$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft File: 8B57121B495DA86939D79B7BA261CF6D38C999CF.mft (raw, json) Hash identifier: egnz77ChC6FrcjLFLf8S8PaIBqB+rL5RcW8YBHMJhIY= Subject key identifier: 8C:75:5E:E2:4E:0C:6E:A9:E7:51:AB:41:0E:3C:48:3D:2D:F0:B8:12 Authority key identifier: 8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF Certificate issuer: /CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Certificate serial: 4986007D49C9905E5574093A30BA5BEE5ECD5016 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 16:47:50 +0000 Manifest this update: Thu 03 Sep 2026 16:42:50 +0000 Manifest next update: Fri 04 Sep 2026 18:46:50 +0000 Files and hashes: 1: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: w+XxfdGQbvXdRZjpGQCwUdlhFyEQmevCuv9dcfZGuKE=) 2: 8B57121B495DA86939D79B7BA261CF6D38C999CF.crl (hash: e6UAtfMBAuc3RNjrZusXyPCLfc0XFQHOjdEVkVUJ9So=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:86:00:7d:49:c9:90:5e:55:74:09:3a:30:ba:5b:ee:5e:cd:50:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Validity Not Before: Sep 3 16:42:50 2026 GMT Not After : Sep 4 18:46:50 2026 GMT Subject: CN=8C755EE24E0C6EA9E751AB410E3C483D2DF0B812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:3c:9f:49:78:68:4f:21:84:9c:f0:18:c7: 13:b1:4d:60:42:99:36:25:a1:d6:dd:e1:7f:ed:51: 44:42:72:3a:74:c0:82:34:9a:a8:e0:8b:c4:5a:a6: af:64:68:4c:e8:d5:34:23:bd:f5:62:95:05:16:1d: dd:d5:cf:ce:a7:63:68:82:b2:e2:23:07:0c:c5:ee: 07:2a:99:4c:30:c6:09:e3:f7:f7:27:23:a9:15:e6: ed:01:9d:ff:0d:60:c7:d9:d8:74:25:74:3b:27:14: 3c:3d:58:77:69:4f:ff:b8:ea:8e:4b:6f:ef:d1:d9: 7d:8d:66:02:e4:d6:ff:37:54:9f:ae:45:ee:98:83: dd:c7:16:10:00:d7:f3:f6:85:9f:c2:79:fb:28:44: 61:1c:d7:e6:31:a7:3b:4f:93:4d:bd:34:4d:d4:c3: 5c:fa:6e:d8:5d:78:98:5f:dd:2c:59:65:1f:a3:63: 7e:e2:99:e9:c4:24:22:a4:d6:f8:95:ca:e5:34:9a: 62:8b:cb:53:ad:e3:4a:4d:79:10:6e:0d:d7:01:6f: fc:6e:1d:68:e0:ac:24:13:a0:7d:6f:18:f4:28:4e: b6:cf:4a:d2:33:a1:49:a5:d5:51:a5:be:f4:90:6f: 6e:52:a5:96:da:43:f5:5b:23:f7:62:13:11:44:93: 89:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:75:5E:E2:4E:0C:6E:A9:E7:51:AB:41:0E:3C:48:3D:2D:F0:B8:12 X509v3 Authority Key Identifier: keyid:8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d9:4f:ff:56:c5:bf:dd:89:f6:3e:a0:44:14:4e:1a:02:c6: 82:ee:0a:27:ad:d9:ea:da:a3:45:d3:e8:3a:2f:84:66:24:ce: 31:8e:c1:17:ee:3b:24:2c:71:f1:9a:3b:16:2e:3f:fd:05:de: b9:1e:89:09:46:92:26:2d:e9:37:1b:b4:68:0e:9c:85:5a:c9: 5e:37:34:a0:ac:db:ae:e6:e3:6a:e0:0c:51:93:78:cf:97:63: d5:d9:96:bd:8d:f0:bc:da:d6:34:2d:e1:49:77:2d:81:4f:df: 21:cf:f4:83:02:ac:97:30:6b:00:f8:c2:25:c3:69:85:db:3d: 5b:b5:a2:e7:0a:04:2d:ca:2d:4b:ef:f1:bb:e8:23:dd:07:37: 44:67:50:13:ac:0d:43:27:37:6b:8f:ce:2b:08:be:14:29:52: da:79:29:85:5e:97:3b:a9:df:5b:e9:8f:33:7d:70:be:ad:2c: 6d:eb:07:d4:40:10:fd:59:26:78:75:ad:4e:db:b6:c7:eb:ac: f2:9d:78:83:ac:33:0b:0d:12:b9:5f:f1:9d:8d:83:d7:9a:fa: 85:07:2e:da:18:08:53:21:5c:1f:6e:22:ca:ae:1e:30:ec:04: 45:f6:f2:d3:9e:a7:6b:bc:bc:21:31:ef:e9:d5:ed:c9:65:5d: cb:5b:c6:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSYYAfUnJkF5VdAk6MLpb7l7NUBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQz OEM5OTlDRjAeFw0yNjA5MDMxNjQyNTBaFw0yNjA5MDQxODQ2NTBaMDMxMTAvBgNV BAMTKDhDNzU1RUUyNEUwQzZFQTlFNzUxQUI0MTBFM0M0ODNEMkRGMEI4MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUjyfSXhoTyGEnPAYxxOxTWBC mTYlodbd4X/tUURCcjp0wII0mqjgi8Rapq9kaEzo1TQjvfVilQUWHd3Vz86nY2iC suIjBwzF7gcqmUwwxgnj9/cnI6kV5u0Bnf8NYMfZ2HQldDsnFDw9WHdpT/+46o5L b+/R2X2NZgLk1v83VJ+uRe6Yg93HFhAA1/P2hZ/CefsoRGEc1+YxpztPk029NE3U w1z6bthdeJhf3SxZZR+jY37imenEJCKk1viVyuU0mmKLy1Ot40pNeRBuDdcBb/xu HWjgrCQToH1vGPQoTrbPStIzoUml1VGlvvSQb25SpZbaQ/VbI/diExFEk4nfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjHVe4k4MbqnnUatBDjxIPS3wuBIwHwYDVR0j BBgwFoAUi1cSG0ldqGk515t7omHPbTjJmc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NjNTYwNWQtZjE3YS00MDEwLTkyNTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0 OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQzOEM5OTlDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjU3MTIxQjQ5NURBODY5MzlENzlCN0JBMjYxQ0Y2RDM4Qzk5 OUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNG NkQzOEM5OTlDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrZT/9Wxb/difY+oEQUThoCxoLuCiet2era o0XT6DovhGYkzjGOwRfuOyQscfGaOxYuP/0F3rkeiQlGkiYt6TcbtGgOnIVayV43 NKCs267m42rgDFGTeM+XY9XZlr2N8Lza1jQt4Ul3LYFP3yHP9IMCrJcwawD4wiXD aYXbPVu1oucKBC3KLUvv8bvoI90HN0RnUBOsDUMnN2uPzisIvhQpUtp5KYVelzup 31vpjzN9cL6tLG3rB9RAEP1ZJnh1rU7btsfrrPKdeIOsMwsNErlf8Z2Ng9ea+oUH LtoYCFMhXB9uIsquHjDsBEX28tOep2u8vCEx7+nV7cllXctbxqw= -----END CERTIFICATE-----Generated at Thu Sep 3 22:49:55 2026 by rpki-client