$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft File: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft (raw, json) Hash identifier: aMbskXmOp2sptNdYYyFf6YVamktPiwSZkSKynUvVc2M= Subject key identifier: 55:93:02:EE:DC:3C:F0:EA:98:69:B1:5E:58:E6:65:0F:7F:BE:4A:A9 Authority key identifier: 08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB Certificate issuer: /CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Certificate serial: 07AA1E4AA581041B77DE554AF5774E6BCE65589D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:31:49 +0000 Manifest this update: Mon 21 Sep 2026 12:26:49 +0000 Manifest next update: Tue 22 Sep 2026 13:02:49 +0000 Files and hashes: 1: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: Mcg9nbFeFqcbrXtsnWz+m6gsNfmlAcJQ2rPda7V7VVk=) 2: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl (hash: cJ8hz1AWEI9Xzg7PSDblMH7GRN7KZ2ADTMi1NBnvIj8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:aa:1e:4a:a5:81:04:1b:77:de:55:4a:f5:77:4e:6b:ce:65:58:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Validity Not Before: Sep 21 12:26:49 2026 GMT Not After : Sep 22 13:02:49 2026 GMT Subject: CN=559302EEDC3CF0EA9869B15E58E6650F7FBE4AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d6:27:42:62:19:e6:47:8b:53:ad:84:a7:3d: 9c:57:36:73:16:69:37:08:46:7b:7f:36:d5:29:b6: 7c:d4:66:7c:63:28:e2:f2:61:4a:aa:7c:bd:67:ef: 9a:ac:ca:a2:3a:2e:d5:8b:cf:1b:b5:d9:a9:e2:69: 6e:8d:8f:49:b4:d3:03:57:08:8a:d6:5d:cc:84:f6: 7a:85:2f:f7:c4:85:5c:e9:0b:9c:eb:1b:7d:02:f4: 6e:8f:05:0b:a5:ac:9e:8e:d6:67:7b:c4:2e:65:56: 42:4f:c0:fe:d6:71:17:5d:42:83:3d:06:ab:20:f9: f2:31:7e:03:ba:15:76:e7:fb:a3:75:09:c3:5b:d1: 27:89:e9:17:ab:f6:10:0d:4f:17:ef:2e:bd:ac:b6: 9a:9f:7a:d2:ee:0b:07:3e:a4:54:30:45:70:58:04: d1:83:58:7c:c5:fe:fa:a7:32:dd:88:a2:ae:53:69: e6:03:12:a0:c8:96:15:8d:9b:59:26:74:53:41:43: 1f:22:6a:32:c2:b8:83:3b:d8:78:50:66:5e:f7:a7: f4:3d:f8:c4:3e:2c:01:8f:c8:17:12:77:b1:a7:a3: 66:00:23:c4:fd:8c:cc:42:49:9f:a4:a0:c4:d3:f2: c0:69:42:78:fe:57:39:23:fc:4c:a1:56:b5:8f:78: be:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:93:02:EE:DC:3C:F0:EA:98:69:B1:5E:58:E6:65:0F:7F:BE:4A:A9 X509v3 Authority Key Identifier: keyid:08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:48:67:7c:08:98:d7:ef:ef:c8:17:3c:ab:97:22:e3:60:7f: e8:a2:56:ce:23:9a:b4:58:b1:4f:a2:ba:31:c0:94:89:82:e8: b4:3b:ae:44:05:56:a6:54:74:9b:32:2a:59:93:f8:48:d6:6b: 73:46:03:ab:49:8e:4b:a8:56:38:bd:b1:14:25:d5:5d:a1:0d: a7:e7:a4:96:d8:bc:27:c0:1e:17:33:1d:ee:1a:b8:88:b5:16: b6:60:b2:0f:75:12:59:75:86:cb:8f:c7:30:e8:d1:8e:3a:d0: c9:8b:08:9a:82:92:c0:61:3b:dd:09:de:98:c5:d3:42:6a:b8: 02:8d:79:39:78:94:58:22:c2:c5:c8:96:90:f6:87:bf:1d:fb: 20:84:94:04:cf:54:74:9d:bc:38:c2:b5:17:1d:35:53:87:aa: ef:03:bc:65:cb:55:59:36:1c:eb:ad:cd:4f:a4:cc:de:67:61: ba:1a:4f:4a:f1:16:f0:0a:58:0a:da:f0:10:72:07:06:bf:4d: 49:e4:15:61:cc:f4:7c:d2:b2:e3:f9:6c:46:24:67:fd:3c:88: f0:a5:63:9f:98:f2:09:15:a0:f7:f4:ba:78:f1:17:48:17:eb: 42:34:bd:cf:9a:a3:ec:57:46:34:94:91:f4:96:7e:38:e5:74: 3a:5f:65:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB6oeSqWBBBt33lVK9XdOa85lWJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMx OUIzMDBGQjAeFw0yNjA5MjExMjI2NDlaFw0yNjA5MjIxMzAyNDlaMDMxMTAvBgNV BAMTKDU1OTMwMkVFREMzQ0YwRUE5ODY5QjE1RTU4RTY2NTBGN0ZCRTRBQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1idCYhnmR4tTrYSnPZxXNnMW aTcIRnt/NtUptnzUZnxjKOLyYUqqfL1n75qsyqI6LtWLzxu12aniaW6Nj0m00wNX CIrWXcyE9nqFL/fEhVzpC5zrG30C9G6PBQulrJ6O1md7xC5lVkJPwP7WcRddQoM9 Bqsg+fIxfgO6FXbn+6N1CcNb0SeJ6Rer9hANTxfvLr2stpqfetLuCwc+pFQwRXBY BNGDWHzF/vqnMt2Ioq5TaeYDEqDIlhWNm1kmdFNBQx8iajLCuIM72HhQZl73p/Q9 +MQ+LAGPyBcSd7Gno2YAI8T9jMxCSZ+koMTT8sBpQnj+Vzkj/EyhVrWPeL5nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVZMC7tw88OqYabFeWOZlD3++SqkwHwYDVR0j BBgwFoAUCNsctHaQ8fZxmnGgay6v/BmzAPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE3Zjc5YjAtYjllMy00YzNkLWExMTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3 NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMxOUIzMDBGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wOERCMUNCNDc2OTBGMUY2NzE5QTcxQTA2QjJFQUZGQzE5QjMw MEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFG RkMxOUIzMDBGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFIZ3wImNfv78gXPKuXIuNgf+iiVs4jmrRY sU+iujHAlImC6LQ7rkQFVqZUdJsyKlmT+EjWa3NGA6tJjkuoVji9sRQl1V2hDafn pJbYvCfAHhczHe4auIi1FrZgsg91Ell1hsuPxzDo0Y460MmLCJqCksBhO90J3pjF 00JquAKNeTl4lFgiwsXIlpD2h78d+yCElATPVHSdvDjCtRcdNVOHqu8DvGXLVVk2 HOutzU+kzN5nYboaT0rxFvAKWAra8BByBwa/TUnkFWHM9HzSsuP5bEYkZ/08iPCl Y5+Y8gkVoPf0unjxF0gX60I0vc+ao+xXRjSUkfSWfjjldDpfZaQ= -----END CERTIFICATE-----Generated at Mon Sep 21 20:59:03 2026 by rpki-client