$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft File: E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft (raw, json) Hash identifier: BaAwfNwdfmGcPPPC4+LYAlnARDTkefNWkA0iCcinJnM= Subject key identifier: 16:30:B1:18:79:8B:81:F1:0E:6D:77:0E:21:94:9C:89:41:72:F0:05 Authority key identifier: E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6 Certificate issuer: /CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6 Certificate serial: 272FCBD64FCB0C3ED95BB31575F7670E79DE43CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft Manifest number: BE Signing time: Tue 22 Sep 2026 06:29:33 +0000 Manifest this update: Tue 22 Sep 2026 06:24:33 +0000 Manifest next update: Wed 23 Sep 2026 09:07:33 +0000 Files and hashes: 1: E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl (hash: eAW8Iaqqx1E4GS0xScWbFheFFwFuwpa6HDd8YEfimKI=) 2: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: /pHfUH1NlBnMVG+9w4rBpFljBqBGm2WJrHAQRZot61U=) 3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: 7Kp38WdKSSiLKliiaFpY9zvvkr9TIBcqJ58D1X388bM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2f:cb:d6:4f:cb:0c:3e:d9:5b:b3:15:75:f7:67:0e:79:de:43:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6 Validity Not Before: Sep 22 06:24:33 2026 GMT Not After : Sep 23 09:07:33 2026 GMT Subject: CN=1630B118798B81F10E6D770E21949C894172F005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:46:ad:03:36:b8:d4:26:7d:0a:bc:69:87:5c: e2:c1:ca:e8:bc:2e:4f:34:f8:f7:93:78:df:f9:4c: 86:41:8e:10:45:22:26:c0:08:31:d8:55:c8:d4:01: 05:af:33:53:6f:d7:66:c1:cc:ae:c3:b3:62:ff:be: d2:c9:62:50:13:db:a1:7b:a4:a9:70:7a:b7:08:fd: ed:bd:d6:6e:05:6f:2b:21:f6:d2:bc:95:7f:06:4b: ea:d6:3f:c8:76:ec:b6:42:c3:4d:5d:af:3e:4e:91: 1a:74:1a:a0:ed:1b:14:15:62:98:8a:e8:e5:74:7e: 2a:9a:0d:5b:7e:fa:49:56:10:ac:ce:11:9b:3e:e5: d8:98:fb:8f:23:84:06:75:98:99:03:7b:35:eb:34: a1:b2:3b:2f:75:b2:49:ad:ae:01:1d:53:81:85:67: cc:57:6d:d2:0d:f5:b2:1b:5b:f2:8c:30:6d:d6:a3: d5:0e:64:5c:8b:e8:e2:1a:82:3b:5a:88:c3:55:3c: e5:7e:1d:4c:71:4f:8e:03:5e:05:a9:47:4d:5e:06: f2:b3:7c:12:c8:88:e4:56:5c:00:9a:00:d7:aa:19: 25:a1:d5:f3:a9:6f:f7:9e:dc:12:08:30:a1:26:9a: fb:a8:75:92:41:e5:6a:af:da:9b:b7:dd:89:36:9d: a7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:30:B1:18:79:8B:81:F1:0E:6D:77:0E:21:94:9C:89:41:72:F0:05 X509v3 Authority Key Identifier: keyid:E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:6c:3c:76:a8:ad:16:55:37:fb:fb:af:ec:44:5b:e1:38:b9: db:c0:75:ff:9b:85:a2:6c:ff:10:2f:c4:c5:1b:0e:2c:6e:4a: f8:82:01:ad:31:c7:46:65:2b:db:f1:07:d1:9d:50:1a:81:5e: fc:af:5c:52:45:8a:e5:a6:e1:11:10:d7:87:8d:1b:04:ab:81: 82:2b:2c:c8:d6:b1:d0:85:a4:2b:6e:11:e4:4c:82:da:f3:05: 25:be:17:fb:dc:32:33:60:be:a4:19:ff:94:a4:78:b3:c9:43: 6c:a1:db:7e:e0:a4:18:5e:be:60:62:7e:09:68:0f:17:8e:30: b2:58:00:f1:dd:af:7e:73:99:0d:9b:b6:36:79:ff:80:84:f1: 8d:dc:b6:a3:60:3d:c7:c3:41:25:f3:c5:d6:12:e8:8e:13:bb: b2:82:99:6d:bb:18:ba:8a:2f:0f:30:c8:00:6b:fb:11:97:fd: 7c:0f:e3:e4:e7:c7:4d:cf:e5:b9:05:16:c0:8a:32:45:2b:4b: 32:b4:2b:b2:bd:49:49:df:ba:e3:95:08:f8:18:1c:f8:bd:f4: 77:75:b9:f3:b3:bc:d2:96:48:5d:60:6b:10:3e:9d:3f:3d:2c: 4f:2a:be:c6:3a:d5:ce:e4:41:0e:7e:da:be:57:43:e7:16:a4: 26:43:21:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJy/L1k/LDD7ZW7MVdfdnDnneQ84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEMUMxQjQxMkNCNjRGRTU4MzUwODNGNzZBNzQ4N0NF MzQ0NTJCNjAeFw0yNjA5MjIwNjI0MzNaFw0yNjA5MjMwOTA3MzNaMDMxMTAvBgNV BAMTKDE2MzBCMTE4Nzk4QjgxRjEwRTZENzcwRTIxOTQ5Qzg5NDE3MkYwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpRq0DNrjUJn0KvGmHXOLByui8 Lk80+PeTeN/5TIZBjhBFIibACDHYVcjUAQWvM1Nv12bBzK7Ds2L/vtLJYlAT26F7 pKlwercI/e291m4Fbysh9tK8lX8GS+rWP8h27LZCw01drz5OkRp0GqDtGxQVYpiK 6OV0fiqaDVt++klWEKzOEZs+5diY+48jhAZ1mJkDezXrNKGyOy91skmtrgEdU4GF Z8xXbdIN9bIbW/KMMG3Wo9UOZFyL6OIagjtaiMNVPOV+HUxxT44DXgWpR01eBvKz fBLIiORWXACaANeqGSWh1fOpb/ee3BIIMKEmmvuodZJB5Wqv2pu33Yk2naeTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFjCxGHmLgfEObXcOIZSciUFy8AUwHwYDVR0j BBgwFoAU6NHBtBLLZP5YNQg/dqdIfONEUrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIxNjY0YTctYzljOS00NDQyLTg3MTgtOWFlYzllMjExMGEyLzAvRThEMUMxQjQx MkNCNjRGRTU4MzUwODNGNzZBNzQ4N0NFMzQ0NTJCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEQxQzFCNDEyQ0I2NEZFNTgzNTA4M0Y3NkE3NDg3Q0UzNDQ1 MkI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRThEMUMxQjQxMkNCNjRGRTU4MzUwODNGNzZBNzQ4 N0NFMzQ0NTJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhsPHaorRZVN/v7r+xEW+E4udvAdf+bhaJs /xAvxMUbDixuSviCAa0xx0ZlK9vxB9GdUBqBXvyvXFJFiuWm4REQ14eNGwSrgYIr LMjWsdCFpCtuEeRMgtrzBSW+F/vcMjNgvqQZ/5SkeLPJQ2yh237gpBhevmBifglo DxeOMLJYAPHdr35zmQ2btjZ5/4CE8Y3ctqNgPcfDQSXzxdYS6I4Tu7KCmW27GLqK Lw8wyABr+xGX/XwP4+Tnx03P5bkFFsCKMkUrSzK0K7K9SUnfuuOVCPgYHPi99Hd1 ufOzvNKWSF1gaxA+nT89LE8qvsY61c7kQQ5+2r5XQ+cWpCZDIXE= -----END CERTIFICATE-----Generated at Tue Sep 22 19:49:41 2026 by rpki-client