$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft File: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft (raw, json) Hash identifier: /BjZ+QvDdsireuOok+2GQCNdbhMasBOM9lge/yxQJug= Subject key identifier: 71:8A:8A:25:FE:80:BA:5C:20:CD:DA:68:47:AD:8B:2E:0D:5C:83:A4 Authority key identifier: 8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 Certificate issuer: /CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Certificate serial: 3C8048CE538434A819C089D709DEFF4B95BF8763 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft Manifest number: A4 Signing time: Thu 03 Sep 2026 05:29:31 +0000 Manifest this update: Thu 03 Sep 2026 05:24:31 +0000 Manifest next update: Fri 04 Sep 2026 07:52:31 +0000 Files and hashes: 1: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: PZbtbKk588SOuMSDyRHv/Fg/EjC+9RQB0ZQtHocb618=) 2: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: HeHfGZB/GAp4q9T9TRaLUnaN9SyHYBb/bDC0hRan7Ak=) 3: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl (hash: 0DOW9CX33+QSlSD+zeXl/xIvMkFKwGXXuK+wayl5cO4=) 4: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: 71PyqcaPYwvm2e6i8fnxEnvNfxXMokDQ1xxLp0rozYA=) 5: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: NdF7z4Axz0mBE/lC0pc0IGrEEOoXFiCSmtcjnukP0y4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 07:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:80:48:ce:53:84:34:a8:19:c0:89:d7:09:de:ff:4b:95:bf:87:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Validity Not Before: Sep 3 05:24:31 2026 GMT Not After : Sep 4 07:52:31 2026 GMT Subject: CN=718A8A25FE80BA5C20CDDA6847AD8B2E0D5C83A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:30:77:93:44:a4:33:87:79:05:9d:e4:f9: 87:05:90:52:a9:6f:6b:a9:81:69:f6:2b:78:7b:93: 31:ad:1e:2b:f7:25:50:70:8a:95:2e:77:40:3d:a4: 42:4a:42:a8:81:0c:02:cb:31:e4:0c:5c:ee:1a:e1: 2e:29:27:30:1e:48:8d:a3:27:39:ae:54:8d:87:71: 11:f0:f9:26:34:3c:4c:a2:b7:18:5a:91:0c:75:27: 56:de:18:bb:a5:a0:31:39:36:64:11:bf:92:fe:a5: 55:95:f0:0f:ba:af:08:fd:ba:5a:0d:48:27:de:7d: e8:c2:3b:d0:81:36:10:e1:36:40:21:f9:f9:48:ef: 2b:b8:49:4a:48:90:d2:b4:ed:7a:c7:95:c5:c6:72: 29:d9:bf:82:f0:d3:ba:63:9f:b4:6a:9a:21:6a:ba: 13:63:aa:f1:61:1f:48:37:fe:d2:99:99:62:e2:76: 09:4e:e3:81:eb:99:b6:7a:d0:83:b4:87:99:2c:c9: ee:74:1d:55:dc:53:f6:e9:ac:da:3e:62:2d:2b:c7: 93:b8:a6:03:3f:d0:6c:d0:5c:9a:10:5c:2a:d4:dc: f6:36:d9:6c:4f:a4:2f:df:d1:42:6d:fa:a0:d5:29: cd:3c:aa:c2:bf:77:40:90:4f:b3:e4:db:92:6c:db: 86:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8A:8A:25:FE:80:BA:5C:20:CD:DA:68:47:AD:8B:2E:0D:5C:83:A4 X509v3 Authority Key Identifier: keyid:8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:11:dd:41:01:6d:09:33:b8:b2:a0:3b:8c:6a:0d:1f:9b:ad: 87:18:57:58:5a:91:d6:d1:31:bc:d0:97:83:52:35:e8:8d:59: e0:e3:63:8f:52:c5:1d:e0:7b:0f:7b:4f:1c:51:da:d7:6e:67: 1e:58:ae:a2:ee:e1:b9:0f:db:09:39:6a:6d:c1:cc:e2:ef:d7: 79:6f:7b:31:7b:7d:67:4b:99:5a:23:ea:20:73:d8:e1:12:ee: a6:10:0d:1e:32:cf:41:79:ba:f7:e4:0e:a6:f4:42:23:8d:e1: 57:a8:73:04:90:25:19:12:d2:91:e5:3e:70:7e:ae:2b:80:3f: 91:4b:c2:1f:d2:98:ef:fb:fa:c2:c3:e5:2b:04:87:ad:9b:08: 40:2f:75:bc:52:76:a6:81:30:1e:6c:00:38:be:54:a1:5e:90: 1b:b0:be:9e:6b:a3:75:1d:a2:76:da:9a:34:fc:fc:63:8e:d6: 85:ad:11:54:f6:d6:7c:39:97:c2:d0:33:52:b3:06:ca:b3:04: 9f:62:4b:7b:96:ac:1e:de:54:4e:1e:1f:90:a9:78:f1:c4:14: a4:3a:7c:b5:3e:7d:f5:f0:de:e4:1c:1c:ec:df:6a:2e:9b:f2: 81:7e:d5:44:57:2f:6e:75:b7:91:96:ee:26:aa:7d:74:52:b2: c4:68:1f:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIBIzlOENKgZwInXCd7/S5W/h2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdDODdG OUVBMTdBNzAeFw0yNjA5MDMwNTI0MzFaFw0yNjA5MDQwNzUyMzFaMDMxMTAvBgNV BAMTKDcxOEE4QTI1RkU4MEJBNUMyMENEREE2ODQ3QUQ4QjJFMEQ1QzgzQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwoDB3k0SkM4d5BZ3k+YcFkFKp b2upgWn2K3h7kzGtHiv3JVBwipUud0A9pEJKQqiBDALLMeQMXO4a4S4pJzAeSI2j JzmuVI2HcRHw+SY0PEyitxhakQx1J1beGLuloDE5NmQRv5L+pVWV8A+6rwj9uloN SCfefejCO9CBNhDhNkAh+flI7yu4SUpIkNK07XrHlcXGcinZv4Lw07pjn7RqmiFq uhNjqvFhH0g3/tKZmWLidglO44HrmbZ60IO0h5ksye50HVXcU/bprNo+Yi0rx5O4 pgM/0GzQXJoQXCrU3PY22WxPpC/f0UJt+qDVKc08qsK/d0CQT7Pk25Js24ZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcYqKJf6AulwgzdpoR62LLg1cg6QwHwYDVR0j BBgwFoAUjuweA7jlL2agcT3rFCF8h/nqF6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMyNTA2NjItM2VlZi00YWE5LTllZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNC OEU1MkY2NkEwNzEzREVCMTQyMTdDODdGOUVBMTdBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUVDMUUwM0I4RTUyRjY2QTA3MTNERUIxNDIxN0M4N0Y5RUEx N0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdD ODdGOUVBMTdBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgR3UEBbQkzuLKgO4xqDR+brYcYV1hakdbR MbzQl4NSNeiNWeDjY49SxR3gew97TxxR2tduZx5YrqLu4bkP2wk5am3BzOLv13lv ezF7fWdLmVoj6iBz2OES7qYQDR4yz0F5uvfkDqb0QiON4VeocwSQJRkS0pHlPnB+ riuAP5FLwh/SmO/7+sLD5SsEh62bCEAvdbxSdqaBMB5sADi+VKFekBuwvp5ro3Ud onbamjT8/GOO1oWtEVT21nw5l8LQM1KzBsqzBJ9iS3uWrB7eVE4eH5CpePHEFKQ6 fLU+ffXw3uQcHOzfai6b8oF+1URXL251t5GW7iaqfXRSssRoHx0= -----END CERTIFICATE-----Generated at Thu Sep 3 16:23:00 2026 by rpki-client