$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft File: C8C1A31E42E799E9EDC0FAB813163052945845AC.mft (raw, json) Hash identifier: HL202c0WPEH8vHHhEQ8l4GkRT9LA6dfO9eqQb007ZMM= Subject key identifier: 30:A5:64:F2:23:7A:CE:05:26:4F:24:A2:65:58:04:11:9E:D9:65:A6 Authority key identifier: C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC Certificate issuer: /CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Certificate serial: 1D17842828A5233E424291A21CBF46DA68D8A4A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft Manifest number: A8 Signing time: Thu 03 Sep 2026 13:43:37 +0000 Manifest this update: Thu 03 Sep 2026 13:38:37 +0000 Manifest next update: Fri 04 Sep 2026 15:56:37 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: FEgS5ex34lgarvKtqbdAVQc0toy/dLHosJymf/4jCzU=) 2: C8C1A31E42E799E9EDC0FAB813163052945845AC.crl (hash: EOda6D4eq/8GRixd1JOEp+/kPyZnvkp0TLFdAUtrPkM=) 3: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: QTf5TvW/sGJCtiqjYOWSFSyqMXy6xLfUyzA5Wf2VFMo=) 4: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: UWH9gD1/4ElZU52MCqktUtjxRojq4daDEIdWkUnok2k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:17:84:28:28:a5:23:3e:42:42:91:a2:1c:bf:46:da:68:d8:a4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Validity Not Before: Sep 3 13:38:37 2026 GMT Not After : Sep 4 15:56:37 2026 GMT Subject: CN=30A564F2237ACE05264F24A2655804119ED965A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:08:f4:63:f1:11:3b:62:0a:6a:62:86:23: 99:6f:b3:a9:b2:66:0e:ba:b0:7d:e7:0f:8b:71:6f: c4:6a:b3:d7:d4:3c:6d:c5:92:cd:dd:b8:31:ec:e7: bd:ef:77:fc:36:e6:71:8e:c3:63:68:7e:51:36:5e: fe:4a:70:dc:89:4c:50:09:88:eb:cc:a3:6f:44:f3: 26:38:d6:99:b1:df:d6:f5:aa:79:d9:7a:89:43:27: bd:39:94:e2:30:df:fe:3c:4d:19:96:33:27:92:aa: c4:d8:95:50:c8:f3:95:78:34:f9:5d:fc:23:87:b7: ab:64:fa:e5:63:d2:81:45:dc:61:8c:8f:e1:17:a8: 9c:8e:c5:26:d9:b3:e6:2e:7b:17:b7:0c:a3:6b:56: 4a:0c:35:32:f7:52:b3:1a:b2:ad:3f:70:ea:25:66: a3:fe:16:41:95:9b:b7:09:26:d8:4c:38:ae:ec:73: 80:71:e6:86:5d:01:94:fe:69:d1:66:aa:96:91:65: 98:d2:ad:b5:5b:3b:74:23:54:d1:77:b4:c8:cc:ca: dd:52:e1:aa:3b:07:cb:72:2f:7c:07:25:b4:d0:c0: 73:15:af:92:2a:09:98:23:7a:46:55:5b:68:67:03: 7d:ce:30:4c:d5:71:ce:33:8b:85:db:1f:33:b2:fe: 3f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A5:64:F2:23:7A:CE:05:26:4F:24:A2:65:58:04:11:9E:D9:65:A6 X509v3 Authority Key Identifier: keyid:C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:01:71:7a:27:e2:34:ea:49:74:90:3c:4b:b5:d4:95:a0:9e: 6a:9b:36:8b:57:a7:fd:9f:f1:2d:a1:c9:07:d9:c3:b8:97:0a: 45:e2:74:d1:dd:87:37:d7:0e:39:2c:d5:79:87:01:8a:57:19: a5:11:4e:1a:16:82:6a:4b:03:ec:ee:b9:0a:e6:5b:40:71:78: c5:d6:4a:2e:60:d8:ac:43:c0:7a:d0:40:52:6a:c9:4a:9f:98: 7d:0c:cf:8f:8d:8e:e5:44:0b:27:51:11:5a:02:c9:8d:34:33: 69:cf:29:d8:07:f2:85:c1:67:84:1b:10:0d:ac:24:f6:e7:bd: e2:94:32:bf:21:28:8b:cb:e0:88:85:9d:40:c5:7c:f1:69:8b: 66:45:1a:ac:17:61:ce:10:b6:9c:15:e7:43:9d:32:4f:c2:2d: 69:ee:8a:a7:c1:a6:c2:01:03:5b:f7:cd:48:5d:f1:28:5f:8b: 3e:20:a4:74:c9:ee:bd:88:a0:1a:55:2c:f6:5e:08:58:ec:20: 93:dd:92:97:93:dc:b1:b4:66:dd:60:5d:d3:c1:3f:75:07:2e: 78:67:12:07:cb:aa:88:d1:4d:58:9d:a0:e4:db:b9:dc:fc:df: 9b:07:07:16:bf:3a:b2:29:17:d6:54:94:07:c6:d5:fc:91:0c: 04:1b:d0:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHReEKCilIz5CQpGiHL9G2mjYpKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5 NDU4NDVBQzAeFw0yNjA5MDMxMzM4MzdaFw0yNjA5MDQxNTU2MzdaMDMxMTAvBgNV BAMTKDMwQTU2NEYyMjM3QUNFMDUyNjRGMjRBMjY1NTgwNDExOUVEOTY1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsTwj0Y/ERO2IKamKGI5lvs6my Zg66sH3nD4txb8Rqs9fUPG3Fks3duDHs573vd/w25nGOw2NoflE2Xv5KcNyJTFAJ iOvMo29E8yY41pmx39b1qnnZeolDJ705lOIw3/48TRmWMyeSqsTYlVDI85V4NPld /COHt6tk+uVj0oFF3GGMj+EXqJyOxSbZs+Yuexe3DKNrVkoMNTL3UrMasq0/cOol ZqP+FkGVm7cJJthMOK7sc4Bx5oZdAZT+adFmqpaRZZjSrbVbO3QjVNF3tMjMyt1S 4ao7B8tyL3wHJbTQwHMVr5IqCZgjekZVW2hnA33OMEzVcc4zi4XbHzOy/j9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMKVk8iN6zgUmTySiZVgEEZ7ZZaYwHwYDVR0j BBgwFoAUyMGjHkLnmentwPq4ExYwUpRYRawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjOWMyNTItZjdjYS00ZGQ1LTg4ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0 MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5NDU4NDVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEMxQTMxRTQyRTc5OUU5RURDMEZBQjgxMzE2MzA1Mjk0NTg0 NUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMw NTI5NDU4NDVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwBcXon4jTqSXSQPEu11JWgnmqbNotXp/2f 8S2hyQfZw7iXCkXidNHdhzfXDjks1XmHAYpXGaURThoWgmpLA+zuuQrmW0BxeMXW Si5g2KxDwHrQQFJqyUqfmH0Mz4+NjuVECydREVoCyY00M2nPKdgH8oXBZ4QbEA2s JPbnveKUMr8hKIvL4IiFnUDFfPFpi2ZFGqwXYc4QtpwV50OdMk/CLWnuiqfBpsIB A1v3zUhd8Shfiz4gpHTJ7r2IoBpVLPZeCFjsIJPdkpeT3LG0Zt1gXdPBP3UHLnhn EgfLqojRTVidoOTbudz835sHBxa/OrIpF9ZUlAfG1fyRDAQb0Gw= -----END CERTIFICATE-----Generated at Thu Sep 3 20:58:15 2026 by rpki-client