$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft File: 8557597ED1797691974B01C1D7D410DE0468CB64.mft (raw, json) Hash identifier: EzKvKYbjhscp88DdL4C0RmWCIToUgdXn8BNmCucIhkk= Subject key identifier: FB:6E:12:F5:D6:A4:C0:CE:F8:D4:24:0B:0D:87:D7:7C:EC:BD:62:5D Authority key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64 Certificate issuer: /CN=8557597ED1797691974B01C1D7D410DE0468CB64 Certificate serial: 0AC290A6F1151C7F577064124A5E87853170BA2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 20:31:25 +0000 Manifest this update: Wed 23 Sep 2026 20:26:25 +0000 Manifest next update: Thu 24 Sep 2026 21:53:25 +0000 Files and hashes: 1: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: TH1xxKIpC/iys3VyCm1mmUpDcchr21F0tjGUobHxDDI=) 2: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: cqcltXHdESyCAro4lMlrbhRLXh2L5uRV2u8+8/UIEXU=) 3: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: 7N8cgyb6Ww7RJC4vhy0UsAqS4uP5oOpnOjak+OLi484=) 4: 8557597ED1797691974B01C1D7D410DE0468CB64.crl (hash: 9EXi2yLSIuytMhuJXMcLw4rCS3zQkUZU8OgOCy40D9A=) 5: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: TL3itnqoh4qV4HBGxDux8BTRX5lkC3J82Sib/ZT6wuU=) 6: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: ooohintErIiZJY6PsGdeSKgN/xAUtlDemuxd4hTQIlw=) 7: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: +2lXgv7qT46jamYAhQHOD/peUAc/KCPSkZn0WfZ6XNU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c2:90:a6:f1:15:1c:7f:57:70:64:12:4a:5e:87:85:31:70:ba:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8557597ED1797691974B01C1D7D410DE0468CB64 Validity Not Before: Sep 23 20:26:25 2026 GMT Not After : Sep 24 21:53:25 2026 GMT Subject: CN=FB6E12F5D6A4C0CEF8D4240B0D87D77CECBD625D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:2e:ec:a0:13:fc:cf:89:64:ed:35:13:04: dd:6c:16:5d:51:bd:0f:4c:39:11:05:de:5a:2b:4f: 93:d1:4d:45:54:72:b2:37:5d:12:00:fc:cc:ea:28: 21:57:d1:f3:2c:49:31:41:45:a2:36:98:2d:e6:c6: 75:c6:9b:08:c6:6b:26:9b:b5:b1:34:44:6d:c9:e8: e7:0f:83:d3:7a:a6:07:ca:32:88:74:05:f9:25:84: 97:59:0a:25:23:0e:1c:cc:b5:88:70:5b:3b:71:a2: 6b:40:e3:92:8f:9a:1d:a1:35:b5:92:57:ca:43:21: 20:bf:bf:64:11:48:77:19:a2:91:28:04:3f:a4:7c: fd:12:e9:fc:e8:00:66:66:08:a8:c3:82:33:a9:54: 82:cb:6c:b2:dd:03:34:5d:b5:de:fd:01:bf:e3:6c: d8:40:ef:7c:bd:ee:fb:e4:44:a5:79:33:89:28:b1: fa:6a:ff:18:7b:09:d7:62:be:3c:1d:eb:74:8f:2f: 7a:60:e0:90:96:a1:42:b9:12:d9:3e:3e:df:bf:ee: 07:c9:14:41:8d:f5:0e:46:0d:e8:22:c3:64:66:22: e0:1f:1d:98:8b:15:fc:38:e5:01:c5:86:2c:c7:4f: 9a:2b:97:84:a7:44:ff:ba:b2:05:2f:4b:42:33:46: cf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6E:12:F5:D6:A4:C0:CE:F8:D4:24:0B:0D:87:D7:7C:EC:BD:62:5D X509v3 Authority Key Identifier: keyid:85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:39:21:b8:1d:1c:f4:d6:be:a7:3e:80:0f:7e:9f:c4:a4:91: 67:1d:02:dc:11:25:79:99:79:20:41:6a:95:6b:5f:6d:cb:4a: b3:ae:e7:40:32:39:0f:f9:4a:04:2f:e5:f5:46:ff:48:25:c4: 2d:c0:0d:c5:ba:03:d4:9a:a7:f2:ff:3c:96:15:98:de:d2:a0: 0f:8f:af:99:59:23:fc:17:e7:33:fd:bc:32:3f:07:2d:97:c6: 31:2f:88:d3:07:01:2d:e8:93:f4:78:e3:57:e3:51:ad:50:16: 31:50:12:fa:ad:b0:a5:1b:c1:59:0b:9c:3f:9d:67:3b:46:52: 9b:1f:89:a5:a0:b9:db:fc:0a:7a:03:de:4e:b4:34:c7:46:7f: 4a:45:b9:94:b6:e5:7e:a2:3c:7a:0e:53:ed:ea:55:53:4a:e0: 76:42:e0:7b:79:14:7f:b7:7c:44:68:95:9d:cd:63:d4:2e:7e: f4:4c:83:36:97:04:73:04:74:e4:63:65:26:8a:28:04:9c:d7: 3f:97:76:68:bf:a6:08:87:cb:3d:d8:fe:f8:02:13:f7:17:8b: ed:ff:79:97:d9:62:e6:bc:74:ee:94:04:17:db:6e:40:3e:c2: 93:4e:42:1c:f6:91:a9:a7:96:3e:51:4c:46:c8:1d:1c:dd:48: 9d:1c:58:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCsKQpvEVHH9XcGQSSl6HhTFwuiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1NzU5N0VEMTc5NzY5MTk3NEIwMUMxRDdENDEwREUw NDY4Q0I2NDAeFw0yNjA5MjMyMDI2MjVaFw0yNjA5MjQyMTUzMjVaMDMxMTAvBgNV BAMTKEZCNkUxMkY1RDZBNEMwQ0VGOEQ0MjQwQjBEODdENzdDRUNCRDYyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiES7soBP8z4lk7TUTBN1sFl1R vQ9MOREF3lorT5PRTUVUcrI3XRIA/MzqKCFX0fMsSTFBRaI2mC3mxnXGmwjGayab tbE0RG3J6OcPg9N6pgfKMoh0BfklhJdZCiUjDhzMtYhwWztxomtA45KPmh2hNbWS V8pDISC/v2QRSHcZopEoBD+kfP0S6fzoAGZmCKjDgjOpVILLbLLdAzRdtd79Ab/j bNhA73y97vvkRKV5M4kosfpq/xh7Cddivjwd63SPL3pg4JCWoUK5Etk+Pt+/7gfJ FEGN9Q5GDegiw2RmIuAfHZiLFfw45QHFhizHT5orl4SnRP+6sgUvS0IzRs8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+24S9dakwM741CQLDYfXfOy9Yl0wHwYDVR0j BBgwFoAUhVdZftF5dpGXSwHB19QQ3gRoy2QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBjZTQ3OTYtNDlkZS00M2IxLWExNTItYjE4ZDExYWRhNTI5LzAvODU1NzU5N0VE MTc5NzY5MTk3NEIwMUMxRDdENDEwREUwNDY4Q0I2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTU3NTk3RUQxNzk3NjkxOTc0QjAxQzFEN0Q0MTBERTA0NjhD QjY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvODU1NzU5N0VEMTc5NzY5MTk3NEIwMUMxRDdENDEw REUwNDY4Q0I2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFc5IbgdHPTWvqc+gA9+n8SkkWcdAtwRJXmZ eSBBapVrX23LSrOu50AyOQ/5SgQv5fVG/0glxC3ADcW6A9Sap/L/PJYVmN7SoA+P r5lZI/wX5zP9vDI/By2XxjEviNMHAS3ok/R441fjUa1QFjFQEvqtsKUbwVkLnD+d ZztGUpsfiaWgudv8CnoD3k60NMdGf0pFuZS25X6iPHoOU+3qVVNK4HZC4Ht5FH+3 fERolZ3NY9QufvRMgzaXBHMEdORjZSaKKASc1z+Xdmi/pgiHyz3Y/vgCE/cXi+3/ eZfZYua8dO6UBBfbbkA+wpNOQhz2kamnlj5RTEbIHRzdSJ0cWBk= -----END CERTIFICATE-----Generated at Thu Sep 24 13:56:35 2026 by rpki-client