$ rpki-client -vvvf rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft File: 8F6B228755F970273B8D779247A1AE56FE0C9587.mft (raw, json) Hash identifier: JsohMDYUOtP0oJKktG3z8knLfyMpFdF7E6md5UXMXjQ= Subject key identifier: 6F:2F:B0:38:07:DD:44:9F:CD:90:43:8D:4B:36:DF:A9:A3:8D:DD:FC Authority key identifier: 8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 Certificate issuer: /CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Certificate serial: 2F5CF7CB3058F4B782AB89DEB2B56A7382043596 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 22:40:51 +0000 Manifest this update: Wed 02 Sep 2026 22:35:51 +0000 Manifest next update: Fri 04 Sep 2026 01:29:51 +0000 Files and hashes: 1: 8F6B228755F970273B8D779247A1AE56FE0C9587.crl (hash: 7kTA05XQw71MqvoLvc5ZNSwxrXYHEcgiCFtLIx9ME6E=) 2: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: Xy8vvuZlhVSnjTAKWEI2yBt5W17a07XY3wxdN0sfnOc=) 3: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: ZGy+loCXTZu4lKXZ9Xy1tyQd/a/a5ZNJkzDyvD+H2Qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5c:f7:cb:30:58:f4:b7:82:ab:89:de:b2:b5:6a:73:82:04:35:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Validity Not Before: Sep 2 22:35:51 2026 GMT Not After : Sep 4 01:29:51 2026 GMT Subject: CN=6F2FB03807DD449FCD90438D4B36DFA9A38DDDFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:ed:13:53:c8:db:47:50:a0:03:98:c6:42: 8a:91:85:94:fc:27:36:bd:15:d0:d9:ff:84:d6:45: 50:a0:99:d8:e7:3a:04:6c:2f:46:76:8d:1a:e0:ea: 71:a7:39:ad:c8:a7:f2:82:ed:07:cd:34:42:e5:d5: 3f:86:59:30:de:4e:73:1b:79:47:f7:40:3b:83:3e: b5:e5:66:57:30:2c:dd:d5:ba:df:01:f2:10:af:bd: 49:b8:1c:e7:ba:fd:73:40:f2:56:b0:37:03:ac:3c: 1a:29:4f:70:57:26:04:54:3c:8f:6c:84:74:91:55: 25:c3:39:b6:fc:6c:50:1d:a8:fd:1c:6e:40:81:12: 41:8e:8b:0f:5f:90:a1:d1:f1:cb:85:40:39:d7:cd: c1:40:79:f1:d4:ff:b1:29:91:fc:dd:c0:1a:e8:39: 5c:36:fa:30:4b:2b:e3:bc:f1:b8:ab:99:78:be:c7: cf:74:78:bd:f6:13:40:28:3d:78:b2:79:0c:fe:74: 34:2c:02:5b:ec:76:4d:d1:bf:16:b3:cf:8a:67:73: 95:0c:b3:f7:45:ad:d5:77:ad:ad:cc:a4:37:8e:58: 39:75:71:38:bc:ab:45:ed:37:42:5e:5e:2f:02:96: 71:32:db:69:42:fd:58:4e:b0:38:52:9c:15:26:66: 47:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2F:B0:38:07:DD:44:9F:CD:90:43:8D:4B:36:DF:A9:A3:8D:DD:FC X509v3 Authority Key Identifier: keyid:8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:27:60:e4:68:a0:5b:56:98:16:57:b0:ec:30:1c:87:d4:b7: 61:f0:44:c6:61:06:40:5b:f3:47:5e:1d:7b:65:4b:e8:f5:5c: cc:95:8d:11:a5:3d:c7:84:60:f1:7d:12:ff:a6:21:68:6c:ab: 24:7f:a7:6e:2c:8b:40:d3:7d:b3:6b:7e:bc:7f:3b:b3:9f:cd: 05:80:aa:7d:2b:d9:98:00:be:95:a3:e1:6b:79:3e:e9:27:32: 72:d1:26:6b:9a:e4:3d:d7:2f:ae:33:cf:35:97:eb:21:79:ce: 49:73:28:c5:58:c0:79:3c:62:1d:11:e3:cd:c3:75:35:46:56: 87:90:55:e9:cc:68:c5:aa:92:23:bb:2f:74:3d:95:3b:5a:e0: 8d:db:34:5e:24:8b:02:28:e2:ba:86:77:99:a9:39:87:59:6b: 52:76:96:f0:85:35:bd:60:28:38:a5:3b:46:bd:83:4a:ee:95: 21:a5:c9:10:be:fe:a7:91:67:44:00:3b:00:b3:2b:c9:8b:b9: 89:bc:df:b1:46:20:fe:12:23:3d:0e:0b:f4:d5:52:7b:df:e1: b0:f1:01:c9:27:7e:cb:df:d2:97:4a:1f:2a:9b:79:97:6e:5d: 89:94:af:95:ed:70:cc:62:27:c6:9b:8f:7d:05:6e:01:85:1c: eb:1a:b9:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1z3yzBY9LeCq4nesrVqc4IENZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY2QjIyODc1NUY5NzAyNzNCOEQ3NzkyNDdBMUFFNTZG RTBDOTU4NzAeFw0yNjA5MDIyMjM1NTFaFw0yNjA5MDQwMTI5NTFaMDMxMTAvBgNV BAMTKDZGMkZCMDM4MDdERDQ0OUZDRDkwNDM4RDRCMzZERkE5QTM4RERERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCec+0TU8jbR1CgA5jGQoqRhZT8 Jza9FdDZ/4TWRVCgmdjnOgRsL0Z2jRrg6nGnOa3Ip/KC7QfNNELl1T+GWTDeTnMb eUf3QDuDPrXlZlcwLN3Vut8B8hCvvUm4HOe6/XNA8lawNwOsPBopT3BXJgRUPI9s hHSRVSXDObb8bFAdqP0cbkCBEkGOiw9fkKHR8cuFQDnXzcFAefHU/7EpkfzdwBro OVw2+jBLK+O88birmXi+x890eL32E0AoPXiyeQz+dDQsAlvsdk3Rvxazz4pnc5UM s/dFrdV3ra3MpDeOWDl1cTi8q0XtN0JeXi8ClnEy22lC/VhOsDhSnBUmZkddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUby+wOAfdRJ/NkEONSzbfqaON3fwwHwYDVR0j BBgwFoAUj2sih1X5cCc7jXeSR6GuVv4MlYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU3ZmIxN2UtOWQ1OC00ZDUxLTg0NmUtMGE4NGM4Njk5MTQyLzAvOEY2QjIyODc1 NUY5NzAyNzNCOEQ3NzkyNDdBMUFFNTZGRTBDOTU4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjZCMjI4NzU1Rjk3MDI3M0I4RDc3OTI0N0ExQUU1NkZFMEM5 NTg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOEY2QjIyODc1NUY5NzAyNzNCOEQ3NzkyNDdBMUFF NTZGRTBDOTU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAnYORooFtWmBZXsOwwHIfUt2HwRMZhBkBb 80deHXtlS+j1XMyVjRGlPceEYPF9Ev+mIWhsqyR/p24si0DTfbNrfrx/O7OfzQWA qn0r2ZgAvpWj4Wt5PuknMnLRJmua5D3XL64zzzWX6yF5zklzKMVYwHk8Yh0R483D dTVGVoeQVenMaMWqkiO7L3Q9lTta4I3bNF4kiwIo4rqGd5mpOYdZa1J2lvCFNb1g KDilO0a9g0rulSGlyRC+/qeRZ0QAOwCzK8mLuYm837FGIP4SIz0OC/TVUnvf4bDx Acknfsvf0pdKHyqbeZduXYmUr5XtcMxiJ8abj30FbgGFHOsauSw= -----END CERTIFICATE-----Generated at Thu Sep 3 05:59:13 2026 by rpki-client