$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft File: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft (raw, json) Hash identifier: VQMGaYsm2L+u5aCJIaAtqePCaJT1EGi2lXQdFFErTak= Subject key identifier: 70:F3:86:C9:88:F7:56:63:A6:EA:BD:F0:04:CB:26:D7:47:9E:85:5C Authority key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC Certificate issuer: /CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Certificate serial: 2AB714A60C14148EEB11CCA2F011709291F6AC83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 09:32:32 +0000 Manifest this update: Thu 24 Sep 2026 09:27:32 +0000 Manifest next update: Fri 25 Sep 2026 11:55:32 +0000 Files and hashes: 1: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: 1A2FPi3qFfpFktBr0BMwE4Qlw/qHnARWJ5AeRKnXK6A=) 2: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: SmTgUdBZ5Gm9MMySo1hy5IKAztpPtBz8UdMvR7+0nS8=) 3: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: ohA41RSForcViKph50xgqT5CqEd5p9C2x10sK3Y5aMA=) 4: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: lR/t7u2Id9Tm/5RG+xZK/WwNnzBrvYgkf9KgY4fbdVM=) 5: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: UPuTvMckcIYLBYZ54B2+SqyW/0kMWr4eDhHIIPK9IxA=) 6: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl (hash: fGJO68yfExG/LLRDvZo4QtDIbO3ImuXNgZWTyOdAjUg=) 7: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: 4f9KIpK4kwJHh2WI32w5acQI96jbMxoNcHopJHYsb/k=) 8: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: b/pe4WCQVQeP9RG6dCLewRuXkpf7Roy9CSyh5UkTXss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b7:14:a6:0c:14:14:8e:eb:11:cc:a2:f0:11:70:92:91:f6:ac:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Validity Not Before: Sep 24 09:27:32 2026 GMT Not After : Sep 25 11:55:32 2026 GMT Subject: CN=70F386C988F75663A6EABDF004CB26D7479E855C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:21:a2:50:06:06:b6:a0:94:31:02:8c:47: 50:95:eb:c5:a6:db:00:59:52:16:35:30:ea:23:6d: ce:47:1a:f5:53:4b:1e:d1:55:c1:10:87:31:e3:32: e8:b3:6a:4f:6c:26:d1:fb:19:09:b8:46:63:f1:5c: 22:ca:cb:4c:7d:23:34:ff:ce:1a:de:14:2a:bc:77: 65:03:df:37:5b:5b:bb:10:b1:7c:18:b3:f0:4b:8e: 9f:2e:20:cb:60:d1:e1:42:89:72:ad:12:63:84:bb: 17:48:bb:e7:09:b0:ab:11:1b:7a:f4:00:a7:5a:56: ba:e3:5f:24:e2:79:75:7f:d5:db:80:7f:a3:5a:a1: f3:c9:f0:55:ac:c3:0d:63:fb:c6:e1:32:df:9a:bb: dd:aa:ce:a7:28:54:d6:a7:e0:50:ba:11:63:33:db: 15:b8:b7:54:60:36:a9:76:14:21:12:47:a9:e0:18: 75:ba:45:96:52:66:2d:dc:22:70:b3:25:eb:3e:15: 86:a3:67:41:e2:ae:6f:f1:98:e5:58:c5:6c:4b:1a: 5e:bc:fa:a4:d7:b8:74:27:4e:75:b0:ab:44:19:ac: d5:95:00:fc:e0:7f:a0:6d:bf:16:ba:9d:db:d3:8a: a6:aa:0f:b1:0c:ae:ef:55:6d:d8:2a:e1:e3:5c:95: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F3:86:C9:88:F7:56:63:A6:EA:BD:F0:04:CB:26:D7:47:9E:85:5C X509v3 Authority Key Identifier: keyid:8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:58:aa:a9:f8:c2:5c:1c:57:be:be:15:3b:c7:67:1a:a1:b0: 9d:99:7e:47:9d:0f:a1:16:54:8b:ce:8c:41:53:38:49:fd:8d: 96:75:c7:06:f4:23:99:8a:be:37:9c:38:94:72:b8:4a:8b:e6: bb:66:70:04:ac:57:f6:f8:24:65:59:1a:81:ef:9a:9c:c1:64: 86:29:6a:92:cc:38:7f:e7:12:1a:42:f9:69:d5:9c:27:37:c8: 57:b1:80:c8:b4:29:3a:21:69:75:4c:c6:61:51:f9:c9:c3:4d: bb:0e:b1:6c:33:7a:1b:14:be:a8:0e:a7:76:41:4a:5a:ed:b9: 0c:6e:46:54:3e:f1:8a:12:d9:e9:82:0c:12:5b:27:92:ba:b2: a4:e7:ee:41:79:e3:bf:67:26:8d:79:66:29:7b:ac:53:5d:74: 60:ac:e3:f5:f0:e3:39:6c:f5:6b:ff:dc:cc:06:60:08:fd:93: 02:ae:10:3f:39:62:86:38:de:cf:bf:1a:33:84:18:e6:7a:41: 9a:dd:71:6a:0f:04:2b:6e:64:ec:00:9c:74:8a:69:66:9e:61: 1c:06:27:1e:a0:fc:28:fd:46:f3:f5:8b:dd:b0:5d:a3:2d:61: ec:f5:61:bb:17:98:dd:b1:99:bb:88:d3:02:b4:96:0e:37:87: a4:c9:44:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrcUpgwUFI7rEcyi8BFwkpH2rIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0 RTNBRTZFQzAeFw0yNjA5MjQwOTI3MzJaFw0yNjA5MjUxMTU1MzJaMDMxMTAvBgNV BAMTKDcwRjM4NkM5ODhGNzU2NjNBNkVBQkRGMDA0Q0IyNkQ3NDc5RTg1NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyryGiUAYGtqCUMQKMR1CV68Wm 2wBZUhY1MOojbc5HGvVTSx7RVcEQhzHjMuizak9sJtH7GQm4RmPxXCLKy0x9IzT/ zhreFCq8d2UD3zdbW7sQsXwYs/BLjp8uIMtg0eFCiXKtEmOEuxdIu+cJsKsRG3r0 AKdaVrrjXyTieXV/1duAf6NaofPJ8FWsww1j+8bhMt+au92qzqcoVNan4FC6EWMz 2xW4t1RgNql2FCESR6ngGHW6RZZSZi3cInCzJes+FYajZ0Hirm/xmOVYxWxLGl68 +qTXuHQnTnWwq0QZrNWVAPzgf6Btvxa6ndvTiqaqD7EMru9Vbdgq4eNclW81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcPOGyYj3VmOm6r3wBMsm10eehVwwHwYDVR0j BBgwFoAUjuNZiH7UeUfnTsw9Etfdh0465uwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVjN2E0MDQtZWIzZi00Y2YxLTk5ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3 RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0RTNBRTZFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUUzNTk4ODdFRDQ3OTQ3RTc0RUNDM0QxMkQ3REQ4NzRFM0FF NkVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0RE ODc0RTNBRTZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdYqqn4wlwcV76+FTvHZxqhsJ2ZfkedD6EW VIvOjEFTOEn9jZZ1xwb0I5mKvjecOJRyuEqL5rtmcASsV/b4JGVZGoHvmpzBZIYp apLMOH/nEhpC+WnVnCc3yFexgMi0KTohaXVMxmFR+cnDTbsOsWwzehsUvqgOp3ZB SlrtuQxuRlQ+8YoS2emCDBJbJ5K6sqTn7kF5479nJo15Zil7rFNddGCs4/Xw4zls 9Wv/3MwGYAj9kwKuED85YoY43s+/GjOEGOZ6QZrdcWoPBCtuZOwAnHSKaWaeYRwG Jx6g/Cj9RvP1i92wXaMtYez1YbsXmN2xmbuI0wK0lg43h6TJRLM= -----END CERTIFICATE-----Generated at Thu Sep 24 22:54:39 2026 by rpki-client