$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft File: 873409842DEE948D3DE05C618194C87A259E04BF.mft (raw, json) Hash identifier: kr4MO8ce6lXJuJduiFbyUWWt/mQsCv85r+iUE64TnQg= Subject key identifier: C2:6C:09:5A:D4:67:E3:9D:4B:A4:0D:E9:81:A6:03:7C:89:E2:78:44 Authority key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF Certificate issuer: /CN=873409842DEE948D3DE05C618194C87A259E04BF Certificate serial: 06823CF489B5391E4EC154D7470F8CB93039132C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:32:13 +0000 Manifest this update: Mon 21 Sep 2026 00:27:13 +0000 Manifest next update: Tue 22 Sep 2026 04:00:13 +0000 Files and hashes: 1: 873409842DEE948D3DE05C618194C87A259E04BF.crl (hash: rkss/9nbOCnv2lLyh0ghgwBFIm4ud/GuMqsCO5D0mxw=) 2: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: grkHY3zf57XsShC3GloC/Ysy8CRxkBA2HYvszXntAaM=) 3: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: OzhJdHffqoSTJ5pFjxmQ04VEvXqHaJWqkM8YRHVnaeQ=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: M8QTZuDsRpJ1yY06WkCYeFwFPm5+TLSWxZVTx0+FX3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:82:3c:f4:89:b5:39:1e:4e:c1:54:d7:47:0f:8c:b9:30:39:13:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873409842DEE948D3DE05C618194C87A259E04BF Validity Not Before: Sep 21 00:27:13 2026 GMT Not After : Sep 22 04:00:13 2026 GMT Subject: CN=C26C095AD467E39D4BA40DE981A6037C89E27844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:91:45:7e:96:b7:0a:37:91:c5:6f:32:7c: 38:46:10:3b:fa:79:fd:2a:d3:9a:38:6b:10:54:ee: 89:bc:8b:72:02:10:55:2c:63:c5:df:44:48:d9:fb: f1:b7:f7:9a:9b:ac:3a:c0:f4:af:c1:c9:b1:8c:ea: dc:8a:e4:f4:38:d5:8f:f9:04:5e:30:3d:44:02:61: ef:dd:45:6c:23:c0:a6:88:2a:3d:72:c9:10:3f:aa: 9c:87:8d:45:9a:7c:94:4e:e4:cb:0e:72:79:ee:76: 7e:4c:18:35:e0:56:41:7d:63:c4:0c:a5:0c:8c:19: 03:83:77:d7:54:6d:47:35:bb:ee:39:e1:8a:0f:08: 22:a5:02:3e:6e:d2:da:ff:ec:de:68:63:d3:1f:ea: 19:13:37:a8:35:89:d6:85:63:27:c3:ea:cc:38:13: 5f:14:9f:85:76:7e:cc:79:8a:e4:76:44:ce:c9:eb: 1b:9f:66:a8:62:05:f1:2d:0c:71:89:95:f9:0e:89: 9a:76:bc:85:3f:d0:27:3b:a5:d1:b4:23:ae:b2:a9: 3a:b5:6c:a7:22:c6:79:01:0c:df:e4:25:d0:11:8f: 18:bd:c2:35:5a:9f:3d:0c:50:e7:30:29:9b:72:11: 22:d2:6d:09:1f:2e:60:ce:f2:f0:9f:32:10:4e:80: d8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6C:09:5A:D4:67:E3:9D:4B:A4:0D:E9:81:A6:03:7C:89:E2:78:44 X509v3 Authority Key Identifier: keyid:87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e1:0f:90:a4:90:5f:db:85:e6:67:62:1a:a0:64:ce:fb:01: f2:41:b1:c5:53:4f:c0:3d:43:4a:d6:8e:23:8a:82:ad:fb:ec: de:a4:19:d4:3a:81:6e:e1:3d:df:9a:f5:45:65:25:89:81:17: b9:37:ca:49:41:59:dd:2c:79:9b:ed:c2:0d:03:de:81:e9:58: 51:9f:26:68:ee:e5:2b:d8:68:7a:a4:fb:19:08:5a:a8:68:33: 6a:d6:5a:d2:07:09:36:ff:19:ba:c0:5c:6e:f9:57:12:9e:44: 17:45:2f:ec:1d:ea:55:2a:b1:63:13:78:2e:d2:86:45:b5:b1: 9f:43:05:20:ac:6c:4b:44:cf:37:71:7a:7c:ec:51:68:aa:4d: 6f:a3:1e:59:b8:52:8a:a7:14:e1:d3:7f:07:fa:9e:39:2b:5b: b1:dd:fb:33:d4:25:5b:81:73:ed:f5:85:0e:d2:f6:8b:8d:68: d9:b2:a7:fb:ff:57:d1:1f:81:f2:31:28:9a:72:5f:c6:93:24: 5b:85:9c:c3:72:ef:dc:38:72:8b:5d:ac:98:bd:b2:c8:a3:4f: a4:02:4d:4f:3b:1f:c8:90:72:92:88:42:d2:30:59:1e:70:f2: 01:c5:a7:74:06:1e:03:46:ea:03:f5:54:b5:20:63:92:9a:ca: 26:d6:9b:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBoI89Im1OR5OwVTXRw+MuTA5EywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4N0Ey NTlFMDRCRjAeFw0yNjA5MjEwMDI3MTNaFw0yNjA5MjIwNDAwMTNaMDMxMTAvBgNV BAMTKEMyNkMwOTVBRDQ2N0UzOUQ0QkE0MERFOTgxQTYwMzdDODlFMjc4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwpFFfpa3CjeRxW8yfDhGEDv6 ef0q05o4axBU7om8i3ICEFUsY8XfREjZ+/G395qbrDrA9K/BybGM6tyK5PQ41Y/5 BF4wPUQCYe/dRWwjwKaIKj1yyRA/qpyHjUWafJRO5MsOcnnudn5MGDXgVkF9Y8QM pQyMGQODd9dUbUc1u+454YoPCCKlAj5u0tr/7N5oY9Mf6hkTN6g1idaFYyfD6sw4 E18Un4V2fsx5iuR2RM7J6xufZqhiBfEtDHGJlfkOiZp2vIU/0Cc7pdG0I66yqTq1 bKcixnkBDN/kJdARjxi9wjVanz0MUOcwKZtyESLSbQkfLmDO8vCfMhBOgNgvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwmwJWtRn451LpA3pgaYDfInieEQwHwYDVR0j BBgwFoAUhzQJhC3ulI094FxhgZTIeiWeBL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRjZjQwNjctYTY5ZC00OTA4LWJlZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQy REVFOTQ4RDNERTA1QzYxODE5NEM4N0EyNTlFMDRCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzM0MDk4NDJERUU5NDhEM0RFMDVDNjE4MTk0Qzg3QTI1OUUw NEJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4 N0EyNTlFMDRCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErhD5CkkF/bheZnYhqgZM77AfJBscVTT8A9 Q0rWjiOKgq377N6kGdQ6gW7hPd+a9UVlJYmBF7k3yklBWd0seZvtwg0D3oHpWFGf Jmju5SvYaHqk+xkIWqhoM2rWWtIHCTb/GbrAXG75VxKeRBdFL+wd6lUqsWMTeC7S hkW1sZ9DBSCsbEtEzzdxenzsUWiqTW+jHlm4UoqnFOHTfwf6njkrW7Hd+zPUJVuB c+31hQ7S9ouNaNmyp/v/V9EfgfIxKJpyX8aTJFuFnMNy79w4cotdrJi9ssijT6QC TU87H8iQcpKIQtIwWR5w8gHFp3QGHgNG6gP1VLUgY5KayibWmyM= -----END CERTIFICATE-----Generated at Mon Sep 21 16:48:25 2026 by rpki-client