$ rpki-client -vvvf rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft File: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft (raw, json) Hash identifier: wds24Qcufu7X5OHg4F+ke2pvdY0M/zDEd8jxEAl+xcI= Subject key identifier: FC:C0:07:CE:16:8B:9D:60:2A:B4:08:72:83:18:6F:B5:2D:E7:41:A5 Authority key identifier: C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 Certificate issuer: /CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Certificate serial: 1CE339F094A1AB1ED34B899D04D44371A8D3111F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 05:50:41 +0000 Manifest this update: Thu 17 Sep 2026 05:45:41 +0000 Manifest next update: Fri 18 Sep 2026 07:36:41 +0000 Files and hashes: 1: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: 1Jb72gV9Cql494HOmw4p+CcUceiPzhX48HtoigKm8xc=) 2: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: oRViKlwXLb62v1XHH/P9v9PE35BuLaTpbEgB9nVLGXo=) 3: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: pBKVlpjSQfisARzQp/uCxR6vxT0fT2aUvnTqNxA3JGc=) 4: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl (hash: gLC8zG3DpsMRBiJxe2JCRW7gLAMG0Z1elLanndSqCys=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e3:39:f0:94:a1:ab:1e:d3:4b:89:9d:04:d4:43:71:a8:d3:11:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Validity Not Before: Sep 17 05:45:41 2026 GMT Not After : Sep 18 07:36:41 2026 GMT Subject: CN=FCC007CE168B9D602AB4087283186FB52DE741A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:65:56:ca:c2:8d:78:f7:25:96:d8:b1:9e: 74:a0:e1:22:aa:51:27:01:09:50:bc:91:c2:f4:ad: a9:0d:14:0c:82:1e:bb:3b:bf:8f:97:88:96:28:ae: 40:11:24:37:4f:47:b6:49:9e:cc:86:33:5e:9e:4d: e6:c9:93:98:8b:d2:11:60:3d:d6:a2:80:1f:26:cc: ce:89:86:76:d0:a5:19:c9:02:e3:3f:4e:52:62:82: 34:e4:68:b3:0d:b9:14:0c:78:c2:43:3a:77:24:41: 47:ff:8a:50:ab:1a:c5:df:94:ae:31:1c:e1:0d:36: 12:0c:f4:c6:ae:39:d1:be:47:3c:5c:38:36:43:b9: 6f:82:37:f7:1d:7f:41:d6:18:61:0b:40:98:6a:6d: 8c:30:31:f1:e8:66:5b:f6:1e:bd:8a:f7:1a:40:6b: e9:b7:80:af:89:9a:fd:32:17:64:c3:16:dc:6d:13: ac:0c:36:bc:31:7b:c9:6b:e0:fb:e2:30:f8:f6:0a: 9a:ca:fa:31:6c:5c:99:5d:66:88:c0:9a:0d:49:f0: a0:fc:84:d8:8c:d3:d4:14:4a:39:d8:5b:5c:8a:b6: 86:43:bd:22:44:ae:71:c5:36:52:3f:c8:52:ed:cd: 07:66:97:66:5b:fd:16:d6:cb:36:b4:ec:53:f6:d8: 7f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C0:07:CE:16:8B:9D:60:2A:B4:08:72:83:18:6F:B5:2D:E7:41:A5 X509v3 Authority Key Identifier: keyid:C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0f:a0:71:c4:ee:8f:f4:5a:ad:c2:a2:f0:3d:6d:45:fa:ed: ac:17:5d:9b:24:91:24:85:47:ac:26:1c:7d:95:5b:5d:d6:0c: ea:0f:da:de:64:3c:83:59:58:2a:cf:09:b8:6e:3a:dc:a3:bd: bf:9e:a1:a5:06:c0:5a:41:b5:f9:fe:f6:7d:14:ce:2c:f3:14: e3:5c:94:17:05:21:1e:4e:b3:ab:0e:31:ae:24:fd:99:d5:1c: 98:74:ce:0a:5d:df:d3:9f:b1:59:a4:16:9e:1e:fb:8d:bc:a9: 34:f4:f4:dc:06:94:3f:25:48:55:f6:7a:be:98:f1:07:8f:08: 00:f2:86:c0:9a:02:ea:db:99:ed:4a:25:58:42:51:fa:64:a5: 5f:56:d8:6d:b1:18:80:90:b4:20:b3:42:42:bb:57:47:bc:af: 9e:4f:18:49:33:a7:3f:7a:f5:03:89:eb:43:45:f1:b0:d5:0c: b4:33:2d:40:0e:25:50:8a:05:32:ad:f0:c5:36:b9:26:31:c6: 41:47:09:12:1b:2e:e4:07:78:04:e6:88:a6:94:a1:c1:ce:04: 78:a9:7b:59:07:05:fb:a5:1e:8b:31:89:c5:bb:08:8b:7d:5e: b4:bd:ab:8c:94:58:86:82:42:e5:69:cc:52:c6:1b:b3:bd:5d: 29:7f:50:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOM58JShqx7TS4mdBNRDcajTER8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2NDdFREY1RUZERTk3MTIyOUY1RDc2ODE4QjM5NTdB QTZEOEExNDAeFw0yNjA5MTcwNTQ1NDFaFw0yNjA5MTgwNzM2NDFaMDMxMTAvBgNV BAMTKEZDQzAwN0NFMTY4QjlENjAyQUI0MDg3MjgzMTg2RkI1MkRFNzQxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23WVWysKNePclltixnnSg4SKq UScBCVC8kcL0rakNFAyCHrs7v4+XiJYorkARJDdPR7ZJnsyGM16eTebJk5iL0hFg PdaigB8mzM6JhnbQpRnJAuM/TlJigjTkaLMNuRQMeMJDOnckQUf/ilCrGsXflK4x HOENNhIM9MauOdG+RzxcODZDuW+CN/cdf0HWGGELQJhqbYwwMfHoZlv2Hr2K9xpA a+m3gK+Jmv0yF2TDFtxtE6wMNrwxe8lr4PviMPj2CprK+jFsXJldZojAmg1J8KD8 hNiM09QUSjnYW1yKtoZDvSJErnHFNlI/yFLtzQdml2Zb/RbWyza07FP22H9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/MAHzhaLnWAqtAhygxhvtS3nQaUwHwYDVR0j BBgwFoAUyGR+31796XEin112gYs5V6ptihQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVkMzhiNDItYjdjMi00MmI2LWEyZmMtNjc1ZGEyNTRjNzc2LzAvQzg2NDdFREY1 RUZERTk3MTIyOUY1RDc2ODE4QjM5NTdBQTZEOEExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODY0N0VERjVFRkRFOTcxMjI5RjVENzY4MThCMzk1N0FBNkQ4 QTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzg2NDdFREY1RUZERTk3MTIyOUY1RDc2ODE4QjM5 NTdBQTZEOEExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUPoHHE7o/0Wq3CovA9bUX67awXXZskkSSF R6wmHH2VW13WDOoP2t5kPINZWCrPCbhuOtyjvb+eoaUGwFpBtfn+9n0UzizzFONc lBcFIR5Os6sOMa4k/ZnVHJh0zgpd39OfsVmkFp4e+428qTT09NwGlD8lSFX2er6Y 8QePCADyhsCaAurbme1KJVhCUfpkpV9W2G2xGICQtCCzQkK7V0e8r55PGEkzpz96 9QOJ60NF8bDVDLQzLUAOJVCKBTKt8MU2uSYxxkFHCRIbLuQHeATmiKaUocHOBHip e1kHBfulHosxicW7CIt9XrS9q4yUWIaCQuVpzFLGG7O9XSl/UIY= -----END CERTIFICATE-----Generated at Thu Sep 17 14:45:25 2026 by rpki-client