$ rpki-client -vvvf rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft File: 8A88C62D67BF9B5D27095014663D7564A99145C4.mft (raw, json) Hash identifier: bVwVxA4wJK0hVGSmjfv8h0io48i6C0jrvTuYgXj0Yms= Subject key identifier: A6:A2:9C:6E:8F:F1:84:96:2D:06:48:92:B3:DA:9B:D4:A7:8C:F1:EF Authority key identifier: 8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4 Certificate issuer: /CN=8A88C62D67BF9B5D27095014663D7564A99145C4 Certificate serial: 0E13968226B36EA2DEBD33CECF2C72311025D16E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft Manifest number: BF Signing time: Tue 22 Sep 2026 07:41:04 +0000 Manifest this update: Tue 22 Sep 2026 07:36:04 +0000 Manifest next update: Wed 23 Sep 2026 07:50:04 +0000 Files and hashes: 1: 8A88C62D67BF9B5D27095014663D7564A99145C4.crl (hash: LPnSGjj3gsoyL7e+St7ynIc2x+FBbkMa6fnX4+gvopU=) 2: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: F053eE0i+9sM4Zlpf0wasuwbYczZ4FiYljBeIYhXU8s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:13:96:82:26:b3:6e:a2:de:bd:33:ce:cf:2c:72:31:10:25:d1:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A88C62D67BF9B5D27095014663D7564A99145C4 Validity Not Before: Sep 22 07:36:04 2026 GMT Not After : Sep 23 07:50:04 2026 GMT Subject: CN=A6A29C6E8FF184962D064892B3DA9BD4A78CF1EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:ea:23:0b:7f:bb:2c:0b:3b:c9:08:43:bd: 4d:48:25:93:68:d4:db:06:36:7e:9d:fe:d2:5e:c6: 66:d9:b5:ef:a7:6b:07:55:b9:22:c1:5a:47:72:75: 38:b9:5a:ce:40:c4:f9:50:59:6d:e6:f4:5a:09:3d: 74:05:22:63:82:11:da:63:02:14:89:37:3f:e6:87: e0:9a:44:a6:b7:79:e7:26:c9:57:67:ed:66:a1:40: 5c:20:3b:a1:15:02:08:07:8c:df:8e:15:72:90:87: 1b:9d:9c:66:09:4a:20:2c:1a:d7:88:01:4c:8e:5b: 32:21:ec:fe:48:6a:08:f3:7b:0c:4d:69:91:be:81: ea:6e:32:8c:37:1e:62:eb:20:b7:55:43:5c:87:91: b5:db:7f:84:c2:ba:9f:27:3b:86:36:bf:5e:3f:0f: 17:8a:f8:ed:33:96:17:30:ce:88:15:e8:25:ba:ca: 71:f3:63:56:36:4e:91:eb:43:15:a2:c7:67:d2:f2: 12:65:90:4b:3a:f7:29:a4:0c:23:9c:05:39:d1:38: 88:7f:db:ac:30:7b:fa:0b:0d:0f:9f:12:47:b4:bd: 28:b1:a2:85:ac:4e:a5:d4:52:8e:6b:e3:e4:d9:eb: 82:c4:5b:67:26:aa:0c:a9:03:d5:15:91:0f:b9:bd: 3a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A2:9C:6E:8F:F1:84:96:2D:06:48:92:B3:DA:9B:D4:A7:8C:F1:EF X509v3 Authority Key Identifier: keyid:8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c0:43:2c:e2:50:62:33:b6:95:78:7f:53:a4:5e:fb:89:53: 1e:c7:87:37:41:ee:72:b4:4e:46:66:de:af:4e:0c:d8:1e:21: 78:b7:85:74:bc:f6:d4:79:ff:2b:e2:45:77:5b:48:77:fb:7a: a1:99:f1:9e:b8:e7:b1:4e:ce:f6:ce:7d:50:1a:1f:83:8a:d3: 62:37:6a:02:09:42:87:01:42:5f:08:de:5f:3b:81:7d:1e:a5: 5b:4b:d4:c9:b1:c9:24:b0:20:1b:4a:db:b3:1c:9a:65:ab:8b: f7:6d:89:de:20:b3:17:8d:a9:51:49:b6:55:0a:79:40:3a:03: 3c:6b:0b:9e:19:b9:09:d2:2f:df:ee:d0:fb:bc:8f:30:b1:dd: d9:7a:b9:da:78:db:16:7c:1e:bf:17:a2:f2:77:6d:15:2b:43: 93:84:7b:29:34:38:15:46:0c:e2:4b:24:cb:80:a9:80:6e:d3: 3c:06:00:61:17:c1:6e:76:f4:31:6e:e4:3d:5c:08:85:eb:ad: 93:fa:3a:e9:fd:88:e9:26:e2:ca:ba:9c:be:30:47:75:22:f9: a0:93:6b:75:7d:f9:ee:be:67:68:ef:1b:94:65:f5:f2:3c:d8: 60:1a:ae:b4:11:14:89:af:fc:ab:16:77:38:0a:7e:01:c6:43: 10:12:1e:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhOWgiazbqLevTPOzyxyMRAl0W4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRB OTkxNDVDNDAeFw0yNjA5MjIwNzM2MDRaFw0yNjA5MjMwNzUwMDRaMDMxMTAvBgNV BAMTKEE2QTI5QzZFOEZGMTg0OTYyRDA2NDg5MkIzREE5QkQ0QTc4Q0YxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4uojC3+7LAs7yQhDvU1IJZNo 1NsGNn6d/tJexmbZte+nawdVuSLBWkdydTi5Ws5AxPlQWW3m9FoJPXQFImOCEdpj AhSJNz/mh+CaRKa3eecmyVdn7WahQFwgO6EVAggHjN+OFXKQhxudnGYJSiAsGteI AUyOWzIh7P5IagjzewxNaZG+gepuMow3HmLrILdVQ1yHkbXbf4TCup8nO4Y2v14/ DxeK+O0zlhcwzogV6CW6ynHzY1Y2TpHrQxWix2fS8hJlkEs69ymkDCOcBTnROIh/ 26wwe/oLDQ+fEke0vSixooWsTqXUUo5r4+TZ64LEW2cmqgypA9UVkQ+5vTppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpqKcbo/xhJYtBkiSs9qb1KeM8e8wHwYDVR0j BBgwFoAUiojGLWe/m10nCVAUZj11ZKmRRcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY0YzMxNTUtYzhmZi00MjA3LWEyZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2 N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRBOTkxNDVDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTg4QzYyRDY3QkY5QjVEMjcwOTUwMTQ2NjNENzU2NEE5OTE0 NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY0YzMxNTUtYzhmZi00MjA3LWEy ZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1 NjRBOTkxNDVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbAQyziUGIztpV4f1OkXvuJUx7HhzdB7nK0 TkZm3q9ODNgeIXi3hXS89tR5/yviRXdbSHf7eqGZ8Z6457FOzvbOfVAaH4OK02I3 agIJQocBQl8I3l87gX0epVtL1MmxySSwIBtK27McmmWri/dtid4gsxeNqVFJtlUK eUA6AzxrC54ZuQnSL9/u0Pu8jzCx3dl6udp42xZ8Hr8XovJ3bRUrQ5OEeyk0OBVG DOJLJMuAqYBu0zwGAGEXwW529DFu5D1cCIXrrZP6Oun9iOkm4sq6nL4wR3Ui+aCT a3V9+e6+Z2jvG5Rl9fI82GAarrQRFImv/KsWdzgKfgHGQxASHms= -----END CERTIFICATE-----Generated at Tue Sep 22 19:37:07 2026 by rpki-client