$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft File: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft (raw, json) Hash identifier: Wxb9ySQWyYjfqdlsDSosYi5JwO6exalWPbbh1hNaSDc= Subject key identifier: 08:CF:3B:5F:F7:BE:B5:20:4A:FA:CD:79:A4:E0:65:10:51:B5:27:8F Authority key identifier: A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC Certificate issuer: /CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Certificate serial: 3C5C7140AA3348650CDD43B8D58B9FB706C44B4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 10:25:02 +0000 Manifest this update: Thu 03 Sep 2026 10:20:02 +0000 Manifest next update: Fri 04 Sep 2026 12:10:02 +0000 Files and hashes: 1: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: Zeaoa8MH2HdVHd5TglLIUEl41Yo/QcdVaZotZEH8Cts=) 2: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: Avv7/9ccLlQ1aIPCfbfxFrVouBultgrgCwZuIM827ow=) 3: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: UJ/To0XTouVSFOn7NWj23fxNZAouQWAqvBpnkIJXRFM=) 4: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl (hash: 37AmbS5Z3mVvtgCHyAsiDJnWw9orBiaCaD9lemChXeU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5c:71:40:aa:33:48:65:0c:dd:43:b8:d5:8b:9f:b7:06:c4:4b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Validity Not Before: Sep 3 10:20:02 2026 GMT Not After : Sep 4 12:10:02 2026 GMT Subject: CN=08CF3B5FF7BEB5204AFACD79A4E0651051B5278F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:c6:e3:9f:da:17:7b:ab:bb:d7:20:56:eb: 73:ad:c0:74:5a:54:ba:8e:ac:f8:03:c5:d1:5d:78: 64:4b:8c:d7:c0:01:96:0f:ee:52:d8:92:bb:c2:b5: f0:f0:60:25:f7:b7:21:67:1a:10:b7:5b:69:0b:80: 04:c3:2d:6d:3e:82:c7:a9:c5:12:c6:d4:26:5c:89: 4a:24:93:bd:66:14:cd:27:23:03:27:c5:d9:2b:9a: 35:74:0e:30:9e:38:5f:b8:01:49:be:e4:e3:15:9f: 87:13:45:9d:9b:96:73:00:39:6a:4a:a5:d1:46:9f: ae:7b:4c:e5:18:9f:16:89:d2:32:cf:0c:05:4d:5e: 23:1a:9c:c6:11:2c:3c:4b:c5:95:49:bd:05:e6:e7: 30:f8:a4:b3:f4:81:91:b8:b3:c6:78:ea:8a:26:a3: 57:09:d9:a6:81:1e:cd:72:e6:91:d8:af:80:d2:90: 23:cc:c7:df:88:6e:a8:08:3f:54:5b:43:af:f6:45: b8:e1:29:de:c9:6e:e3:06:c7:96:79:81:0d:b1:b0: 6d:27:06:db:ea:b4:f1:0a:4b:6a:13:f0:46:5b:55: 69:c9:c5:7d:1e:3a:00:90:c9:1c:2f:16:da:f7:a4: 24:8f:86:7e:8f:0c:44:70:ec:65:4d:e3:90:2c:ae: 89:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CF:3B:5F:F7:BE:B5:20:4A:FA:CD:79:A4:E0:65:10:51:B5:27:8F X509v3 Authority Key Identifier: keyid:A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ea:46:e8:a8:24:6f:3f:9e:4f:37:af:c2:2f:c1:1c:e6:b8: 1d:ff:8b:d5:90:25:6f:a0:a8:c0:1f:e7:0a:a3:4c:c0:3d:64: d0:80:40:eb:4f:65:b8:bd:ab:7d:46:7e:e8:e1:15:6f:59:7a: aa:97:3d:92:f2:d2:b7:4e:ec:de:67:73:07:11:8d:f1:04:cc: 81:fe:4f:8a:c6:c9:c4:ea:76:3c:9a:42:57:21:b6:3c:c2:2f: 85:44:b2:92:6e:80:8e:3a:74:ac:97:83:e1:60:f0:13:ec:eb: 5c:51:cd:42:1d:14:67:58:46:95:b7:e0:9f:9c:08:96:2c:bc: c2:74:c0:da:36:16:c9:65:46:0c:d6:e4:0e:15:21:a1:fa:04: 97:17:dd:53:22:66:9b:7f:b8:19:b8:83:1c:d3:38:66:df:95: 21:59:cc:0e:8d:97:31:68:84:77:90:31:70:de:92:4b:53:c4: 4e:a3:bb:9e:59:68:d3:6a:45:f6:ac:e2:c7:e8:c2:15:a0:1e: 3a:b3:e8:56:5e:29:07:ec:dd:35:d3:d4:e9:4b:d2:37:b8:8a: dd:2e:c0:ba:c5:2b:26:4e:8e:7e:6f:9b:97:50:f4:f9:9c:98: 64:c4:45:7d:2d:2e:74:07:54:d5:ef:05:0a:8f:ca:da:61:7d: 2a:b8:2a:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPFxxQKozSGUM3UO41YuftwbES0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThENjAyMTczODhEQ0VFNjg5N0JEQTVCQzZENTE5MDMx N0NFQzBFQzAeFw0yNjA5MDMxMDIwMDJaFw0yNjA5MDQxMjEwMDJaMDMxMTAvBgNV BAMTKDA4Q0YzQjVGRjdCRUI1MjA0QUZBQ0Q3OUE0RTA2NTEwNTFCNTI3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgp8bjn9oXe6u71yBW63OtwHRa VLqOrPgDxdFdeGRLjNfAAZYP7lLYkrvCtfDwYCX3tyFnGhC3W2kLgATDLW0+gsep xRLG1CZciUokk71mFM0nIwMnxdkrmjV0DjCeOF+4AUm+5OMVn4cTRZ2blnMAOWpK pdFGn657TOUYnxaJ0jLPDAVNXiManMYRLDxLxZVJvQXm5zD4pLP0gZG4s8Z46oom o1cJ2aaBHs1y5pHYr4DSkCPMx9+IbqgIP1RbQ6/2RbjhKd7JbuMGx5Z5gQ2xsG0n BtvqtPEKS2oT8EZbVWnJxX0eOgCQyRwvFtr3pCSPhn6PDERw7GVN45AsromNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCM87X/e+tSBK+s15pOBlEFG1J48wHwYDVR0j BBgwFoAUqNYCFziNzuaJe9pbxtUZAxfOwOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk1NzdjM2MtNjZjZC00MGE0LWFmYzUtNmM2ZjhiNjY0YTUxLzAvQThENjAyMTcz ODhEQ0VFNjg5N0JEQTVCQzZENTE5MDMxN0NFQzBFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEQ2MDIxNzM4OERDRUU2ODk3QkRBNUJDNkQ1MTkwMzE3Q0VD MEVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQThENjAyMTczODhEQ0VFNjg5N0JEQTVCQzZENTE5 MDMxN0NFQzBFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjqRuioJG8/nk83r8IvwRzmuB3/i9WQJW+g qMAf5wqjTMA9ZNCAQOtPZbi9q31GfujhFW9ZeqqXPZLy0rdO7N5ncwcRjfEEzIH+ T4rGycTqdjyaQlchtjzCL4VEspJugI46dKyXg+Fg8BPs61xRzUIdFGdYRpW34J+c CJYsvMJ0wNo2FsllRgzW5A4VIaH6BJcX3VMiZpt/uBm4gxzTOGbflSFZzA6NlzFo hHeQMXDekktTxE6ju55ZaNNqRfas4sfowhWgHjqz6FZeKQfs3TXT1OlL0je4it0u wLrFKyZOjn5vm5dQ9PmcmGTERX0tLnQHVNXvBQqPytphfSq4Kgg= -----END CERTIFICATE-----Generated at Thu Sep 3 20:48:39 2026 by rpki-client