$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft File: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft (raw, json) Hash identifier: dDKC++NtrXaNV7zPFmll157Icudn1zYRyXbn5Ub791g= Subject key identifier: BF:A4:F7:9F:6E:48:D9:A5:5B:DA:C0:28:B6:4B:0B:45:73:2D:CB:3F Authority key identifier: E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 Certificate issuer: /CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Certificate serial: 3D5831283E86B806735EDF66001C5E899A80EE68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 17:25:43 +0000 Manifest this update: Wed 16 Sep 2026 17:20:43 +0000 Manifest next update: Thu 17 Sep 2026 19:46:43 +0000 Files and hashes: 1: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: /GUQyhQCCG48GVOr5PjkMlvyumHtwdaSkLWzQJVBKPU=) 2: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: hL7QfKjtDKqwKchVRtqitw7xLrTQDNQicxI0MMMupQI=) 3: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl (hash: g0JIMdQKjRmj69Mf//tJr+DNgxmyGgO0zqgy5uJS/hA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:58:31:28:3e:86:b8:06:73:5e:df:66:00:1c:5e:89:9a:80:ee:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Validity Not Before: Sep 16 17:20:43 2026 GMT Not After : Sep 17 19:46:43 2026 GMT Subject: CN=BFA4F79F6E48D9A55BDAC028B64B0B45732DCB3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c6:9b:19:e9:7a:88:b2:b4:98:95:30:39:c9: 1f:2b:db:dd:f2:a4:15:6a:ad:d4:5e:d7:c9:20:8a: 56:a6:bf:93:72:50:e1:85:1b:f8:0d:58:c8:4e:96: a2:31:71:75:71:b6:91:ec:23:59:02:f3:49:c0:bc: c1:82:3a:4d:5c:d7:5a:25:a3:24:88:26:24:4b:f9: 6a:dd:b5:e6:91:e8:a2:1c:d7:58:6d:31:bc:da:cd: f6:00:12:a8:92:fc:47:a3:7d:93:d8:c4:47:8d:bb: b6:2b:e0:f9:e9:96:12:eb:c8:39:7c:6d:8a:bc:1e: 2f:36:9d:4d:f3:4e:86:a4:3d:ee:1c:25:64:93:79: 65:2e:84:15:5d:1b:5c:e8:90:33:6e:29:ca:1e:cb: 8a:ac:0f:31:c7:71:51:2d:d6:b0:eb:7d:52:63:9a: 25:f2:1f:4f:5e:e1:fe:a2:46:35:1c:dd:cd:2f:83: 33:11:98:02:6e:80:61:5d:08:5d:29:fc:40:fc:1f: b3:37:ac:7a:d7:4e:70:4c:75:c1:49:62:14:a0:86: 84:20:90:de:4e:29:e1:f8:d6:fa:a9:70:76:95:dc: c2:63:1e:e3:4e:8e:a3:10:9e:d1:a1:bd:51:9c:eb: c4:63:64:08:4d:92:0a:1a:4a:e7:40:52:a6:a4:e4: 4a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A4:F7:9F:6E:48:D9:A5:5B:DA:C0:28:B6:4B:0B:45:73:2D:CB:3F X509v3 Authority Key Identifier: keyid:E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:13:9f:2c:ba:cc:2c:1d:e9:48:91:3f:a9:25:6b:c1:85:b6: ee:6b:da:ed:8a:39:ab:35:90:f6:9b:4a:b8:d2:a0:39:6d:8e: 9c:f7:cb:d8:c6:d4:03:f0:3e:45:ae:54:10:88:85:de:58:9c: fe:6c:c6:84:ee:c4:37:3a:e6:05:20:68:89:86:57:ab:3f:09: 92:75:a0:6c:e9:4b:49:70:c2:a4:70:1c:75:51:7d:8c:50:fe: cd:5a:07:fb:55:7e:9e:8f:21:dc:08:e9:2e:8f:c9:42:fb:e8: 85:e1:40:d1:d2:42:74:55:c0:28:7c:0c:eb:94:af:37:1c:b1: 3c:06:4b:bd:79:83:02:8d:6a:03:c6:db:af:c7:e7:6d:31:c4: e6:23:f1:a9:58:3f:66:a9:db:69:72:f5:9a:98:68:95:24:1c: a6:00:f6:2d:9d:45:cc:37:34:ea:f2:b7:f4:30:ae:95:aa:f0: 7a:29:c3:0c:b1:0b:40:78:24:8b:ec:7c:87:fa:d6:4b:b4:60: 29:7a:4f:98:d0:b3:24:5d:ac:6c:03:a0:54:5a:6b:6e:01:e7: d8:43:3c:39:54:ea:92:26:07:75:f8:9f:6d:bc:b6:68:de:cf: 9a:3a:c7:a8:a1:9c:44:ec:ad:37:61:0c:e0:4d:8d:a6:77:1c: 73:93:e1:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVgxKD6GuAZzXt9mABxeiZqA7mgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRBQkRD NzE3MkVBMzAeFw0yNjA5MTYxNzIwNDNaFw0yNjA5MTcxOTQ2NDNaMDMxMTAvBgNV BAMTKEJGQTRGNzlGNkU0OEQ5QTU1QkRBQzAyOEI2NEIwQjQ1NzMyRENCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcxpsZ6XqIsrSYlTA5yR8r293y pBVqrdRe18kgilamv5NyUOGFG/gNWMhOlqIxcXVxtpHsI1kC80nAvMGCOk1c11ol oySIJiRL+WrdteaR6KIc11htMbzazfYAEqiS/EejfZPYxEeNu7Yr4PnplhLryDl8 bYq8Hi82nU3zToakPe4cJWSTeWUuhBVdG1zokDNuKcoey4qsDzHHcVEt1rDrfVJj miXyH09e4f6iRjUc3c0vgzMRmAJugGFdCF0p/ED8H7M3rHrXTnBMdcFJYhSghoQg kN5OKeH41vqpcHaV3MJjHuNOjqMQntGhvVGc68RjZAhNkgoaSudAUqak5Ep3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv6T3n25I2aVb2sAotksLRXMtyz8wHwYDVR0j BBgwFoAU6PI5QshxsaI9UKpwJ6dKvccXLqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJhZTU4YWMtNTkxNy00MDY5LTlhNmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJD ODcxQjFBMjNENTBBQTcwMjdBNzRBQkRDNzE3MkVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEYyMzk0MkM4NzFCMUEyM0Q1MEFBNzAyN0E3NEFCREM3MTcy RUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRB QkRDNzE3MkVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMETnyy6zCwd6UiRP6kla8GFtu5r2u2KOas1 kPabSrjSoDltjpz3y9jG1APwPkWuVBCIhd5YnP5sxoTuxDc65gUgaImGV6s/CZJ1 oGzpS0lwwqRwHHVRfYxQ/s1aB/tVfp6PIdwI6S6PyUL76IXhQNHSQnRVwCh8DOuU rzccsTwGS715gwKNagPG26/H520xxOYj8alYP2ap22ly9ZqYaJUkHKYA9i2dRcw3 NOryt/QwrpWq8HopwwyxC0B4JIvsfIf61ku0YCl6T5jQsyRdrGwDoFRaa24B59hD PDlU6pImB3X4n228tmjez5o6x6ihnETsrTdhDOBNjaZ3HHOT4Yg= -----END CERTIFICATE-----Generated at Thu Sep 17 10:56:13 2026 by rpki-client