$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft File: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft (raw, json) Hash identifier: wevGGVG8VYD7Gb6S2mFh2XoR+psZx5bXznC6Rg25fHw= Subject key identifier: D9:F3:B4:75:51:9B:87:6F:54:42:67:F7:50:54:E1:E2:34:0A:68:C0 Authority key identifier: 8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 Certificate issuer: /CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Certificate serial: 159018BB3B31E0731FABEA372350D95740EA429D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 15:56:27 +0000 Manifest this update: Thu 03 Sep 2026 15:51:27 +0000 Manifest next update: Fri 04 Sep 2026 19:48:27 +0000 Files and hashes: 1: 3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa (hash: C1r63J+tGfKPbhbl/dI9G1bDePtMsBvnKWbTmvbk0OA=) 2: 3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa (hash: gMfUFYSPdVxpBBuGIFKR77copbFj1wN/NAnjtAfZ1Zo=) 3: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl (hash: OFJUoF7cYWjGhiLE2mSAFiaAov5TdQyk8WdSw0XP8Tw=) 4: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 0ts/w6oKmrt+r0C8EDap/FK5Uc/o23APxLZIMW88Oo4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 19:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:90:18:bb:3b:31:e0:73:1f:ab:ea:37:23:50:d9:57:40:ea:42:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Validity Not Before: Sep 3 15:51:27 2026 GMT Not After : Sep 4 19:48:27 2026 GMT Subject: CN=D9F3B475519B876F544267F75054E1E2340A68C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:6f:4f:b8:a9:a9:4c:f7:d8:b3:67:de:14: f2:19:7e:35:43:b6:9d:38:24:37:8f:37:6e:b7:d1: e8:dc:61:12:53:bd:c7:91:6a:71:d2:a9:91:ab:bd: 4c:6d:84:ef:9f:74:46:a8:28:1c:0d:c3:18:43:4a: 95:38:ff:39:4c:d4:ad:17:b1:7c:1b:c4:1e:84:ce: 18:20:73:23:f7:81:25:00:1f:d6:4a:a6:9f:83:ac: 10:7b:57:4d:bd:f1:65:78:a0:e3:e1:27:f4:14:3a: 14:b1:4e:5d:00:e6:94:14:aa:87:4e:2c:89:32:9d: 79:80:2a:79:bc:61:11:48:c1:10:a9:c6:d7:fd:c2: b1:56:47:76:62:b2:15:5a:3e:e9:fe:ee:2b:ec:f6: 58:35:12:db:53:24:38:3d:63:59:bf:cd:a0:65:a5: 71:26:68:42:8f:bf:ee:d5:71:3e:c7:f3:3f:d7:af: 3a:a7:83:e2:d4:19:03:85:e7:21:fc:6c:61:ce:2d: 73:ab:0f:7f:bf:f7:7a:8b:b5:e1:b1:e7:a4:ec:92: ad:3b:5a:d8:93:d6:f6:0d:83:92:71:b0:99:50:8c: 10:b0:3a:a2:4b:43:96:96:34:db:a1:53:b2:3c:a4: fe:44:e9:41:0f:99:ab:ab:51:ad:a0:ac:ba:6e:2e: fc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F3:B4:75:51:9B:87:6F:54:42:67:F7:50:54:E1:E2:34:0A:68:C0 X509v3 Authority Key Identifier: keyid:8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:e3:4f:29:f3:21:65:07:7a:79:e0:6e:c6:02:48:e6:7e:61: 31:6f:20:51:a2:2a:25:86:ac:84:46:d1:31:c2:3a:b5:4f:ee: 69:8c:05:60:53:72:47:b6:c4:70:a2:79:c7:15:58:13:46:dd: b7:e1:5e:80:3a:bc:98:29:87:c7:64:de:4b:2a:bc:cc:d6:71: 55:55:dc:fd:68:5b:14:70:f5:8d:d3:19:44:8c:8c:ec:e9:65: 88:a2:e0:5c:19:fb:a7:01:b3:4f:c6:92:41:23:6f:79:43:f3: 7e:19:e2:e4:30:ea:aa:fe:8c:be:5a:b4:a8:84:5e:a0:a5:77: f9:9d:33:f1:3d:c2:8e:25:fb:54:75:b2:23:c2:ef:b2:1f:13: 97:8e:8e:a1:73:ae:f7:77:e1:93:84:4c:f5:5d:6a:80:85:9e: c5:22:ad:2b:5c:6f:31:d4:79:49:92:40:d0:b7:e4:8c:c8:3b: 4c:76:ad:f6:bd:89:d9:a2:fd:61:65:f4:18:67:d8:f3:d7:a1: cc:9e:29:45:bb:9c:d4:d2:43:b6:69:15:ab:b4:34:82:88:9c: 1f:d7:56:43:e2:86:d0:a5:ff:44:3f:64:71:3a:47:50:fe:3e: 75:63:8b:ef:50:f8:ff:9b:ad:3e:0b:af:5a:cd:bb:2b:af:5c: cb:03:1b:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZAYuzsx4HMfq+o3I1DZV0DqQp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFCRDQ1NThDOUY5NEZGQzY3MEE1MkRCMzlGMEM5QjBC ODM5ODIyNTAeFw0yNjA5MDMxNTUxMjdaFw0yNjA5MDQxOTQ4MjdaMDMxMTAvBgNV BAMTKEQ5RjNCNDc1NTE5Qjg3NkY1NDQyNjdGNzUwNTRFMUUyMzQwQTY4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmW9PuKmpTPfYs2feFPIZfjVD tp04JDePN2630ejcYRJTvceRanHSqZGrvUxthO+fdEaoKBwNwxhDSpU4/zlM1K0X sXwbxB6EzhggcyP3gSUAH9ZKpp+DrBB7V0298WV4oOPhJ/QUOhSxTl0A5pQUqodO LIkynXmAKnm8YRFIwRCpxtf9wrFWR3ZishVaPun+7ivs9lg1EttTJDg9Y1m/zaBl pXEmaEKPv+7VcT7H8z/Xrzqng+LUGQOF5yH8bGHOLXOrD3+/93qLteGx56Tskq07 WtiT1vYNg5JxsJlQjBCwOqJLQ5aWNNuhU7I8pP5E6UEPmaurUa2grLpuLvx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2fO0dVGbh29UQmf3UFTh4jQKaMAwHwYDVR0j BBgwFoAUir1FWMn5T/xnClLbOfDJsLg5giUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM4N2U4NWQtYjE4NS00MzM0LTgwMWItNDljOGM4YjkxODQ0LzAvOEFCRDQ1NThD OUY5NEZGQzY3MEE1MkRCMzlGMEM5QjBCODM5ODIyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUJENDU1OEM5Rjk0RkZDNjcwQTUyREIzOUYwQzlCMEI4Mzk4 MjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvOEFCRDQ1NThDOUY5NEZGQzY3MEE1MkRCMzlGMEM5 QjBCODM5ODIyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANXjTynzIWUHenngbsYCSOZ+YTFvIFGiKiWG rIRG0THCOrVP7mmMBWBTcke2xHCieccVWBNG3bfhXoA6vJgph8dk3ksqvMzWcVVV 3P1oWxRw9Y3TGUSMjOzpZYii4FwZ+6cBs0/GkkEjb3lD834Z4uQw6qr+jL5atKiE XqCld/mdM/E9wo4l+1R1siPC77IfE5eOjqFzrvd34ZOETPVdaoCFnsUirStcbzHU eUmSQNC35IzIO0x2rfa9idmi/WFl9Bhn2PPXocyeKUW7nNTSQ7ZpFau0NIKInB/X VkPihtCl/0Q/ZHE6R1D+PnVji+9Q+P+brT4Lr1rNuyuvXMsDGy0= -----END CERTIFICATE-----Generated at Fri Sep 4 11:30:36 2026 by rpki-client