$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft File: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft (raw, json) Hash identifier: YDalIydeUJMpSGSoEOh4/1QDlkklme5ZUDRTOgc45mQ= Subject key identifier: B3:77:D0:AB:FC:DB:DE:9A:AD:5C:02:D9:97:1F:FD:46:A8:C1:85:16 Authority key identifier: 88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 Certificate issuer: /CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Certificate serial: 2E2172F08E36FA3EE3F78C6E52E9748F5BEB0C91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft Manifest number: A7 Signing time: Wed 02 Sep 2026 13:55:19 +0000 Manifest this update: Wed 02 Sep 2026 13:50:19 +0000 Manifest next update: Thu 03 Sep 2026 14:20:19 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: YJRCBupflF/I8POF8sMQ3AXgFo1nrT6mZHr4XrUFzvU=) 2: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl (hash: EiblH1WM1w6zpkjJCGnjw1qvT3rRC2pBfUYqZKxlL7k=) 3: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: l0DIBrvHKOmdXYA8EMn7r3ept4hzvTyfATy5T2AkXgc=) 4: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 0+nHSjmEBtHrdpW5swBsy/CGgBdToecJRrJ4YRQ1Ieo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 14:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:21:72:f0:8e:36:fa:3e:e3:f7:8c:6e:52:e9:74:8f:5b:eb:0c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Validity Not Before: Sep 2 13:50:19 2026 GMT Not After : Sep 3 14:20:19 2026 GMT Subject: CN=B377D0ABFCDBDE9AAD5C02D9971FFD46A8C18516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:51:1b:da:e9:5a:57:e8:f7:6b:3f:af:b5: d5:48:1a:21:15:57:57:2e:ae:94:95:34:2f:05:60: 2d:97:e0:e5:45:b2:22:45:b9:8c:4a:03:f3:2f:d4: 47:e0:37:41:0d:b7:20:22:c4:b8:11:cc:36:1d:2c: 56:96:43:06:fc:9f:32:65:7f:c0:03:b4:02:a6:25: 0b:15:a4:69:8c:61:8a:37:0f:26:67:10:78:ce:99: 6d:b3:e3:c8:60:89:1f:50:c8:82:4d:50:62:c9:9d: 2a:a3:36:86:c9:2e:13:99:06:54:c7:a4:86:a1:34: f5:66:a6:1b:96:f6:cc:09:2e:42:6f:14:7a:68:f6: e6:a9:7e:b3:77:30:be:0d:70:f0:cc:1d:6b:1c:19: f3:86:a7:f7:69:5b:61:9d:19:5b:99:6b:12:c3:cb: 97:59:71:b5:e5:46:07:b3:29:aa:7e:dc:c1:7d:23: 7f:06:63:d3:f3:cb:22:09:8b:2d:ba:ff:76:58:43: 3e:2e:1b:ec:e6:05:83:df:a9:0a:64:fb:fd:5a:18: ee:8a:e9:39:56:1d:a4:ef:d3:36:98:e8:4e:a8:17: 78:ea:28:1b:4f:54:f2:6f:16:6b:5f:a6:09:a4:4e: 9e:41:b0:2f:de:81:69:ce:b1:27:d7:c2:0c:89:06: db:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:77:D0:AB:FC:DB:DE:9A:AD:5C:02:D9:97:1F:FD:46:A8:C1:85:16 X509v3 Authority Key Identifier: keyid:88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:16:06:e1:45:33:3d:3a:22:ad:9f:6d:34:d3:ec:03:74:12: c6:5b:5d:19:47:53:1e:21:e9:83:42:d1:9a:88:03:bf:23:0d: 67:b4:8a:40:39:86:69:3c:b6:9e:9b:57:5d:ea:be:75:08:67: ea:15:3c:78:1f:d1:a1:fc:f0:f2:40:36:ed:f4:5d:1f:2b:ff: d4:2f:10:52:55:f3:e4:8d:17:fa:83:b7:0a:b1:b2:e9:87:75: 2c:aa:a7:d6:27:cd:2d:65:39:0b:fc:b0:ef:f5:39:45:7f:a1: 92:5d:b8:94:ba:e3:c4:ac:0a:2f:a8:77:f7:75:a5:f4:5f:54: cf:cb:96:b1:08:85:7e:05:f6:88:7b:ab:de:ca:8c:3c:4a:42: 00:c2:60:81:14:bc:a7:22:6f:e6:0e:6c:58:d8:fe:17:a3:99: 6e:b9:e1:2b:70:a0:29:2f:38:c5:95:39:8c:c4:fa:78:77:0c: 36:66:37:01:93:2a:8a:8f:ba:68:8e:6b:91:0f:89:7d:ca:87: 54:e4:25:b2:2f:48:67:b5:d9:7f:2b:3e:fc:81:7e:8b:b8:de: 3f:ea:66:7f:fd:e8:75:ca:ee:31:93:fd:49:26:1e:44:9b:7c: a3:da:13:a2:80:8c:78:3c:64:f1:bc:59:c4:b7:0b:81:c6:5b: 25:b7:cd:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULiFy8I42+j7j94xuUul0j1vrDJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1 QzRGMjk4NTAeFw0yNjA5MDIxMzUwMTlaFw0yNjA5MDMxNDIwMTlaMDMxMTAvBgNV BAMTKEIzNzdEMEFCRkNEQkRFOUFBRDVDMDJEOTk3MUZGRDQ2QThDMTg1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClDlEb2ulaV+j3az+vtdVIGiEV V1curpSVNC8FYC2X4OVFsiJFuYxKA/Mv1EfgN0ENtyAixLgRzDYdLFaWQwb8nzJl f8ADtAKmJQsVpGmMYYo3DyZnEHjOmW2z48hgiR9QyIJNUGLJnSqjNobJLhOZBlTH pIahNPVmphuW9swJLkJvFHpo9uapfrN3ML4NcPDMHWscGfOGp/dpW2GdGVuZaxLD y5dZcbXlRgezKap+3MF9I38GY9PzyyIJiy26/3ZYQz4uG+zmBYPfqQpk+/1aGO6K 6TlWHaTv0zaY6E6oF3jqKBtPVPJvFmtfpgmkTp5BsC/egWnOsSfXwgyJBtunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs3fQq/zb3pqtXALZlx/9RqjBhRYwHwYDVR0j BBgwFoAUiGPUPCzTbp3ijH5V8YkcwlxPKYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVlOTQwMTQtODdmYS00YmMyLWIxYzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0My Q0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1QzRGMjk4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODYzRDQzQzJDRDM2RTlERTI4QzdFNTVGMTg5MUNDMjVDNEYy OTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFD QzI1QzRGMjk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUWBuFFMz06Iq2fbTTT7AN0EsZbXRlHUx4h 6YNC0ZqIA78jDWe0ikA5hmk8tp6bV13qvnUIZ+oVPHgf0aH88PJANu30XR8r/9Qv EFJV8+SNF/qDtwqxsumHdSyqp9YnzS1lOQv8sO/1OUV/oZJduJS648SsCi+od/d1 pfRfVM/LlrEIhX4F9oh7q97KjDxKQgDCYIEUvKcib+YObFjY/hejmW654StwoCkv OMWVOYzE+nh3DDZmNwGTKoqPumiOa5EPiX3Kh1TkJbIvSGe12X8rPvyBfou43j/q Zn/96HXK7jGT/UkmHkSbfKPaE6KAjHg8ZPG8WcS3C4HGWyW3zeE= -----END CERTIFICATE-----Generated at Thu Sep 3 05:06:58 2026 by rpki-client