$ rpki-client -vvvf rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft File: 8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft (raw, json) Hash identifier: tGiilHVLl20XOHMJki9Q9oJMtYx5idPG1P6svUIgp3M= Subject key identifier: 11:61:54:BC:9B:D4:CD:3D:0E:47:56:77:91:8D:6F:0F:C9:A2:1D:BE Authority key identifier: 8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7 Certificate issuer: /CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7 Certificate serial: 138E035A882C5B9DCF3554200A4A3B11F5769CCD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 21:15:17 +0000 Manifest this update: Wed 16 Sep 2026 21:10:17 +0000 Manifest next update: Thu 17 Sep 2026 23:15:17 +0000 Files and hashes: 1: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: CtGqY694vs+5rhe29OiFriR1fCqTy1GqyZ3iimqLrsk=) 2: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: J67UWBhwkB4SyeMxqFOonlk/hP7ZCxo/ttgUlmNhJvU=) 3: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: KbKAffsvKxiK1iR4ZLtyFSXqzPv63zoW9cNrraJoQ4s=) 4: 8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl (hash: /wkhuKxlZSkEFtwiThLM7EfMQn4fZFpSC6Fh9XJk6S4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:8e:03:5a:88:2c:5b:9d:cf:35:54:20:0a:4a:3b:11:f5:76:9c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7 Validity Not Before: Sep 16 21:10:17 2026 GMT Not After : Sep 17 23:15:17 2026 GMT Subject: CN=116154BC9BD4CD3D0E475677918D6F0FC9A21DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:92:d1:5b:48:76:d8:24:98:4f:31:90:5c: bf:03:46:1e:55:84:1b:b7:63:8c:ff:f6:e3:0a:cf: e3:0c:b3:1e:41:1b:26:58:56:ce:d9:04:37:f4:56: 4d:1c:32:be:66:7c:85:02:5e:13:93:b1:a9:87:c8: 53:87:53:4e:58:21:63:54:f7:71:6b:72:90:ea:4b: 4d:76:b8:d1:b1:4c:63:88:f3:b1:51:de:22:78:40: 32:d6:dc:eb:fe:cf:11:57:a2:ca:9c:61:15:86:80: 57:e9:ca:c1:1e:24:d0:ea:e9:87:3c:cb:91:21:8f: e7:c5:66:d1:2b:6e:fe:c4:b5:55:34:c6:d4:c2:53: 2f:08:35:64:98:4a:48:d6:60:3e:16:4e:d3:e1:aa: 20:6d:25:d7:76:a2:d8:f3:b0:bf:73:c3:b9:1e:4c: e9:ee:9b:2c:8f:f9:ca:86:d4:a9:53:1a:d7:be:b5: 28:8e:1b:68:f5:99:08:d7:d6:73:3e:6a:c9:5c:ef: df:cc:11:49:63:39:50:86:c5:8c:f5:14:83:51:12: d9:80:be:b0:26:ed:51:7d:59:da:45:a2:9b:f6:1b: cd:29:44:12:de:8a:2d:f3:5b:60:1c:e5:43:59:f8: 27:3a:0e:ca:3b:5b:ea:82:db:6a:8a:97:e7:75:25: 36:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:61:54:BC:9B:D4:CD:3D:0E:47:56:77:91:8D:6F:0F:C9:A2:1D:BE X509v3 Authority Key Identifier: keyid:8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f1:f1:ba:ec:38:97:68:76:d0:c1:6a:c0:3d:2e:d0:c5:8c: 72:71:9b:64:86:cb:e7:0d:f5:04:7a:2f:6b:6a:a4:20:72:41: 08:c9:34:6b:92:05:c4:96:e6:d4:7f:1a:7f:e8:12:ac:d1:d2: 53:68:f2:ee:f9:0a:4f:be:2c:1f:f7:2b:db:73:bf:a5:3c:28: a8:ed:4c:18:ce:50:b6:6b:75:68:b1:d6:0f:bc:55:a4:78:40: b6:89:54:6f:37:ed:e5:11:27:c2:95:cd:63:5c:96:ec:a0:a3: 49:4e:2c:06:9a:93:87:61:65:d1:35:e4:7a:43:73:76:fc:69: 5e:63:2d:44:09:20:15:95:3a:8e:16:bd:7e:e5:85:da:f1:9b: 86:be:87:df:77:d0:ff:aa:bd:12:61:48:13:a3:20:c6:5f:d3: 70:76:60:e6:ff:2d:ee:87:04:03:0d:a6:c2:bf:06:26:fd:a5: 1f:04:8f:e4:15:7e:2c:99:f4:b2:2b:f6:47:42:fa:02:d5:08: a3:6e:48:9e:85:c4:cb:e2:0b:b6:6e:f0:01:6a:48:4e:c4:c9: e9:54:6a:77:4b:55:54:bb:66:61:0b:74:05:f8:7d:11:6e:7d: aa:be:59:1c:84:97:0d:32:b0:e2:d0:50:e2:0a:fb:9d:cd:8c: d2:57:2c:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE44DWogsW53PNVQgCko7EfV2nM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENBOEE2NjhBMjQwREY3QjE1RkJDM0U0NTE2QTg0MDhC QkRDNDdFNzAeFw0yNjA5MTYyMTEwMTdaFw0yNjA5MTcyMzE1MTdaMDMxMTAvBgNV BAMTKDExNjE1NEJDOUJENENEM0QwRTQ3NTY3NzkxOEQ2RjBGQzlBMjFEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgL5LRW0h22CSYTzGQXL8DRh5V hBu3Y4z/9uMKz+MMsx5BGyZYVs7ZBDf0Vk0cMr5mfIUCXhOTsamHyFOHU05YIWNU 93FrcpDqS012uNGxTGOI87FR3iJ4QDLW3Ov+zxFXosqcYRWGgFfpysEeJNDq6Yc8 y5Ehj+fFZtErbv7EtVU0xtTCUy8INWSYSkjWYD4WTtPhqiBtJdd2otjzsL9zw7ke TOnumyyP+cqG1KlTGte+tSiOG2j1mQjX1nM+aslc79/MEUljOVCGxYz1FINREtmA vrAm7VF9WdpFopv2G80pRBLeii3zW2Ac5UNZ+Cc6Dso7W+qC22qKl+d1JTYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEWFUvJvUzT0OR1Z3kY1vD8miHb4wHwYDVR0j BBgwFoAUjKimaKJA33sV+8PkUWqECLvcR+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQyMDc1MjMtZDVmNS00YWNjLWIwYWMtYmZiMDk1NGZhNGUwLzAvOENBOEE2NjhB MjQwREY3QjE1RkJDM0U0NTE2QTg0MDhCQkRDNDdFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0E4QTY2OEEyNDBERjdCMTVGQkMzRTQ1MTZBODQwOEJCREM0 N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvOENBOEE2NjhBMjQwREY3QjE1RkJDM0U0NTE2QTg0 MDhCQkRDNDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITx8brsOJdodtDBasA9LtDFjHJxm2SGy+cN 9QR6L2tqpCByQQjJNGuSBcSW5tR/Gn/oEqzR0lNo8u75Ck++LB/3K9tzv6U8KKjt TBjOULZrdWix1g+8VaR4QLaJVG837eURJ8KVzWNcluygo0lOLAaak4dhZdE15HpD c3b8aV5jLUQJIBWVOo4WvX7lhdrxm4a+h9930P+qvRJhSBOjIMZf03B2YOb/Le6H BAMNpsK/Bib9pR8Ej+QVfiyZ9LIr9kdC+gLVCKNuSJ6FxMviC7Zu8AFqSE7EyelU andLVVS7ZmELdAX4fRFufaq+WRyElw0ysOLQUOIK+53NjNJXLJU= -----END CERTIFICATE-----Generated at Thu Sep 17 10:49:17 2026 by rpki-client