$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft File: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft (raw, json) Hash identifier: vKqNl+1FoxBlkC5sdi7x83AB3ToxZ42PbZfIlFKxEak= Subject key identifier: F9:F8:89:F1:64:59:C5:81:73:A3:CC:7C:67:CA:82:8F:96:2D:1D:F9 Authority key identifier: 8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92 Certificate issuer: /CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92 Certificate serial: 692AE4D7A44892776789956CAF9B17FBC289B9DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft Manifest number: BC Signing time: Sun 20 Sep 2026 02:09:51 +0000 Manifest this update: Sun 20 Sep 2026 02:04:51 +0000 Manifest next update: Mon 21 Sep 2026 04:29:51 +0000 Files and hashes: 1: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl (hash: OSNPZjcipwToGGkvNM0QY5+t7NAzHdaBdmhLno6xuhM=) 2: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: LMawcFvlyGAFjmzGIPIL0Pb1GIlo75+QClOxIhDqopY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 04:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:2a:e4:d7:a4:48:92:77:67:89:95:6c:af:9b:17:fb:c2:89:b9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92 Validity Not Before: Sep 20 02:04:51 2026 GMT Not After : Sep 21 04:29:51 2026 GMT Subject: CN=F9F889F16459C58173A3CC7C67CA828F962D1DF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:c4:72:76:ed:ac:f4:4b:83:42:79:ad:b5: ae:f0:e5:22:c7:4c:dd:ea:c1:7c:74:cd:c6:51:97: e9:75:56:eb:b8:5e:62:89:8c:56:ef:95:1c:64:a7: 66:86:a7:f9:37:b3:88:46:83:4d:3f:c8:63:7c:ea: ad:40:a3:41:75:d2:01:95:ff:07:2a:77:46:f4:3f: bf:f6:0c:d4:f5:30:ab:86:cf:db:c7:18:b5:c9:00: 1b:e3:fb:64:b5:a1:4c:32:80:79:a8:05:e1:a9:45: 0d:69:c7:91:fa:f0:6e:29:79:fa:1f:b5:c3:bd:ea: 7e:6b:95:c3:4c:05:78:05:a9:0d:08:ca:42:ce:62: 29:c1:39:d0:eb:c1:24:86:34:f1:2a:9e:7c:ee:3d: 25:61:87:8b:a9:8c:7a:57:56:48:b3:dd:76:55:75: 99:2b:4b:64:a4:8b:0d:c5:bc:94:1b:50:08:c8:e8: 42:e7:b5:7f:af:74:6c:ec:b2:ee:ae:2b:65:15:f9: 07:90:e5:53:59:70:8f:df:a5:ef:d8:27:4e:08:6b: f6:f4:bf:de:7e:fe:2a:06:12:12:f1:66:65:3d:78: e7:13:21:4c:fc:af:eb:17:2c:4e:7f:72:79:95:fd: e3:ad:cf:01:62:29:bd:03:a3:00:c7:5c:2a:80:88: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F8:89:F1:64:59:C5:81:73:A3:CC:7C:67:CA:82:8F:96:2D:1D:F9 X509v3 Authority Key Identifier: keyid:8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:17:68:a5:e7:d6:09:48:67:14:bc:60:ad:88:9c:0b:65:4d: 14:d3:b2:84:76:d4:48:10:a2:dd:01:93:78:e4:4a:0c:3b:91: cd:d2:75:df:0a:62:58:7a:b2:77:fa:0c:6c:0d:0f:bf:d6:9f: f0:d8:35:ea:31:0d:c1:47:40:90:58:ed:d5:98:60:64:66:7f: a9:79:03:34:cd:81:f2:5a:8f:43:26:bd:fb:87:1b:7d:a3:3f: a4:8b:4a:31:f1:9b:45:a1:71:db:02:44:cf:41:6f:2c:eb:dc: 1b:0a:55:bc:6a:88:53:4e:bd:22:ee:b9:84:92:0f:93:5d:4b: 05:e5:9a:69:87:b0:80:19:e0:3c:15:10:52:3a:d3:d9:fd:b5: 82:26:e4:66:61:6d:33:38:60:8f:db:bb:fc:4c:0d:9a:5c:33: a5:b3:50:6f:b3:ca:eb:fa:56:45:5b:23:b3:2c:87:1f:ea:ab: d3:b8:fb:96:98:0f:ea:53:f4:11:df:1c:69:9c:04:99:16:37: d9:10:ca:96:8b:be:ef:8d:f8:48:bd:fb:8e:39:e9:08:78:7b: 1d:51:de:67:e7:62:f0:5a:82:87:f1:b0:65:35:2f:09:c1:8b: 7f:53:05:b2:c3:f0:3a:8a:b9:0b:f5:42:05:a1:b1:67:fe:7f: 45:bf:47:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaSrk16RIkndniZVsr5sX+8KJudwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4QjE1NUU4MzM1QzAyODU0OUQyQkY2QjU0QzI1RTRB NzhCOEM5MjAeFw0yNjA5MjAwMjA0NTFaFw0yNjA5MjEwNDI5NTFaMDMxMTAvBgNV BAMTKEY5Rjg4OUYxNjQ1OUM1ODE3M0EzQ0M3QzY3Q0E4MjhGOTYyRDFERjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC58Rydu2s9EuDQnmtta7w5SLH TN3qwXx0zcZRl+l1Vuu4XmKJjFbvlRxkp2aGp/k3s4hGg00/yGN86q1Ao0F10gGV /wcqd0b0P7/2DNT1MKuGz9vHGLXJABvj+2S1oUwygHmoBeGpRQ1px5H68G4pefof tcO96n5rlcNMBXgFqQ0IykLOYinBOdDrwSSGNPEqnnzuPSVhh4upjHpXVkiz3XZV dZkrS2Skiw3FvJQbUAjI6ELntX+vdGzssu6uK2UV+QeQ5VNZcI/fpe/YJ04Ia/b0 v95+/ioGEhLxZmU9eOcTIUz8r+sXLE5/cnmV/eOtzwFiKb0DowDHXCqAiNxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+fiJ8WRZxYFzo8x8Z8qCj5YtHfkwHwYDVR0j BBgwFoAUiosVXoM1wChUnSv2tUwl5KeLjJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA1MjBiNTQtM2JhNy00NjMxLWFmMGItNTU5ODRiMGJhN2YyLzAvOEE4QjE1NUU4 MzM1QzAyODU0OUQyQkY2QjU0QzI1RTRBNzhCOEM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QThCMTU1RTgzMzVDMDI4NTQ5RDJCRjZCNTRDMjVFNEE3OEI4 QzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOEE4QjE1NUU4MzM1QzAyODU0OUQyQkY2QjU0QzI1 RTRBNzhCOEM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM0XaKXn1glIZxS8YK2InAtlTRTTsoR21EgQ ot0Bk3jkSgw7kc3Sdd8KYlh6snf6DGwND7/Wn/DYNeoxDcFHQJBY7dWYYGRmf6l5 AzTNgfJaj0MmvfuHG32jP6SLSjHxm0WhcdsCRM9Bbyzr3BsKVbxqiFNOvSLuuYSS D5NdSwXlmmmHsIAZ4DwVEFI609n9tYIm5GZhbTM4YI/bu/xMDZpcM6WzUG+zyuv6 VkVbI7Mshx/qq9O4+5aYD+pT9BHfHGmcBJkWN9kQypaLvu+N+Ei9+4456Qh4ex1R 3mfnYvBagofxsGU1LwnBi39TBbLD8DqKuQv1QgWhsWf+f0W/R2c= -----END CERTIFICATE-----Generated at Sun Sep 20 20:17:39 2026 by rpki-client