$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft File: C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft (raw, json) Hash identifier: FzZUPgDaBmXCBcySoGgoFNxq8jtX4TUw3OZ1l9HMdSA= Subject key identifier: 39:20:BA:B6:B4:56:24:A6:78:98:E4:56:E9:9D:57:CF:7A:36:25:F6 Authority key identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B Certificate issuer: /CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Certificate serial: 2F1B2279B047D7564BA7D78927FF6D04829EB332 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft Manifest number: BE Signing time: Tue 22 Sep 2026 04:47:24 +0000 Manifest this update: Tue 22 Sep 2026 04:42:24 +0000 Manifest next update: Wed 23 Sep 2026 07:54:24 +0000 Files and hashes: 1: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: T5iXYEZsEylyp3JdGzhmtU2Kjr1HhNQabu6sAc+svIA=) 2: C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl (hash: QFOwWT4/G8OExi2U3gIJQ0U/H63p85+V425cFkPIF9s=) 3: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: yHStdJOfwpXotUrFqNRyBFcevnLpf2rHuaCz1qS9rN0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1b:22:79:b0:47:d7:56:4b:a7:d7:89:27:ff:6d:04:82:9e:b3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Validity Not Before: Sep 22 04:42:24 2026 GMT Not After : Sep 23 07:54:24 2026 GMT Subject: CN=3920BAB6B45624A67898E456E99D57CF7A3625F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:39:f3:8a:86:26:2c:ab:f4:8e:95:88:e9: 5c:61:c3:ae:cb:25:fc:90:f7:f3:76:2e:3e:21:ff: 96:d8:6a:eb:d5:f6:76:ae:21:93:27:0d:e5:b8:44: 7f:6d:bc:a8:0b:71:f8:9a:8e:41:4e:ba:76:16:20: 3d:af:57:3c:5d:38:b2:32:9d:e6:36:d3:fa:6a:c7: 54:ef:0b:e5:64:d7:55:be:48:2b:46:75:e6:7a:e6: 4c:d0:d3:32:0f:32:f7:da:4f:1e:7f:d8:00:38:9a: 8f:61:d2:d8:d3:04:be:50:36:b7:06:bc:7c:c4:e4: b5:6f:9e:f5:8c:25:e4:53:59:3b:2c:9f:92:09:57: 95:71:d3:38:c3:2c:06:5c:62:72:28:10:f9:cc:7b: 10:0e:84:0b:d3:e4:68:c1:ce:e5:8e:a1:ad:cf:ff: 73:55:8a:ad:fa:ae:cd:23:d5:28:e4:98:e8:dc:86: cc:16:5b:bb:00:0a:57:5b:37:c4:09:07:9f:cb:27: 84:b0:5e:6c:33:01:f6:d9:a3:cf:ba:84:ab:26:0d: 9f:74:ce:3e:25:6a:27:7a:46:ff:82:36:82:89:4d: 69:89:ea:16:a0:a9:e6:43:4b:46:70:3d:ac:97:bf: 67:cc:ad:e5:5c:f1:92:5b:e8:7a:0c:61:49:79:c3: 64:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:20:BA:B6:B4:56:24:A6:78:98:E4:56:E9:9D:57:CF:7A:36:25:F6 X509v3 Authority Key Identifier: keyid:C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9b:90:51:7f:ae:92:f4:05:d3:87:0d:c7:ed:22:98:02:55: 61:a9:d2:70:4b:1e:27:d2:98:a8:e4:84:21:76:19:fc:ce:16: a8:e2:31:ee:df:9a:38:78:36:df:23:61:0a:7d:dd:59:8b:61: 4d:bb:07:b3:fe:c3:12:b0:45:75:0f:46:78:65:71:b9:5f:13: 34:b0:c3:5e:a4:0b:ae:a5:d2:6b:19:93:2a:3b:f4:58:1d:8b: 41:ce:93:0a:8d:d6:f8:3d:67:57:7a:39:fd:28:75:89:65:a7: 6a:b0:60:b1:c9:d7:c2:d0:ff:f4:4d:19:3c:fe:c1:fa:5c:b4: de:c5:71:aa:24:bb:66:3d:70:39:fd:5f:ab:77:b0:11:8d:62: 25:1a:f1:48:4c:02:ca:01:89:9a:03:a7:46:39:40:4d:0e:a1: 55:b8:f4:30:47:55:6d:ec:dd:28:cb:7b:87:f9:26:2e:6c:87: 3b:85:f6:92:b2:7e:15:3e:3a:b6:5e:38:a7:f3:da:07:1d:2d: 17:64:c6:f0:9f:b0:9d:bf:bf:12:5b:f8:84:8a:75:b2:2b:1d: 90:d4:19:2b:26:e7:09:23:36:ab:4d:c8:3f:1e:d2:c4:f5:fc: 9d:13:b9:79:bc:ff:8d:6e:5e:b4:99:5d:63:29:b6:b2:ef:a0: a8:5f:b6:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxsiebBH11ZLp9eJJ/9tBIKeszIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3 MTdGODI3QjAeFw0yNjA5MjIwNDQyMjRaFw0yNjA5MjMwNzU0MjRaMDMxMTAvBgNV BAMTKDM5MjBCQUI2QjQ1NjI0QTY3ODk4RTQ1NkU5OUQ1N0NGN0EzNjI1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KjnzioYmLKv0jpWI6Vxhw67L JfyQ9/N2Lj4h/5bYauvV9nauIZMnDeW4RH9tvKgLcfiajkFOunYWID2vVzxdOLIy neY20/pqx1TvC+Vk11W+SCtGdeZ65kzQ0zIPMvfaTx5/2AA4mo9h0tjTBL5QNrcG vHzE5LVvnvWMJeRTWTssn5IJV5Vx0zjDLAZcYnIoEPnMexAOhAvT5GjBzuWOoa3P /3NViq36rs0j1SjkmOjchswWW7sACldbN8QJB5/LJ4SwXmwzAfbZo8+6hKsmDZ90 zj4laid6Rv+CNoKJTWmJ6hagqeZDS0ZwPayXv2fMreVc8ZJb6HoMYUl5w2SBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOSC6trRWJKZ4mORW6Z1Xz3o2JfYwHwYDVR0j BBgwFoAUyNJK31x0MuXjwdWYh3QQenF/gnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhZDA5ZjMtMDAyMy00NDQ1LTg0MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1 Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3MTdGODI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEQyNEFERjVDNzQzMkU1RTNDMUQ1OTg4Nzc0MTA3QTcxN0Y4 MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEw N0E3MTdGODI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEabkFF/rpL0BdOHDcftIpgCVWGp0nBLHifS mKjkhCF2GfzOFqjiMe7fmjh4Nt8jYQp93VmLYU27B7P+wxKwRXUPRnhlcblfEzSw w16kC66l0msZkyo79Fgdi0HOkwqN1vg9Z1d6Of0odYllp2qwYLHJ18LQ//RNGTz+ wfpctN7Fcaoku2Y9cDn9X6t3sBGNYiUa8UhMAsoBiZoDp0Y5QE0OoVW49DBHVW3s 3SjLe4f5Ji5shzuF9pKyfhU+OrZeOKfz2gcdLRdkxvCfsJ2/vxJb+ISKdbIrHZDU GSsm5wkjNqtNyD8e0sT1/J0TuXm8/41uXrSZXWMptrLvoKhftlA= -----END CERTIFICATE-----Generated at Tue Sep 22 14:59:34 2026 by rpki-client