$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft File: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft (raw, json) Hash identifier: YCxDX57fB4dM3il0IgIaFumEg4QQCD4vXmOrXoM6DKM= Subject key identifier: BE:8A:BD:E2:C9:B2:54:5F:58:CD:03:F9:61:D4:F8:8C:DC:A5:57:DB Authority key identifier: 87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2 Certificate issuer: /CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2 Certificate serial: 23214CB63672B44744552FB5177F735A4A55184E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:25:52 +0000 Manifest this update: Mon 21 Sep 2026 07:20:52 +0000 Manifest next update: Tue 22 Sep 2026 10:34:52 +0000 Files and hashes: 1: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: TG9ZchK6MwAHkiaJ/8wY22oJErP/aDt3mOhVppYOUpA=) 2: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl (hash: Az0hHfLjLOfk5SLGn62eXaHfYTSm7N7m3ruSvzDDMMI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:21:4c:b6:36:72:b4:47:44:55:2f:b5:17:7f:73:5a:4a:55:18:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2 Validity Not Before: Sep 21 07:20:52 2026 GMT Not After : Sep 22 10:34:52 2026 GMT Subject: CN=BE8ABDE2C9B2545F58CD03F961D4F88CDCA557DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:2c:3c:c5:75:f7:9d:0c:37:60:19:89:1f: 4a:1e:c3:b9:99:f6:fa:ac:9a:aa:1b:3c:28:ab:c6: ef:54:5e:9c:78:35:4e:b0:cc:5b:3e:7d:20:a1:2e: 6c:05:2a:fe:e9:d2:db:94:05:a2:e7:46:26:93:fe: d6:5e:64:17:2b:95:39:55:bf:b2:46:e5:7f:5e:f6: 14:b5:ac:f6:c9:0b:89:ae:b4:51:a0:81:e1:60:e4: 08:5e:ee:d5:e5:8e:21:84:c1:47:a7:01:6f:1f:5c: 46:0f:9b:8b:7d:aa:6e:05:9b:8b:9b:17:19:0b:46: cb:12:79:95:f9:2c:b5:c0:db:46:06:d4:e9:d5:0d: 30:56:db:41:73:4a:ef:bc:92:54:4a:4c:c7:90:6a: 11:60:74:58:eb:96:ca:f6:91:ee:6b:ed:d7:e7:5b: b7:10:e5:0d:85:55:e2:48:22:dc:d4:3a:92:91:2c: 90:11:3d:c5:e7:0c:9a:b8:86:0e:fc:02:20:9b:72: 25:52:3f:83:50:dd:24:16:0a:d3:25:ba:36:81:b8: 51:ae:66:d0:ff:33:b7:0f:5c:7b:9e:8d:b1:d1:58: ba:96:e3:b9:8e:44:ed:99:6b:7d:c7:f3:1a:ff:00: ce:f1:d3:ef:bc:76:2d:bd:5e:1a:a9:0c:a4:b6:b1: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8A:BD:E2:C9:B2:54:5F:58:CD:03:F9:61:D4:F8:8C:DC:A5:57:DB X509v3 Authority Key Identifier: keyid:87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c8:10:32:d9:a2:5a:05:40:fa:7d:84:4a:ec:bf:a0:71:b4: eb:88:42:ef:a9:98:8d:93:73:f7:4e:5e:65:ad:5b:d6:58:4d: f6:1e:4c:9b:12:58:36:61:8a:1c:b8:ee:d2:9e:62:31:74:c7: b1:d2:5d:eb:e4:1d:6d:52:57:04:9f:88:61:2f:b7:2e:43:dc: 8c:b0:74:45:c8:d1:bd:41:a6:bf:68:1c:32:ee:04:34:da:46: 09:05:36:bd:6b:36:3b:bd:f7:6c:a9:a0:1b:3f:10:4b:44:d6: 1c:0e:7e:62:5e:0a:7e:17:cd:f9:80:22:0d:ea:26:76:6d:fa: 93:6c:0b:b4:43:c1:31:36:57:79:18:e0:91:fe:1b:f9:ea:03: 6e:83:71:5f:25:e1:06:3c:e6:7e:fd:07:2a:6e:df:2b:be:2b: 27:64:f5:cd:cd:be:8f:03:86:77:1a:18:68:f1:62:d2:70:a6: 05:25:c9:bd:44:b8:04:24:8d:0a:96:ca:ee:66:44:0b:29:7d: f5:97:e2:6c:d2:0a:6b:be:fc:70:a9:d0:d6:6b:d8:8a:eb:a1: 48:78:03:6a:bc:96:e3:0e:6a:ba:56:da:49:90:4c:41:ad:db: e6:a9:77:9a:19:98:3c:b1:7b:7c:31:b2:b6:1d:88:c7:7f:40: 98:62:38:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyFMtjZytEdEVS+1F39zWkpVGE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcwM0JCNkYxRUJDN0FFMkZFODBEQ0I5Mjk1QkM4Njgy OTkwQjRCMjAeFw0yNjA5MjEwNzIwNTJaFw0yNjA5MjIxMDM0NTJaMDMxMTAvBgNV BAMTKEJFOEFCREUyQzlCMjU0NUY1OENEMDNGOTYxRDRGODhDRENBNTU3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhSw8xXX3nQw3YBmJH0oew7mZ 9vqsmqobPCirxu9UXpx4NU6wzFs+fSChLmwFKv7p0tuUBaLnRiaT/tZeZBcrlTlV v7JG5X9e9hS1rPbJC4mutFGggeFg5Ahe7tXljiGEwUenAW8fXEYPm4t9qm4Fm4ub FxkLRssSeZX5LLXA20YG1OnVDTBW20FzSu+8klRKTMeQahFgdFjrlsr2ke5r7dfn W7cQ5Q2FVeJIItzUOpKRLJARPcXnDJq4hg78AiCbciVSP4NQ3SQWCtMlujaBuFGu ZtD/M7cPXHuejbHRWLqW47mORO2Za33H8xr/AM7x0++8di29XhqpDKS2sc/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvoq94smyVF9YzQP5YdT4jNylV9swHwYDVR0j BBgwFoAUhwO7bx68euL+gNy5KVvIaCmQtLIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQ4N2JlZWQtNjMzMC00ZjMzLTkxMDUtODc3MjJjZGYyZGQwLzAvODcwM0JCNkYx RUJDN0FFMkZFODBEQ0I5Mjk1QkM4NjgyOTkwQjRCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzAzQkI2RjFFQkM3QUUyRkU4MERDQjkyOTVCQzg2ODI5OTBC NEIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvODcwM0JCNkYxRUJDN0FFMkZFODBEQ0I5Mjk1QkM4 NjgyOTkwQjRCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3IEDLZoloFQPp9hErsv6BxtOuIQu+pmI2T c/dOXmWtW9ZYTfYeTJsSWDZhihy47tKeYjF0x7HSXevkHW1SVwSfiGEvty5D3Iyw dEXI0b1Bpr9oHDLuBDTaRgkFNr1rNju992ypoBs/EEtE1hwOfmJeCn4XzfmAIg3q JnZt+pNsC7RDwTE2V3kY4JH+G/nqA26DcV8l4QY85n79Bypu3yu+Kydk9c3Nvo8D hncaGGjxYtJwpgUlyb1EuAQkjQqWyu5mRAspffWX4mzSCmu+/HCp0NZr2IrroUh4 A2q8luMOarpW2kmQTEGt2+apd5oZmDyxe3wxsrYdiMd/QJhiOME= -----END CERTIFICATE-----Generated at Mon Sep 21 19:01:20 2026 by rpki-client