$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft File: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft (raw, json) Hash identifier: ILx8CSlTUtSWobO3ziE0wJevCu9/ZPdr0OaYUBKjRgA= Subject key identifier: FE:C8:D8:83:04:4E:4B:8D:F5:B8:1F:88:DD:97:F6:4C:F4:4F:23:31 Authority key identifier: 8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C Certificate issuer: /CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Certificate serial: 617BFA06063D8CC9CD36B0050592B35F8024FAD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 09:59:31 +0000 Manifest this update: Thu 03 Sep 2026 09:54:31 +0000 Manifest next update: Fri 04 Sep 2026 11:31:31 +0000 Files and hashes: 1: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: gHaL9xm6upsCMiwuTIzMiljzjIKdP3tM2s5bdfg68uM=) 2: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl (hash: n5cIEJ8AsGgIUzzx+izVjA6lYNI7UFCgMqwETs67U+k=) 3: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: kAF9XX+k/l/rK1GEr+bjFHX1YeYovpaBVZcUfCaqwVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7b:fa:06:06:3d:8c:c9:cd:36:b0:05:05:92:b3:5f:80:24:fa:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Validity Not Before: Sep 3 09:54:31 2026 GMT Not After : Sep 4 11:31:31 2026 GMT Subject: CN=FEC8D883044E4B8DF5B81F88DD97F64CF44F2331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:23:dc:b1:ce:23:ce:fd:2f:54:4e:61:38: 17:37:f9:e3:d6:f8:66:fe:7a:43:fc:83:f7:cd:fa: 28:b4:b3:81:4a:42:a7:aa:52:ad:b9:a9:7f:20:97: 03:02:5b:22:eb:a5:4e:42:09:2e:75:6c:44:e8:4c: 31:04:4c:d7:fb:0f:0c:13:f1:2e:30:cd:10:15:db: f1:ba:3a:c2:ee:62:64:0e:e6:3e:90:fc:04:e4:54: a9:5b:65:89:c8:b5:ca:5a:8a:31:18:11:06:ea:dd: 95:66:ad:6b:d8:c1:60:f1:3a:38:78:61:80:14:38: 19:1f:67:24:03:9d:1d:ba:1c:39:1a:43:da:b7:d9: 82:dd:89:4d:51:63:7a:02:21:ee:25:d0:31:c5:28: aa:26:e3:a2:ee:48:0d:ee:4e:7c:9c:7e:35:44:de: 5a:0f:bc:5a:50:f3:08:5f:84:09:91:1b:c1:c7:73: d9:c8:49:80:67:b5:c7:a3:95:90:66:f7:b2:7e:bb: de:bc:bd:59:d6:ef:84:98:60:97:f9:41:45:37:97: c7:a0:85:63:af:fe:8f:a6:83:ff:ee:e4:f3:41:89: 37:cb:6a:d7:c5:e1:60:5d:9b:4f:4f:5c:bf:b7:0e: 6a:55:a4:92:ec:59:bf:89:2c:7f:5e:1f:9b:c0:4a: 90:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C8:D8:83:04:4E:4B:8D:F5:B8:1F:88:DD:97:F6:4C:F4:4F:23:31 X509v3 Authority Key Identifier: keyid:8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:9e:b4:85:1d:b6:9a:18:35:ef:cd:2d:00:fb:37:50:29:a3: 09:ab:30:6a:ee:8a:42:53:f4:f2:b8:2c:60:b9:3e:66:2c:33: b5:ce:bb:e0:1a:82:8a:08:ae:55:5b:c7:2f:14:50:94:a0:90: 45:b8:09:05:8a:be:8c:fb:f7:17:1f:55:b4:a9:dc:4b:67:e5: 0a:f5:cd:5b:63:b4:7b:f9:15:17:cf:56:06:03:18:83:de:3d: 79:48:78:08:ae:14:b9:46:f9:9d:74:66:70:e0:25:32:20:c2: 12:68:c6:3c:04:30:33:cb:e4:45:89:97:01:5a:99:58:50:0b: 46:42:61:44:3a:6d:c0:23:cf:4e:37:04:eb:dc:5b:f8:c4:5e: a7:30:91:5a:d1:5d:fd:dd:b1:8b:bb:49:89:16:4b:0f:a6:7b: a9:1c:d9:a0:21:a6:df:cb:da:d3:17:a4:1a:0e:c9:08:18:84: 50:d4:c2:78:36:5f:81:4a:c8:3f:46:4a:1d:99:08:a8:38:29: d5:2a:50:7d:6a:ec:a9:cb:7c:87:57:35:ec:28:ee:6a:b5:8f: 3d:bd:38:f1:7b:7e:73:88:42:ef:f3:bd:f4:7a:9a:c1:47:e2: 14:97:52:6f:35:fb:61:99:d7:6d:f6:7b:9e:96:a6:5e:9d:8b: 35:73:ee:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYXv6BgY9jMnNNrAFBZKzX4Ak+tcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVC MTRDODk2QzAeFw0yNjA5MDMwOTU0MzFaFw0yNjA5MDQxMTMxMzFaMDMxMTAvBgNV BAMTKEZFQzhEODgzMDQ0RTRCOERGNUI4MUY4OEREOTdGNjRDRjQ0RjIzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebCPcsc4jzv0vVE5hOBc3+ePW +Gb+ekP8g/fN+ii0s4FKQqeqUq25qX8glwMCWyLrpU5CCS51bEToTDEETNf7DwwT 8S4wzRAV2/G6OsLuYmQO5j6Q/ATkVKlbZYnItcpaijEYEQbq3ZVmrWvYwWDxOjh4 YYAUOBkfZyQDnR26HDkaQ9q32YLdiU1RY3oCIe4l0DHFKKom46LuSA3uTnycfjVE 3loPvFpQ8whfhAmRG8HHc9nISYBntcejlZBm97J+u968vVnW74SYYJf5QUU3l8eg hWOv/o+mg//u5PNBiTfLatfF4WBdm09PXL+3DmpVpJLsWb+JLH9eH5vASpCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/sjYgwROS431uB+I3Zf2TPRPIzEwHwYDVR0j BBgwFoAUj/qLucCdxMpCyVyBfA/9lbFMiWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ1YWYyMmMtN2UzZS00MGI1LWFjNTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlD MDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVCMTRDODk2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBOEJCOUMwOURDNENBNDJDOTVDODE3QzBGRkQ5NUIxNEM4 OTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZE OTVCMTRDODk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHietIUdtpoYNe/NLQD7N1ApowmrMGruikJT 9PK4LGC5PmYsM7XOu+AagooIrlVbxy8UUJSgkEW4CQWKvoz79xcfVbSp3Etn5Qr1 zVtjtHv5FRfPVgYDGIPePXlIeAiuFLlG+Z10ZnDgJTIgwhJoxjwEMDPL5EWJlwFa mVhQC0ZCYUQ6bcAjz043BOvcW/jEXqcwkVrRXf3dsYu7SYkWSw+me6kc2aAhpt/L 2tMXpBoOyQgYhFDUwng2X4FKyD9GSh2ZCKg4KdUqUH1q7KnLfIdXNewo7mq1jz29 OPF7fnOIQu/zvfR6msFH4hSXUm81+2GZ1232e56Wpl6dizVz7q4= -----END CERTIFICATE-----Generated at Thu Sep 3 18:10:52 2026 by rpki-client