$ rpki-client -vvvf rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft File: 8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft (raw, json) Hash identifier: VbnxbpSijo+2MOXGQ9TUMuNjZM9GAwkqcaPCcbGH1fw= Subject key identifier: AD:FB:96:48:56:30:EA:D3:DD:7C:2E:61:4E:7C:99:03:72:4B:E3:9A Authority key identifier: 8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC Certificate issuer: /CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC Certificate serial: 73B5D7E842D6FDF0F163F9C775C5F3D2B09B99BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 10:40:15 +0000 Manifest this update: Thu 03 Sep 2026 10:35:15 +0000 Manifest next update: Fri 04 Sep 2026 12:05:15 +0000 Files and hashes: 1: 8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl (hash: YRsGIHmCa/bLFIdoANkxKiMzqGJq5ViO1PJ/mg9Vc28=) 2: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: fGKw2WFahFPpQMw21POO2xmihiDm+uI9kc4e8STtyBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b5:d7:e8:42:d6:fd:f0:f1:63:f9:c7:75:c5:f3:d2:b0:9b:99:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC Validity Not Before: Sep 3 10:35:15 2026 GMT Not After : Sep 4 12:05:15 2026 GMT Subject: CN=ADFB96485630EAD3DD7C2E614E7C9903724BE39A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:68:17:82:06:a7:39:b0:04:80:cb:1a:03: 33:58:ef:9c:86:36:29:ec:cc:44:6e:fd:b1:4d:91: be:e4:b9:3e:54:a3:ed:33:89:f4:8a:c8:c3:d7:40: 7f:56:46:24:02:70:23:15:44:3b:f9:88:bb:f8:9c: 5e:18:18:e3:1c:79:0c:b5:74:90:84:e3:99:d4:92: 1b:ad:b0:6d:86:22:98:6e:a0:9d:3d:d9:42:a0:46: 78:b8:fb:49:73:70:7a:75:2f:a6:b0:79:61:41:b4: ab:7c:45:cc:bc:93:ea:fa:36:36:2e:3d:c5:e0:bb: f7:a7:a3:7c:5f:36:a9:7f:62:fc:74:7c:d6:93:f9: 03:e8:a5:56:f4:e8:a1:eb:d8:28:53:65:20:93:20: 2c:93:d0:b1:39:7d:ff:57:74:ce:6c:2f:bc:35:eb: 35:18:81:a6:f6:f4:10:b3:23:8c:a7:b0:8d:17:7f: 5a:91:fe:bc:d2:4e:a0:e6:a0:dd:bb:78:99:4c:1f: b8:01:18:6a:ee:b8:83:06:76:cd:f8:c1:be:c6:4b: bb:1d:8f:68:e0:a1:bd:22:5c:a9:51:12:90:e3:99: 24:42:6f:95:83:30:b4:7c:c2:d1:fd:f7:25:0f:8c: b6:98:9a:c4:79:68:21:6e:85:55:85:47:3d:2f:a8: 9a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FB:96:48:56:30:EA:D3:DD:7C:2E:61:4E:7C:99:03:72:4B:E3:9A X509v3 Authority Key Identifier: keyid:8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:00:f9:11:a7:34:43:af:20:c1:82:e0:84:06:49:b7:0f:65: e3:64:17:c4:98:70:c7:54:f1:a5:89:09:e2:95:33:50:6d:58: 11:a5:a5:56:34:ea:6d:37:05:eb:77:66:d8:1a:4a:ac:3b:28: 00:87:7d:73:e8:01:6e:2f:cf:60:77:3f:8c:e4:aa:8d:44:c6: 09:2e:69:b9:67:71:65:01:c2:68:a3:6e:37:72:8d:46:f6:6c: 30:54:31:6a:f5:94:bb:cf:52:a5:ec:c2:4f:4c:5e:cb:99:1a: b0:5a:e2:75:fe:0f:a5:14:0e:4b:ec:7c:1e:d5:96:f8:26:8b: b8:08:5b:fb:bd:f5:86:bd:e0:ff:00:29:3b:13:77:7e:30:a5: 36:f3:0c:c5:c0:2e:11:01:53:99:41:8f:12:a4:12:e7:33:4c: 40:26:0c:0a:24:dc:e0:f4:45:aa:eb:b3:59:6a:8c:c8:17:03: cb:46:14:63:c2:91:8e:b5:00:bd:5a:95:e6:da:5e:fc:42:68: ef:41:44:06:65:16:3e:82:2c:62:21:b4:92:93:8f:89:ab:9e: a2:8e:49:8d:79:e4:9b:a8:0b:c7:26:48:9e:e4:cc:dc:94:23: 65:5a:22:9f:a1:38:ab:3b:c4:96:dc:92:bd:c4:e8:91:ae:d7: 6b:51:37:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7XX6ELW/fDxY/nHdcXz0rCbmb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUxMzEyNDVFMzhFODQ1QkUyQTIxOEY5OTI4RUFENTMw RkZGRkVBQzAeFw0yNjA5MDMxMDM1MTVaFw0yNjA5MDQxMjA1MTVaMDMxMTAvBgNV BAMTKEFERkI5NjQ4NTYzMEVBRDNERDdDMkU2MTRFN0M5OTAzNzI0QkUzOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH02gXgganObAEgMsaAzNY75yG NinszERu/bFNkb7kuT5Uo+0zifSKyMPXQH9WRiQCcCMVRDv5iLv4nF4YGOMceQy1 dJCE45nUkhutsG2GIphuoJ092UKgRni4+0lzcHp1L6aweWFBtKt8Rcy8k+r6NjYu PcXgu/eno3xfNql/Yvx0fNaT+QPopVb06KHr2ChTZSCTICyT0LE5ff9XdM5sL7w1 6zUYgab29BCzI4ynsI0Xf1qR/rzSTqDmoN27eJlMH7gBGGruuIMGds34wb7GS7sd j2jgob0iXKlREpDjmSRCb5WDMLR8wtH99yUPjLaYmsR5aCFuhVWFRz0vqJqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrfuWSFYw6tPdfC5hTnyZA3JL45owHwYDVR0j BBgwFoAUjhMSReOOhFviohj5ko6tUw///qwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjcyOTA3ZDMtYmUyNC00ZGE4LTk2YmItZjEyMjhmYzk5MjA1LzAvOEUxMzEyNDVF MzhFODQ1QkUyQTIxOEY5OTI4RUFENTMwRkZGRkVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTEzMTI0NUUzOEU4NDVCRTJBMjE4Rjk5MjhFQUQ1MzBGRkZG RUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2 YmItZjEyMjhmYzk5MjA1LzAvOEUxMzEyNDVFMzhFODQ1QkUyQTIxOEY5OTI4RUFE NTMwRkZGRkVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYA+RGnNEOvIMGC4IQGSbcPZeNkF8SYcMdU 8aWJCeKVM1BtWBGlpVY06m03Bet3ZtgaSqw7KACHfXPoAW4vz2B3P4zkqo1Exgku ablncWUBwmijbjdyjUb2bDBUMWr1lLvPUqXswk9MXsuZGrBa4nX+D6UUDkvsfB7V lvgmi7gIW/u99Ya94P8AKTsTd34wpTbzDMXALhEBU5lBjxKkEuczTEAmDAok3OD0 Rarrs1lqjMgXA8tGFGPCkY61AL1alebaXvxCaO9BRAZlFj6CLGIhtJKTj4mrnqKO SY155JuoC8cmSJ7kzNyUI2VaIp+hOKs7xJbckr3E6JGu12tRN3s= -----END CERTIFICATE-----Generated at Thu Sep 3 23:37:54 2026 by rpki-client