$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft File: B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft (raw, json) Hash identifier: aKqT0N/psm4L+x/ZOFdm5i+lsjevSKTsYk9TDii1N30= Subject key identifier: 2D:F0:EE:99:BD:25:29:7E:96:65:64:A6:D3:F1:8B:F9:39:28:1D:5D Authority key identifier: B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA Certificate issuer: /CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Certificate serial: 79C7E300E4DB87DF2B01C621E018045E9565D323 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 15:18:01 +0000 Manifest this update: Wed 16 Sep 2026 15:13:01 +0000 Manifest next update: Thu 17 Sep 2026 19:01:01 +0000 Files and hashes: 1: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ZyMegzYLPmuWd/ikDAjq3H75TE6NMvhpUlSw0zwrA5M=) 2: B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl (hash: 0winzOMA34JEtF9zoqvPJpiKj5QZj2VF8U+3HfaaRkc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c7:e3:00:e4:db:87:df:2b:01:c6:21:e0:18:04:5e:95:65:d3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Validity Not Before: Sep 16 15:13:01 2026 GMT Not After : Sep 17 19:01:01 2026 GMT Subject: CN=2DF0EE99BD25297E966564A6D3F18BF939281D5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:33:f4:9b:a4:5a:3f:96:79:84:12:c5:10:c8: f7:bd:e5:03:fd:b7:8d:49:4b:03:fd:29:26:37:3e: 13:44:38:f4:9d:ac:11:71:37:5f:35:ce:ba:ca:0b: 13:98:5f:aa:a4:2f:05:c6:63:0a:31:48:81:ce:c0: 2c:f9:93:43:1b:34:44:a1:8f:da:1b:54:82:85:90: 38:46:f0:8f:65:ff:50:f7:be:07:d2:48:3f:9f:47: 7d:db:d2:3e:c6:3d:f1:bd:b4:ed:da:fc:4a:51:b6: dd:dd:45:58:8a:08:db:7c:8e:76:97:bb:dd:a2:82: 55:4c:a7:cb:9b:f8:7f:89:06:2a:ce:73:48:a9:6d: 6d:f6:5a:a7:bd:08:b5:87:04:c9:04:bd:ed:59:ae: 90:41:c4:70:73:a7:fe:ed:41:e1:d2:69:0f:b5:8f: cb:71:2a:9b:be:e1:6d:ef:b6:ac:fb:d9:7b:85:b0: 5d:8d:de:b5:fb:24:d7:96:03:9e:25:35:a9:0b:3b: fe:da:34:22:18:1b:5a:9b:a7:6b:9b:00:7f:cc:a7: c5:ff:35:c2:e7:89:a7:58:3b:a8:c4:91:75:c6:55: 44:f7:58:3e:59:cc:6a:52:c3:36:52:9a:85:06:90: 93:5f:bd:81:b8:b0:e4:41:68:4e:a3:52:60:4c:30: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F0:EE:99:BD:25:29:7E:96:65:64:A6:D3:F1:8B:F9:39:28:1D:5D X509v3 Authority Key Identifier: keyid:B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:87:d7:2f:85:47:71:a9:22:1b:6a:6e:27:5f:95:2f:90:d6: 3e:27:3a:21:56:cc:2d:ca:c0:e2:bd:55:20:23:d6:7c:e6:02: c4:a8:2a:7c:b6:81:a8:fa:6c:05:9b:5b:60:44:25:c6:9a:6d: 8d:9c:38:67:b8:e5:9a:08:57:cb:d7:50:1a:ae:fa:5b:72:e4: 0a:29:f0:4e:91:6f:09:01:9d:24:0e:62:2c:59:a2:fe:5d:19: f1:75:fa:a6:fe:be:13:6e:33:25:d8:2d:ba:41:29:72:82:38: 69:bd:36:52:d3:d4:3a:64:e7:9f:08:06:8d:0b:33:1c:e5:7d: 38:35:42:f1:7c:aa:11:54:dc:49:73:1c:24:c4:3c:ae:1b:57: 91:69:9b:98:77:3c:03:b5:df:5a:51:c7:af:63:fc:00:8b:5d: 53:a5:6d:3c:14:e1:75:2d:6a:4a:f2:b3:22:12:46:86:f5:b3: 20:d7:37:20:5c:a7:5a:43:e7:9d:69:19:4c:08:b6:24:77:5f: 47:67:3d:64:53:2d:83:90:72:ad:e3:46:83:d5:ba:09:90:72: 74:ec:8f:7e:24:23:44:28:8e:2f:bd:05:5b:b5:08:e4:cc:14: 67:1f:84:0e:99:15:6c:ab:e0:9b:af:23:87:84:a4:2c:a5:64: 62:87:80:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecfjAOTbh98rAcYh4BgEXpVl0yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIw MDQ5NUJGQTAeFw0yNjA5MTYxNTEzMDFaFw0yNjA5MTcxOTAxMDFaMDMxMTAvBgNV BAMTKDJERjBFRTk5QkQyNTI5N0U5NjY1NjRBNkQzRjE4QkY5MzkyODFENUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYM/SbpFo/lnmEEsUQyPe95QP9 t41JSwP9KSY3PhNEOPSdrBFxN181zrrKCxOYX6qkLwXGYwoxSIHOwCz5k0MbNESh j9obVIKFkDhG8I9l/1D3vgfSSD+fR33b0j7GPfG9tO3a/EpRtt3dRViKCNt8jnaX u92iglVMp8ub+H+JBirOc0ipbW32Wqe9CLWHBMkEve1ZrpBBxHBzp/7tQeHSaQ+1 j8txKpu+4W3vtqz72XuFsF2N3rX7JNeWA54lNakLO/7aNCIYG1qbp2ubAH/Mp8X/ NcLniadYO6jEkXXGVUT3WD5ZzGpSwzZSmoUGkJNfvYG4sORBaE6jUmBMMCAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULfDumb0lKX6WZWSm0/GL+TkoHV0wHwYDVR0j BBgwFoAUs4mo0u4YHXU+l6jPXXQoSwBJW/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc5NGZmZDItNDU3Mi00NTUzLTlhMzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJF RTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIwMDQ5NUJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzg5QThEMkVFMTgxRDc1M0U5N0E4Q0Y1RDc0Mjg0QjAwNDk1 QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4 NEIwMDQ5NUJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOH1y+FR3GpIhtqbidflS+Q1j4nOiFWzC3K wOK9VSAj1nzmAsSoKny2gaj6bAWbW2BEJcaabY2cOGe45ZoIV8vXUBqu+lty5Aop 8E6RbwkBnSQOYixZov5dGfF1+qb+vhNuMyXYLbpBKXKCOGm9NlLT1Dpk558IBo0L MxzlfTg1QvF8qhFU3ElzHCTEPK4bV5Fpm5h3PAO131pRx69j/ACLXVOlbTwU4XUt akrysyISRob1syDXNyBcp1pD551pGUwItiR3X0dnPWRTLYOQcq3jRoPVugmQcnTs j34kI0Qoji+9BVu1COTMFGcfhA6ZFWyr4JuvI4eEpCylZGKHgNI= -----END CERTIFICATE-----Generated at Thu Sep 17 10:54:13 2026 by rpki-client