$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft File: 8FB017F8558B134E65670C5E56417CAA2FC460F1.mft (raw, json) Hash identifier: 6KHPmTD4cNpnqEOgd8xVVm6kvRSIPMHUCuF/f0n+gQ8= Subject key identifier: B8:65:AD:EC:7A:0E:E1:A5:7D:E3:D7:8A:7C:17:55:50:86:3C:31:8E Authority key identifier: 8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 Certificate issuer: /CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Certificate serial: 5416D5DA0E8A7FAB30A4B280888038090B37646D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft Manifest number: BD Signing time: Mon 21 Sep 2026 03:36:00 +0000 Manifest this update: Mon 21 Sep 2026 03:31:00 +0000 Manifest next update: Tue 22 Sep 2026 07:33:00 +0000 Files and hashes: 1: 8FB017F8558B134E65670C5E56417CAA2FC460F1.crl (hash: n1zTOYnyv1abHHgqU/YVOAPOWrTLVyrT7iKjDRLuB8M=) 2: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: toXJPhNtOXf98GJBbdqi9mllMSbcAgrmezktdUtueZ4=) 3: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: DZWl5mWmmx3C6HZfgC0P5GgRxbzQDenyir2DbhS+/vY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:16:d5:da:0e:8a:7f:ab:30:a4:b2:80:88:80:38:09:0b:37:64:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Validity Not Before: Sep 21 03:31:00 2026 GMT Not After : Sep 22 07:33:00 2026 GMT Subject: CN=B865ADEC7A0EE1A57DE3D78A7C175550863C318E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:28:e5:23:e2:d1:f4:64:c3:cf:b5:cf:73: fc:c6:1e:5c:f6:34:64:0a:c9:56:40:cd:8d:ac:1f: bb:05:c7:30:6e:40:4d:26:34:9d:28:78:8e:8b:f2: 44:00:76:b9:4b:1a:0a:49:73:98:11:d5:a2:08:e3: da:c2:c0:db:06:fe:c8:af:22:d9:9e:02:f8:6b:b3: f3:e5:53:4b:29:9d:32:e0:51:81:12:b8:d0:de:f0: f4:49:01:a2:11:ce:39:35:5b:66:39:70:81:5e:e0: ec:f5:d2:e9:0a:30:4d:be:c8:ce:45:ed:1c:6f:a1: a0:f2:a7:a8:73:2b:ca:33:72:a8:a3:fc:7d:b5:5d: 99:dd:3e:88:47:9b:bb:27:5b:ec:13:a4:af:c8:c5: 0d:34:e9:05:b7:07:21:56:3b:d4:5b:ac:f1:a7:e6: 4f:35:ca:5e:8c:a2:64:58:91:1d:1d:12:43:f3:82: fc:c9:44:a7:f2:67:05:33:15:9a:b9:39:01:50:c1: 8a:5a:43:7e:9e:58:8e:ee:37:8b:f9:de:42:a9:07: ef:30:77:cc:11:a7:7d:6e:da:25:01:f2:c4:0c:f9: 11:8e:8b:aa:8d:61:67:a8:b8:ab:2b:65:ea:85:ab: 18:01:3e:68:17:96:dc:6f:82:1d:e2:fa:14:e4:e1: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:65:AD:EC:7A:0E:E1:A5:7D:E3:D7:8A:7C:17:55:50:86:3C:31:8E X509v3 Authority Key Identifier: keyid:8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:10:fe:b8:ba:48:17:59:9c:7a:e3:15:4d:5d:b9:46:b3:42: c7:e3:61:21:67:f9:c8:81:18:a3:7f:5a:ab:98:31:71:55:55: e0:b2:ee:81:d2:d4:fd:d0:85:17:4f:3a:58:51:d8:71:3d:93: 52:44:f2:c6:f0:c4:e3:df:92:23:73:1c:43:2a:66:31:cb:79: e6:79:4a:bf:a7:7c:05:a8:43:74:36:38:a4:f4:5e:9c:7d:51: 36:74:60:33:32:d6:c0:e7:51:92:de:78:d4:a0:5f:5d:6d:60: 1a:eb:ff:28:a5:22:a3:e3:20:c0:b7:86:21:bb:09:12:b2:27: 8e:3f:3e:52:41:a1:b3:cb:9c:56:29:eb:81:54:35:69:dc:a8: f8:a0:7e:c8:92:72:42:0d:6c:98:ae:6b:f4:1c:8c:1c:1a:24: 44:8b:b9:e8:fa:e3:af:b8:8e:df:1f:b4:33:df:65:d4:61:16: 5e:b9:c2:5a:35:59:42:5f:f0:68:3d:23:03:eb:1a:7d:b2:89: 66:b0:8f:fc:d5:4d:d2:fb:14:17:4a:fd:23:70:d0:e5:f4:0d: 7a:81:12:45:6b:77:c6:be:b9:e4:da:00:8b:93:b8:c5:08:b5: 2f:7a:90:ed:b2:b2:d9:5b:37:02:e4:3c:58:a7:1d:69:2b:a6: ef:1a:e8:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBbV2g6Kf6swpLKAiIA4CQs3ZG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEy RkM0NjBGMTAeFw0yNjA5MjEwMzMxMDBaFw0yNjA5MjIwNzMzMDBaMDMxMTAvBgNV BAMTKEI4NjVBREVDN0EwRUUxQTU3REUzRDc4QTdDMTc1NTUwODYzQzMxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyijlI+LR9GTDz7XPc/zGHlz2 NGQKyVZAzY2sH7sFxzBuQE0mNJ0oeI6L8kQAdrlLGgpJc5gR1aII49rCwNsG/siv ItmeAvhrs/PlU0spnTLgUYESuNDe8PRJAaIRzjk1W2Y5cIFe4Oz10ukKME2+yM5F 7RxvoaDyp6hzK8ozcqij/H21XZndPohHm7snW+wTpK/IxQ006QW3ByFWO9RbrPGn 5k81yl6MomRYkR0dEkPzgvzJRKfyZwUzFZq5OQFQwYpaQ36eWI7uN4v53kKpB+8w d8wRp31u2iUB8sQM+RGOi6qNYWeouKsrZeqFqxgBPmgXltxvgh3i+hTk4QHpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuGWt7HoO4aV949eKfBdVUIY8MY4wHwYDVR0j BBgwFoAUj7AX+FWLE05lZwxeVkF8qi/EYPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOGFhYzMtMDA5NC00MjFmLWEyMDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1 NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEyRkM0NjBGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkIwMTdGODU1OEIxMzRFNjU2NzBDNUU1NjQxN0NBQTJGQzQ2 MEYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdD QUEyRkM0NjBGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgQ/ri6SBdZnHrjFU1duUazQsfjYSFn+ciB GKN/WquYMXFVVeCy7oHS1P3QhRdPOlhR2HE9k1JE8sbwxOPfkiNzHEMqZjHLeeZ5 Sr+nfAWoQ3Q2OKT0Xpx9UTZ0YDMy1sDnUZLeeNSgX11tYBrr/yilIqPjIMC3hiG7 CRKyJ44/PlJBobPLnFYp64FUNWncqPigfsiSckINbJiua/QcjBwaJESLuej646+4 jt8ftDPfZdRhFl65wlo1WUJf8Gg9IwPrGn2yiWawj/zVTdL7FBdK/SNw0OX0DXqB EkVrd8a+ueTaAIuTuMUItS96kO2ystlbNwLkPFinHWkrpu8a6Jc= -----END CERTIFICATE-----Generated at Mon Sep 21 13:28:14 2026 by rpki-client