$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft File: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft (raw, json) Hash identifier: XNb3khxSggFHtbkxR/0lXYFVJdeLhy8+9sBhprRcSzc= Subject key identifier: 01:81:74:14:07:A8:2C:7D:3C:EF:D2:18:52:B7:EE:5F:90:2B:91:DA Authority key identifier: 8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 Certificate issuer: /CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Certificate serial: 3883620525BDCFA4AB98D0C1E29685001DF1199F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft Manifest number: BD Signing time: Sun 20 Sep 2026 15:15:58 +0000 Manifest this update: Sun 20 Sep 2026 15:10:58 +0000 Manifest next update: Mon 21 Sep 2026 15:19:58 +0000 Files and hashes: 1: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 0ts/w6oKmrt+r0C8EDap/FK5Uc/o23APxLZIMW88Oo4=) 2: 3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa (hash: C1r63J+tGfKPbhbl/dI9G1bDePtMsBvnKWbTmvbk0OA=) 3: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl (hash: 9KlUA0rNLjAkbckU/LtcFYYwBGK4SDmFT81UR379dpU=) 4: 3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa (hash: gMfUFYSPdVxpBBuGIFKR77copbFj1wN/NAnjtAfZ1Zo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:83:62:05:25:bd:cf:a4:ab:98:d0:c1:e2:96:85:00:1d:f1:19:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Validity Not Before: Sep 20 15:10:58 2026 GMT Not After : Sep 21 15:19:58 2026 GMT Subject: CN=0181741407A82C7D3CEFD21852B7EE5F902B91DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:43:ba:4d:30:d3:91:15:bf:4d:a4:2d:82:90: 7e:67:f1:93:13:31:67:a4:ad:79:4b:d0:52:e3:a2: a8:ae:75:aa:f1:79:fd:51:f9:d7:e5:32:4c:3a:cb: 17:cf:0a:25:0f:8c:35:de:c8:fd:58:9e:73:37:ff: fe:57:ab:7b:e4:75:6a:9b:43:d1:82:4f:c5:1c:d7: d9:32:1d:ca:89:68:94:c7:19:8f:4b:e0:20:33:2c: f5:76:18:14:6c:5a:a3:5e:29:2f:4a:4c:ee:10:78: 02:70:59:a9:b8:7d:52:66:dd:4d:b6:e6:cd:76:ca: a4:31:7b:f1:e2:37:d5:3f:4d:38:41:62:ec:13:b9: bb:e5:b7:6b:15:2d:f9:a0:59:90:3c:42:52:54:b6: a7:f4:41:ab:ae:ca:d0:55:cd:72:41:c7:9e:b2:81: c4:61:1e:82:e8:38:bd:64:fb:44:cd:60:65:ce:2e: 9c:76:b1:c2:97:5b:95:f1:f2:1f:5c:28:86:38:ac: af:f3:ad:11:a9:ce:90:be:b9:21:c6:2e:17:42:a8: 3b:bb:62:57:54:b7:3a:b3:24:fd:bc:22:a1:29:c6: 75:d6:bb:a9:33:68:9b:69:43:29:0a:33:30:5b:c7: 6a:10:d0:22:f0:34:6a:71:a2:22:63:44:08:5f:f7: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:81:74:14:07:A8:2C:7D:3C:EF:D2:18:52:B7:EE:5F:90:2B:91:DA X509v3 Authority Key Identifier: keyid:8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:ee:33:b2:0f:5d:af:46:a3:42:2e:63:82:be:01:c2:9c:cf: 56:b4:50:df:1c:66:c8:2c:5c:91:75:c7:25:48:45:39:0d:32: 29:06:3d:c4:3f:99:b1:d8:7a:8a:11:d8:ea:c1:d1:4b:f4:29: a6:ab:cf:48:c3:84:fd:fc:d1:a0:ea:2c:12:9a:69:56:0b:cc: 79:ff:34:b1:73:3c:b7:0a:49:2b:ec:a6:b7:00:01:dd:d6:3c: af:b3:d5:0a:6e:c9:0b:9b:7f:68:2f:17:1e:82:37:58:d8:f2: dd:44:04:07:95:a5:f4:50:0e:29:de:7f:95:fa:37:45:f1:51: 06:6f:5c:83:24:4f:5d:14:e7:e7:20:f8:8d:7e:34:28:ac:f7: 1f:7f:1f:d5:ea:c7:f5:3b:3d:00:d5:ae:00:ef:48:73:0d:06: f1:d7:c0:d0:87:e3:59:07:c3:53:14:84:50:5a:f6:1c:be:75: f4:c2:67:23:d9:5b:44:25:b8:2f:45:f4:33:f9:a1:58:98:9d: 34:5c:b3:49:c7:fa:33:e6:cd:14:b5:ea:db:85:c1:4e:54:c8: ad:50:f0:d2:ac:1a:7c:64:b5:cb:e5:b9:13:a5:90:ec:73:01: b1:dd:c7:21:e9:d4:46:c9:2a:db:3f:0f:56:bc:f4:b6:de:68: b2:fe:7b:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOINiBSW9z6SrmNDB4paFAB3xGZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFCRDQ1NThDOUY5NEZGQzY3MEE1MkRCMzlGMEM5QjBC ODM5ODIyNTAeFw0yNjA5MjAxNTEwNThaFw0yNjA5MjExNTE5NThaMDMxMTAvBgNV BAMTKDAxODE3NDE0MDdBODJDN0QzQ0VGRDIxODUyQjdFRTVGOTAyQjkxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQ7pNMNORFb9NpC2CkH5n8ZMT MWekrXlL0FLjoqiudarxef1R+dflMkw6yxfPCiUPjDXeyP1YnnM3//5Xq3vkdWqb Q9GCT8Uc19kyHcqJaJTHGY9L4CAzLPV2GBRsWqNeKS9KTO4QeAJwWam4fVJm3U22 5s12yqQxe/HiN9U/TThBYuwTubvlt2sVLfmgWZA8QlJUtqf0QauuytBVzXJBx56y gcRhHoLoOL1k+0TNYGXOLpx2scKXW5Xx8h9cKIY4rK/zrRGpzpC+uSHGLhdCqDu7 YldUtzqzJP28IqEpxnXWu6kzaJtpQykKMzBbx2oQ0CLwNGpxoiJjRAhf91DBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAYF0FAeoLH0879IYUrfuX5ArkdowHwYDVR0j BBgwFoAUir1FWMn5T/xnClLbOfDJsLg5giUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM4N2U4NWQtYjE4NS00MzM0LTgwMWItNDljOGM4YjkxODQ0LzAvOEFCRDQ1NThD OUY5NEZGQzY3MEE1MkRCMzlGMEM5QjBCODM5ODIyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUJENDU1OEM5Rjk0RkZDNjcwQTUyREIzOUYwQzlCMEI4Mzk4 MjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvOEFCRDQ1NThDOUY5NEZGQzY3MEE1MkRCMzlGMEM5 QjBCODM5ODIyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANXuM7IPXa9Go0IuY4K+AcKcz1a0UN8cZsgs XJF1xyVIRTkNMikGPcQ/mbHYeooR2OrB0Uv0Kaarz0jDhP380aDqLBKaaVYLzHn/ NLFzPLcKSSvsprcAAd3WPK+z1QpuyQubf2gvFx6CN1jY8t1EBAeVpfRQDinef5X6 N0XxUQZvXIMkT10U5+cg+I1+NCis9x9/H9Xqx/U7PQDVrgDvSHMNBvHXwNCH41kH w1MUhFBa9hy+dfTCZyPZW0QluC9F9DP5oViYnTRcs0nH+jPmzRS16tuFwU5UyK1Q 8NKsGnxktcvluROlkOxzAbHdxyHp1EbJKts/D1a89LbeaLL+exk= -----END CERTIFICATE-----Generated at Mon Sep 21 04:56:00 2026 by rpki-client