$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft File: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft (raw, json) Hash identifier: MOUaGfkbmtL9oc5AahEo/gVpCxpHZCdoT875Zouido0= Subject key identifier: 6E:D7:69:D1:F4:D9:46:38:EA:EE:90:AB:39:D4:8B:EB:14:6E:5C:32 Authority key identifier: F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 Certificate issuer: /CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Certificate serial: 2842A82F62C0E69829A964057A5A94C13B63FAAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:49:50 +0000 Manifest this update: Mon 21 Sep 2026 14:44:50 +0000 Manifest next update: Tue 22 Sep 2026 18:09:50 +0000 Files and hashes: 1: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ebJX0xmBUCyzAXEckdnMbEf0pSEsLD4g9s9OXuyGYmM=) 2: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl (hash: B5SPghazkPQZHbzzMh6CrRXEW+jw+Rx5+coEAH8AbmA=) 3: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: prj58PGbUwDLvrT9h5jO7nMgDDmjvocJnN5ph+z3PrU=) 4: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: 9E/Ti671GF/WZdUwZ2RH1G2YB9kJfWY4JlzPZetlvoI=) 5: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: VGZWopnP5E+cpki2YrX/ob7V+wdxOvea5qW0A+eDkWM=) 6: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: rPbVerJ1hIqpxViNC0hFDNp8HCiflf0mjWJTLUhjlFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:42:a8:2f:62:c0:e6:98:29:a9:64:05:7a:5a:94:c1:3b:63:fa:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Validity Not Before: Sep 21 14:44:50 2026 GMT Not After : Sep 22 18:09:50 2026 GMT Subject: CN=6ED769D1F4D94638EAEE90AB39D48BEB146E5C32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:20:1b:ea:6d:47:5a:ae:c3:d0:6c:3c:aa: 12:ac:52:f5:2f:cb:6f:0a:7c:aa:7a:b2:a3:74:28: 46:e3:08:f1:74:dc:0a:94:14:d6:81:da:ec:ea:9e: 85:30:cd:e9:0c:ae:23:01:e5:35:9d:b1:c1:00:39: 82:b2:f0:fd:95:0a:3f:0c:66:92:0a:02:72:88:71: 9b:44:4a:a0:7f:cd:06:05:14:9e:72:c5:e2:2c:6e: 7e:53:c7:f7:ee:6b:16:60:63:5e:e4:4a:07:4d:c8: a4:90:61:c0:8a:a5:7b:c5:7e:40:76:16:61:bb:33: 3a:ca:bf:29:85:62:9e:07:ad:e4:c5:5f:c0:23:97: ed:3d:6d:4b:ac:bf:e4:dc:fe:4f:e8:f6:5a:17:11: 02:d0:1a:42:dc:6a:a2:f2:d9:32:47:9a:a6:3c:18: c9:5f:e9:00:24:18:de:ce:28:e2:1b:4a:4b:3f:da: 8e:70:66:8e:28:d8:06:ec:ef:92:a6:cc:d0:38:66: 26:fd:62:ee:ab:d8:fa:16:60:c3:1c:c7:fd:e7:43: 9d:06:66:d2:da:63:f6:6f:af:f9:ce:00:e0:d2:83: de:5d:76:8a:77:3f:ef:59:66:72:97:f8:96:dd:ab: 74:4c:6c:3f:a5:4e:22:8c:70:89:d8:f9:d0:44:f8: 9c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D7:69:D1:F4:D9:46:38:EA:EE:90:AB:39:D4:8B:EB:14:6E:5C:32 X509v3 Authority Key Identifier: keyid:F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:55:a6:ed:ef:84:60:9a:73:b0:69:7d:88:0d:4e:78:8d:d9: d3:36:b7:bb:23:2e:d4:4d:74:c7:01:d9:87:46:0d:93:f6:96: b6:09:36:75:50:94:99:e5:0e:03:0d:fb:24:f8:f8:a8:68:cf: 1d:e6:87:d5:89:60:2c:8c:65:d5:29:1c:e6:6b:99:18:0b:95: 12:24:c1:d3:fa:66:51:f5:f0:04:ea:7c:fe:d0:17:0d:23:86: 24:e3:93:93:cb:2f:6d:5a:b5:8a:14:39:97:74:99:c1:36:7a: c8:12:64:30:a7:89:14:be:bb:df:4c:be:f2:c0:06:75:58:4f: 54:de:a6:a1:53:5d:4b:1e:7a:07:a2:54:d3:51:55:e4:5c:17: 5f:d2:3f:aa:f2:78:d8:18:60:1b:af:5e:f7:49:52:39:f3:66: e1:df:d5:c3:ac:09:d6:fe:e4:62:04:38:ab:f8:fa:d9:f5:3b: 82:71:70:12:ed:30:79:65:3e:b8:41:f6:34:4a:f6:d7:6e:e8: 2c:de:24:e4:be:36:c0:a1:9d:cf:18:e0:ce:ad:75:9a:78:5b: 33:67:41:11:3f:9e:1b:a4:51:da:b0:00:ea:09:0d:16:a8:da: 2b:21:f9:72:f6:2c:72:c5:9e:96:39:25:79:a4:7a:d5:67:a1: f2:d6:ba:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEKoL2LA5pgpqWQFelqUwTtj+q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlC MUVCRDIxNDAeFw0yNjA5MjExNDQ0NTBaFw0yNjA5MjIxODA5NTBaMDMxMTAvBgNV BAMTKDZFRDc2OUQxRjREOTQ2MzhFQUVFOTBBQjM5RDQ4QkVCMTQ2RTVDMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CiAb6m1HWq7D0Gw8qhKsUvUv y28KfKp6sqN0KEbjCPF03AqUFNaB2uzqnoUwzekMriMB5TWdscEAOYKy8P2VCj8M ZpIKAnKIcZtESqB/zQYFFJ5yxeIsbn5Tx/fuaxZgY17kSgdNyKSQYcCKpXvFfkB2 FmG7MzrKvymFYp4HreTFX8Ajl+09bUusv+Tc/k/o9loXEQLQGkLcaqLy2TJHmqY8 GMlf6QAkGN7OKOIbSks/2o5wZo4o2Abs75KmzNA4Zib9Yu6r2PoWYMMcx/3nQ50G ZtLaY/Zvr/nOAODSg95ddop3P+9ZZnKX+Jbdq3RMbD+lTiKMcInY+dBE+Jw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbtdp0fTZRjjq7pCrOdSL6xRuXDIwHwYDVR0j BBgwFoAU+OnUjRfMOONMv8dLXAf0qbHr0hQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOGQ5MDgtMWI5OS00NTVjLWFjNzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQx N0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlCMUVCRDIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEU5RDQ4RDE3Q0MzOEUzNENCRkM3NEI1QzA3RjRBOUIxRUJE MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0 QTlCMUVCRDIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFVpu3vhGCac7BpfYgNTniN2dM2t7sjLtRN dMcB2YdGDZP2lrYJNnVQlJnlDgMN+yT4+Khozx3mh9WJYCyMZdUpHOZrmRgLlRIk wdP6ZlH18ATqfP7QFw0jhiTjk5PLL21atYoUOZd0mcE2esgSZDCniRS+u99MvvLA BnVYT1TepqFTXUseegeiVNNRVeRcF1/SP6ryeNgYYBuvXvdJUjnzZuHf1cOsCdb+ 5GIEOKv4+tn1O4JxcBLtMHllPrhB9jRK9tdu6CzeJOS+NsChnc8Y4M6tdZp4WzNn QRE/nhukUdqwAOoJDRao2ish+XL2LHLFnpY5JXmketVnofLWuv0= -----END CERTIFICATE-----Generated at Tue Sep 22 10:13:15 2026 by rpki-client