$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft File: 8EE74284879D5768C14DFF59F408307443024F52.mft (raw, json) Hash identifier: PIyckUvqn+4cT28GkG9lRZ5sA/1r9vICuLMuzNsRqeM= Subject key identifier: 6F:FF:B1:47:94:EC:C3:72:AF:31:C9:E6:5C:91:3C:F8:5B:E3:7C:82 Authority key identifier: 8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52 Certificate issuer: /CN=8EE74284879D5768C14DFF59F408307443024F52 Certificate serial: 66040DBD877BAA4A414D435171195F70E3A13819 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft Manifest number: BD Signing time: Mon 21 Sep 2026 12:57:27 +0000 Manifest this update: Mon 21 Sep 2026 12:52:27 +0000 Manifest next update: Tue 22 Sep 2026 13:03:27 +0000 Files and hashes: 1: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: qVGDGNhc8J+1zH3v5gLnqpqbccQ37nMtlVBvAtU2Qic=) 2: 8EE74284879D5768C14DFF59F408307443024F52.crl (hash: sndTtdgF+/z8a5SbAsxNLi31Db70GrqFRM2SK21QBpA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:04:0d:bd:87:7b:aa:4a:41:4d:43:51:71:19:5f:70:e3:a1:38:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE74284879D5768C14DFF59F408307443024F52 Validity Not Before: Sep 21 12:52:27 2026 GMT Not After : Sep 22 13:03:27 2026 GMT Subject: CN=6FFFB14794ECC372AF31C9E65C913CF85BE37C82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:56:82:c0:e3:6e:04:46:cc:17:df:c6:55: 1b:60:6d:79:c2:b2:56:a8:6c:0d:3c:81:3b:18:10: cc:d7:e7:ff:11:1d:66:60:3f:09:9f:8a:a0:d4:eb: 64:e9:4b:96:8c:07:52:ed:96:ce:cf:4d:6a:4f:bb: 06:3d:43:6d:b7:47:26:1a:a8:08:71:e5:8c:e5:de: 2f:19:cc:28:56:6f:88:12:1b:4e:cd:68:7f:b1:a7: 0e:83:00:76:b4:0f:22:d3:7a:10:42:e8:d1:84:90: cd:91:09:66:13:e8:d8:4c:64:fc:af:f3:21:eb:13: 63:dc:90:47:7d:18:bd:4d:20:29:5c:67:2b:63:47: 3f:ed:30:fb:ad:2a:b4:9e:18:d6:b8:62:eb:f7:22: d6:f2:18:fb:bb:09:d8:c3:60:fe:2f:9f:a0:dc:af: 13:00:30:24:d6:6a:33:fd:ff:c5:06:6b:2b:44:99: 7d:23:21:f2:52:26:52:4a:74:f6:1c:e2:0c:12:92: c6:9e:ea:c4:ae:55:0c:e8:65:e4:f1:d0:15:cc:e7: 41:ab:bf:da:89:67:c7:23:d6:24:c5:fc:3d:db:13: 52:04:a0:71:75:de:c4:97:cb:98:43:cb:1f:63:87: 32:01:b3:b2:e5:38:99:e5:1f:e6:b2:ba:b1:91:7d: 30:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FF:B1:47:94:EC:C3:72:AF:31:C9:E6:5C:91:3C:F8:5B:E3:7C:82 X509v3 Authority Key Identifier: keyid:8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f8:79:15:cb:ff:8c:08:49:ea:cb:80:a9:ae:04:f2:39:8f: b3:ba:b5:0b:25:de:74:19:d7:2d:9e:8e:9c:c9:53:d3:6a:d5: f9:73:d5:c6:33:d0:ba:ad:93:d4:32:a7:f3:68:4f:d8:d4:1f: 92:30:72:90:b6:da:6a:d9:09:ba:3d:f6:b8:a3:1b:3d:4e:16: 98:8e:db:10:9f:e3:ff:67:db:43:ec:5f:8d:f4:58:a8:90:75: 96:f6:35:9c:62:d9:dd:71:30:d6:ed:78:d1:e7:08:1c:26:b8: d2:7e:e6:cc:0a:46:01:1e:45:bc:81:62:40:c0:ea:65:5c:cb: 2f:95:bb:e3:7c:e6:bf:6c:f9:5d:34:2d:ca:de:f1:34:a1:1c: c3:3f:97:82:99:2a:3a:8f:f8:ec:52:e2:01:1c:38:62:57:cb: 9c:74:43:35:73:0a:72:75:ce:86:5b:48:cc:c6:1a:4d:f8:51: 8e:92:8a:15:88:46:70:6b:03:83:8d:70:d7:9f:73:cd:72:8d: 9c:ca:c0:5e:fc:cf:00:37:de:a6:c0:83:7f:39:71:53:0e:bd: 87:98:53:5c:b9:d3:31:5c:18:0c:a1:6f:e4:5b:3c:a1:7c:87: 53:1d:49:16:8c:d6:6c:7d:c6:60:dd:05:30:17:2a:dc:20:7c: 21:67:6e:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgQNvYd7qkpBTUNRcRlfcOOhOBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0 MzAyNEY1MjAeFw0yNjA5MjExMjUyMjdaFw0yNjA5MjIxMzAzMjdaMDMxMTAvBgNV BAMTKDZGRkZCMTQ3OTRFQ0MzNzJBRjMxQzlFNjVDOTEzQ0Y4NUJFMzdDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UFaCwONuBEbMF9/GVRtgbXnC slaobA08gTsYEMzX5/8RHWZgPwmfiqDU62TpS5aMB1Ltls7PTWpPuwY9Q223RyYa qAhx5Yzl3i8ZzChWb4gSG07NaH+xpw6DAHa0DyLTehBC6NGEkM2RCWYT6NhMZPyv 8yHrE2PckEd9GL1NIClcZytjRz/tMPutKrSeGNa4Yuv3ItbyGPu7CdjDYP4vn6Dc rxMAMCTWajP9/8UGaytEmX0jIfJSJlJKdPYc4gwSksae6sSuVQzoZeTx0BXM50Gr v9qJZ8cj1iTF/D3bE1IEoHF13sSXy5hDyx9jhzIBs7LlOJnlH+ayurGRfTB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb/+xR5Tsw3KvMcnmXJE8+FvjfIIwHwYDVR0j BBgwFoAUjudChIedV2jBTf9Z9AgwdEMCT1IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMyZTk0NWMtZWQzZC00ODlhLTgzZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4 NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0MzAyNEY1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUU3NDI4NDg3OUQ1NzY4QzE0REZGNTlGNDA4MzA3NDQzMDI0 RjUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMw NzQ0MzAyNEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA74eRXL/4wISerLgKmuBPI5j7O6tQsl3nQZ 1y2ejpzJU9Nq1flz1cYz0Lqtk9Qyp/NoT9jUH5IwcpC22mrZCbo99rijGz1OFpiO 2xCf4/9n20PsX430WKiQdZb2NZxi2d1xMNbteNHnCBwmuNJ+5swKRgEeRbyBYkDA 6mVcyy+Vu+N85r9s+V00Lcre8TShHMM/l4KZKjqP+OxS4gEcOGJXy5x0QzVzCnJ1 zoZbSMzGGk34UY6SihWIRnBrA4ONcNefc81yjZzKwF78zwA33qbAg385cVMOvYeY U1y50zFcGAyhb+RbPKF8h1MdSRaM1mx9xmDdBTAXKtwgfCFnbpU= -----END CERTIFICATE-----Generated at Tue Sep 22 01:10:39 2026 by rpki-client