$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft File: A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft (raw, json) Hash identifier: 6aFuxGk+PgRbKeDWmRAB0wrbQ9IFjt3+jL4qrDmPg+E= Subject key identifier: 77:29:E2:EF:48:51:8C:9F:71:CB:FD:19:66:09:FA:A6:C1:31:01:6D Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF Certificate issuer: /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Certificate serial: 0D8CEB556D0464D0FBDCF25264C5A4C6BFF29E8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft Manifest number: A8 Signing time: Thu 03 Sep 2026 17:18:40 +0000 Manifest this update: Thu 03 Sep 2026 17:13:40 +0000 Manifest next update: Fri 04 Sep 2026 17:32:40 +0000 Files and hashes: 1: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: /KfC4nr32tMCkBy7+tyxmf0Ms+3hn6LQNee4YzYVhVM=) 2: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: pahHbmXTulV++MGHGhEL8jSNz3xJ/1KdhQdlxBhfIw4=) 3: A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl (hash: jtY0wpUjUZuBVWJIfs++ebva5xF9o6DluR5bgkIfrWI=) 4: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: h1TE3m56WQ+gTVyqOOSf1UTeQzb1azE9LGSpzK549vA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8c:eb:55:6d:04:64:d0:fb:dc:f2:52:64:c5:a4:c6:bf:f2:9e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Validity Not Before: Sep 3 17:13:40 2026 GMT Not After : Sep 4 17:32:40 2026 GMT Subject: CN=7729E2EF48518C9F71CBFD196609FAA6C131016D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:69:19:87:e9:3d:f6:56:f1:b5:b3:89:1c: 15:26:52:97:d8:35:41:dc:5d:87:6f:32:04:b9:63: e1:ef:ba:b6:58:2c:ee:42:6b:e6:b1:29:73:4a:15: 4e:db:f9:c3:76:3b:62:c9:7e:fa:6c:91:de:3a:c7: 09:6f:d1:46:e8:c2:4c:0b:94:16:03:c2:a9:49:bc: eb:f2:48:50:43:84:f1:cf:6d:ae:a1:4b:81:5d:fe: a2:8e:de:9c:28:50:33:00:b8:0d:af:ca:f2:cd:64: 62:55:db:23:54:61:f2:de:e5:7c:d6:89:70:ed:22: 5d:c3:0a:11:76:0f:cb:fa:66:84:f0:6c:02:b7:c9: 66:fe:35:84:06:a5:db:82:7b:37:0a:78:23:5d:25: 62:2c:c0:48:b3:f5:3b:72:b2:56:0f:f8:a3:f7:04: 24:03:f5:28:02:c4:22:66:9c:4c:75:62:a4:16:09: 79:1a:19:8f:49:15:8b:78:71:12:27:a3:ca:73:dc: d2:fb:13:81:66:de:e9:df:61:33:58:ae:be:d2:96: 65:01:44:31:f3:d9:47:ff:a9:ca:15:03:70:dd:bd: 9e:f6:16:5b:9c:66:64:b0:09:7c:60:2a:08:ff:92: e9:80:2b:9f:52:77:68:8f:ab:c5:09:78:5b:43:8f: 19:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:29:E2:EF:48:51:8C:9F:71:CB:FD:19:66:09:FA:A6:C1:31:01:6D X509v3 Authority Key Identifier: keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0a:75:46:61:99:63:6e:a2:1a:8d:8f:55:47:27:9e:7f:9b: 34:bf:74:cd:8a:c3:90:63:9c:f8:cc:b6:29:20:52:ab:c7:e5: c3:d4:a6:fd:3e:51:51:ab:33:f2:71:d9:1c:84:5f:df:9d:36: 24:8b:e2:08:dd:7d:87:48:e5:4f:33:52:98:b6:84:ce:f9:52: 60:36:a0:89:43:11:cc:29:94:43:5e:5e:22:d7:9a:3a:4f:fa: 2f:e2:72:aa:96:86:72:59:dd:93:9a:e0:bb:77:0e:98:f9:86: f2:3b:fb:a4:e2:9c:5b:aa:82:2e:be:f2:07:e4:af:8e:8a:74: 85:45:14:74:9c:5d:0c:79:c9:20:27:dd:2c:79:44:23:41:76: 86:47:53:3f:38:c1:34:82:59:1c:42:3c:7d:0f:e6:32:05:8f: a4:cc:21:ff:90:50:a3:79:7c:97:67:68:ec:ef:a8:07:42:3f: 11:d8:46:d9:fb:a1:78:59:79:4e:42:52:7c:65:99:c7:21:62: ed:b3:9c:b4:23:a4:72:c7:84:7d:ad:86:78:e8:1d:53:ae:64: e9:8d:9b:5f:fd:da:64:ba:51:b6:53:47:97:f6:3f:89:32:80: c3:05:18:d7:b4:6e:de:12:8f:e6:e3:30:1a:e6:a8:11:b6:43: 84:d7:1c:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYzrVW0EZND73PJSZMWkxr/yno8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFFREYx MUQ0NzhDRjAeFw0yNjA5MDMxNzEzNDBaFw0yNjA5MDQxNzMyNDBaMDMxMTAvBgNV BAMTKDc3MjlFMkVGNDg1MThDOUY3MUNCRkQxOTY2MDlGQUE2QzEzMTAxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCloGkZh+k99lbxtbOJHBUmUpfY NUHcXYdvMgS5Y+HvurZYLO5Ca+axKXNKFU7b+cN2O2LJfvpskd46xwlv0UbowkwL lBYDwqlJvOvySFBDhPHPba6hS4Fd/qKO3pwoUDMAuA2vyvLNZGJV2yNUYfLe5XzW iXDtIl3DChF2D8v6ZoTwbAK3yWb+NYQGpduCezcKeCNdJWIswEiz9TtyslYP+KP3 BCQD9SgCxCJmnEx1YqQWCXkaGY9JFYt4cRIno8pz3NL7E4Fm3unfYTNYrr7SlmUB RDHz2Uf/qcoVA3DdvZ72FlucZmSwCXxgKgj/kumAK59Sd2iPq8UJeFtDjxlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdyni70hRjJ9xy/0ZZgn6psExAW0wHwYDVR0j BBgwFoAUqLQpDbHVABFykYWNrxse3xHUeM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMxZTQ5YWItNTBjYS00YjNlLTgyM2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERC MUQ1MDAxMTcyOTE4NThEQUYxQjFFREYxMUQ0NzhDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI0MjkwREIxRDUwMDExNzI5MTg1OERBRjFCMUVERjExRDQ3 OENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFF REYxMUQ0NzhDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQKdUZhmWNuohqNj1VHJ55/mzS/dM2Kw5Bj nPjMtikgUqvH5cPUpv0+UVGrM/Jx2RyEX9+dNiSL4gjdfYdI5U8zUpi2hM75UmA2 oIlDEcwplENeXiLXmjpP+i/icqqWhnJZ3ZOa4Lt3Dpj5hvI7+6TinFuqgi6+8gfk r46KdIVFFHScXQx5ySAn3Sx5RCNBdoZHUz84wTSCWRxCPH0P5jIFj6TMIf+QUKN5 fJdnaOzvqAdCPxHYRtn7oXhZeU5CUnxlmcchYu2znLQjpHLHhH2thnjoHVOuZOmN m1/92mS6UbZTR5f2P4kygMMFGNe0bt4Sj+bjMBrmqBG2Q4TXHOU= -----END CERTIFICATE-----Generated at Thu Sep 3 20:06:37 2026 by rpki-client