$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft File: 008FD9C34C50033457705A2A8FA8AD31C58901DF.mft (raw, json) Hash identifier: P6npME+cx4tYxyGXyl71ZKtFcjyRTBmZRdIhvBVesL4= Subject key identifier: 15:EF:E2:EE:59:3D:90:7D:F1:69:C9:68:9D:D0:4C:62:E2:8F:7E:B0 Authority key identifier: 00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF Certificate issuer: /CN=008FD9C34C50033457705A2A8FA8AD31C58901DF Certificate serial: 1AA5867F06C231395D40648B2D5D7F46658970A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:33:23 +0000 Manifest this update: Mon 21 Sep 2026 01:28:23 +0000 Manifest next update: Tue 22 Sep 2026 03:33:23 +0000 Files and hashes: 1: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: Xc9Z6aCULt4h5E7uCljF8rbSvL2mpzVI9I3SrwLMdKA=) 2: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: NbNZZ1h00KtVz1iU/OgERwDxHBaHy3Lol9PQ30yLH20=) 3: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: KRcAvz4S9RiZMOJ4ntySfmti6yb9mI07p7EYZgs2VTA=) 4: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: WS26qbff4FZd1gBCBy7MpBk2HRkLgCPS9ErpAbqZ1Kk=) 5: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: Uo09a87NfO0QaaV8cWvKqLh7Yr8GIHaL3+B8rEdhvDg=) 6: 008FD9C34C50033457705A2A8FA8AD31C58901DF.crl (hash: ma4tV7uGwYijVzTQSj69dlr4OhwX/wz04JzobjfJVgk=) 7: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: 7PYR6KQD363PCA9CqbyRe3Hlyct7YlcslSh5J5MCne8=) 8: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: +gg97NXHVYnGyTZICqnb0be/ZegxXSjwLJ69frhtl8g=) 9: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: Ym+oQJAC/FZcNlOtyNB+PyxQjFt4qpTGx2NjQCjEW8k=) 10: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: ikR/F9w4LitTShzkD+KXZlE08zWYB4wLcQeSOu40MHY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a5:86:7f:06:c2:31:39:5d:40:64:8b:2d:5d:7f:46:65:89:70:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=008FD9C34C50033457705A2A8FA8AD31C58901DF Validity Not Before: Sep 21 01:28:23 2026 GMT Not After : Sep 22 03:33:23 2026 GMT Subject: CN=15EFE2EE593D907DF169C9689DD04C62E28F7EB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:78:41:70:cd:3a:b9:45:27:47:88:e1:04: 01:18:c8:3d:8a:fc:be:b2:74:39:a4:4d:36:37:ef: 8d:99:19:53:7c:08:d3:c6:ae:cb:59:0a:71:ce:0c: 49:4b:a8:3d:d5:1f:fd:be:3d:69:fe:c4:d0:83:7e: 50:84:fa:26:da:9d:30:f6:a8:a6:f3:6e:ec:38:56: 8a:dd:e8:00:8c:61:fa:41:e5:52:a0:71:fa:dc:e2: f5:cf:98:77:d5:b3:19:44:7f:f8:00:86:8d:83:92: 53:2d:b5:26:7d:8e:31:15:cd:16:d0:4f:88:b1:a4: 40:2e:cf:64:bb:5b:51:ff:63:12:14:ae:14:9a:e8: ab:30:88:50:94:f8:08:76:58:d3:0b:32:49:bf:65: 53:cb:9a:4d:11:c4:96:3d:a5:93:47:41:2e:c4:21: df:c4:76:c5:12:07:af:68:b0:a9:09:22:7f:c1:6b: 8e:28:b8:aa:aa:d2:50:c0:90:f9:b3:aa:e0:94:0e: 12:c2:d6:29:4f:22:c6:82:49:c6:c1:55:90:51:7b: 4e:15:27:74:0e:01:2e:7a:ce:5b:cd:74:ac:77:d5: 79:1b:db:e4:21:c1:dd:e0:56:57:84:8d:16:95:6b: 4d:75:7b:58:5b:fc:34:55:da:ce:f0:f2:d7:88:1d: c9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EF:E2:EE:59:3D:90:7D:F1:69:C9:68:9D:D0:4C:62:E2:8F:7E:B0 X509v3 Authority Key Identifier: keyid:00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d0:1f:80:89:c8:b2:69:f8:fd:32:a4:f1:14:24:2e:24:05: e0:23:13:c1:a1:89:52:9a:1f:85:41:9c:16:fa:58:af:d9:ac: 0d:f9:8c:37:cc:85:fc:37:fe:6f:df:56:bd:da:de:71:23:e9: 6f:04:1b:71:8f:7a:af:24:0d:fe:e5:60:50:b2:e2:a4:eb:48: 7f:f1:a1:93:bf:8e:4c:4d:6b:99:f1:3f:7f:99:83:62:28:2a: b4:6f:44:31:45:66:dd:31:99:10:6b:15:d5:5f:02:0a:6f:02: ea:84:98:ad:bd:a8:9d:21:5a:24:74:3e:a2:9b:ca:37:83:ee: ec:a7:37:86:82:0b:8d:3d:fd:1e:3c:c2:94:08:92:23:1f:03: e0:ce:2c:95:b9:8e:5b:f8:d5:26:15:03:fe:50:39:29:d8:61: 64:2d:9d:e8:6c:69:7d:2a:d9:8a:44:2d:fd:27:4c:10:25:9d: 9e:dc:18:5c:36:a2:0c:75:e7:b0:60:f5:f9:6c:3b:44:77:3f: bd:f0:e1:f4:81:33:99:be:35:45:05:43:d1:31:f6:ed:99:80: ef:5e:c7:54:d7:1a:75:95:28:75:e3:e3:a0:27:96:90:a4:ab: 7c:2d:f4:1d:42:1d:be:38:9e:98:7f:50:2a:dd:9e:3d:7b:85: 75:cf:48:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqWGfwbCMTldQGSLLV1/RmWJcKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4RkQ5QzM0QzUwMDMzNDU3NzA1QTJBOEZBOEFEMzFD NTg5MDFERjAeFw0yNjA5MjEwMTI4MjNaFw0yNjA5MjIwMzMzMjNaMDMxMTAvBgNV BAMTKDE1RUZFMkVFNTkzRDkwN0RGMTY5Qzk2ODlERDA0QzYyRTI4RjdFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXynhBcM06uUUnR4jhBAEYyD2K /L6ydDmkTTY3742ZGVN8CNPGrstZCnHODElLqD3VH/2+PWn+xNCDflCE+ibanTD2 qKbzbuw4Vord6ACMYfpB5VKgcfrc4vXPmHfVsxlEf/gAho2DklMttSZ9jjEVzRbQ T4ixpEAuz2S7W1H/YxIUrhSa6KswiFCU+Ah2WNMLMkm/ZVPLmk0RxJY9pZNHQS7E Id/EdsUSB69osKkJIn/Ba44ouKqq0lDAkPmzquCUDhLC1ilPIsaCScbBVZBRe04V J3QOAS56zlvNdKx31Xkb2+Qhwd3gVleEjRaVa011e1hb/DRV2s7w8teIHcnHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFe/i7lk9kH3xaclondBMYuKPfrAwHwYDVR0j BBgwFoAUAI/Zw0xQAzRXcFoqj6itMcWJAd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2NjllYTQtZTgyZi00NmMzLThkZDMtMmU5ODgxNTliMjAyLzAvMDA4RkQ5QzM0 QzUwMDMzNDU3NzA1QTJBOEZBOEFEMzFDNTg5MDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDhGRDlDMzRDNTAwMzM0NTc3MDVBMkE4RkE4QUQzMUM1ODkw MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2NjllYTQtZTgyZi00NmMzLThk ZDMtMmU5ODgxNTliMjAyLzAvMDA4RkQ5QzM0QzUwMDMzNDU3NzA1QTJBOEZBOEFE MzFDNTg5MDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXQH4CJyLJp+P0ypPEUJC4kBeAjE8GhiVKa H4VBnBb6WK/ZrA35jDfMhfw3/m/fVr3a3nEj6W8EG3GPeq8kDf7lYFCy4qTrSH/x oZO/jkxNa5nxP3+Zg2IoKrRvRDFFZt0xmRBrFdVfAgpvAuqEmK29qJ0hWiR0PqKb yjeD7uynN4aCC409/R48wpQIkiMfA+DOLJW5jlv41SYVA/5QOSnYYWQtnehsaX0q 2YpELf0nTBAlnZ7cGFw2ogx157Bg9flsO0R3P73w4fSBM5m+NUUFQ9Ex9u2ZgO9e x1TXGnWVKHXj46AnlpCkq3wt9B1CHb44nph/UCrdnj17hXXPSA4= -----END CERTIFICATE-----Generated at Mon Sep 21 05:35:08 2026 by rpki-client