$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft File: 8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft (raw, json) Hash identifier: gVXJ3J6SSBY1ZcTlO6VG61z/Kxq55z39WB2z1JmCe1w= Subject key identifier: 39:07:5C:F4:88:70:40:18:16:76:9C:22:97:C0:95:D4:50:D6:1B:54 Authority key identifier: 87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC Certificate issuer: /CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC Certificate serial: 4594B7AFACE21B5A2C0D50541088354CB7EF5FD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:15:36 +0000 Manifest this update: Mon 21 Sep 2026 07:10:36 +0000 Manifest next update: Tue 22 Sep 2026 09:15:36 +0000 Files and hashes: 1: 8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl (hash: Jbfdqjtoqc/rVUnKDI5MHEFDSHc3V7iWblKmcxO+re0=) 2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: ILEPt3NLdu2PTg7IxG5hw5UfVvO4+tHzRcaeRjRDOH8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:94:b7:af:ac:e2:1b:5a:2c:0d:50:54:10:88:35:4c:b7:ef:5f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC Validity Not Before: Sep 21 07:10:36 2026 GMT Not After : Sep 22 09:15:36 2026 GMT Subject: CN=39075CF48870401816769C2297C095D450D61B54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:81:ca:94:d5:5d:9d:cf:28:fe:5e:9c:cf: 91:b5:35:e6:ae:fa:46:91:31:fe:93:35:ff:70:1e: 38:63:aa:7a:d7:4b:60:ea:f5:c6:ea:4d:f6:e0:c2: d1:1c:ee:1d:19:4d:62:87:a5:51:12:ba:13:1c:fc: fe:70:ca:af:01:d3:3a:90:e2:60:b5:17:db:34:39: 0d:c2:dc:e2:c7:f6:6f:01:1c:75:81:25:c4:92:b9: d8:2c:3d:33:df:99:51:bf:85:bf:09:0c:e6:34:93: ee:23:98:87:c6:93:1f:b0:e3:dc:92:d2:de:ad:54: d5:2e:1e:56:ab:9f:21:72:2e:b4:82:e9:54:b1:e6: f0:9b:73:27:f9:2e:9c:4c:e3:3a:c0:81:5f:80:60: 0b:98:15:c1:8e:cc:81:ed:90:d9:15:9f:73:f7:c4: 03:df:73:8b:4b:8e:4b:9f:96:dd:e1:2a:59:4e:ca: 29:bc:a6:30:8b:5a:ce:aa:ef:a2:3d:0d:75:a4:bf: 6b:02:2a:ca:c9:db:63:3e:45:56:1a:30:ca:20:e6: f7:08:b5:db:40:b3:35:9d:f6:41:d1:38:13:9b:cf: fa:85:79:23:c8:3c:06:e9:2d:84:06:74:13:4f:d2: 62:5d:22:d7:6f:ec:85:b4:65:55:ce:3e:b2:1b:bd: 69:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:07:5C:F4:88:70:40:18:16:76:9C:22:97:C0:95:D4:50:D6:1B:54 X509v3 Authority Key Identifier: keyid:87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:12:9e:6d:05:c9:af:10:33:58:03:57:cd:f2:cf:4b:ac:db: 66:11:a1:f9:f4:e8:48:22:cc:ef:1d:7b:5d:4d:93:6e:73:9a: 0d:d1:11:96:41:98:73:ec:91:25:69:ed:2d:72:79:84:8d:1c: d6:23:a8:d6:19:4b:9d:88:35:6b:a3:37:1f:09:b8:61:b7:7d: a0:84:dd:b0:22:ea:18:71:da:99:30:db:6a:fc:62:25:6a:51: 34:93:71:2c:aa:74:b2:fb:3d:94:5d:f4:f5:36:47:bb:e9:f2: f8:af:e8:86:3b:bb:35:e3:d8:0f:68:60:7a:99:1a:07:2b:04: a2:b3:54:8b:92:d7:1b:f3:7e:a1:9d:ba:1e:39:a4:a2:73:79: 89:ca:d2:21:fa:79:06:2a:76:68:0b:d1:99:f7:83:4d:15:65: b6:79:86:f6:35:39:27:3f:98:44:6f:db:21:94:fc:66:9a:9e: 09:5c:5e:45:b5:9e:7c:ea:47:2c:52:42:49:0f:03:cb:20:16: 0d:8f:e3:66:77:21:a0:5e:d7:67:bf:60:59:5d:fc:5b:1d:08: 58:6e:2f:63:7a:81:ec:bc:90:79:a1:f3:8e:9a:77:bd:bc:b3: e9:9e:ef:fc:a9:7e:c6:ea:88:2f:70:66:5f:fc:0d:b1:8f:bd: 54:2e:c0:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZS3r6ziG1osDVBUEIg1TLfvX9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcwNUI1QjdGRDk3RUIyMDg5MkU4REI1QTdGN0JEMjNC RTgyNjhDQzAeFw0yNjA5MjEwNzEwMzZaFw0yNjA5MjIwOTE1MzZaMDMxMTAvBgNV BAMTKDM5MDc1Q0Y0ODg3MDQwMTgxNjc2OUMyMjk3QzA5NUQ0NTBENjFCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDt4HKlNVdnc8o/l6cz5G1Neau +kaRMf6TNf9wHjhjqnrXS2Dq9cbqTfbgwtEc7h0ZTWKHpVESuhMc/P5wyq8B0zqQ 4mC1F9s0OQ3C3OLH9m8BHHWBJcSSudgsPTPfmVG/hb8JDOY0k+4jmIfGkx+w49yS 0t6tVNUuHlarnyFyLrSC6VSx5vCbcyf5LpxM4zrAgV+AYAuYFcGOzIHtkNkVn3P3 xAPfc4tLjkuflt3hKllOyim8pjCLWs6q76I9DXWkv2sCKsrJ22M+RVYaMMog5vcI tdtAszWd9kHROBObz/qFeSPIPAbpLYQGdBNP0mJdItdv7IW0ZVXOPrIbvWm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOQdc9IhwQBgWdpwil8CV1FDWG1QwHwYDVR0j BBgwFoAUhwW1t/2X6yCJLo21p/e9I76CaMwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWI3NGVjZTYtODgwYy00Y2VmLWFkZDItNzc3MTllYmVkZWM5LzAvODcwNUI1QjdG RDk3RUIyMDg5MkU4REI1QTdGN0JEMjNCRTgyNjhDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzA1QjVCN0ZEOTdFQjIwODkyRThEQjVBN0Y3QkQyM0JFODI2 OENDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvODcwNUI1QjdGRDk3RUIyMDg5MkU4REI1QTdGN0JE MjNCRTgyNjhDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0Snm0Fya8QM1gDV83yz0us22YRofn06Egi zO8de11Nk25zmg3REZZBmHPskSVp7S1yeYSNHNYjqNYZS52INWujNx8JuGG3faCE 3bAi6hhx2pkw22r8YiVqUTSTcSyqdLL7PZRd9PU2R7vp8viv6IY7uzXj2A9oYHqZ GgcrBKKzVIuS1xvzfqGduh45pKJzeYnK0iH6eQYqdmgL0Zn3g00VZbZ5hvY1OSc/ mERv2yGU/GaanglcXkW1nnzqRyxSQkkPA8sgFg2P42Z3IaBe12e/YFld/FsdCFhu L2N6gey8kHmh846ad728s+me7/ypfsbqiC9wZl/8DbGPvVQuwJg= -----END CERTIFICATE-----Generated at Mon Sep 21 20:02:10 2026 by rpki-client