$ rpki-client -vvvf rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft File: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft (raw, json) Hash identifier: WvvuZwvUxjMDTRCJwWE89uEGwUa2CErnuLGKexdEDfo= Subject key identifier: FB:2A:A3:7A:B2:A4:6A:7C:E6:4C:CD:DF:DF:63:54:35:A3:45:8D:C7 Authority key identifier: 8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D Certificate issuer: /CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Certificate serial: 1ABB4E835E31B328202E1C3CEB3BA0B28F72385E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft Manifest number: C7 Signing time: Fri 25 Sep 2026 21:57:42 +0000 Manifest this update: Fri 25 Sep 2026 21:52:42 +0000 Manifest next update: Sun 27 Sep 2026 01:23:42 +0000 Files and hashes: 1: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl (hash: mwyrMRTN1shKuDZjVMgX8DRQFMd9Ilng2LZBjqpFOXY=) 2: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: Iad4oKdG+cP+QGtzN+0DsTs9ponKGFoBE7JkBGARiyQ=) 3: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: xeD49NnJaETxYZ89zZqsZvQW0lQqtHHDYp/1/JjzAG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 01:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:bb:4e:83:5e:31:b3:28:20:2e:1c:3c:eb:3b:a0:b2:8f:72:38:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Validity Not Before: Sep 25 21:52:42 2026 GMT Not After : Sep 27 01:23:42 2026 GMT Subject: CN=FB2AA37AB2A46A7CE64CCDDFDF635435A3458DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:02:6b:40:63:0d:3e:b0:71:19:d4:35:b3:a2: b6:20:df:b4:b1:51:cf:f4:dd:b6:0f:53:18:01:f9: 49:5c:f9:1d:18:f8:c2:45:53:95:52:39:c9:ea:e2: 17:20:60:2c:8f:42:84:d4:a6:34:5f:52:68:ea:75: 29:f3:33:1e:e5:3d:5a:2c:5b:1b:8e:42:de:b8:46: 2c:54:52:c2:86:d3:32:c7:ee:b0:2b:75:ca:42:5b: 26:0f:a4:b1:50:1d:ea:89:f9:51:81:af:64:11:68: db:e2:0b:25:6f:0c:f2:91:b0:06:0b:4b:39:eb:20: 01:f8:c2:63:d8:c9:be:c1:7d:b1:ae:cd:36:7e:b5: e6:ac:96:10:49:7e:ec:86:e5:ac:e0:a6:a0:18:a5: dc:84:c6:16:e4:1d:45:fc:1a:c0:6f:7e:cd:60:78: 58:c8:89:51:a6:a5:00:2f:46:49:0b:56:92:44:06: 3c:09:08:d0:12:06:a8:d9:63:c7:af:83:f5:60:8a: 6b:a7:91:0b:72:dd:74:bf:8b:5d:76:1c:83:bd:3e: 44:65:f7:2b:40:36:6a:e4:a2:dd:0b:27:18:2e:6d: f4:12:1c:9f:a2:34:80:8f:82:03:e5:4c:50:a6:3e: a7:80:a1:42:af:dc:ce:16:80:45:79:57:c5:4a:3e: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2A:A3:7A:B2:A4:6A:7C:E6:4C:CD:DF:DF:63:54:35:A3:45:8D:C7 X509v3 Authority Key Identifier: keyid:8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:50:b3:5b:c2:74:7b:f5:62:dd:0a:fb:ed:1b:10:01:98:85: 2e:35:c9:25:f7:da:96:d8:a5:ef:7d:5c:bf:0d:9a:5a:8b:85: 1f:6d:f2:62:2f:8f:22:f2:99:22:b0:46:de:ec:c3:90:8b:c6: 02:96:38:8b:71:73:78:3e:b9:db:a2:71:98:22:5e:2e:f2:a6: 59:50:24:98:dc:76:b6:26:06:e4:16:6c:c9:bc:9d:07:3d:cc: d6:55:8d:8d:68:b6:6c:bc:c4:ef:cd:54:b2:32:cd:a9:33:79: 95:e5:d1:66:b7:5c:72:4e:16:c8:05:67:a1:5e:f0:6f:c6:a7: 7b:18:cd:60:9d:51:db:d6:ed:f0:7d:84:b9:17:46:5b:eb:0f: f4:0d:42:4a:4d:24:1d:08:a3:98:35:56:29:d2:13:2a:86:6a: 62:22:fb:62:d2:f0:cd:3d:35:8f:36:a7:f2:c9:95:3e:cd:d6: 5b:ac:0d:2e:ac:fa:d1:a0:91:25:23:67:b4:09:75:7f:86:0b: 8e:a7:ce:e3:76:fb:c8:27:cc:69:ae:f6:8b:0c:5a:b1:63:2d: d9:35:7f:60:98:71:e3:ac:89:67:a8:26:a6:b5:fc:c0:5d:d5: ee:3f:dd:03:a4:15:00:00:0a:de:dd:6f:0a:37:d7:cc:38:94: 41:cc:92:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGrtOg14xsyggLhw86zugso9yOF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3MTcx RUEzRDk2RDAeFw0yNjA5MjUyMTUyNDJaFw0yNjA5MjcwMTIzNDJaMDMxMTAvBgNV BAMTKEZCMkFBMzdBQjJBNDZBN0NFNjRDQ0RERkRGNjM1NDM1QTM0NThEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0AmtAYw0+sHEZ1DWzorYg37Sx Uc/03bYPUxgB+Ulc+R0Y+MJFU5VSOcnq4hcgYCyPQoTUpjRfUmjqdSnzMx7lPVos WxuOQt64RixUUsKG0zLH7rArdcpCWyYPpLFQHeqJ+VGBr2QRaNviCyVvDPKRsAYL SznrIAH4wmPYyb7BfbGuzTZ+teaslhBJfuyG5azgpqAYpdyExhbkHUX8GsBvfs1g eFjIiVGmpQAvRkkLVpJEBjwJCNASBqjZY8evg/VgimunkQty3XS/i112HIO9PkRl 9ytANmrkot0LJxgubfQSHJ+iNICPggPlTFCmPqeAoUKv3M4WgEV5V8VKPi1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+yqjerKkanzmTM3f32NUNaNFjccwHwYDVR0j BBgwFoAUjNhuNOGiG+hzt63MjSrnFx6j2W0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njg0NjY4ODktYzFlZi00NDEwLWFkOWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRF MUEyMUJFODczQjdBRENDOEQyQUU3MTcxRUEzRDk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q4NkUzNEUxQTIxQkU4NzNCN0FEQ0M4RDJBRTcxNzFFQTNE OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3 MTcxRUEzRDk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRQs1vCdHv1Yt0K++0bEAGYhS41ySX32pbY pe99XL8NmlqLhR9t8mIvjyLymSKwRt7sw5CLxgKWOItxc3g+uduicZgiXi7ypllQ JJjcdrYmBuQWbMm8nQc9zNZVjY1otmy8xO/NVLIyzakzeZXl0Wa3XHJOFsgFZ6Fe 8G/Gp3sYzWCdUdvW7fB9hLkXRlvrD/QNQkpNJB0Io5g1VinSEyqGamIi+2LS8M09 NY82p/LJlT7N1lusDS6s+tGgkSUjZ7QJdX+GC46nzuN2+8gnzGmu9osMWrFjLdk1 f2CYceOsiWeoJqa1/MBd1e4/3QOkFQAACt7dbwo318w4lEHMkqw= -----END CERTIFICATE-----Generated at Sat Sep 26 12:24:22 2026 by rpki-client