$ rpki-client -vvvf rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft File: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft (raw, json) Hash identifier: 3MWPJPvPD1Iqlom/ffbKIbfnj9p0cknNtVoIqQenGjo= Subject key identifier: 86:8D:5E:F2:FF:DC:12:36:F7:FE:13:47:B4:42:8B:18:E7:11:D3:D9 Authority key identifier: 86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 Certificate issuer: /CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Certificate serial: 2BC8B69DAE5BB1ABBC2D00FB1577153A11C9315A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft Manifest number: A7 Signing time: Wed 02 Sep 2026 23:47:33 +0000 Manifest this update: Wed 02 Sep 2026 23:42:33 +0000 Manifest next update: Fri 04 Sep 2026 01:40:33 +0000 Files and hashes: 1: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: A51y95Y2VvHOxleNisrOn7Mw2CXWlCwKbBD4RKfiRXo=) 2: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AiKeHz2pWrwnk84HIHiggHrF6Y+TQyS0iMZkjpVVcMY=) 3: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: V+R7emBXYGxGYC8TKAJDN/rKFNkkzGGzXMecTJssl6Q=) 4: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl (hash: I69j9vBIZ/zxmtVlgERvQtgVWD3nZlF9paoRTXo1Miw=) 5: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: buNf/KMT3H26jyT7kcH4G4XIVCs19dscJeFhejymKUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c8:b6:9d:ae:5b:b1:ab:bc:2d:00:fb:15:77:15:3a:11:c9:31:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Validity Not Before: Sep 2 23:42:33 2026 GMT Not After : Sep 4 01:40:33 2026 GMT Subject: CN=868D5EF2FFDC1236F7FE1347B4428B18E711D3D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:32:13:67:73:95:59:68:d5:9f:b9:46:65: 8f:a2:c8:6b:ba:fa:03:7d:a3:fa:e3:75:c6:92:1e: bf:a4:42:a1:48:21:13:2a:38:64:28:3d:78:a7:e7: ae:3c:54:fb:6a:36:f0:12:60:15:c5:47:09:c5:16: 91:5c:50:d0:2c:b7:94:61:59:b2:2c:ab:47:a5:70: f2:4a:79:f0:b2:97:22:b8:02:7f:4e:a0:bf:86:01: 63:27:a7:d5:a5:9f:21:34:f9:cc:37:59:b4:2f:de: 30:a5:3f:36:50:05:3c:45:1c:e6:58:a9:48:39:a5: 4a:7c:ca:d6:d4:1b:7e:6a:09:d1:5f:57:49:63:8d: 19:0e:78:e4:42:a4:08:89:3a:88:ed:30:08:df:1f: d6:44:b8:6e:67:e3:71:7d:1f:54:2d:73:0e:bf:e9: 2c:91:78:04:b0:18:71:1c:d6:b6:fa:48:15:59:3d: 91:cb:6f:e1:7d:bd:c3:76:d0:fe:90:90:8c:43:da: 74:cf:8a:5a:74:bc:d1:e4:2d:ae:24:59:3f:81:7c: ec:39:68:25:b5:47:84:e6:61:96:1f:49:6a:44:59: c3:a5:6f:7e:34:16:c3:30:31:86:62:81:15:11:5a: 58:99:5a:14:9d:2b:43:c0:33:bd:ba:bc:60:10:fd: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8D:5E:F2:FF:DC:12:36:F7:FE:13:47:B4:42:8B:18:E7:11:D3:D9 X509v3 Authority Key Identifier: keyid:86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6e:30:a2:02:d0:71:be:76:4f:36:4e:56:60:8a:df:e2:40: 92:4f:08:48:56:0e:7d:0d:30:6b:51:f3:22:37:8d:a9:77:b3: ea:0f:45:56:4f:d7:e5:08:a6:64:e7:2f:a7:9c:0c:0e:d3:62: 06:21:71:7c:b0:cb:76:94:b9:1c:78:46:f7:b4:a0:25:f5:e7: 17:44:a2:66:51:e0:41:f5:d5:36:aa:ab:12:ef:fa:dd:01:69: 83:d5:1c:62:92:89:19:70:d1:b1:48:b1:e9:65:2e:89:90:64: b4:e9:56:9c:9a:02:d7:f2:b6:12:c2:66:28:9f:23:20:6c:ea: 55:ed:95:bb:eb:a3:71:8e:c5:3c:83:d2:9d:76:b6:c0:54:3c: b4:a7:fd:1b:50:1f:bd:c9:e6:6f:d3:14:8a:b0:c3:f5:b7:f1: 33:3a:5d:16:1a:60:91:ab:c0:58:81:11:0b:04:9a:35:b4:8c: af:2a:0a:a6:64:c2:69:be:8f:32:49:14:be:84:38:ed:3c:1f: 80:25:ba:f2:25:73:d8:1f:d2:2d:90:9b:7b:fc:f3:b3:d9:26: b3:e0:e7:4e:11:14:7a:6b:c6:df:b9:9e:22:ea:78:f5:4d:a2: f4:e7:3f:85:3b:06:2f:37:32:e5:80:71:64:e8:53:b5:b7:36: 55:94:bb:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8i2na5bsau8LQD7FXcVOhHJMVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQw QUQ5QzA3NzAeFw0yNjA5MDIyMzQyMzNaFw0yNjA5MDQwMTQwMzNaMDMxMTAvBgNV BAMTKDg2OEQ1RUYyRkZEQzEyMzZGN0ZFMTM0N0I0NDI4QjE4RTcxMUQzRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJjITZ3OVWWjVn7lGZY+iyGu6 +gN9o/rjdcaSHr+kQqFIIRMqOGQoPXin5648VPtqNvASYBXFRwnFFpFcUNAst5Rh WbIsq0elcPJKefCylyK4An9OoL+GAWMnp9WlnyE0+cw3WbQv3jClPzZQBTxFHOZY qUg5pUp8ytbUG35qCdFfV0ljjRkOeORCpAiJOojtMAjfH9ZEuG5n43F9H1Qtcw6/ 6SyReASwGHEc1rb6SBVZPZHLb+F9vcN20P6QkIxD2nTPilp0vNHkLa4kWT+BfOw5 aCW1R4TmYZYfSWpEWcOlb340FsMwMYZigRURWliZWhSdK0PAM726vGAQ/eT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUho1e8v/cEjb3/hNHtEKLGOcR09kwHwYDVR0j BBgwFoAUhkTvXK/W/yx1ODO1iNbV5ArZwHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDJjYjBiM2EtNjkyZC00NDJlLTkzMDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNB RkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQwQUQ5QzA3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjQ0RUY1Q0FGRDZGRjJDNzUzODMzQjU4OEQ2RDVFNDBBRDlD MDc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1 RTQwQUQ5QzA3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBuMKIC0HG+dk82TlZgit/iQJJPCEhWDn0N MGtR8yI3jal3s+oPRVZP1+UIpmTnL6ecDA7TYgYhcXywy3aUuRx4Rve0oCX15xdE omZR4EH11TaqqxLv+t0BaYPVHGKSiRlw0bFIsellLomQZLTpVpyaAtfythLCZiif IyBs6lXtlbvro3GOxTyD0p12tsBUPLSn/RtQH73J5m/TFIqww/W38TM6XRYaYJGr wFiBEQsEmjW0jK8qCqZkwmm+jzJJFL6EOO08H4AluvIlc9gf0i2Qm3v887PZJrPg 504RFHprxt+5niLqePVNovTnP4U7Bi83MuWAcWToU7W3NlWUu2E= -----END CERTIFICATE-----Generated at Thu Sep 3 05:20:07 2026 by rpki-client