:ca:c6:27:63:52:f6:ac: 1b:5c:37:7e:3b:8a:54:9c:2a:bd:6f:48:90:09:a4:9a:e8:65: c0:f9:fa:02:80:b5:c9:9c:15:f9:35:70:63:9c:59:db:78:cd: b1:83:4c:99:e0:f4:4f:f7:be:90:5e:cb:88:06:d2:71:72:f6: de:6d:32:42:d3:ab:05:43:65:e3:8a:de:11:3f:c9:4a:bc:43: 3d:a5:e1:5d:58:63:82:1c:f2:ce:f3:35:ae:9f:23:9e:4f:d5: 02:19:a6:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPu/o9/Luh3K3XVaMn+1cvuo7LkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwRjk0MDgxQTQyMDdGRUIxNUNCMkE1OTk3Q0JCNzM4 NTQzQzY1RTAeFw0yNjA5MjQwMTAyMTBaFw0yNjA5MjUwMzE4MTBaMDMxMTAvBgNV BAMTKDcxMjE3NzE1RTIwQjVGMjU2MTcxNzQwMjhFRkE4QzQ1MjFEOEZBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD40fMNH/RT3LskVjZZNEmKkv2 DUM3Kw3pGSjAf43cb/iW5eCCeqwNFpjn4mOdm0elMe86WRLf25yCrydjBxRkoX/3 llBX/0N+lw71n1DoBxSUdN4263TOguCEQfUdNbnlszZBXGvXXTTuDnHDFOM5hwLK MOBT1iZL5/basbV4tBgmklLJ1QYqSyXet9f/86K2UY9tL2URBPXP1fE5TeLzTusU ysxjXNgRqmbLWDpxHjkLybxQuzMYnl7juhLtHAhQYr9LHJhiGyLfch2whQVWCTcG DfmbVdE0ZLcQadVK7BbIGCtXLfNEIDs3UZ/ngAMCs/kN/qgNtMkCmy8WHBdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSF3FeILXyVhcXQCjvqMRSHY+jUwHwYDVR0j BBgwFoAUjg+UCBpCB/6xXLKlmXy7c4VDxl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ4ZWYxMTktN2RkZi00NWU1LTg2MzQtMzhiNzcyNThjYmNjLzAvOEUwRjk0MDgx QTQyMDdGRUIxNUNCMkE1OTk3Q0JCNzM4NTQzQzY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84RTBGOTQwODFBNDIwN0ZFQjE1Q0IyQTU5OTdDQkI3Mzg1NDND NjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvOEUwRjk0MDgxQTQyMDdGRUIxNUNCMkE1OTk3Q0JC NzM4NTQzQzY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlY55HI/ASYIt4jKkNpmDbHkatUvoE+LYqi zyM6ijddEq1JsPwAqg7E9NERLD1IIYz+OYh39Y+p3DvmP/9wgWghf3odSwCBDs14 NLyv+qAfZpQo6xQKGZeycnN1LgkpmonmWOkSThUyuM30gec+NFu48xM8XhvQnPp1 LhvVCIqqJW7GLW9VR094korH0dUp1258cNHydZJ9l6crysYnY1L2rBtcN347ilSc Kr1vSJAJpJroZcD5+gKAtcmcFfk1cGOcWdt4zbGDTJng9E/3vpBey4gG0nFy9t5t MkLTqwVDZeOK3hE/yUq8Qz2l4V1YY4Ic8s7zNa6fI55P1QIZpv4= -----END CERTIFICATE-----Generated at Thu Sep 24 11:09:39 2026 by rpki-client