$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft File: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft (raw, json) Hash identifier: W6YT6Yr1HPcFWfevtt+AVe1LzSUdOeQcky7cjQg1uyk= Subject key identifier: D0:79:73:44:30:BA:38:6D:ED:D1:47:0E:FB:6F:7F:E6:70:36:4B:DE Authority key identifier: B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 Certificate issuer: /CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Certificate serial: 521F77A61922F457D352DD551A60D80DD79E3DC1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft Manifest number: BF Signing time: Mon 21 Sep 2026 13:02:38 +0000 Manifest this update: Mon 21 Sep 2026 12:57:38 +0000 Manifest next update: Tue 22 Sep 2026 13:59:38 +0000 Files and hashes: 1: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl (hash: Ljm1LcJslOcfq8ZMayFFBfoqVY0mfF8g89W1vhHck7Y=) 2: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: g5c7Nq+6t4kiF6CKiothKoqaQ8v25zT/n7Wj9Q/sxEQ=) 3: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: 9VWfd5KMgyw5xyqB55UR/HJrZNws4qzcvTj6ecqQ/Qk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:1f:77:a6:19:22:f4:57:d3:52:dd:55:1a:60:d8:0d:d7:9e:3d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Validity Not Before: Sep 21 12:57:38 2026 GMT Not After : Sep 22 13:59:38 2026 GMT Subject: CN=D079734430BA386DEDD1470EFB6F7FE670364BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:1d:43:af:b9:ef:b9:c7:34:e3:8f:c5:05: f9:c2:05:96:dc:aa:0e:30:5e:e6:5a:38:bc:8f:48: ba:b0:9a:12:5b:0c:06:f8:73:37:63:a4:3b:63:62: 2c:4c:4b:41:25:44:2d:e5:44:41:05:90:b6:0b:b5: 11:1e:8a:fc:85:12:17:85:ec:86:59:b1:4c:fd:07: 8a:fc:96:a5:88:72:d4:18:7f:50:fe:e9:38:12:47: b7:cb:e5:32:48:34:4a:fd:f6:c8:8e:02:c2:e3:38: 91:3c:cb:59:70:e0:5a:7f:ca:c8:dd:b4:f7:ea:2f: 84:4c:9d:bb:fb:f8:b6:07:e8:18:ca:41:24:ef:72: 1e:26:1d:f6:a9:75:e4:b9:44:19:8b:e5:dc:7f:14: 3c:58:b9:f2:64:54:b8:91:d4:5b:79:34:02:5e:b9: a6:b4:38:be:24:4a:18:fb:06:94:1a:3f:bc:cf:23: d8:a4:74:3c:f0:77:cf:50:7d:ed:fa:ff:ad:04:17: 8e:cb:af:69:5d:e5:4c:7d:1b:ad:16:9d:b0:8c:95: fa:8e:5e:be:2b:69:a5:df:43:3f:67:ef:5a:d1:3d: f0:d2:94:df:60:8c:7f:ff:1c:c5:34:20:40:41:98: ea:0d:74:51:55:7c:44:b8:62:76:44:23:6c:b9:c2: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:79:73:44:30:BA:38:6D:ED:D1:47:0E:FB:6F:7F:E6:70:36:4B:DE X509v3 Authority Key Identifier: keyid:B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:01:0e:6d:b2:70:57:52:cb:06:bf:88:a2:f6:01:b7:07:58: 55:85:4c:2d:0b:f2:49:fc:7f:6a:e3:2d:f0:32:83:8d:93:52: 98:96:3e:cc:1c:da:0d:49:0f:88:5b:3c:63:2d:63:59:fd:8d: 89:ff:48:9b:58:c7:de:02:c2:68:f2:aa:77:c5:09:73:eb:76: 60:85:cb:9a:91:2e:cd:f4:c3:50:2b:c1:3a:86:e4:a8:ee:98: a5:d3:d1:42:df:0c:cb:29:0e:ae:d6:a0:38:ff:1a:2c:cc:e7: fe:3f:14:51:c9:28:87:61:6f:0f:9d:3c:69:b5:9f:d7:3c:7f: c0:2a:55:9d:33:8d:43:4a:00:b0:98:2e:8f:6d:39:4b:29:9d: 5d:2a:52:26:b8:a8:11:9d:95:be:a9:af:3f:7b:6a:7d:95:13: 99:c3:1e:92:9e:ec:25:08:56:91:89:0d:02:eb:79:95:66:4f: 91:52:9f:e4:8b:ad:49:54:fc:a8:96:11:aa:83:41:1e:96:b9: 10:15:94:e6:88:5b:39:a9:90:23:e0:df:ef:39:0b:49:8c:fe: 23:6d:56:0c:ea:4f:54:04:67:f0:ad:34:f7:e3:83:10:f1:f7: 59:d5:43:30:88:d7:c5:72:e6:86:cd:cd:96:0c:01:dd:ff:9f: d9:3c:4e:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUh93phki9FfTUt1VGmDYDdeePcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzExMUJB QjcwOTQwNjAeFw0yNjA5MjExMjU3MzhaFw0yNjA5MjIxMzU5MzhaMDMxMTAvBgNV BAMTKEQwNzk3MzQ0MzBCQTM4NkRFREQxNDcwRUZCNkY3RkU2NzAzNjRCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1h1Dr7nvucc044/FBfnCBZbc qg4wXuZaOLyPSLqwmhJbDAb4czdjpDtjYixMS0ElRC3lREEFkLYLtREeivyFEheF 7IZZsUz9B4r8lqWIctQYf1D+6TgSR7fL5TJINEr99siOAsLjOJE8y1lw4Fp/ysjd tPfqL4RMnbv7+LYH6BjKQSTvch4mHfapdeS5RBmL5dx/FDxYufJkVLiR1Ft5NAJe uaa0OL4kShj7BpQaP7zPI9ikdDzwd89Qfe36/60EF47Lr2ld5Ux9G60WnbCMlfqO Xr4raaXfQz9n71rRPfDSlN9gjH//HMU0IEBBmOoNdFFVfES4YnZEI2y5wpiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0HlzRDC6OG3t0UcO+29/5nA2S94wHwYDVR0j BBgwFoAUuBCMf76kK1mksA20otwRG6twlAYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjNzlmYmUtNDc5MC00NmJlLWI5YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZC RUE0MkI1OUE0QjAwREI0QTJEQzExMUJBQjcwOTQwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODEwOEM3RkJFQTQyQjU5QTRCMDBEQjRBMkRDMTExQkFCNzA5 NDA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzEx MUJBQjcwOTQwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEBDm2ycFdSywa/iKL2AbcHWFWFTC0L8kn8 f2rjLfAyg42TUpiWPswc2g1JD4hbPGMtY1n9jYn/SJtYx94CwmjyqnfFCXPrdmCF y5qRLs30w1ArwTqG5KjumKXT0ULfDMspDq7WoDj/GizM5/4/FFHJKIdhbw+dPGm1 n9c8f8AqVZ0zjUNKALCYLo9tOUspnV0qUia4qBGdlb6prz97an2VE5nDHpKe7CUI VpGJDQLreZVmT5FSn+SLrUlU/KiWEaqDQR6WuRAVlOaIWzmpkCPg3+85C0mM/iNt VgzqT1QEZ/CtNPfjgxDx91nVQzCI18Vy5obNzZYMAd3/n9k8Tu4= -----END CERTIFICATE-----Generated at Mon Sep 21 20:02:02 2026 by rpki-client