$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft File: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft (raw, json) Hash identifier: 894/WRcU0dNRgWf4yU2GM0sMyrws/iUI4qpUl5mXBlI= Subject key identifier: D9:F3:C0:36:F3:06:41:1C:2E:C1:A5:FD:CD:48:D5:29:66:F4:C3:90 Authority key identifier: 85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E Certificate issuer: /CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Certificate serial: 17A7186FBF6BFC239AA8BA611380AE89D336C02D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft Manifest number: BE Signing time: Tue 22 Sep 2026 07:41:08 +0000 Manifest this update: Tue 22 Sep 2026 07:36:08 +0000 Manifest next update: Wed 23 Sep 2026 09:41:08 +0000 Files and hashes: 1: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: b9vSoEj12pKvRl6GFlwGqwDqlYjOzNMwdmXHDB/QoPA=) 2: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl (hash: lFmjisQdLbDfT/1EEaVoOQqubXqbA+7lEkJpFQdgN/I=) 3: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uYXVOfIT7P6Dr33KoZiS4hHMvBugVDHDvO0rydITSy0=) 4: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: ymv/QzmelT0mY8Z1NXChI2j7830jRvZf9HvAHfEuKp0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a7:18:6f:bf:6b:fc:23:9a:a8:ba:61:13:80:ae:89:d3:36:c0:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Validity Not Before: Sep 22 07:36:08 2026 GMT Not After : Sep 23 09:41:08 2026 GMT Subject: CN=D9F3C036F306411C2EC1A5FDCD48D52966F4C390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:49:4a:3e:84:79:8c:17:41:1f:07:2e:5b: d3:81:52:b6:4b:ad:66:e5:73:9b:53:af:e6:bb:99: 32:fd:3f:16:04:fa:1b:fc:a8:48:1b:13:be:96:6f: bf:29:2f:41:8e:07:94:7d:b7:81:21:8f:f9:7c:ae: 55:c7:90:44:63:16:ed:e8:01:c7:28:2a:09:f0:6e: c9:80:16:ce:bb:d4:27:97:68:7d:a5:bf:1a:26:a7: 57:18:84:10:ab:49:78:0f:24:2d:e9:5f:fd:85:bf: c1:eb:f9:75:ae:be:8b:ed:d1:ec:36:61:c4:76:08: ed:72:7b:c5:e4:a2:25:ff:4a:4c:04:14:78:51:d0: 89:ea:14:35:2e:8e:4b:8b:a9:1c:a7:78:fe:80:e9: d7:59:68:be:89:22:78:70:f8:84:19:fd:a4:c8:df: 6c:f7:87:e3:b3:4e:3e:59:52:38:9f:c4:42:ab:a5: 1d:a1:da:cf:db:38:89:d9:ff:25:58:b5:f3:2c:bc: 84:92:ec:87:00:87:9f:cf:eb:52:3f:28:0c:f2:d7: 55:57:79:6f:fb:72:f9:df:fa:ba:29:97:04:00:ab: 1b:37:3d:31:52:a9:97:e3:47:77:c2:ec:7b:c3:f8: e2:48:98:23:a4:13:29:28:d2:cc:1e:43:59:c6:e8: 58:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F3:C0:36:F3:06:41:1C:2E:C1:A5:FD:CD:48:D5:29:66:F4:C3:90 X509v3 Authority Key Identifier: keyid:85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8c:73:93:7b:25:30:c5:70:93:01:51:5f:20:f3:bd:6e:86: 10:18:12:dc:a5:d4:06:a2:0f:12:68:a1:b3:68:9f:eb:78:aa: 97:f1:8b:b8:2e:bd:43:62:73:84:c2:17:47:2a:30:f1:d1:49: 30:48:fc:73:c8:28:f9:ca:53:07:3b:76:4c:06:a1:23:fe:15: a8:5a:82:cb:86:c0:1f:c6:fa:b8:a7:ef:9e:7f:7b:0a:80:67: 8a:c1:45:cc:7b:92:0e:7a:fd:72:af:4f:bb:df:96:aa:0d:82: e8:cc:c4:f3:61:a0:ed:b3:1a:a7:29:5d:53:11:b7:c3:64:7c: 27:7f:de:e0:c4:03:66:46:84:d9:f9:e7:1c:88:4d:8e:39:fb: aa:3f:f8:d7:03:9c:3a:bb:c7:6e:27:39:97:d0:9d:96:6f:d4: ce:b8:b0:20:b1:50:06:4e:e0:f9:a0:52:53:1f:b9:a1:4e:dc: d7:ed:9a:65:98:db:5e:a7:ef:0e:e2:72:33:8a:21:d8:7e:a4: 22:4f:6b:23:44:8d:67:65:78:9a:cf:6d:dd:34:ae:81:cf:8b: 32:0c:23:6e:10:ca:f6:ac:f3:42:82:e5:a3:38:81:8d:75:62: a9:a7:ec:8d:17:70:08:75:09:c1:0b:71:35:1c:77:fa:ae:b1: 35:9c:c0:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6cYb79r/COaqLphE4CuidM2wC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRB QzY2QTQwRTAeFw0yNjA5MjIwNzM2MDhaFw0yNjA5MjMwOTQxMDhaMDMxMTAvBgNV BAMTKEQ5RjNDMDM2RjMwNjQxMUMyRUMxQTVGRENENDhENTI5NjZGNEMzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkO0lKPoR5jBdBHwcuW9OBUrZL rWblc5tTr+a7mTL9PxYE+hv8qEgbE76Wb78pL0GOB5R9t4Ehj/l8rlXHkERjFu3o AccoKgnwbsmAFs671CeXaH2lvxomp1cYhBCrSXgPJC3pX/2Fv8Hr+XWuvovt0ew2 YcR2CO1ye8XkoiX/SkwEFHhR0InqFDUujkuLqRyneP6A6ddZaL6JInhw+IQZ/aTI 32z3h+OzTj5ZUjifxEKrpR2h2s/bOInZ/yVYtfMsvISS7IcAh5/P61I/KAzy11VX eW/7cvnf+roplwQAqxs3PTFSqZfjR3fC7HvD+OJImCOkEyko0sweQ1nG6Fj5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2fPANvMGQRwuwaX9zUjVKWb0w5AwHwYDVR0j BBgwFoAUhXdwLWFMjLgpyizFHCszdKxmpA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU0ODE2MDYtZDVmZC00MTk2LWFiY2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2 MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRBQzY2QTQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NTc3NzAyRDYxNEM4Q0I4MjlDQTJDQzUxQzJCMzM3NEFDNjZB NDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMz NzRBQzY2QTQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiMc5N7JTDFcJMBUV8g871uhhAYEtyl1Aai DxJoobNon+t4qpfxi7guvUNic4TCF0cqMPHRSTBI/HPIKPnKUwc7dkwGoSP+Faha gsuGwB/G+rin755/ewqAZ4rBRcx7kg56/XKvT7vflqoNgujMxPNhoO2zGqcpXVMR t8NkfCd/3uDEA2ZGhNn55xyITY45+6o/+NcDnDq7x24nOZfQnZZv1M64sCCxUAZO 4PmgUlMfuaFO3NftmmWY216n7w7icjOKIdh+pCJPayNEjWdleJrPbd00roHPizIM I24Qyvas80KC5aM4gY11Yqmn7I0XcAh1CcELcTUcd/qusTWcwAY= -----END CERTIFICATE-----Generated at Tue Sep 22 13:37:59 2026 by rpki-client