$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft File: 8BE5D6878B464D9FA654023C63F4762E67599164.mft (raw, json) Hash identifier: 00au92RsfMW1Rw3iDwzseltGzwpNPDCD97v8U9gTTRw= Subject key identifier: CE:4A:A6:66:6F:26:BC:E6:EA:AB:E5:49:0D:75:25:15:6F:26:8D:EC Authority key identifier: 8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64 Certificate issuer: /CN=8BE5D6878B464D9FA654023C63F4762E67599164 Certificate serial: 6DE0F4CBF93E9716BC90419B9ED8143FEAFAD3A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft Manifest number: BE Signing time: Mon 21 Sep 2026 22:34:37 +0000 Manifest this update: Mon 21 Sep 2026 22:29:37 +0000 Manifest next update: Wed 23 Sep 2026 00:43:37 +0000 Files and hashes: 1: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: j1q7Tjwd0n3nZPl8Mige83XpdVNq8A8OBRmyY8xB6w0=) 2: 8BE5D6878B464D9FA654023C63F4762E67599164.crl (hash: AU64ywAwfSkyr3sTPEQnmGYf0Emal+4P9Ek5Tzt2hP4=) 3: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: gsCaOX96MCEfxecmW7euDwqW3eYjaAOY81K1Ab8R/sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e0:f4:cb:f9:3e:97:16:bc:90:41:9b:9e:d8:14:3f:ea:fa:d3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE5D6878B464D9FA654023C63F4762E67599164 Validity Not Before: Sep 21 22:29:37 2026 GMT Not After : Sep 23 00:43:37 2026 GMT Subject: CN=CE4AA6666F26BCE6EAABE5490D7525156F268DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:ad:7d:65:a9:ef:0c:46:41:00:76:bc:68: ad:d1:c9:14:89:2b:ad:1d:dd:00:2c:5c:08:d7:02: 40:96:76:b2:b6:61:04:f1:0e:d4:d8:95:71:c9:2a: 84:11:f4:8e:fb:5b:8d:d8:e3:17:9d:a5:4f:e9:b1: 5f:d8:c0:fc:cb:f9:20:6f:b1:a2:3d:68:ac:91:ca: 0b:df:0a:1f:7f:ce:97:c2:95:f0:02:fd:69:6d:02: ec:67:ed:f9:ae:ba:85:7f:62:9e:73:ef:3c:f6:4d: 61:f5:6e:9c:d4:d9:c9:d3:8d:60:94:3d:48:4f:85: 42:74:e3:b6:8c:f6:6c:26:11:b1:d4:5d:60:71:46: 2a:3d:ca:1b:3b:74:c6:3f:fb:3c:12:47:5c:7d:aa: 98:b6:45:80:3d:df:6b:e8:88:5d:d7:fe:90:ae:cf: 18:78:48:79:23:57:1e:5b:49:e0:a1:f9:80:42:65: a1:aa:bc:ce:13:c9:af:91:72:dd:4b:ab:f6:3c:88: a1:87:41:e2:59:ef:57:5c:0c:70:59:50:ca:c8:37: e2:ff:8b:d2:63:94:6b:fa:5f:ed:77:e2:f9:d7:64: 95:08:c0:c0:83:cf:33:9a:c0:a3:20:52:2a:a3:6b: 5d:98:35:5a:a0:fe:a4:ac:87:be:cf:a1:26:72:33: 66:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4A:A6:66:6F:26:BC:E6:EA:AB:E5:49:0D:75:25:15:6F:26:8D:EC X509v3 Authority Key Identifier: keyid:8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b2:90:29:2f:76:6b:d9:ac:31:c3:cc:56:f7:52:01:1b:17: f5:ac:64:00:2b:75:87:d0:60:30:73:b6:f4:4c:81:1a:37:a2: a1:ab:fd:f0:3c:fe:2c:06:27:9f:5a:5d:dc:6c:33:9c:39:f6: 83:df:82:65:94:74:e9:30:ef:b9:bb:90:21:fd:b7:2c:f2:28: c4:fc:d2:5c:ea:e8:d0:56:89:10:5b:c3:4c:b3:ca:21:4d:19: 58:61:2e:7b:fa:dd:9a:e3:eb:8c:cf:ad:9b:9b:24:25:98:c3: 08:d6:18:58:49:41:1b:a9:cb:2e:3b:d7:b8:6a:62:3a:f7:7d: 12:0f:17:84:b8:e2:d9:55:d4:29:ca:82:37:57:5d:49:1c:ad: 8c:f8:ad:a5:79:53:89:4d:d8:d4:72:42:a3:c5:b4:22:ac:6c: 48:30:36:c8:c5:e7:eb:d6:28:ea:bf:8f:de:f8:b0:f4:62:64: 09:6d:cd:cf:5a:f5:8b:70:ad:c7:7a:77:d2:66:2d:cc:c8:c6: fa:e2:e1:cc:ba:26:23:87:a9:ca:59:a7:83:3a:5b:67:a5:35: 1a:c0:0e:45:8b:6b:fd:f3:fd:45:9e:41:c6:c2:c5:f9:33:bd: 45:88:70:9c:3c:e2:a8:2a:14:5c:c0:cd:85:7d:31:3a:6d:46: b2:98:81:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbeD0y/k+lxa8kEGbntgUP+r606cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNUQ2ODc4QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2MkU2 NzU5OTE2NDAeFw0yNjA5MjEyMjI5MzdaFw0yNjA5MjMwMDQzMzdaMDMxMTAvBgNV BAMTKENFNEFBNjY2NkYyNkJDRTZFQUFCRTU0OTBENzUyNTE1NkYyNjhERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT0q19ZanvDEZBAHa8aK3RyRSJ K60d3QAsXAjXAkCWdrK2YQTxDtTYlXHJKoQR9I77W43Y4xedpU/psV/YwPzL+SBv saI9aKyRygvfCh9/zpfClfAC/WltAuxn7fmuuoV/Yp5z7zz2TWH1bpzU2cnTjWCU PUhPhUJ047aM9mwmEbHUXWBxRio9yhs7dMY/+zwSR1x9qpi2RYA932voiF3X/pCu zxh4SHkjVx5bSeCh+YBCZaGqvM4Tya+Rct1Lq/Y8iKGHQeJZ71dcDHBZUMrIN+L/ i9JjlGv6X+134vnXZJUIwMCDzzOawKMgUiqja12YNVqg/qSsh77PoSZyM2YNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzkqmZm8mvObqq+VJDXUlFW8mjewwHwYDVR0j BBgwFoAUi+XWh4tGTZ+mVAI8Y/R2LmdZkWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I3ZWY1MTUtODU2NC00MWU4LTlkMjAtMmQzM2Q0NWNjYmQ2LzAvOEJFNUQ2ODc4 QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2MkU2NzU5OTE2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkU1RDY4NzhCNDY0RDlGQTY1NDAyM0M2M0Y0NzYyRTY3NTk5 MTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvOEJFNUQ2ODc4QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2 MkU2NzU5OTE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOykCkvdmvZrDHDzFb3UgEbF/WsZAArdYfQ YDBztvRMgRo3oqGr/fA8/iwGJ59aXdxsM5w59oPfgmWUdOkw77m7kCH9tyzyKMT8 0lzq6NBWiRBbw0yzyiFNGVhhLnv63Zrj64zPrZubJCWYwwjWGFhJQRupyy4717hq Yjr3fRIPF4S44tlV1CnKgjdXXUkcrYz4raV5U4lN2NRyQqPFtCKsbEgwNsjF5+vW KOq/j974sPRiZAltzc9a9Ytwrcd6d9JmLczIxvri4cy6JiOHqcpZp4M6W2elNRrA DkWLa/3z/UWeQcbCxfkzvUWIcJw84qgqFFzAzYV9MTptRrKYgXE= -----END CERTIFICATE-----Generated at Tue Sep 22 18:08:14 2026 by rpki-client