$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft File: 8DD710534DF68AAB08361EE28306B8FDEE71D144.mft (raw, json) Hash identifier: zC02gkZjx3v/BATXOq9IqbfVhepcUfVTsOQwsDxm7yE= Subject key identifier: A2:74:75:0F:1E:93:E8:0E:9B:AE:C7:D6:A4:1C:66:59:8B:37:C3:6F Authority key identifier: 8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 Certificate issuer: /CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Certificate serial: 3F89F49790B32686CA3275981969EC6789792574 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 00:42:26 +0000 Manifest this update: Tue 22 Sep 2026 00:37:26 +0000 Manifest next update: Wed 23 Sep 2026 03:44:26 +0000 Files and hashes: 1: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: mt9y4ArG2gRgvhKLs+xygsf6wYJsNzK3vkSOg2Yasms=) 2: 8DD710534DF68AAB08361EE28306B8FDEE71D144.crl (hash: QwL5iQ+4hAIhwwmD9ec47AuhtRb7RWUVy8hMcZ4bySw=) 3: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: OzarGbzrKygn581G2dCLdzA7C4q7lKqki8T+O4VVozc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:89:f4:97:90:b3:26:86:ca:32:75:98:19:69:ec:67:89:79:25:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Validity Not Before: Sep 22 00:37:26 2026 GMT Not After : Sep 23 03:44:26 2026 GMT Subject: CN=A274750F1E93E80E9BAEC7D6A41C66598B37C36F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c5:8b:f9:51:cc:9a:38:de:5e:c9:c5:91:18: 67:fe:3f:26:46:2e:35:41:4a:bd:bc:2e:84:61:63: 68:4c:2d:3e:e2:52:4b:db:17:fd:29:a6:12:e9:c1: 7a:eb:b7:76:4f:57:e9:9c:d8:f2:e2:39:4d:e7:f8: d1:bf:c6:c9:e5:a7:e8:0d:e2:31:2a:85:e9:86:67: dc:25:01:fa:1b:64:d4:84:ca:3f:b7:2a:55:29:82: 7d:c9:58:7f:e6:16:1b:06:fc:4c:f1:6d:25:4a:1e: e5:98:c7:80:8a:3a:5c:c4:a8:3c:f7:55:27:72:70: cd:d9:61:b5:a5:30:0d:19:9f:88:9b:ed:35:74:41: 0a:28:35:d9:f8:36:e2:3b:7c:89:23:b4:8f:82:d5: be:d6:a7:f4:04:df:22:8e:e6:98:74:90:4e:c3:c4: 51:2a:4a:45:f1:6e:82:4a:ac:06:81:ab:9e:30:a7: 77:03:99:85:2c:8d:69:03:b0:50:d0:28:9d:e2:83: aa:9c:2e:c6:9d:e3:ce:8f:71:c7:5a:82:b9:46:20: 0e:eb:3f:58:ed:03:58:6e:9c:0f:45:69:04:4b:ff: 91:67:74:97:a3:b0:7c:c5:35:d0:f9:ae:dd:7b:c0: 25:4f:f4:d4:40:52:cb:55:e1:1c:25:24:37:31:54: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:74:75:0F:1E:93:E8:0E:9B:AE:C7:D6:A4:1C:66:59:8B:37:C3:6F X509v3 Authority Key Identifier: keyid:8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fe:29:3a:9b:30:58:81:01:4c:1a:f4:21:67:fa:38:8d:b7: e1:25:43:15:33:4e:8d:fe:6d:81:3f:29:6d:e4:02:59:7c:02: 8b:7d:ba:50:91:cb:c3:f9:f0:0e:9e:26:04:fa:07:47:11:e3: a0:89:ee:a4:f9:1f:71:8a:b4:e0:a1:39:09:b9:87:dc:ae:17: 34:a5:b4:08:fe:14:11:2b:d2:8b:2a:99:9c:32:c5:b0:03:ad: 95:2b:99:dc:e4:9c:99:52:b3:ac:1d:8a:df:66:8d:82:7a:ec: 15:ff:7c:75:c8:de:86:90:b6:ce:0f:56:d9:1c:2a:79:25:50: 58:98:59:e8:30:ac:de:08:7e:4b:65:8b:b1:62:1d:30:1b:88: 7f:b6:d8:2b:dc:34:62:2f:62:5a:a9:99:d0:fb:a7:0e:c3:8e: ce:e5:96:6a:6a:49:e1:fe:73:6b:a4:ff:89:0c:65:2d:77:29: 0a:0a:3b:a8:bb:35:e1:5e:8e:91:f9:6f:c0:53:0a:d9:c3:e9: c6:b8:9d:b7:74:fb:22:40:fd:67:92:32:5e:9e:ed:34:aa:de: ba:73:ac:47:97:95:13:79:59:e7:65:8a:a7:89:6c:50:fc:e2: 43:61:9d:6c:c5:0b:ef:69:ac:ff:6d:b5:a8:07:26:16:5a:e2: 8a:ee:ae:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4n0l5CzJobKMnWYGWnsZ4l5JXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4RkRF RTcxRDE0NDAeFw0yNjA5MjIwMDM3MjZaFw0yNjA5MjMwMzQ0MjZaMDMxMTAvBgNV BAMTKEEyNzQ3NTBGMUU5M0U4MEU5QkFFQzdENkE0MUM2NjU5OEIzN0MzNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xYv5UcyaON5eycWRGGf+PyZG LjVBSr28LoRhY2hMLT7iUkvbF/0pphLpwXrrt3ZPV+mc2PLiOU3n+NG/xsnlp+gN 4jEqhemGZ9wlAfobZNSEyj+3KlUpgn3JWH/mFhsG/EzxbSVKHuWYx4CKOlzEqDz3 VSdycM3ZYbWlMA0Zn4ib7TV0QQooNdn4NuI7fIkjtI+C1b7Wp/QE3yKO5ph0kE7D xFEqSkXxboJKrAaBq54wp3cDmYUsjWkDsFDQKJ3ig6qcLsad486PccdagrlGIA7r P1jtA1hunA9FaQRL/5FndJejsHzFNdD5rt17wCVP9NRAUstV4RwlJDcxVARvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUonR1Dx6T6A6brsfWpBxmWYs3w28wHwYDVR0j BBgwFoAUjdcQU032iqsINh7igwa4/e5x0UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjcyNGU0NWItMjU0Yi00ZmViLWJmOGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0 REY2OEFBQjA4MzYxRUUyODMwNkI4RkRFRTcxRDE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84REQ3MTA1MzRERjY4QUFCMDgzNjFFRTI4MzA2QjhGREVFNzFE MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4 RkRFRTcxRDE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIf+KTqbMFiBAUwa9CFn+jiNt+ElQxUzTo3+ bYE/KW3kAll8Aot9ulCRy8P58A6eJgT6B0cR46CJ7qT5H3GKtOChOQm5h9yuFzSl tAj+FBEr0osqmZwyxbADrZUrmdzknJlSs6wdit9mjYJ67BX/fHXI3oaQts4PVtkc KnklUFiYWegwrN4Ifktli7FiHTAbiH+22CvcNGIvYlqpmdD7pw7Djs7llmpqSeH+ c2uk/4kMZS13KQoKO6i7NeFejpH5b8BTCtnD6ca4nbd0+yJA/WeSMl6e7TSq3rpz rEeXlRN5WedliqeJbFD84kNhnWzFC+9prP9ttagHJhZa4orurp0= -----END CERTIFICATE-----Generated at Tue Sep 22 03:35:13 2026 by rpki-client