$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft File: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft (raw, json) Hash identifier: lwWGdng4++s7WmXAtHV/qDBiKvuOsg+KB2oDsvYTmNQ= Subject key identifier: 2E:1B:C6:EF:BD:41:AB:D0:40:38:33:F5:48:D5:3B:41:7A:3C:8E:40 Authority key identifier: D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A Certificate issuer: /CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Certificate serial: 76A30789E849C3E6D0B51EA09736AB28EE6F3382 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 23:37:20 +0000 Manifest this update: Wed 02 Sep 2026 23:32:20 +0000 Manifest next update: Fri 04 Sep 2026 00:42:20 +0000 Files and hashes: 1: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: B7a7PzCNzeD/tq1cXAKoZlfFY/BQzoD5xWVoqKq0SF0=) 2: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: Jx05B7mkwgYoEihHJr1Mblw6Kt55kFXhZ9MUCvCt+Go=) 3: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl (hash: ZSsYOxpYME2NozVyLRm40lgW0/JyvqDY4rUS1fcWwV8=) 4: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: 6VIXf9PufTTIF0jlFfBvIGu6EFZnq37iO9mrrQ1/lbk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a3:07:89:e8:49:c3:e6:d0:b5:1e:a0:97:36:ab:28:ee:6f:33:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Validity Not Before: Sep 2 23:32:20 2026 GMT Not After : Sep 4 00:42:20 2026 GMT Subject: CN=2E1BC6EFBD41ABD0403833F548D53B417A3C8E40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:47:bb:d9:81:1f:3c:e4:ef:15:92:6d:56:e6: a5:56:03:b7:fc:d3:9f:63:c9:8d:28:ae:e6:71:36: b9:98:41:cf:be:93:c7:c0:fe:b1:5c:d0:36:00:68: 55:cb:69:3e:6d:1c:c2:58:5b:76:c3:60:0a:c8:6e: 9c:6d:0c:6b:cc:8b:20:a4:83:fe:35:d4:59:7e:df: 2d:1c:86:c1:7f:a8:10:13:f9:77:17:d8:ab:68:11: 64:75:c6:b2:29:b2:dc:26:67:8f:9e:39:4a:08:59: 5c:37:5b:8c:f3:a3:a3:db:d6:97:8e:5f:6f:48:67: 38:3b:50:28:3b:86:0a:a6:2c:4c:87:4d:4a:c5:7f: 76:74:30:27:10:f3:e3:44:f4:d7:e3:46:4f:9b:b5: c8:c1:15:c0:64:84:ea:1f:cf:39:cf:c1:0c:56:37: cb:d8:6c:9e:fa:8c:de:71:d8:48:b6:89:98:94:75: b3:24:00:9c:ae:20:0f:28:51:30:71:f4:81:19:65: d3:d2:17:7b:bb:b5:2b:22:17:87:33:b8:d6:0c:7b: 24:37:58:40:17:75:fb:42:2a:2d:93:5b:46:ee:c4: 3e:03:52:5a:a6:5c:ee:84:83:35:38:88:a2:37:4e: d3:ee:c5:08:b2:55:4a:d0:e3:cc:ae:71:43:5d:00: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1B:C6:EF:BD:41:AB:D0:40:38:33:F5:48:D5:3B:41:7A:3C:8E:40 X509v3 Authority Key Identifier: keyid:D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:74:17:f8:20:75:34:18:53:2b:8a:18:d9:54:7c:91:c9:f0: fd:88:d1:69:45:6f:d3:e1:23:da:cb:bc:6b:5b:b6:35:75:aa: a7:6b:a9:ff:63:12:8a:bf:00:0a:7f:6d:38:9e:b3:d6:36:1a: 18:72:83:77:54:b9:6f:20:b8:58:76:ea:1f:14:3c:42:10:b3: b0:02:0f:0b:68:25:26:ac:3b:37:7c:29:1c:15:fc:92:78:c3: 8b:9d:7f:8b:48:ae:fd:50:c2:eb:ee:7d:c5:c9:b7:6a:7f:01: 0e:07:b2:b5:f9:7a:cd:b6:04:9f:c8:2a:ee:43:b8:fd:eb:16: 55:75:6a:50:53:38:5e:63:ac:f0:d1:1e:8f:b2:6b:72:f4:4c: f9:cb:30:f3:2a:cb:d3:98:95:af:fe:64:88:d5:63:22:cc:8f: 54:7d:ce:44:85:8a:18:b3:c3:d3:d2:26:84:e2:a7:3f:48:18: 52:bf:b9:6b:14:18:20:9c:e9:47:64:b6:12:57:f8:51:d4:1b: 8a:5e:a3:d0:f5:85:9f:73:cc:a9:09:b7:64:b3:36:61:52:a9: 86:1b:fd:5c:35:11:71:05:a1:da:80:20:3c:87:85:bb:97:08: 7c:d8:2f:30:5d:22:2f:30:c0:00:c6:5b:b1:3f:e0:dd:30:9c: 0c:14:b2:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqMHiehJw+bQtR6glzarKO5vM4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2 OEJCMDEyQTAeFw0yNjA5MDIyMzMyMjBaFw0yNjA5MDQwMDQyMjBaMDMxMTAvBgNV BAMTKDJFMUJDNkVGQkQ0MUFCRDA0MDM4MzNGNTQ4RDUzQjQxN0EzQzhFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvR7vZgR885O8Vkm1W5qVWA7f8 059jyY0oruZxNrmYQc++k8fA/rFc0DYAaFXLaT5tHMJYW3bDYArIbpxtDGvMiyCk g/411Fl+3y0chsF/qBAT+XcX2KtoEWR1xrIpstwmZ4+eOUoIWVw3W4zzo6Pb1peO X29IZzg7UCg7hgqmLEyHTUrFf3Z0MCcQ8+NE9NfjRk+btcjBFcBkhOofzznPwQxW N8vYbJ76jN5x2Ei2iZiUdbMkAJyuIA8oUTBx9IEZZdPSF3u7tSsiF4czuNYMeyQ3 WEAXdftCKi2TW0buxD4DUlqmXO6EgzU4iKI3TtPuxQiyVUrQ48yucUNdADWVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULhvG771Bq9BAODP1SNU7QXo8jkAwHwYDVR0j BBgwFoAU2Kljzlfpmxq+FiqEUtnk02i7ASowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjExY2E2MjAtZGFjZS00YTlmLWI4ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1 N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2OEJCMDEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEE5NjNDRTU3RTk5QjFBQkUxNjJBODQ1MkQ5RTREMzY4QkIw MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0 RDM2OEJCMDEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAN0F/ggdTQYUyuKGNlUfJHJ8P2I0WlFb9Ph I9rLvGtbtjV1qqdrqf9jEoq/AAp/bTies9Y2Ghhyg3dUuW8guFh26h8UPEIQs7AC DwtoJSasOzd8KRwV/JJ4w4udf4tIrv1QwuvufcXJt2p/AQ4HsrX5es22BJ/IKu5D uP3rFlV1alBTOF5jrPDRHo+ya3L0TPnLMPMqy9OYla/+ZIjVYyLMj1R9zkSFihiz w9PSJoTipz9IGFK/uWsUGCCc6UdkthJX+FHUG4peo9D1hZ9zzKkJt2SzNmFSqYYb /Vw1EXEFodqAIDyHhbuXCHzYLzBdIi8wwADGW7E/4N0wnAwUsq4= -----END CERTIFICATE-----Generated at Thu Sep 3 03:13:23 2026 by rpki-client