$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft File: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft (raw, json) Hash identifier: JZwYgzdCVUz8f+H2bN2+YSIe7drPcoCYbNJjd/GI/nA= Subject key identifier: 39:13:E3:38:F1:95:7D:15:EC:89:21:A0:F7:58:6B:EE:B3:B3:A9:16 Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B Certificate serial: 2C356B3CBDC6EC80EBC532B11D259DDCBA801037 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft Manifest number: BE Signing time: Tue 22 Sep 2026 10:14:17 +0000 Manifest this update: Tue 22 Sep 2026 10:09:17 +0000 Manifest next update: Wed 23 Sep 2026 10:19:17 +0000 Files and hashes: 1: 3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (hash: XOfBE0M//NVmw1PnMT7CBbLAiZUxR3hp7/NZC6tS6YU=) 2: 3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (hash: fRp9hKSeiIMGeJ+MieNF5m7UkyEfR2UYlACEnVASLW0=) 3: 3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (hash: I73d9iRN8q8Px3/P7wCZutSF5ZpcXS8cmnlSVjIS1X0=) 4: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (hash: u83G2z/OgRr1JotcRgVSQt+wVg3zOD/8jjA3e23r1pQ=) 5: 3130332e3234372e3132312e302f32342d3234203d3e20313439373436.roa (hash: OAg2GudHEhCjZV+7yoh21gYo7gVQiw3JjcWhfs55ypg=) 6: 8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl (hash: 0FfoSchKwVYA9H/DlJrYzzyCGuBYDc7QIncmm7m+GAI=) 7: 3130332e31372e3234352e302f32342d3234203d3e20313439373436.roa (hash: jIKXa26EJIti6zoWk205tbdwHju56rwlPhb8cVXzYUE=) 8: 3130332e3235352e3234322e302f32342d3234203d3e20313439373436.roa (hash: dsaz3tTpugC727zdxcdAxgqlfu80uu6D8x5UYRJhWPI=) 9: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (hash: N924KFBbNKaGBHgEpFzR4KDlXIesgFTKyMqUFZg/Phg=) 10: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (hash: WbiPm+iTkpPEW0o79B7kdDb8z2SOPBUszZwMsNkDB2k=) 11: 3130332e3234372e3132302e302f32322d3234203d3e203535363636.roa (hash: +slVwWGgb0HwYSRuQpmqK/dNFl15jSLLNf/wrxcpR60=) 12: 3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (hash: 0fO4VX4oBEcuTGcIjNy9teGp06wO+0vGySKALzd6ILU=) 13: 3131392e322e34382e302f32332d3234203d3e20313439373436.roa (hash: Ncz5mFTKd4IE7kNXe9gBUAT0Icl+1z3zQB7YfSDFHBU=) 14: 3230322e3134352e362e302f32332d3234203d3e203535363636.roa (hash: GYk5hEqp+MhM9Zsf+DSNQ9u0qzXbQ2dCA494BagxRaI=) 15: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (hash: mWXCbPzsFa1dYvWDE7xWkSjrlwuLQgJdcVPGB0v1f6U=) 16: 3131392e322e34382e302f32312d3234203d3e203535363636.roa (hash: 97BqGszfsrGqjj4tAigv9wxBSBeiY8MNbOvskTpViDQ=) 17: 323430313a313730303a3a2f33322d3438203d3e203535363636.roa (hash: Nf366z7083odp7IR4PDkJ5GuIfcHkTji6MKj/a8Q65k=) 18: 3131362e3235342e3131322e302f32312d3234203d3e203535363636.roa (hash: QIf4poWU9GclzJvfzow6rDGADrhZNDuHDpOnA1OEJJU=) 19: 34332e3235322e3135362e302f32322d3234203d3e20313439373436.roa (hash: Nvcm7ewLmZjBvUysGt40+sa1XdBbBBSl9mbMoMzL77w=) 20: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (hash: 2C2Pit223fgKnRI6ERFjjNxpcm112eB/BxZ0rix2ktw=) 21: 3131312e36382e32342e302f32312d3234203d3e203535363636.roa (hash: g7QAve2M16WshAcdg9i1WymFPs4Va3AKdhm/B6BQFgo=) 22: 3130332e3235352e3234302e302f32322d3234203d3e203535363636.roa (hash: knn+Cwhk09KfRx4x7E9v1Ql2hZAgWwcY0kUTIDWjIfw=) 23: 34392e3132382e3137362e302f32312d3234203d3e203535363636.roa (hash: P5fkn9tS99g2XrUG4Apipk9ejfQyJlucoKHgpqn+9oE=) 24: 3131322e37382e33322e302f32312d3234203d3e203535363636.roa (hash: 36bL5os36IFga3PLdgZOx3pMjOcRY/XQz2W7KvU2LBw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 10:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:35:6b:3c:bd:c6:ec:80:eb:c5:32:b1:1d:25:9d:dc:ba:80:10:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B Validity Not Before: Sep 22 10:09:17 2026 GMT Not After : Sep 23 10:19:17 2026 GMT Subject: CN=3913E338F1957D15EC8921A0F7586BEEB3B3A916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:0b:25:38:49:31:28:19:b5:3b:cf:ef:f7: f9:ce:d6:e3:ab:6e:98:a8:7e:ad:38:74:bb:a1:ca: 8a:9b:63:57:19:91:c0:84:9e:58:8b:8e:a5:a8:88: 3c:f6:45:45:34:c8:8f:9c:91:94:29:7e:52:ae:0c: da:00:a0:8b:69:d3:c3:b2:6e:15:c8:11:78:c2:a5: 87:77:be:ce:97:70:54:b9:15:92:f5:91:03:b0:3f: dc:b8:b2:d0:09:84:e2:54:38:9e:6f:aa:6c:b2:57: 78:72:9c:40:ff:e2:63:1a:ab:ef:32:f0:ec:e4:0c: ef:f8:90:0e:b4:41:93:1d:2f:bf:f0:d2:ea:a8:d3: 8c:d6:5e:c9:98:d6:27:71:6b:33:2a:f0:1a:d0:c2: a7:3a:59:2e:a0:36:2f:bd:34:a6:59:68:77:35:c6: 55:97:3b:41:2e:48:bd:36:38:d1:e3:f4:cc:2d:e9: 99:d8:e3:1e:6d:9b:46:ec:69:a1:fa:1e:f5:3f:22: 22:78:73:22:65:6e:8b:db:e7:c5:df:a6:01:0b:eb: de:3b:2e:c9:a7:e7:1b:90:8f:c2:57:5a:7e:8b:d5: bd:59:ca:7b:e2:e8:b0:de:c6:92:0b:66:87:2e:aa: 00:06:b4:11:ff:e9:bf:1b:ef:b9:f9:37:93:31:34: 7a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:13:E3:38:F1:95:7D:15:EC:89:21:A0:F7:58:6B:EE:B3:B3:A9:16 X509v3 Authority Key Identifier: keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0a:b5:c8:f1:b1:44:6d:5f:98:82:54:37:fc:5f:53:87:98: 4c:8c:0e:7d:eb:6a:b6:fb:0d:5a:c1:84:24:ef:aa:cf:7a:b7: 7d:1b:0a:5c:ac:65:e5:1d:cf:a9:6e:05:36:f9:b1:36:9c:6f: c7:1f:59:54:bf:9e:94:d5:32:f8:6d:2c:7a:62:fc:ae:78:a4: 34:43:f1:53:1b:b2:cb:7f:6f:ca:29:fe:25:dd:c8:a4:86:fc: 40:0d:74:5e:c7:c2:84:bb:df:f7:d5:4d:d3:2e:4d:12:84:48: 0c:b7:4e:81:f2:82:9e:90:b2:cf:dc:7a:74:84:71:54:3c:3e: 3f:ab:92:12:b1:85:69:54:75:25:e2:83:52:67:75:67:5c:14: b0:f6:46:3d:36:77:5b:5b:86:33:ad:03:36:60:fd:1f:8b:6f: 3a:97:8d:ef:30:1a:f3:b0:37:96:a8:0c:28:9f:03:01:b9:7b: 73:d4:43:84:43:7d:87:30:fa:5d:8b:25:04:a8:55:52:dd:4e: fe:3e:06:01:80:4a:37:be:05:da:63:14:0c:02:40:60:54:e2: 71:36:c1:4f:ca:a6:08:fd:a5:24:c6:98:bd:4e:a6:12:70:98: f6:98:78:81:fe:43:7b:06:fa:df:60:dd:23:6a:56:0b:bd:27: f0:d8:96:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDVrPL3G7IDrxTKxHSWd3LqAEDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4QzU2RUQxRUEwQzZGOTM5MUNEOTAwOEU3OENERjM4 MUMyNzIwQjAeFw0yNjA5MjIxMDA5MTdaFw0yNjA5MjMxMDE5MTdaMDMxMTAvBgNV BAMTKDM5MTNFMzM4RjE5NTdEMTVFQzg5MjFBMEY3NTg2QkVFQjNCM0E5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeMQslOEkxKBm1O8/v9/nO1uOr bpiofq04dLuhyoqbY1cZkcCEnliLjqWoiDz2RUU0yI+ckZQpflKuDNoAoItp08Oy bhXIEXjCpYd3vs6XcFS5FZL1kQOwP9y4stAJhOJUOJ5vqmyyV3hynED/4mMaq+8y 8OzkDO/4kA60QZMdL7/w0uqo04zWXsmY1idxazMq8BrQwqc6WS6gNi+9NKZZaHc1 xlWXO0EuSL02ONHj9Mwt6ZnY4x5tm0bsaaH6HvU/IiJ4cyJlbovb58XfpgEL6947 Lsmn5xuQj8JXWn6L1b1Zynvi6LDexpILZocuqgAGtBH/6b8b77n5N5MxNHqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUORPjOPGVfRXsiSGg91hr7rOzqRYwHwYDVR0j BBgwFoAUjIxW7R6gxvk5HNkAjnjN84HCcgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVhN2ExMTUtYjhiOC00OTBiLTgzMjAtYzllNTlhMTAwM2RkLzAvOEM4QzU2RUQx RUEwQzZGOTM5MUNEOTAwOEU3OENERjM4MUMyNzIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QzhDNTZFRDFFQTBDNkY5MzkxQ0Q5MDA4RTc4Q0RGMzgxQzI3 MjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVhN2ExMTUtYjhiOC00OTBiLTgz MjAtYzllNTlhMTAwM2RkLzAvOEM4QzU2RUQxRUEwQzZGOTM5MUNEOTAwOEU3OENE RjM4MUMyNzIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4KtcjxsURtX5iCVDf8X1OHmEyMDn3rarb7 DVrBhCTvqs96t30bClysZeUdz6luBTb5sTacb8cfWVS/npTVMvhtLHpi/K54pDRD 8VMbsst/b8op/iXdyKSG/EANdF7HwoS73/fVTdMuTRKESAy3ToHygp6Qss/cenSE cVQ8Pj+rkhKxhWlUdSXig1JndWdcFLD2Rj02d1tbhjOtAzZg/R+LbzqXje8wGvOw N5aoDCifAwG5e3PUQ4RDfYcw+l2LJQSoVVLdTv4+BgGASje+BdpjFAwCQGBU4nE2 wU/Kpgj9pSTGmL1OphJwmPaYeIH+Q3sG+t9g3SNqVgu9J/DYloE= -----END CERTIFICATE-----Generated at Tue Sep 22 13:38:11 2026 by rpki-client