$ rpki-client -vvvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft File: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft (raw, json) Hash identifier: KiiZS4ui5Yyi06y1VmRj5zqb62Ra+mO0kroofUPb89I= Subject key identifier: ED:E7:F3:BA:75:0A:E7:95:40:31:F0:2D:D4:DA:16:E8:54:93:AF:F1 Authority key identifier: D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 Certificate issuer: /CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Certificate serial: 0C9215BF25E31FBACC9EFF7565393C5A4D3A1928 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:41:49 +0000 Manifest this update: Thu 17 Sep 2026 02:36:49 +0000 Manifest next update: Fri 18 Sep 2026 03:13:49 +0000 Files and hashes: 1: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: eXGHZrGd4sU2DLSEdy3de330+Fw4LKj8QHf1Kk8jl8M=) 2: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: JFxGecPe7UA2eaCg+ZKJcplW/KcDw+sS4WqX6uOvlVg=) 3: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: JFK4m68zG0lJAd7+KDHHharwdbO7qzWlnuoWt7ljQFI=) 4: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl (hash: xFXopjZMYgl0OaX/N6s08OXfTtQZB4SxLZhQrplABCk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:92:15:bf:25:e3:1f:ba:cc:9e:ff:75:65:39:3c:5a:4d:3a:19:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Validity Not Before: Sep 17 02:36:49 2026 GMT Not After : Sep 18 03:13:49 2026 GMT Subject: CN=EDE7F3BA750AE7954031F02DD4DA16E85493AFF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:b3:21:b1:33:f9:05:88:59:db:91:ff:39: 9d:71:3a:ad:cb:84:76:f1:83:fc:7b:94:0e:d0:72: 0d:d2:3a:54:18:e3:50:6e:ad:36:80:47:b2:4a:35: cd:13:db:38:01:f4:07:bc:43:c0:fe:a5:aa:dd:7f: d2:af:19:98:0f:d2:6d:ac:cb:1c:e7:c7:4f:39:a7: 01:ed:b0:95:00:9f:8b:09:b4:f7:06:95:9f:00:f7: a5:1a:c4:62:d2:77:31:48:af:b0:89:86:12:ee:93: 10:92:fa:db:f3:db:cb:d7:bd:ba:d7:6a:81:66:d2: 8a:f4:55:ee:ea:e9:00:39:f3:71:82:68:29:ac:f8: 16:c2:ff:0d:41:e7:6a:60:f9:6e:6b:b1:7a:41:4f: 6c:09:b3:8b:69:6c:7d:9e:85:d0:ac:30:c1:07:f0: 32:c6:20:8f:dd:a0:92:b1:ca:80:a1:d2:bf:2d:1d: a4:fc:6f:92:56:89:c2:d0:10:06:1e:6b:89:51:6a: 13:75:5a:fe:23:a1:a0:1f:54:d1:b5:1b:29:12:3b: 9f:57:31:0c:71:2a:4e:b5:5b:f3:1e:11:75:4c:dd: 6e:99:79:17:c1:c7:7e:91:0a:f3:4c:50:67:a1:ce: 23:d1:0e:75:d6:01:da:bf:53:85:6f:06:b4:bc:d5: 39:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E7:F3:BA:75:0A:E7:95:40:31:F0:2D:D4:DA:16:E8:54:93:AF:F1 X509v3 Authority Key Identifier: keyid:D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:45:b6:e7:c8:74:bd:7a:fa:a9:0c:bf:e0:51:70:ea:d0:80: 84:71:35:1f:14:fe:ff:7a:67:3d:c2:a3:e6:3d:5a:01:67:8f: b2:f9:87:e6:3c:89:c0:74:43:47:82:2d:f5:fa:b0:96:74:bb: 10:0b:19:51:c4:87:2a:04:80:6d:bd:3b:b2:a0:0b:bf:54:ed: 99:0e:2d:87:6f:ea:0a:73:e6:55:eb:83:e5:6c:1e:8d:54:ca: 33:a2:03:ac:f7:0e:ca:51:8a:58:df:b2:01:c7:81:7f:0d:65: 7b:df:f8:1d:c8:df:a8:05:21:d8:35:74:d3:cd:f0:19:10:98: 06:e8:33:fe:82:5b:2e:89:a6:57:6d:ff:88:eb:bf:50:35:63: 5c:66:65:39:31:94:a5:50:34:de:a2:c2:de:f0:24:ab:0b:ae: 48:e6:56:0e:64:86:5a:af:c2:46:72:1f:c1:e8:98:7b:11:86: 8a:52:b8:87:73:ae:c3:c5:c5:e4:47:43:d9:48:46:c1:93:aa: 12:50:86:db:16:9d:87:88:6c:23:4c:e0:37:ee:75:13:21:74: 99:9c:3a:11:9d:9c:7e:b9:83:b4:bb:31:14:f9:11:9a:ef:b2: 14:e1:c5:51:c4:3f:1a:fe:61:14:33:61:fc:d1:ed:e2:59:c6: 01:7c:b9:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJIVvyXjH7rMnv91ZTk8Wk06GSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdCRURB NDMwODJDMzAeFw0yNjA5MTcwMjM2NDlaFw0yNjA5MTgwMzEzNDlaMDMxMTAvBgNV BAMTKEVERTdGM0JBNzUwQUU3OTU0MDMxRjAyREQ0REExNkU4NTQ5M0FGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmbMhsTP5BYhZ25H/OZ1xOq3L hHbxg/x7lA7Qcg3SOlQY41BurTaAR7JKNc0T2zgB9Ae8Q8D+pardf9KvGZgP0m2s yxznx085pwHtsJUAn4sJtPcGlZ8A96UaxGLSdzFIr7CJhhLukxCS+tvz28vXvbrX aoFm0or0Ve7q6QA583GCaCms+BbC/w1B52pg+W5rsXpBT2wJs4tpbH2ehdCsMMEH 8DLGII/doJKxyoCh0r8tHaT8b5JWicLQEAYea4lRahN1Wv4joaAfVNG1GykSO59X MQxxKk61W/MeEXVM3W6ZeRfBx36RCvNMUGehziPRDnXWAdq/U4VvBrS81TlpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7efzunUK55VAMfAt1NoW6FSTr/EwHwYDVR0j BBgwFoAU2L91kMQN5zFvUqHe58577aQwgsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBD NDBERTczMTZGNTJBMURFRTdDRTdCRURBNDMwODJDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOEJGNzU5MEM0MERFNzMxNkY1MkExREVFN0NFN0JFREE0MzA4 MkMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdC RURBNDMwODJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNFtufIdL16+qkMv+BRcOrQgIRxNR8U/v96 Zz3Co+Y9WgFnj7L5h+Y8icB0Q0eCLfX6sJZ0uxALGVHEhyoEgG29O7KgC79U7ZkO LYdv6gpz5lXrg+VsHo1UyjOiA6z3DspRiljfsgHHgX8NZXvf+B3I36gFIdg1dNPN 8BkQmAboM/6CWy6Jpldt/4jrv1A1Y1xmZTkxlKVQNN6iwt7wJKsLrkjmVg5khlqv wkZyH8HomHsRhopSuIdzrsPFxeRHQ9lIRsGTqhJQhtsWnYeIbCNM4DfudRMhdJmc OhGdnH65g7S7MRT5EZrvshThxVHEPxr+YRQzYfzR7eJZxgF8uRE= -----END CERTIFICATE-----Generated at Thu Sep 17 14:44:37 2026 by rpki-client