$ rpki-client -vvvf rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft File: 08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft (raw, json) Hash identifier: mfuK4KApW9Xa1BpJwzH64QC5ll4moDXZCcZPkGb4Eb8= Subject key identifier: E0:98:33:9E:3A:93:E5:E2:E7:C3:EC:90:0C:A7:3B:9E:60:57:E5:29 Authority key identifier: 08:46:5F:A1:5C:F4:94:2C:9C:4C:E0:9B:FD:3D:A0:43:8F:ED:BB:38 Certificate issuer: /CN=08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38 Certificate serial: 7F69D2F30DB5E973D499B105ED071B2C744BEA64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft Manifest number: A8 Signing time: Fri 04 Sep 2026 05:23:08 +0000 Manifest this update: Fri 04 Sep 2026 05:18:08 +0000 Manifest next update: Sat 05 Sep 2026 07:58:08 +0000 Files and hashes: 1: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: 5A4dPtUK7PjCIyvsgm0TeACgqogT7kOhSEqkeVa0xLI=) 2: 08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.crl (hash: GH3nQ0TMDmYeSPdWGubYLSfYzgxF1slgD3ymWesBDZk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.crl rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:69:d2:f3:0d:b5:e9:73:d4:99:b1:05:ed:07:1b:2c:74:4b:ea:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38 Validity Not Before: Sep 4 05:18:08 2026 GMT Not After : Sep 5 07:58:08 2026 GMT Subject: CN=E098339E3A93E5E2E7C3EC900CA73B9E6057E529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:70:60:79:34:ba:e4:5b:41:4f:bc:d2:3d: 69:62:04:70:43:82:26:08:8f:e9:0a:d8:ec:4f:22: 5f:65:8d:7e:82:b1:62:eb:2a:a9:94:66:a7:f6:8f: 3c:f9:da:dd:21:e1:d6:54:6e:f0:1e:4b:5b:1e:62: 3a:34:25:77:b4:8f:85:e0:1d:3e:87:2f:cc:86:86: f5:ae:95:81:0d:5b:cf:57:e5:1a:0a:86:77:a6:74: 10:41:01:43:71:74:80:7f:b5:59:cb:0a:04:95:82: 9b:14:4d:6e:44:5e:0e:b7:4d:a9:5c:b2:4d:6d:89: 6c:6a:91:ad:18:80:96:20:53:68:22:d4:ae:92:7e: fe:54:66:2e:1a:33:b7:df:28:cd:b9:d9:a5:08:c6: 99:67:a0:24:98:bd:f3:5e:97:ff:5a:d8:4c:6b:ed: f5:03:a6:90:91:8f:44:e4:4f:3f:23:a4:19:c6:f1: 64:ce:62:2e:6f:31:51:b9:28:0f:f5:8b:8f:06:a5: 4b:1c:da:e1:8e:81:cc:ef:27:d9:91:48:0a:bb:ae: 36:73:1d:d6:ed:65:32:b9:b4:21:f2:3e:66:d4:77: 2d:ef:e5:7e:55:70:86:2d:39:2f:f2:ea:18:d7:cf: d3:b1:21:57:5e:99:b4:fe:c2:d2:6d:e1:5a:0f:ba: bd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:98:33:9E:3A:93:E5:E2:E7:C3:EC:90:0C:A7:3B:9E:60:57:E5:29 X509v3 Authority Key Identifier: keyid:08:46:5F:A1:5C:F4:94:2C:9C:4C:E0:9B:FD:3D:A0:43:8F:ED:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/08465FA15CF4942C9C4CE09BFD3DA0438FEDBB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:35:bf:76:87:74:8c:70:1f:18:c3:b5:42:20:79:1c:f9:7e: ee:a7:25:e1:75:05:13:3b:a4:da:62:c2:2f:7b:f9:26:06:de: 76:3b:89:5a:a4:78:2d:26:9a:c5:96:db:b8:c0:7a:e5:bb:f1: e3:fa:2b:da:20:2f:70:ae:36:a8:14:6b:aa:75:be:6b:5f:05: 1f:fe:59:0d:27:7d:b8:38:79:bc:f8:20:f1:95:c6:9d:12:22: 8b:92:14:ab:cf:2b:41:e0:de:eb:39:6b:05:6a:cc:d5:9a:f7: 4f:5f:36:14:3a:14:d2:88:43:24:ff:56:60:9e:cb:49:61:7c: cc:d0:55:2f:bc:65:3a:3a:50:4c:7a:5a:e1:8a:f7:df:60:93: 8d:47:28:3a:e2:ff:48:dc:d2:2b:79:cd:7f:44:14:80:7e:a4: 6f:e7:1a:29:ea:15:76:65:01:42:b0:86:87:33:6a:75:25:ed: 1b:d2:6c:97:b8:40:09:4d:5f:fc:bb:5c:58:0e:ab:88:99:0f: ab:db:60:80:54:d8:f3:4c:26:bd:1c:03:13:0e:0e:69:a5:92: 1f:df:29:f1:5c:07:61:d8:7a:b7:32:79:73:1d:3f:65:9e:11: bf:2b:6f:54:16:8c:97:cc:89:c0:6c:3e:e9:e1:1a:3e:03:37: 3f:67:69:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2nS8w216XPUmbEF7QcbLHRL6mQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0NjVGQTE1Q0Y0OTQyQzlDNENFMDlCRkQzREEwNDM4 RkVEQkIzODAeFw0yNjA5MDQwNTE4MDhaFw0yNjA5MDUwNzU4MDhaMDMxMTAvBgNV BAMTKEUwOTgzMzlFM0E5M0U1RTJFN0MzRUM5MDBDQTczQjlFNjA1N0U1MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzHBgeTS65FtBT7zSPWliBHBD giYIj+kK2OxPIl9ljX6CsWLrKqmUZqf2jzz52t0h4dZUbvAeS1seYjo0JXe0j4Xg HT6HL8yGhvWulYENW89X5RoKhnemdBBBAUNxdIB/tVnLCgSVgpsUTW5EXg63Talc sk1tiWxqka0YgJYgU2gi1K6Sfv5UZi4aM7ffKM252aUIxplnoCSYvfNel/9a2Exr 7fUDppCRj0TkTz8jpBnG8WTOYi5vMVG5KA/1i48GpUsc2uGOgczvJ9mRSAq7rjZz HdbtZTK5tCHyPmbUdy3v5X5VcIYtOS/y6hjXz9OxIVdembT+wtJt4VoPur0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4JgznjqT5eLnw+yQDKc7nmBX5SkwHwYDVR0j BBgwFoAUCEZfoVz0lCycTOCb/T2gQ4/tuzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzJjMDBmNzktNDllYi00NTI1LTkwMjYtYTIzOGZmNDQ4MDcwLzAvMDg0NjVGQTE1 Q0Y0OTQyQzlDNENFMDlCRkQzREEwNDM4RkVEQkIzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODQ2NUZBMTVDRjQ5NDJDOUM0Q0UwOUJGRDNEQTA0MzhGRURC QjM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzJjMDBmNzktNDllYi00NTI1LTkw MjYtYTIzOGZmNDQ4MDcwLzAvMDg0NjVGQTE1Q0Y0OTQyQzlDNENFMDlCRkQzREEw NDM4RkVEQkIzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADc1v3aHdIxwHxjDtUIgeRz5fu6nJeF1BRM7 pNpiwi97+SYG3nY7iVqkeC0mmsWW27jAeuW78eP6K9ogL3CuNqgUa6p1vmtfBR/+ WQ0nfbg4ebz4IPGVxp0SIouSFKvPK0Hg3us5awVqzNWa909fNhQ6FNKIQyT/VmCe y0lhfMzQVS+8ZTo6UEx6WuGK999gk41HKDri/0jc0it5zX9EFIB+pG/nGinqFXZl AUKwhoczanUl7RvSbJe4QAlNX/y7XFgOq4iZD6vbYIBU2PNMJr0cAxMODmmlkh/f KfFcB2HYercyeXMdP2WeEb8rb1QWjJfMicBsPunhGj4DNz9nafo= -----END CERTIFICATE-----Generated at Fri Sep 4 21:09:58 2026 by rpki-client