$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft File: C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft (raw, json) Hash identifier: AqpLjUWxHtNtT2Wgor9gJmWd0AR487V9yH6TrnzunHg= Subject key identifier: 84:6D:3C:06:C8:31:73:43:24:87:50:8E:E9:3D:EA:95:DD:8D:05:5A Authority key identifier: C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 Certificate issuer: /CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Certificate serial: 32F771D19E2A4DA49844AD1F8F4260AEC9DF8360 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 15:33:18 +0000 Manifest this update: Wed 16 Sep 2026 15:28:18 +0000 Manifest next update: Thu 17 Sep 2026 18:32:18 +0000 Files and hashes: 1: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: C54NnNs4f4gmLL9qO83WVBxOgZKL0rmUD589emvzz4I=) 2: C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl (hash: EQR+LUh7nJNDyvQ4A2I0kMMqTM9bb5HxwAbEGHDDejM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f7:71:d1:9e:2a:4d:a4:98:44:ad:1f:8f:42:60:ae:c9:df:83:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8D04547C334902622C8D7CF29F3F1DC8B435B28 Validity Not Before: Sep 16 15:28:18 2026 GMT Not After : Sep 17 18:32:18 2026 GMT Subject: CN=846D3C06C83173432487508EE93DEA95DD8D055A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:6a:7e:23:7a:12:a7:9a:e2:59:4b:c5:83: 6f:80:9e:7d:73:e5:ca:98:58:d2:d1:61:0d:55:ae: b9:f3:2e:a6:d1:cb:6d:7e:fb:04:3d:c7:21:3b:51: 23:7b:4d:3c:c0:0f:f4:2a:d7:fd:af:34:db:73:80: 2b:13:d7:82:6b:78:9a:33:e1:6c:bf:86:ca:56:36: 93:aa:4a:6f:ec:4f:f3:ec:d2:1e:1e:9b:cc:6f:b6: a6:26:94:a1:b1:6d:4f:d3:82:17:14:a2:fb:7c:0d: 7d:cf:a9:42:66:31:42:83:2c:d8:e4:90:7f:45:56: 38:81:5e:52:c6:a8:e9:8d:4d:31:e7:ca:d5:94:bc: 00:2a:67:62:4f:7e:b3:d2:12:7b:44:6d:37:9a:c7: 75:17:5d:70:3a:b2:ae:cc:fd:3f:df:a0:84:44:92: a4:20:68:53:39:6a:bf:3c:6f:80:a5:01:8a:62:6d: a8:c8:e1:45:dc:60:bf:f5:24:e7:40:4b:92:b6:9d: 2e:85:26:c6:91:00:37:32:b1:06:de:b8:65:36:b8: 78:1b:bd:bf:15:ca:f6:67:10:b9:5a:60:f9:bb:e4: 97:77:56:25:37:5c:d2:1f:a9:1d:d2:22:26:20:17: 94:b2:69:23:16:4a:ab:b1:e2:68:34:f5:23:77:87: e4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6D:3C:06:C8:31:73:43:24:87:50:8E:E9:3D:EA:95:DD:8D:05:5A X509v3 Authority Key Identifier: keyid:C8:D0:45:47:C3:34:90:26:22:C8:D7:CF:29:F3:F1:DC:8B:43:5B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8D04547C334902622C8D7CF29F3F1DC8B435B28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/C8D04547C334902622C8D7CF29F3F1DC8B435B28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:66:ac:4e:6f:c5:ae:48:af:e5:be:22:6e:ef:ae:74:4f:11: e6:e5:43:10:9d:15:3f:46:96:49:09:67:0f:72:fc:cc:a9:7b: 96:c0:a4:14:95:0f:19:04:ae:ed:e6:df:b5:59:d1:7e:3d:d8: 93:ee:fb:5e:89:86:9a:14:9e:3e:d1:af:5b:09:25:0b:40:31: 49:2e:20:82:0c:d2:d8:c8:d4:75:26:c3:7b:7f:35:48:88:1c: 37:6d:27:d5:e0:a1:68:b7:7d:18:61:2d:8e:22:2f:44:f4:57: e5:29:eb:ae:c1:04:2d:ee:af:25:aa:d8:2c:56:cf:64:21:55: 49:18:2f:82:f9:b0:18:09:b5:50:39:44:98:30:72:a0:a2:89: 97:64:13:9c:29:23:55:a5:f5:4a:5c:91:53:d5:00:ae:3d:38: af:6f:09:7d:70:d8:d4:de:09:1d:3e:75:6e:de:57:71:55:88: 37:87:98:a0:4d:e7:a0:73:34:ab:47:1f:41:3c:67:7b:fa:da: e0:64:08:d8:be:2f:5f:72:a7:ea:e1:41:06:3c:32:b1:33:14: 37:d2:fd:6d:9d:fc:e7:d9:4a:7f:56:9e:f6:36:ff:44:96:1d: de:d8:28:41:42:3b:43:72:3b:53:df:4b:4e:52:bb:8e:c9:33: 5f:2d:4d:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvdx0Z4qTaSYRK0fj0Jgrsnfg2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4 QjQzNUIyODAeFw0yNjA5MTYxNTI4MThaFw0yNjA5MTcxODMyMThaMDMxMTAvBgNV BAMTKDg0NkQzQzA2QzgzMTczNDMyNDg3NTA4RUU5M0RFQTk1REQ4RDA1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2oWp+I3oSp5riWUvFg2+Ann1z 5cqYWNLRYQ1VrrnzLqbRy21++wQ9xyE7USN7TTzAD/Qq1/2vNNtzgCsT14JreJoz 4Wy/hspWNpOqSm/sT/Ps0h4em8xvtqYmlKGxbU/TghcUovt8DX3PqUJmMUKDLNjk kH9FVjiBXlLGqOmNTTHnytWUvAAqZ2JPfrPSEntEbTeax3UXXXA6sq7M/T/foIRE kqQgaFM5ar88b4ClAYpibajI4UXcYL/1JOdAS5K2nS6FJsaRADcysQbeuGU2uHgb vb8VyvZnELlaYPm75Jd3ViU3XNIfqR3SIiYgF5SyaSMWSqux4mg09SN3h+SbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhG08Bsgxc0Mkh1CO6T3qld2NBVowHwYDVR0j BBgwFoAUyNBFR8M0kCYiyNfPKfPx3ItDWygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3NWQzNzEtMThjNy00OGRmLThmNjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdD MzM0OTAyNjIyQzhEN0NGMjlGM0YxREM4QjQzNUIyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEQwNDU0N0MzMzQ5MDI2MjJDOEQ3Q0YyOUYzRjFEQzhCNDM1 QjI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm NjEtMWQ0MDRiNjQ2NDEzLzAvQzhEMDQ1NDdDMzM0OTAyNjIyQzhEN0NGMjlGM0Yx REM4QjQzNUIyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRmrE5vxa5Ir+W+Im7vrnRPEeblQxCdFT9G lkkJZw9y/Mype5bApBSVDxkEru3m37VZ0X492JPu+16JhpoUnj7Rr1sJJQtAMUku IIIM0tjI1HUmw3t/NUiIHDdtJ9XgoWi3fRhhLY4iL0T0V+Up667BBC3uryWq2CxW z2QhVUkYL4L5sBgJtVA5RJgwcqCiiZdkE5wpI1Wl9UpckVPVAK49OK9vCX1w2NTe CR0+dW7eV3FViDeHmKBN56BzNKtHH0E8Z3v62uBkCNi+L19yp+rhQQY8MrEzFDfS /W2d/OfZSn9WnvY2/0SWHd7YKEFCO0NyO1PfS05Su47JM18tTXM= -----END CERTIFICATE-----Generated at Thu Sep 17 10:12:40 2026 by rpki-client