$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft File: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft (raw, json) Hash identifier: Ln1aTfTZHUfU8n7pme7Gh38yKSRJIp7BMeQsk3vRmwg= Subject key identifier: 71:84:14:34:FB:4A:34:CD:49:94:E4:A2:6F:EA:8C:55:50:7B:EB:2E Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4 Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4 Certificate serial: 66E00775CEFCC8532ACA55B7F1B690C4858653C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft Manifest number: CB Signing time: Mon 28 Sep 2026 15:33:56 +0000 Manifest this update: Mon 28 Sep 2026 15:28:56 +0000 Manifest next update: Tue 29 Sep 2026 16:38:56 +0000 Files and hashes: 1: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: jBX/qKx/JGa1Du2q2fgwV/fWVjEIgXCKAL9/GZt06jk=) 2: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: hujlKc3DzwZfu+/QrUX39XVrQUFGamfbziw+u/7dNJ0=) 3: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl (hash: /59SeFcQ9rL56YkWXFL4qBGTQdvn4zurnotUUK97UpI=) 4: 34332e3234332e3138362e302f32332d3233203d3e203633383237.roa (hash: qqj+W0YE7lPcQQyjA0h+/ikJ5uDXNaW6laVzLp1Qk3I=) 5: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: NtkyFz71abqYBOulA/yf0usZVvUpaEttpy+f3u3kpp8=) 6: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: Z/jdDipYuv3lK5eimMJ72Z70XTynWpBlz182XUeNc+E=) 7: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: Yobd92nJofxIMDnwcBhGJ8U1ARrNN8Txd0D+kOpJodU=) 8: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: CH+q+cxW04syGQTs2qRuGVzpDs6qixBBw3uVzFWNK2g=) 9: 34332e3234332e3138342e302f32322d3232203d3e203633383237.roa (hash: MAEO7ACMQfPreayi5zBOy6AnAEF+RmZdQiFdMvjwjTI=) 10: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: L1mfkBCHBmcBCuB53aap/zrreHda+IVKN915WxYStVY=) 11: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: RlgIs0QjanrifNmC6pZ/6muj/iE2ejRnuLFDY7kN47g=) 12: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: fBaN9jIwXMILmSYsIQ3Ue7JGtw7WhLW8vbb21prGNGk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e0:07:75:ce:fc:c8:53:2a:ca:55:b7:f1:b6:90:c4:85:86:53:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4 Validity Not Before: Sep 28 15:28:56 2026 GMT Not After : Sep 29 16:38:56 2026 GMT Subject: CN=71841434FB4A34CD4994E4A26FEA8C55507BEB2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:73:ce:98:1d:07:f7:c7:d5:e2:44:20:e9: e2:c2:01:16:b4:3a:33:af:cb:95:1e:86:ad:6e:06: 7c:f2:a1:36:d7:be:01:c6:e0:73:6c:4e:d3:c4:79: ab:ba:2c:d5:58:82:23:a4:9e:fd:a2:91:61:8b:a3: b9:7e:7a:e5:d3:9d:dc:62:d4:a9:38:ed:d3:3d:b8: 1e:d2:c8:02:ff:31:10:68:a9:d1:e9:ac:fe:9a:35: e2:df:00:4b:9b:c2:05:d2:a7:a2:ce:70:0a:31:82: bd:90:be:b1:a9:0b:80:e0:86:8d:37:e7:7c:30:aa: 44:0b:7a:3c:5d:f9:1e:c1:58:49:ee:b3:e1:30:c2: a7:58:f6:04:dd:67:e7:9e:02:a2:ae:7e:33:be:a7: 1a:36:36:15:19:1c:11:fd:4b:42:e4:87:4d:d3:8d: 7e:0d:90:5d:71:c1:36:8d:6d:5c:18:70:bb:b4:79: f2:01:78:7f:46:0f:c2:86:fd:7d:c8:3f:c8:88:32: cd:d4:90:ba:c7:4f:2f:6a:b5:1b:1e:af:78:d7:38: 19:61:ab:1a:ab:87:ae:57:b0:cb:71:8c:3d:89:29: 13:36:54:0c:53:5e:79:0b:7f:d3:71:e8:f9:48:a3: 59:42:ae:9f:ee:bb:e2:ae:30:a9:b9:0b:1e:2c:ef: b3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:84:14:34:FB:4A:34:CD:49:94:E4:A2:6F:EA:8C:55:50:7B:EB:2E X509v3 Authority Key Identifier: keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:24:a6:d4:39:9a:f7:27:dd:ed:e1:be:84:e9:4f:c4:b5:f7: f6:c6:6a:2b:02:b8:cf:40:29:15:ae:a4:11:73:6c:e2:d8:dd: 3c:50:8d:95:e2:ba:d7:3e:b0:44:a0:a3:3f:89:1d:dc:d3:55: ba:44:f9:ab:8a:06:36:03:c4:fa:17:ed:16:e8:3a:21:50:06: 60:fd:24:9c:51:f3:25:27:d9:7d:04:14:12:45:b0:5f:b7:05: ae:30:ef:10:83:93:5b:61:17:7c:fa:f1:79:13:67:6f:6d:8d: f6:ee:b1:a3:e4:c8:0e:bf:81:f5:8f:a2:b8:58:48:0c:bc:44: c8:64:97:5c:4c:cf:1a:15:f2:b8:e1:5f:de:de:8f:4c:7f:92: a7:0c:62:08:1f:7b:a8:73:02:03:1e:c7:1c:55:01:0a:99:5e: eb:ad:f3:7d:08:17:8c:62:4a:7a:a2:b8:55:24:ec:5c:14:a4: b5:41:2d:0e:b3:1f:82:b7:1d:62:43:d9:b7:1d:f7:54:42:30: 3d:1f:1a:1a:22:f6:db:0f:a7:b2:3f:aa:86:94:f6:22:fe:07: e7:e4:0f:0b:96:20:74:88:26:7b:cf:41:4b:7e:89:c1:55:21: 5f:37:ff:db:90:dc:55:f3:75:22:81:9c:2f:7e:e2:4e:80:d0: 53:0e:6a:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuAHdc78yFMqylW38baQxIWGU8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEM0Q1NTZBOTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0 MDI5RTZDNDAeFw0yNjA5MjgxNTI4NTZaFw0yNjA5MjkxNjM4NTZaMDMxMTAvBgNV BAMTKDcxODQxNDM0RkI0QTM0Q0Q0OTk0RTRBMjZGRUE4QzU1NTA3QkVCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjHPOmB0H98fV4kQg6eLCARa0 OjOvy5Uehq1uBnzyoTbXvgHG4HNsTtPEeau6LNVYgiOknv2ikWGLo7l+euXTndxi 1Kk47dM9uB7SyAL/MRBoqdHprP6aNeLfAEubwgXSp6LOcAoxgr2QvrGpC4Dgho03 53wwqkQLejxd+R7BWEnus+EwwqdY9gTdZ+eeAqKufjO+pxo2NhUZHBH9S0Lkh03T jX4NkF1xwTaNbVwYcLu0efIBeH9GD8KG/X3IP8iIMs3UkLrHTy9qtRser3jXOBlh qxqrh65XsMtxjD2JKRM2VAxTXnkLf9Nx6PlIo1lCrp/uu+KuMKm5Cx4s77O9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcYQUNPtKNM1JlOSib+qMVVB76y4wHwYDVR0j BBgwFoAUCNPVVqmJ4OR37+uCQoVNekAp5sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFhNjg3MTItMWQ5YS00MTQzLTgyZjEtMWM4MmMzMzE2NWVhLzAvMDhEM0Q1NTZB OTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0MDI5RTZDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOEQzRDU1NkE5ODlFMEU0NzdFRkVCODI0Mjg1NEQ3QTQwMjlF NkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFhNjg3MTItMWQ5YS00MTQzLTgy ZjEtMWM4MmMzMzE2NWVhLzAvMDhEM0Q1NTZBOTg5RTBFNDc3RUZFQjgyNDI4NTRE N0E0MDI5RTZDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4kptQ5mvcn3e3hvoTpT8S19/bGaisCuM9A KRWupBFzbOLY3TxQjZXiutc+sESgoz+JHdzTVbpE+auKBjYDxPoX7RboOiFQBmD9 JJxR8yUn2X0EFBJFsF+3Ba4w7xCDk1thF3z68XkTZ29tjfbusaPkyA6/gfWPorhY SAy8RMhkl1xMzxoV8rjhX97ej0x/kqcMYggfe6hzAgMexxxVAQqZXuut830IF4xi SnqiuFUk7FwUpLVBLQ6zH4K3HWJD2bcd91RCMD0fGhoi9tsPp7I/qoaU9iL+B+fk DwuWIHSIJnvPQUt+icFVIV83/9uQ3FXzdSKBnC9+4k6A0FMOah8= -----END CERTIFICATE-----Generated at Mon Sep 28 21:22:33 2026 by rpki-client