$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft File: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft (raw, json) Hash identifier: 02H0/d2DVGh+Zxy92VpuEq3QGzm7zf0UqRhq+wZw1AE= Subject key identifier: D2:F2:6D:F6:A1:17:BA:C5:99:A2:0B:D5:AE:FB:22:36:D4:7F:01:BF Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 Certificate issuer: /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Certificate serial: 5125B6797B52F634611FA2D349C14601A36B084B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft Manifest number: BA Signing time: Thu 17 Sep 2026 03:32:50 +0000 Manifest this update: Thu 17 Sep 2026 03:27:50 +0000 Manifest next update: Fri 18 Sep 2026 04:06:50 +0000 Files and hashes: 1: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: 0kmlYn3U9dmyxdriKnU2KVYL6nRWvq4iRJ06VUJD99I=) 2: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: p8zNdOn26qSx4BGXz+vWlqG1YbrlG0OsNQVGyFkCQnw=) 3: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: 4e1qd57hMv+OkXmKRzkE4lf5ZpRQjvmNHhGL7MHMPZQ=) 4: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: MdXlPd40mbCtjh7iBEjKVSFA2qec8G7HYFT+dNSNEB4=) 5: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: OJi67+qUPfc5UtqMYAV/z7dfCJOkcVNQkK5jTXZKwTQ=) 6: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: ABGORh4lWt4WpXDSQFC2AfJLsKMZzwquOOsUkRU5KZw=) 7: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: QKq/ZGAbqKpUm7CoKZ+QT0ihf4BxzPyawZc6Ixihqm0=) 8: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: ZkDRUzZF2wR3zLgrv+xtI4hjJvx2gIYYCb4LSNtWkmg=) 9: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl (hash: IcnS95HTUsxd8LzngSFL3JLKifh42G6JQEEzEECMYmI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:25:b6:79:7b:52:f6:34:61:1f:a2:d3:49:c1:46:01:a3:6b:08:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Validity Not Before: Sep 17 03:27:50 2026 GMT Not After : Sep 18 04:06:50 2026 GMT Subject: CN=D2F26DF6A117BAC599A20BD5AEFB2236D47F01BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:e8:9f:87:15:de:95:be:7e:a8:20:84:68: 31:c1:8b:8e:ce:98:2c:aa:d0:d3:07:52:dd:ee:e0: d6:75:f0:66:49:f3:ad:67:69:4f:6f:b0:d5:d2:7f: 4c:a9:74:ca:b1:04:5d:9c:18:ba:a6:d8:53:cd:a0: ac:1b:95:78:34:c8:9f:4b:1e:60:a2:50:cd:c3:a6: 97:e7:9c:19:e8:b9:c7:58:d5:ac:a3:58:a3:80:b6: d0:71:5c:a2:f2:05:1a:6d:5f:b6:6f:e9:54:7c:0d: e5:24:89:f3:c1:92:25:5e:c9:a5:8c:e1:27:c8:06: 2a:5b:39:05:78:41:20:df:d3:d8:19:fb:1c:3c:0d: 08:64:dd:73:57:a1:5d:f0:4e:c8:7f:eb:5a:2d:64: 49:96:6f:f3:ab:f7:4c:9b:c2:31:77:0a:63:c5:ee: df:57:a6:09:5f:74:ef:28:7e:83:52:c9:cb:bb:72: ee:27:a6:cb:ba:ba:6e:ed:9b:15:de:90:a5:27:72: fc:c1:05:5d:20:3f:9e:4e:61:f1:07:ec:0a:b9:b7: e6:55:5a:b7:9b:ac:74:5e:75:96:12:8b:26:09:66: f1:8d:64:a8:41:2a:4e:dd:31:ac:d4:4f:2a:9b:34: 57:1f:79:94:80:0d:2f:97:44:f4:d8:f6:4f:45:1a: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F2:6D:F6:A1:17:BA:C5:99:A2:0B:D5:AE:FB:22:36:D4:7F:01:BF X509v3 Authority Key Identifier: keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:02:91:70:e0:cd:99:fe:0f:78:f2:3e:22:77:92:b5:0d:dc: 30:9e:57:03:63:9c:1e:75:9d:ee:18:cc:97:22:f9:1f:72:78: 17:99:2b:46:6e:00:13:5b:1b:e7:b9:c6:e8:9d:e8:1b:ac:4d: 10:37:61:e1:c7:e5:d6:87:10:9a:ac:95:ad:91:32:1e:ec:a9: b9:ec:b8:7d:c0:d1:41:62:48:87:a1:31:57:9e:34:17:5c:6b: b9:26:58:da:17:8a:09:c3:2e:38:a0:a3:68:14:6c:25:a6:de: 8c:c6:60:9f:05:86:5f:46:76:23:59:33:fc:d6:d3:0c:c6:da: 76:76:12:65:cf:3b:3c:2f:fc:47:54:d1:1f:1a:be:a7:ec:8c: 05:d8:ff:d2:d3:49:28:90:7f:b3:3d:90:98:3e:2c:29:1b:93: b8:e2:2e:ba:73:f3:2e:d4:80:d8:b4:c1:fc:9e:98:b6:53:1c: 18:dd:5b:4e:fa:d0:d8:f5:31:0d:6f:83:83:5b:44:ea:ee:b3: fb:49:b4:b4:e9:f4:22:d1:40:ad:d7:fb:b7:7c:47:2b:05:50: 07:e1:0c:f1:2f:d9:89:21:1e:93:01:f3:b9:ea:12:e3:71:9f: 95:0e:00:d8:cd:85:6a:01:db:63:54:6e:53:98:29:65:27:4c: fb:fb:f6:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUSW2eXtS9jRhH6LTScFGAaNrCEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhBMEQz QkFEMUY5NDAeFw0yNjA5MTcwMzI3NTBaFw0yNjA5MTgwNDA2NTBaMDMxMTAvBgNV BAMTKEQyRjI2REY2QTExN0JBQzU5OUEyMEJENUFFRkIyMjM2RDQ3RjAxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+eifhxXelb5+qCCEaDHBi47O mCyq0NMHUt3u4NZ18GZJ861naU9vsNXSf0ypdMqxBF2cGLqm2FPNoKwblXg0yJ9L HmCiUM3DppfnnBnoucdY1ayjWKOAttBxXKLyBRptX7Zv6VR8DeUkifPBkiVeyaWM 4SfIBipbOQV4QSDf09gZ+xw8DQhk3XNXoV3wTsh/61otZEmWb/Or90ybwjF3CmPF 7t9XpglfdO8ofoNSycu7cu4npsu6um7tmxXekKUncvzBBV0gP55OYfEH7Aq5t+ZV WrebrHRedZYSiyYJZvGNZKhBKk7dMazUTyqbNFcfeZSADS+XRPTY9k9FGiLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0vJt9qEXusWZogvVrvsiNtR/Ab8wHwYDVR0j BBgwFoAUgRBXDOVdhRL8vfAoGfuKDTutH5QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE0OTYwODItYTBhYS00ODM2LWI1ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENF NTVEODUxMkZDQkRGMDI4MTlGQjhBMEQzQkFEMUY5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTEwNTcwQ0U1NUQ4NTEyRkNCREYwMjgxOUZCOEEwRDNCQUQx Rjk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhB MEQzQkFEMUY5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwCkXDgzZn+D3jyPiJ3krUN3DCeVwNjnB51 ne4YzJci+R9yeBeZK0ZuABNbG+e5xuid6BusTRA3YeHH5daHEJqsla2RMh7sqbns uH3A0UFiSIehMVeeNBdca7kmWNoXignDLjigo2gUbCWm3ozGYJ8Fhl9GdiNZM/zW 0wzG2nZ2EmXPOzwv/EdU0R8avqfsjAXY/9LTSSiQf7M9kJg+LCkbk7jiLrpz8y7U gNi0wfyemLZTHBjdW0760Nj1MQ1vg4NbROrus/tJtLTp9CLRQK3X+7d8RysFUAfh DPEv2YkhHpMB87nqEuNxn5UOANjNhWoB22NUblOYKWUnTPv79h8= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:58 2026 by rpki-client