$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft File: 8B43E14BD4588C4904A641356A5D07D628190CAB.mft (raw, json) Hash identifier: +Y4r7rQ8aYIRUkEZNqK16oqbpvpRc757yzOrTHx1J+Q= Subject key identifier: 4F:73:5D:70:D0:3B:35:A0:88:74:9C:33:B9:68:C4:5D:C8:97:21:E2 Authority key identifier: 8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB Certificate issuer: /CN=8B43E14BD4588C4904A641356A5D07D628190CAB Certificate serial: 70D90520646C17AD39852681798AF0E96E3E02CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 07:11:28 +0000 Manifest this update: Thu 03 Sep 2026 07:06:28 +0000 Manifest next update: Fri 04 Sep 2026 10:53:28 +0000 Files and hashes: 1: 8B43E14BD4588C4904A641356A5D07D628190CAB.crl (hash: 7dpKx3cqPYHASg2jXTz/nEEaAy/lN5Q1fbjZRT+GCho=) 2: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: 0flsrdaSAjsWCJEWyeVcLLzCVtlFqOFqVNzD5e/gcuA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.crl rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 10:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d9:05:20:64:6c:17:ad:39:85:26:81:79:8a:f0:e9:6e:3e:02:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B43E14BD4588C4904A641356A5D07D628190CAB Validity Not Before: Sep 3 07:06:28 2026 GMT Not After : Sep 4 10:53:28 2026 GMT Subject: CN=4F735D70D03B35A088749C33B968C45DC89721E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:c6:a5:df:cb:7f:e3:2f:b5:10:9d:72:27: 48:98:92:52:5f:7c:ad:bc:86:3a:9f:4e:51:59:39: fd:e7:41:1c:c1:14:23:93:e4:db:71:96:e7:af:73: 8d:4e:97:76:04:cf:d1:af:0b:27:2c:e0:95:1c:97: 17:e7:c4:8e:93:fa:63:fa:82:d4:c3:f5:ee:cf:ee: 8a:74:c5:6d:26:e5:c8:c3:3c:e8:93:28:54:54:1b: 04:b3:1c:99:ce:22:8a:de:90:b0:1c:61:a2:03:29: cd:4d:b1:2c:f0:b3:2d:9e:b8:98:34:aa:71:29:86: a6:48:15:6d:48:08:dc:1e:0c:6f:42:4c:ce:67:7e: 2a:b1:6d:4f:dc:5a:92:e8:47:72:18:51:42:e5:b8: 46:7e:66:fc:74:c0:a3:9a:11:51:03:52:12:7d:9b: 85:48:f9:09:b9:9c:72:9a:d3:3b:c7:61:0f:1a:77: 67:0c:55:1c:5a:5a:21:99:07:7c:70:86:66:12:76: a5:71:3e:19:24:e4:eb:cc:ca:00:f3:6f:e1:eb:3f: b4:60:eb:6c:ca:24:61:75:5d:a4:a7:9f:fd:4b:48: 49:ea:ea:6e:43:1e:ce:2a:ce:e9:d2:20:77:ee:5a: b6:63:36:f8:3b:7c:93:de:42:60:99:ff:af:71:20: ed:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:73:5D:70:D0:3B:35:A0:88:74:9C:33:B9:68:C4:5D:C8:97:21:E2 X509v3 Authority Key Identifier: keyid:8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:8f:31:d4:b0:35:95:8e:32:c2:eb:61:38:c6:ff:df:9e:56: f8:c1:76:a3:ef:8c:c0:86:22:21:27:fb:84:8b:0f:3e:4f:f5: 8c:ad:8f:78:cf:b4:c7:0c:87:e0:94:23:78:fd:b3:0a:4d:97: 4e:50:86:1a:a2:8c:4e:86:cc:dd:74:e5:d7:b4:59:f2:71:ad: ea:0e:88:28:6b:13:d0:a6:2f:c6:80:d4:7f:98:42:79:f8:90: 89:02:aa:02:fa:d3:bf:08:41:b7:74:ab:53:f5:fe:f2:73:a8: 9d:e0:b8:cf:29:4e:f9:b8:13:d0:34:df:86:21:20:1a:04:3d: da:5b:fa:6c:9a:96:e0:f1:7d:b5:c4:a9:c6:3b:4b:68:2e:b7: 1a:9c:46:e3:e0:c7:6f:99:3a:1a:86:bb:95:91:9c:b4:fd:25: 85:09:67:1f:1f:b1:69:3b:d1:b7:3c:bb:19:35:e5:8e:ee:00: 5a:24:32:ff:1a:b4:09:4c:cb:4d:4b:29:09:37:ff:cc:a6:28: 55:e7:e3:1b:1e:ea:65:73:97:29:b6:a7:77:32:62:72:d7:a3: 69:c2:f5:1e:cc:65:17:0e:b9:40:ef:ee:26:a3:87:23:27:5d: 59:3d:e7:58:26:28:fb:59:7f:9e:8e:72:a0:f5:9e:c5:9a:90: 31:6f:a2:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcNkFIGRsF605hSaBeYrw6W4+AsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0M0UxNEJENDU4OEM0OTA0QTY0MTM1NkE1RDA3RDYy ODE5MENBQjAeFw0yNjA5MDMwNzA2MjhaFw0yNjA5MDQxMDUzMjhaMDMxMTAvBgNV BAMTKDRGNzM1RDcwRDAzQjM1QTA4ODc0OUMzM0I5NjhDNDVEQzg5NzIxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCop8al38t/4y+1EJ1yJ0iYklJf fK28hjqfTlFZOf3nQRzBFCOT5Ntxluevc41Ol3YEz9GvCycs4JUclxfnxI6T+mP6 gtTD9e7P7op0xW0m5cjDPOiTKFRUGwSzHJnOIorekLAcYaIDKc1NsSzwsy2euJg0 qnEphqZIFW1ICNweDG9CTM5nfiqxbU/cWpLoR3IYUULluEZ+Zvx0wKOaEVEDUhJ9 m4VI+Qm5nHKa0zvHYQ8ad2cMVRxaWiGZB3xwhmYSdqVxPhkk5OvMygDzb+HrP7Rg 62zKJGF1XaSnn/1LSEnq6m5DHs4qzunSIHfuWrZjNvg7fJPeQmCZ/69xIO2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT3NdcNA7NaCIdJwzuWjEXciXIeIwHwYDVR0j BBgwFoAUi0PhS9RYjEkEpkE1al0H1igZDKswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzRhMjNjNGUtMzkzMi00M2JkLTgxNzYtZjYyNTFkZGVhODQyLzAvOEI0M0UxNEJE NDU4OEM0OTA0QTY0MTM1NkE1RDA3RDYyODE5MENBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjQzRTE0QkQ0NTg4QzQ5MDRBNjQxMzU2QTVEMDdENjI4MTkw Q0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvOEI0M0UxNEJENDU4OEM0OTA0QTY0MTM1NkE1RDA3 RDYyODE5MENBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiPMdSwNZWOMsLrYTjG/9+eVvjBdqPvjMCG IiEn+4SLDz5P9Yytj3jPtMcMh+CUI3j9swpNl05QhhqijE6GzN105de0WfJxreoO iChrE9CmL8aA1H+YQnn4kIkCqgL6078IQbd0q1P1/vJzqJ3guM8pTvm4E9A034Yh IBoEPdpb+myaluDxfbXEqcY7S2gutxqcRuPgx2+ZOhqGu5WRnLT9JYUJZx8fsWk7 0bc8uxk15Y7uAFokMv8atAlMy01LKQk3/8ymKFXn4xse6mVzlym2p3cyYnLXo2nC 9R7MZRcOuUDv7iajhyMnXVk951gmKPtZf56OcqD1nsWakDFvogk= -----END CERTIFICATE-----Generated at Thu Sep 3 20:11:10 2026 by rpki-client