$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft File: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft (raw, json) Hash identifier: DfymWMcvfEvaxQE8JPwtaxXJqlI/947ebn2tnTLKJKU= Subject key identifier: 30:A0:96:E8:F4:07:E7:6C:13:09:E1:49:AA:0E:57:1E:2D:5B:38:60 Authority key identifier: C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 Certificate issuer: /CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Certificate serial: 2183C258FB0903FAC6023D1B49655C24EA7DCD8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft Manifest number: BE Signing time: Mon 21 Sep 2026 06:19:28 +0000 Manifest this update: Mon 21 Sep 2026 06:14:28 +0000 Manifest next update: Tue 22 Sep 2026 09:15:28 +0000 Files and hashes: 1: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl (hash: boOZ7KlreKubVqdSWbbZdtFNRqQGB8zFR2qZD2Qkr3Q=) 2: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: qW0AGce8XtjjXQ3Aq1xPuwzcIhd6zyH7ybAi9hoWtzA=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: W+SevG4xTFDq1sgkDkONqUQc3ucQK2u8ntiRI2DImrc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 09:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:83:c2:58:fb:09:03:fa:c6:02:3d:1b:49:65:5c:24:ea:7d:cd:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Validity Not Before: Sep 21 06:14:28 2026 GMT Not After : Sep 22 09:15:28 2026 GMT Subject: CN=30A096E8F407E76C1309E149AA0E571E2D5B3860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0b:a7:53:9c:d4:f7:a6:24:14:e6:9f:a5:82: b8:cd:3a:c4:03:ca:81:9d:93:a1:fe:ff:93:48:77: 9d:8a:c6:e6:2f:91:f5:79:7d:1a:af:b1:d9:fa:1f: ec:a4:a2:bc:ca:df:38:42:7e:c5:bd:ac:aa:75:85: 44:63:96:82:47:8f:75:28:66:b8:cf:c7:16:d1:e5: bf:8e:43:6e:77:bb:d6:5e:97:db:b8:da:8c:cc:2e: 36:2c:01:d6:ce:0d:24:3e:ed:bd:66:5f:2b:c2:c7: 28:42:24:cf:88:65:25:62:a5:6a:f5:de:a6:9a:ba: f4:35:a8:5c:10:b6:4b:53:b7:2a:78:4c:e9:e8:9a: 39:ab:af:b6:b8:81:ac:bd:85:7f:b1:27:b8:de:10: 8f:d0:a2:5e:0a:bc:60:1f:20:0e:a7:1e:46:5b:49: c7:95:d1:ae:b2:0d:44:8e:6b:91:6c:7f:a1:18:98: 76:ba:52:b8:65:62:f8:65:e1:64:9b:ad:78:51:d5: f9:a5:1b:d1:bd:d4:4b:72:c7:d1:d6:8f:f3:1d:5e: c4:89:92:a6:f4:c6:c4:66:ea:74:25:a1:fd:93:8c: dc:3a:e5:ae:93:a2:ad:d2:eb:be:ca:84:3a:7e:1c: 12:40:07:bf:91:e2:f3:73:89:da:78:d7:3b:b3:d7: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A0:96:E8:F4:07:E7:6C:13:09:E1:49:AA:0E:57:1E:2D:5B:38:60 X509v3 Authority Key Identifier: keyid:C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:38:02:3f:4a:d0:b3:50:ca:28:29:e5:b2:00:7a:21:1d:eb: cf:1b:1e:2a:bd:7a:7d:ab:d0:78:93:20:6f:48:a6:79:68:b7: b1:3b:03:c0:97:58:d3:20:ca:18:2c:42:7e:5d:f1:2f:8c:05: 72:39:b9:f0:a0:37:1a:e4:4d:0d:6f:25:7b:00:56:a7:6c:8c: 80:07:68:cb:6f:79:f4:a1:a8:37:55:fc:a4:e9:23:1f:be:2b: 2f:9a:56:d3:4f:c3:37:94:73:93:df:bd:65:43:88:02:0c:bd: 8a:19:2e:db:58:53:7e:7f:85:dc:da:89:2a:8c:01:8b:50:3e: ba:7c:89:9b:d6:ba:a7:4d:5e:53:bd:4f:5d:23:59:c7:8e:b0: c3:f8:39:ce:36:a4:2a:b8:21:5b:df:87:63:00:61:1b:17:86: de:d7:69:d3:35:b2:48:e4:0a:bb:da:3b:a8:fb:b4:66:5c:7e: 48:78:26:7b:b1:46:53:8c:ed:f8:60:0e:6a:63:2f:c6:a2:0e: 64:25:b6:6d:cc:06:6b:81:17:b9:15:c7:56:d0:a7:9f:a0:d9: 91:d6:58:fd:d1:d7:9b:8c:2d:34:8c:54:c2:4a:ab:9f:8c:6d: f4:f2:e6:de:a2:6b:8c:79:5a:e1:f5:63:29:d0:94:33:fb:b8: 59:4a:36:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYPCWPsJA/rGAj0bSWVcJOp9zYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2 QzRFREMzMjAeFw0yNjA5MjEwNjE0MjhaFw0yNjA5MjIwOTE1MjhaMDMxMTAvBgNV BAMTKDMwQTA5NkU4RjQwN0U3NkMxMzA5RTE0OUFBMEU1NzFFMkQ1QjM4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHC6dTnNT3piQU5p+lgrjNOsQD yoGdk6H+/5NId52KxuYvkfV5fRqvsdn6H+ykorzK3zhCfsW9rKp1hURjloJHj3Uo ZrjPxxbR5b+OQ253u9Zel9u42ozMLjYsAdbODSQ+7b1mXyvCxyhCJM+IZSVipWr1 3qaauvQ1qFwQtktTtyp4TOnomjmrr7a4gay9hX+xJ7jeEI/Qol4KvGAfIA6nHkZb SceV0a6yDUSOa5Fsf6EYmHa6UrhlYvhl4WSbrXhR1fmlG9G91Etyx9HWj/MdXsSJ kqb0xsRm6nQlof2TjNw65a6Toq3S677KhDp+HBJAB7+R4vNzidp41zuz1wRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMKCW6PQH52wTCeFJqg5XHi1bOGAwHwYDVR0j BBgwFoAUyKJ3s97IwPCqTB+lQugZNmxO3DIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIyNmIzZTEtZDdmNi00NjVlLTgzMDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNE RUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2QzRFREMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEEyNzdCM0RFQzhDMEYwQUE0QzFGQTU0MkU4MTkzNjZDNEVE QzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5 MzY2QzRFREMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGs4Aj9K0LNQyigp5bIAeiEd688bHiq9en2r 0HiTIG9Ipnlot7E7A8CXWNMgyhgsQn5d8S+MBXI5ufCgNxrkTQ1vJXsAVqdsjIAH aMtvefShqDdV/KTpIx++Ky+aVtNPwzeUc5PfvWVDiAIMvYoZLttYU35/hdzaiSqM AYtQPrp8iZvWuqdNXlO9T10jWceOsMP4Oc42pCq4IVvfh2MAYRsXht7XadM1skjk CrvaO6j7tGZcfkh4JnuxRlOM7fhgDmpjL8aiDmQltm3MBmuBF7kVx1bQp5+g2ZHW WP3R15uMLTSMVMJKq5+MbfTy5t6ia4x5WuH1YynQlDP7uFlKNrM= -----END CERTIFICATE-----Generated at Tue Sep 22 01:06:20 2026 by rpki-client