$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft File: 8FB017F8558B134E65670C5E56417CAA2FC460F1.mft (raw, json) Hash identifier: rpq9OsVKHoUbjj4Cv2NgkYYImJXBvh35vWm2ubJTY4w= Subject key identifier: D6:97:38:C2:DC:91:22:14:4D:AF:43:83:7C:CE:6D:43:64:77:7E:CA Authority key identifier: 8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 Certificate issuer: /CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Certificate serial: 5830B61E037EE4594BC879009C9D0AEB1F42A384 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 01:04:25 +0000 Manifest this update: Thu 03 Sep 2026 00:59:25 +0000 Manifest next update: Fri 04 Sep 2026 04:04:25 +0000 Files and hashes: 1: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: toXJPhNtOXf98GJBbdqi9mllMSbcAgrmezktdUtueZ4=) 2: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: DZWl5mWmmx3C6HZfgC0P5GgRxbzQDenyir2DbhS+/vY=) 3: 8FB017F8558B134E65670C5E56417CAA2FC460F1.crl (hash: VEujgMgXBwF9mdEZwb2GjyorvZFA3U36qtM7W00AxK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:30:b6:1e:03:7e:e4:59:4b:c8:79:00:9c:9d:0a:eb:1f:42:a3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Validity Not Before: Sep 3 00:59:25 2026 GMT Not After : Sep 4 04:04:25 2026 GMT Subject: CN=D69738C2DC9122144DAF43837CCE6D4364777ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:88:16:e0:e5:4d:57:42:85:ad:34:a5:8c:60: c1:e5:a4:ee:4d:fb:0b:7e:bc:e1:2c:4e:4a:cf:40: f4:15:52:fc:32:f2:fe:5a:00:ee:2f:58:33:ec:24: c9:a2:23:26:58:82:af:50:41:9e:5a:5d:90:d9:1e: d2:b6:89:ec:7c:a4:a3:21:f6:a5:76:80:2a:2c:ec: 45:12:09:84:ff:2b:ae:7f:23:b3:18:45:96:2a:35: c2:30:72:55:7b:d7:f6:7a:67:3b:17:09:a4:70:9b: 26:9f:ee:9f:89:e4:f1:76:79:77:ce:4c:3d:17:48: 08:c2:70:64:07:8a:52:05:9f:c2:7e:81:d5:fc:b6: 1b:ec:3f:2a:fc:1a:f6:37:ff:c4:d3:b3:5d:c9:1f: 2c:cf:d7:fb:99:1f:ab:18:20:7a:bd:30:3b:40:6f: 9f:18:62:b7:55:0d:ea:35:84:79:74:c4:af:30:18: c8:36:d0:f9:db:f3:be:8c:4e:ed:21:61:89:23:ec: 31:94:18:16:74:1b:21:ff:7f:46:5c:e2:a1:a0:5f: 4f:94:80:25:bf:12:58:36:0f:99:23:19:99:54:c3: ec:af:04:81:f2:45:cf:8d:2b:6f:67:49:1c:fa:5c: 37:b2:8c:99:43:af:6c:fd:37:c5:19:5d:29:c3:ed: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:97:38:C2:DC:91:22:14:4D:AF:43:83:7C:CE:6D:43:64:77:7E:CA X509v3 Authority Key Identifier: keyid:8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c4:f1:f1:c0:c0:80:48:ed:6c:8f:a4:7e:1e:b8:0b:da:8b: f7:4d:fb:33:66:6d:33:74:8c:62:35:57:f3:7f:48:7e:83:ae: 03:2e:f4:b4:b2:ef:69:bf:bf:60:c4:af:86:a8:9d:fb:5f:85: dc:60:f2:d8:b3:e8:14:0c:8d:8e:cd:48:c2:31:b8:33:27:8a: ee:73:82:5b:77:77:85:eb:a9:0b:35:4a:63:6f:a2:eb:02:cc: 29:0f:15:92:f2:1a:9e:19:6a:93:43:f8:d9:04:25:67:2a:0b: e1:06:0e:1d:e5:f5:61:d9:7c:5e:20:28:70:27:00:13:36:1d: ec:5d:bd:e0:d8:35:8b:63:6a:2c:7f:5f:77:2b:98:57:b9:bf: d3:eb:60:49:91:2a:c0:54:79:a8:44:54:19:a4:c3:84:3a:67: 0e:54:87:f7:be:c8:19:6f:8e:6b:ba:5c:4b:66:0f:90:7b:2b: 06:88:9c:b6:d6:c7:d0:20:79:95:27:77:b8:85:cd:3d:c8:8c: 61:b5:7e:50:b2:b2:0a:26:56:73:cb:1a:f5:16:aa:a3:f9:e4: d4:b2:72:7f:df:5b:7e:0b:63:18:d0:f3:9c:0f:0a:61:c5:40: 63:91:80:f0:12:37:43:1e:8e:97:26:87:0f:c0:be:1a:ef:cf: f8:f2:d7:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWDC2HgN+5FlLyHkAnJ0K6x9Co4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEy RkM0NjBGMTAeFw0yNjA5MDMwMDU5MjVaFw0yNjA5MDQwNDA0MjVaMDMxMTAvBgNV BAMTKEQ2OTczOEMyREM5MTIyMTQ0REFGNDM4MzdDQ0U2RDQzNjQ3NzdFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiBbg5U1XQoWtNKWMYMHlpO5N +wt+vOEsTkrPQPQVUvwy8v5aAO4vWDPsJMmiIyZYgq9QQZ5aXZDZHtK2iex8pKMh 9qV2gCos7EUSCYT/K65/I7MYRZYqNcIwclV71/Z6ZzsXCaRwmyaf7p+J5PF2eXfO TD0XSAjCcGQHilIFn8J+gdX8thvsPyr8GvY3/8TTs13JHyzP1/uZH6sYIHq9MDtA b58YYrdVDeo1hHl0xK8wGMg20Pnb876MTu0hYYkj7DGUGBZ0GyH/f0Zc4qGgX0+U gCW/Elg2D5kjGZlUw+yvBIHyRc+NK29nSRz6XDeyjJlDr2z9N8UZXSnD7SF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1pc4wtyRIhRNr0ODfM5tQ2R3fsowHwYDVR0j BBgwFoAUj7AX+FWLE05lZwxeVkF8qi/EYPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOGFhYzMtMDA5NC00MjFmLWEyMDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1 NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEyRkM0NjBGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkIwMTdGODU1OEIxMzRFNjU2NzBDNUU1NjQxN0NBQTJGQzQ2 MEYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdD QUEyRkM0NjBGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXE8fHAwIBI7WyPpH4euAvai/dN+zNmbTN0 jGI1V/N/SH6DrgMu9LSy72m/v2DEr4aonftfhdxg8tiz6BQMjY7NSMIxuDMniu5z glt3d4XrqQs1SmNvousCzCkPFZLyGp4ZapND+NkEJWcqC+EGDh3l9WHZfF4gKHAn ABM2HexdveDYNYtjaix/X3crmFe5v9PrYEmRKsBUeahEVBmkw4Q6Zw5Uh/e+yBlv jmu6XEtmD5B7KwaInLbWx9AgeZUnd7iFzT3IjGG1flCysgomVnPLGvUWqqP55NSy cn/fW34LYxjQ85wPCmHFQGORgPASN0Mejpcmhw/Avhrvz/jy15Q= -----END CERTIFICATE-----Generated at Thu Sep 3 08:07:47 2026 by rpki-client