$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft File: 8638D28E3BD2280125963C7B30C34A226398A39F.mft (raw, json) Hash identifier: A6i1nwJR5AXGgZop/Pki8JvVmFYdC3go4RJBRBSwu+g= Subject key identifier: 61:62:7C:BB:35:79:A5:F9:04:34:9E:E4:78:95:21:6C:18:BE:01:4C Authority key identifier: 86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F Certificate issuer: /CN=8638D28E3BD2280125963C7B30C34A226398A39F Certificate serial: 7F6695EA04EA8B6A12418425A85DFB06221C8BCD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft Manifest number: CD Signing time: Sat 03 Oct 2026 00:57:02 +0000 Manifest this update: Sat 03 Oct 2026 00:52:02 +0000 Manifest next update: Sun 04 Oct 2026 03:02:02 +0000 Files and hashes: 1: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 9/PIsC2XMlKZxB7OIm0Zr26jWW2WY5JodvXs3A+orYA=) 2: 8638D28E3BD2280125963C7B30C34A226398A39F.crl (hash: VCnDyeiE1wIK3KwgYCVGViUrwCQpWQXszu+ypBhLkGI=) 3: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: 7CUUFxXBF00bkdoTMxFKQ2ao9fNDKa33JZ3nwQoI/v0=) 4: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: K8RuD4iVWNDoq5/nKnK+l+BvrNOPQLNp6COtNPtCMfY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 21:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:66:95:ea:04:ea:8b:6a:12:41:84:25:a8:5d:fb:06:22:1c:8b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8638D28E3BD2280125963C7B30C34A226398A39F Validity Not Before: Oct 3 00:52:02 2026 GMT Not After : Oct 4 03:02:02 2026 GMT Subject: CN=61627CBB3579A5F904349EE47895216C18BE014C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7e:67:23:71:f2:1c:68:87:ba:4f:2e:15:dc: f5:a8:4d:b6:b2:da:d5:62:40:3d:21:17:74:f8:61: 7b:f8:60:71:ff:9e:d3:be:6a:28:78:84:98:a8:25: ab:45:d5:57:97:2d:c0:e8:3c:96:2d:49:78:36:54: a0:6c:55:a5:92:2c:4e:3b:eb:12:14:b0:7b:3f:85: ab:40:d0:95:c0:de:b8:a2:ad:88:af:a8:c6:eb:3c: 28:32:a6:5d:5c:df:0b:c2:ae:26:c6:9b:2e:2c:c5: 32:f5:17:e1:a2:a8:9b:15:a1:f7:fa:33:c2:32:ac: e2:0b:d0:49:a3:22:7c:e7:d4:f8:a3:a5:f8:97:20: 5a:63:2e:ae:4d:e2:59:de:c2:48:c8:f3:8d:be:5e: a8:97:db:be:40:f6:86:d2:d4:cf:60:8b:24:12:65: cd:64:c5:45:af:5a:45:d1:c1:de:fd:25:82:e1:5c: 0a:4c:11:3a:0d:a4:66:78:c3:bc:3c:9c:cb:6d:8c: fd:aa:2a:b5:eb:fc:81:81:9e:73:34:73:93:36:6c: 0b:f1:12:aa:13:fd:42:e2:04:b6:84:21:36:99:02: e7:00:6b:97:78:15:c2:2d:76:7f:d5:e6:6f:49:92: 75:6c:a4:ca:0c:29:52:27:5e:ab:15:05:22:3e:2e: 61:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:62:7C:BB:35:79:A5:F9:04:34:9E:E4:78:95:21:6C:18:BE:01:4C X509v3 Authority Key Identifier: keyid:86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:12:b8:fe:86:46:65:7f:f5:8c:7f:f1:79:4a:f6:b6:18:fa: f1:16:ce:0e:da:e1:8a:3f:c6:c9:aa:19:2d:0b:70:00:34:a5: e3:72:1c:53:79:e2:12:65:32:a9:a9:60:44:da:c7:a3:41:6f: e2:6a:d7:b6:28:ed:86:e6:44:9d:35:f3:b8:a2:77:35:e0:ee: e9:7d:58:d0:ce:fc:24:e4:6c:96:ad:b1:b8:ed:0e:1d:87:72: c2:f5:93:e6:8a:05:74:c9:7e:c1:d4:13:8d:d7:5c:3b:44:2b: 90:c1:dc:d4:87:d4:16:1f:cf:48:e6:22:29:9a:ef:0d:a2:39: 6c:d3:5d:eb:3f:7b:05:5a:db:6e:46:83:88:91:06:f4:60:37: 63:18:5f:bc:6a:94:64:08:c3:fa:2a:eb:34:84:9f:bf:ec:b4: 86:06:7c:e5:2c:d6:ef:34:20:8f:59:94:74:fa:a5:f7:89:9e: 67:82:af:f6:11:c1:8c:d6:ca:e0:62:c6:8e:ee:44:68:85:65: db:8f:1a:ed:38:e6:a1:3f:2c:24:6d:20:9d:d8:62:22:c4:62: 1d:fb:eb:b7:b1:1b:69:02:39:d5:b6:be:0b:27:18:73:e4:5e: ac:79:fe:67:64:46:89:a0:a4:f8:25:ea:61:77:ea:52:9c:67: 0e:52:e9:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2aV6gTqi2oSQYQlqF37BiIci80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2 Mzk4QTM5RjAeFw0yNjEwMDMwMDUyMDJaFw0yNjEwMDQwMzAyMDJaMDMxMTAvBgNV BAMTKDYxNjI3Q0JCMzU3OUE1RjkwNDM0OUVFNDc4OTUyMTZDMThCRTAxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgfmcjcfIcaIe6Ty4V3PWoTbay 2tViQD0hF3T4YXv4YHH/ntO+aih4hJioJatF1VeXLcDoPJYtSXg2VKBsVaWSLE47 6xIUsHs/hatA0JXA3riirYivqMbrPCgypl1c3wvCribGmy4sxTL1F+GiqJsVoff6 M8IyrOIL0EmjInzn1PijpfiXIFpjLq5N4lnewkjI842+XqiX275A9obS1M9giyQS Zc1kxUWvWkXRwd79JYLhXApMEToNpGZ4w7w8nMttjP2qKrXr/IGBnnM0c5M2bAvx EqoT/ULiBLaEITaZAucAa5d4FcItdn/V5m9JknVspMoMKVInXqsVBSI+LmHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYWJ8uzV5pfkENJ7keJUhbBi+AUwwHwYDVR0j BBgwFoAUhjjSjjvSKAElljx7MMNKImOYo58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdmZjAxZDAtMjZmOS00YjIwLWEzMTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUz QkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2Mzk4QTM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjM4RDI4RTNCRDIyODAxMjU5NjNDN0IzMEMzNEEyMjYzOThB MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRB MjI2Mzk4QTM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgSuP6GRmV/9Yx/8XlK9rYY+vEWzg7a4Yo/ xsmqGS0LcAA0peNyHFN54hJlMqmpYETax6NBb+Jq17Yo7YbmRJ0187iidzXg7ul9 WNDO/CTkbJatsbjtDh2HcsL1k+aKBXTJfsHUE43XXDtEK5DB3NSH1BYfz0jmIima 7w2iOWzTXes/ewVa225Gg4iRBvRgN2MYX7xqlGQIw/oq6zSEn7/stIYGfOUs1u80 II9ZlHT6pfeJnmeCr/YRwYzWyuBixo7uRGiFZduPGu045qE/LCRtIJ3YYiLEYh37 67exG2kCOdW2vgsnGHPkXqx5/mdkRomgpPgl6mF36lKcZw5S6fc= -----END CERTIFICATE-----Generated at Sat Oct 3 08:40:19 2026 by rpki-client