$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft File: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft (raw, json) Hash identifier: rJ1JHcSII0H/urDfAKhjxXVwRnU6ZG/bv5bfUI4f2kU= Subject key identifier: D4:C9:E6:4F:41:A8:3F:57:2B:DE:8E:08:08:58:85:69:00:AF:5E:1A Authority key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 Certificate issuer: /CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Certificate serial: 0C32CA041A0CD1E95B56509861DD92019B325D77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 20:33:05 +0000 Manifest this update: Wed 02 Sep 2026 20:28:05 +0000 Manifest next update: Thu 03 Sep 2026 22:41:05 +0000 Files and hashes: 1: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl (hash: mVEVnRSxcQjIdLa3MluuNyjBew2nM09kxMuaKnsdotE=) 2: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: lli6DgdKqwmEkLtB+BG1rU9nYBqGkyyXfGUHRRk2kyY=) 3: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: YXjtjwoesJUSGw40nC73us7OdL7eSn74JJVfMRae8cI=) 4: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: kq6A8cL9NTZnFPc2HUzKmlVXrKIf6u5lrw0WIGV14uo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:32:ca:04:1a:0c:d1:e9:5b:56:50:98:61:dd:92:01:9b:32:5d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Validity Not Before: Sep 2 20:28:05 2026 GMT Not After : Sep 3 22:41:05 2026 GMT Subject: CN=D4C9E64F41A83F572BDE8E080858856900AF5E1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:7e:e7:01:c5:df:52:8e:84:52:1b:69:13: 32:ac:82:9b:69:7c:a2:27:94:8c:7f:e0:65:3f:14: cf:cb:f3:60:d5:55:7e:47:26:e0:ae:d4:7c:18:ae: 59:71:05:ce:62:4e:83:2e:0e:31:57:ee:da:aa:a7: a9:c8:f9:15:94:06:c0:e9:ce:75:ff:b2:54:d5:e4: 6d:0d:b1:12:90:3d:71:0a:5d:92:e0:bc:46:be:00: e7:d9:cf:d8:ad:49:8f:ed:d7:69:76:93:ec:a8:c5: f8:79:3a:b9:ae:8a:eb:ff:69:6b:c2:b7:0e:62:6a: 8e:a8:fa:08:1d:d2:6a:21:9a:1e:84:99:9c:6b:ea: ed:0f:61:95:56:74:fe:88:63:09:df:11:54:38:27: 33:b2:08:f0:1e:d9:0d:20:3b:be:eb:50:68:0e:ad: 30:50:97:54:52:a4:d9:27:ad:97:0c:c6:76:09:98: b3:a0:77:f9:08:7e:24:43:8c:5b:52:a2:ef:89:45: db:fe:6b:36:36:85:6c:96:22:7e:ef:43:29:57:f0: 10:f7:d3:e5:6b:c5:7f:e8:76:ac:75:99:09:b5:54: 96:8c:b0:28:01:de:7c:0e:08:c8:0b:74:d3:4a:e0: c0:e7:23:4a:7e:e7:65:44:14:3c:f0:7c:95:63:cb: 46:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C9:E6:4F:41:A8:3F:57:2B:DE:8E:08:08:58:85:69:00:AF:5E:1A X509v3 Authority Key Identifier: keyid:8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:21:17:f4:24:da:c1:a7:2e:c0:50:b8:4f:b6:bb:7a:70:8f: 8b:1a:20:ee:da:ad:ea:e1:43:5c:d5:50:60:bd:4c:c9:fd:2b: f2:b4:a2:09:50:6c:b3:62:24:ce:35:a8:7f:dd:62:95:0d:96: 9e:09:04:e7:58:1d:80:02:5f:10:fa:65:1c:68:2b:b4:b4:ec: 06:24:e4:10:b2:bd:b3:9b:ff:51:85:ef:92:57:bd:c0:a5:f6: 42:12:e1:21:95:05:2f:c0:1d:46:31:82:e0:08:38:39:0c:fc: c3:ab:4f:30:e3:b5:1a:c6:05:a7:de:10:aa:61:dd:0f:71:1e: 24:23:ac:54:b9:0f:a2:ec:0f:3b:b8:dd:fc:b2:0b:14:67:26: 59:f8:ff:bc:39:2c:f4:2d:c8:86:ab:7b:e9:8d:d3:71:18:88: 09:3e:e7:a5:64:19:e5:67:1b:de:6f:ff:61:45:ea:49:5a:3a: c5:27:eb:22:a6:c2:77:1f:13:a4:5d:df:fb:d8:b5:e0:d9:ad: 98:b2:f2:4a:23:00:72:64:1b:a9:a5:41:89:33:85:70:50:26: 78:6d:e2:e1:11:3a:35:01:fc:4b:8e:0a:54:21:49:3d:e0:21: d8:20:e3:00:24:7d:f9:5e:bc:5d:5a:04:b2:21:fb:3f:bb:fb: c4:31:c4:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDLKBBoM0elbVlCYYd2SAZsyXXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhD RjIyNTVEODAeFw0yNjA5MDIyMDI4MDVaFw0yNjA5MDMyMjQxMDVaMDMxMTAvBgNV BAMTKEQ0QzlFNjRGNDFBODNGNTcyQkRFOEUwODA4NTg4NTY5MDBBRjVFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdHn7nAcXfUo6EUhtpEzKsgptp fKInlIx/4GU/FM/L82DVVX5HJuCu1HwYrllxBc5iToMuDjFX7tqqp6nI+RWUBsDp znX/slTV5G0NsRKQPXEKXZLgvEa+AOfZz9itSY/t12l2k+yoxfh5Ormuiuv/aWvC tw5iao6o+ggd0mohmh6EmZxr6u0PYZVWdP6IYwnfEVQ4JzOyCPAe2Q0gO77rUGgO rTBQl1RSpNknrZcMxnYJmLOgd/kIfiRDjFtSou+JRdv+azY2hWyWIn7vQylX8BD3 0+VrxX/odqx1mQm1VJaMsCgB3nwOCMgLdNNK4MDnI0p+52VEFDzwfJVjy0aDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1MnmT0GoP1cr3o4ICFiFaQCvXhowHwYDVR0j BBgwFoAUjqjsmRJT8GZfQUnV/kLD+M8iVdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM5MDg3ODItNDUyMC00NWI0LTk5ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkx MjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhDRjIyNTVEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUE4RUM5OTEyNTNGMDY2NUY0MTQ5RDVGRTQyQzNGOENGMjI1 NUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMz RjhDRjIyNTVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8hF/Qk2sGnLsBQuE+2u3pwj4saIO7arerh Q1zVUGC9TMn9K/K0oglQbLNiJM41qH/dYpUNlp4JBOdYHYACXxD6ZRxoK7S07AYk 5BCyvbOb/1GF75JXvcCl9kIS4SGVBS/AHUYxguAIODkM/MOrTzDjtRrGBafeEKph 3Q9xHiQjrFS5D6LsDzu43fyyCxRnJln4/7w5LPQtyIare+mN03EYiAk+56VkGeVn G95v/2FF6klaOsUn6yKmwncfE6Rd3/vYteDZrZiy8kojAHJkG6mlQYkzhXBQJnht 4uEROjUB/EuOClQhST3gIdgg4wAkfflevF1aBLIh+z+7+8QxxPU= -----END CERTIFICATE-----Generated at Thu Sep 3 08:23:11 2026 by rpki-client