$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft File: C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft (raw, json) Hash identifier: ZjOvjVNSIVSkY+4DisjuARs2LXvLqY8hV/phIPwWIic= Subject key identifier: 98:DB:55:0F:95:13:83:A0:B3:9F:35:1A:9F:CC:E4:9F:CD:62:A5:DC Authority key identifier: C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B Certificate issuer: /CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Certificate serial: C5D9DF6BC8BEA17801C0E0947765B5CBECAFDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 23:06:40 +0000 Manifest this update: Wed 02 Sep 2026 23:01:40 +0000 Manifest next update: Thu 03 Sep 2026 23:58:40 +0000 Files and hashes: 1: C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl (hash: F62NNchmSUsb+IfkXLs3c+eaOBeTcv8+UR9HQboY3t8=) 2: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: T5iXYEZsEylyp3JdGzhmtU2Kjr1HhNQabu6sAc+svIA=) 3: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: yHStdJOfwpXotUrFqNRyBFcevnLpf2rHuaCz1qS9rN0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 23:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c5:d9:df:6b:c8:be:a1:78:01:c0:e0:94:77:65:b5:cb:ec:af:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8D24ADF5C7432E5E3C1D5988774107A717F827B Validity Not Before: Sep 2 23:01:40 2026 GMT Not After : Sep 3 23:58:40 2026 GMT Subject: CN=98DB550F951383A0B39F351A9FCCE49FCD62A5DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:ff:6b:50:f3:ea:6f:b1:b9:bb:78:b9:2c: c5:c3:30:56:04:ab:e5:ab:b6:bf:ac:7b:67:00:d7: 35:c9:13:bb:db:ee:18:88:61:71:7a:cd:a1:ee:eb: fa:b7:fa:5d:21:a6:a3:cc:f1:f4:79:0b:f7:27:7d: 5f:66:9f:e4:06:11:95:f6:b3:37:74:01:39:79:23: 09:ab:ad:dd:bd:a6:7b:0c:59:22:82:d6:46:9f:fa: 32:d6:48:6e:30:9f:f9:e1:18:d9:01:15:cd:ee:0a: 0e:88:61:f4:fa:35:4a:1c:f6:ca:c3:42:95:11:5f: 7f:22:cb:58:b0:65:af:0f:30:6b:a9:00:1f:be:5c: 62:df:3e:40:ba:56:da:b0:56:40:4b:01:ea:03:d3: 6c:fd:78:10:de:1f:5b:f6:db:db:ae:54:89:fa:2e: 8a:f4:9c:23:72:26:75:2e:17:04:8e:71:e5:ae:c1: dc:7a:ef:37:c4:de:db:4d:8c:27:9d:c4:86:63:19: 31:31:77:65:39:e8:a0:35:ea:2a:7e:e6:99:81:35: 3e:9c:75:f8:6f:32:8e:a8:a0:4d:bf:40:a6:f4:d5: d5:3f:5b:0b:dc:4a:92:76:9c:4d:10:4c:ed:fc:81: 71:d2:14:87:db:5b:20:3d:a6:bf:4a:f8:fe:73:65: 43:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DB:55:0F:95:13:83:A0:B3:9F:35:1A:9F:CC:E4:9F:CD:62:A5:DC X509v3 Authority Key Identifier: keyid:C8:D2:4A:DF:5C:74:32:E5:E3:C1:D5:98:87:74:10:7A:71:7F:82:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D24ADF5C7432E5E3C1D5988774107A717F827B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/C8D24ADF5C7432E5E3C1D5988774107A717F827B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3c:04:cc:4f:c5:1e:88:45:aa:b9:9d:89:09:6d:32:66:96: 3c:37:8d:4a:6e:aa:40:56:6f:bc:07:22:63:54:4d:39:01:ff: 1d:84:16:98:eb:8d:c2:f9:10:38:63:bf:5b:26:e1:e8:0d:76: be:ab:77:03:f7:54:0a:ff:8b:7b:bd:40:e4:a1:eb:f7:9a:43: 58:ae:c8:d2:51:50:c5:89:b0:91:99:9f:86:40:aa:8e:ed:c6: c7:62:22:5c:43:6a:b0:ec:e9:b8:d7:8d:80:d2:c3:d1:3e:d8: 7f:cf:a5:95:fb:6e:17:c4:f0:d2:5d:2c:bc:71:c1:0d:14:89: be:76:8f:6a:ae:c0:4c:10:58:08:08:ef:28:aa:c5:84:c7:cc: ed:33:81:e1:4b:25:1c:fb:3c:95:3b:08:79:0a:28:f8:fc:61: bd:e5:d7:ec:d4:fc:e3:be:86:46:7d:60:90:cd:54:eb:f5:97: f5:c8:7d:f1:37:9a:59:12:42:7d:48:c2:d0:67:b9:99:2b:58: c5:4b:45:b2:55:f3:08:1a:bc:7b:1f:be:7e:a5:33:b7:95:58: f6:86:23:aa:c5:d4:52:27:10:36:4e:82:d6:70:c1:22:e5:4a: d6:d0:e2:6e:50:c7:2e:23:a0:a4:f1:12:46:9a:7d:c9:76:86: 18:a5:28:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMXZ32vIvqF4AcDglHdltcvsr98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3 MTdGODI3QjAeFw0yNjA5MDIyMzAxNDBaFw0yNjA5MDMyMzU4NDBaMDMxMTAvBgNV BAMTKDk4REI1NTBGOTUxMzgzQTBCMzlGMzUxQTlGQ0NFNDlGQ0Q2MkE1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuVP9rUPPqb7G5u3i5LMXDMFYE q+Wrtr+se2cA1zXJE7vb7hiIYXF6zaHu6/q3+l0hpqPM8fR5C/cnfV9mn+QGEZX2 szd0ATl5Iwmrrd29pnsMWSKC1kaf+jLWSG4wn/nhGNkBFc3uCg6IYfT6NUoc9srD QpURX38iy1iwZa8PMGupAB++XGLfPkC6VtqwVkBLAeoD02z9eBDeH1v229uuVIn6 Lor0nCNyJnUuFwSOceWuwdx67zfE3ttNjCedxIZjGTExd2U56KA16ip+5pmBNT6c dfhvMo6ooE2/QKb01dU/WwvcSpJ2nE0QTO38gXHSFIfbWyA9pr9K+P5zZUM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmNtVD5UTg6CznzUan8zkn81ipdwwHwYDVR0j BBgwFoAUyNJK31x0MuXjwdWYh3QQenF/gnswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjZhZDA5ZjMtMDAyMy00NDQ1LTg0MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1 Qzc0MzJFNUUzQzFENTk4ODc3NDEwN0E3MTdGODI3Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEQyNEFERjVDNzQzMkU1RTNDMUQ1OTg4Nzc0MTA3QTcxN0Y4 MjdCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvQzhEMjRBREY1Qzc0MzJFNUUzQzFENTk4ODc3NDEw N0E3MTdGODI3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA08BMxPxR6IRaq5nYkJbTJmljw3jUpuqkBW b7wHImNUTTkB/x2EFpjrjcL5EDhjv1sm4egNdr6rdwP3VAr/i3u9QOSh6/eaQ1iu yNJRUMWJsJGZn4ZAqo7txsdiIlxDarDs6bjXjYDSw9E+2H/PpZX7bhfE8NJdLLxx wQ0Uib52j2quwEwQWAgI7yiqxYTHzO0zgeFLJRz7PJU7CHkKKPj8Yb3l1+zU/OO+ hkZ9YJDNVOv1l/XIffE3mlkSQn1IwtBnuZkrWMVLRbJV8wgavHsfvn6lM7eVWPaG I6rF1FInEDZOgtZwwSLlStbQ4m5Qxy4joKTxEkaafcl2hhilKGw= -----END CERTIFICATE-----Generated at Thu Sep 3 14:17:46 2026 by rpki-client