$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft File: 8FFAA6656CAEB189705F03C7B4148624E4A80597.mft (raw, json) Hash identifier: Bvoq7uYEDhbAHFxvimJn7JEjPqdzIAXG01J+0BAjPVU= Subject key identifier: 2B:AE:70:4D:99:BD:4B:B2:C8:78:4F:3D:AD:64:4C:48:96:12:62:2A Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Certificate serial: 2E2038D1B83606B556F05826C06EE70ABCC58D91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:52:04 +0000 Manifest this update: Thu 17 Sep 2026 06:47:04 +0000 Manifest next update: Fri 18 Sep 2026 08:32:04 +0000 Files and hashes: 1: 8FFAA6656CAEB189705F03C7B4148624E4A80597.crl (hash: SzMdjkuh6GfouWK5Teutk83ohEXuqk+cqVWDkqzfL5o=) 2: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: QgX53d3ZPmwqUeHqTZtdjccW/DQcVacKXuBLz3xuE+Q=) 3: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: 9g/ng/5n6hJoQNhHnUHUl6+xhhnGERFtgslQ205VyPU=) 4: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 5tE3feCM9vyNUB/qpwvXZKU/4/GsAVh0LYhHMntcLoo=) 5: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: j7IknYgKj7dl1bu8AJ/aQ/eLpW5VQAB5YDLHEEVUQxU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:20:38:d1:b8:36:06:b5:56:f0:58:26:c0:6e:e7:0a:bc:c5:8d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Validity Not Before: Sep 17 06:47:04 2026 GMT Not After : Sep 18 08:32:04 2026 GMT Subject: CN=2BAE704D99BD4BB2C8784F3DAD644C489612622A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:52:24:e9:17:48:6f:03:9a:d3:a3:3c:68: 08:27:76:5f:be:d1:91:c4:1e:7d:12:28:3e:91:b9: 44:22:38:b1:13:0b:f9:67:e9:00:ca:4d:69:43:26: 99:58:19:bc:04:b1:25:25:d9:f7:12:8d:9c:49:bd: f8:43:53:22:cf:df:d7:16:a0:3c:49:d3:ef:d4:e7: fc:db:00:ee:a7:c0:0f:d9:89:4f:ee:44:d6:6e:b3: 96:75:59:9f:06:6e:db:33:07:8b:10:09:ef:7f:bd: 80:e9:39:cd:ea:4d:be:5f:4e:a7:e6:20:5b:23:f5: 2a:f6:b0:60:7a:94:d6:dc:91:d1:ae:e8:08:56:b7: 27:0f:cb:ee:68:4b:25:ce:79:6f:0b:a1:30:16:8e: 1b:ed:4d:21:e7:59:4a:4d:4a:ce:65:3b:1c:76:00: 06:db:19:4b:36:ee:83:dc:7d:49:f2:e2:4b:c0:3d: 7f:ba:4d:80:a1:3b:06:36:9f:a7:79:c9:44:8c:75: b8:39:a7:22:64:bd:65:25:3f:ef:7e:b1:2d:7f:a3: 1b:dd:0c:46:fa:87:ee:96:22:24:96:25:f0:f8:71: 6c:81:f9:03:17:58:b8:4b:a7:8b:24:ed:ef:78:cd: 36:9b:dd:43:b4:b3:80:f1:9d:db:ea:96:2f:2e:46: 7c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AE:70:4D:99:BD:4B:B2:C8:78:4F:3D:AD:64:4C:48:96:12:62:2A X509v3 Authority Key Identifier: keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:be:cf:6f:8c:78:ad:33:49:bf:82:a3:87:8a:e8:b4:c8:9b: 03:75:5b:67:56:e9:07:84:37:2b:23:89:b9:d9:fe:06:93:e3: f0:8d:31:26:03:bc:b5:e9:97:63:da:bd:5c:a9:ea:28:b4:a8: fe:58:14:3d:15:ac:e4:17:79:fc:6c:a5:4d:bd:ad:2e:d8:43: 84:ac:0a:81:36:e5:7b:a9:6d:c7:8d:b0:1a:da:23:0f:19:df: 27:0f:37:b0:ea:a1:5e:f3:be:f1:fd:44:f5:4e:a5:e6:5b:00: 2d:f8:a7:95:f9:bd:de:c0:3c:43:f5:b4:e8:11:27:a7:4d:c1: 60:29:6f:6f:bd:7d:35:c1:fa:41:71:2c:ab:b3:b2:6a:87:bf: 0f:e0:04:81:90:b0:6e:e5:f6:50:15:2d:a1:96:97:8e:dd:af: a3:61:e2:16:15:fd:64:54:ef:3b:8f:c0:7d:d0:23:5e:f4:e3: 22:63:66:c9:5d:e9:87:16:40:64:9e:77:e3:6f:a4:e5:69:0a: 28:94:9e:e5:eb:fb:ca:49:95:42:5b:93:f4:d5:bf:fb:c7:eb: 4a:00:42:65:90:82:3b:da:e1:48:5b:54:de:31:a3:db:ff:c5: 6f:a9:ad:c0:d2:42:3b:60:1e:00:0e:6c:c9:45:e3:15:85:08: bd:92:66:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULiA40bg2BrVW8FgmwG7nCrzFjZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRF NEE4MDU5NzAeFw0yNjA5MTcwNjQ3MDRaFw0yNjA5MTgwODMyMDRaMDMxMTAvBgNV BAMTKDJCQUU3MDREOTlCRDRCQjJDODc4NEYzREFENjQ0QzQ4OTYxMjYyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQlIk6RdIbwOa06M8aAgndl++ 0ZHEHn0SKD6RuUQiOLETC/ln6QDKTWlDJplYGbwEsSUl2fcSjZxJvfhDUyLP39cW oDxJ0+/U5/zbAO6nwA/ZiU/uRNZus5Z1WZ8GbtszB4sQCe9/vYDpOc3qTb5fTqfm IFsj9Sr2sGB6lNbckdGu6AhWtycPy+5oSyXOeW8LoTAWjhvtTSHnWUpNSs5lOxx2 AAbbGUs27oPcfUny4kvAPX+6TYChOwY2n6d5yUSMdbg5pyJkvWUlP+9+sS1/oxvd DEb6h+6WIiSWJfD4cWyB+QMXWLhLp4sk7e94zTab3UO0s4Dxndvqli8uRnxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK65wTZm9S7LIeE89rWRMSJYSYiowHwYDVR0j BBgwFoAUj/qmZWyusYlwXwPHtBSGJOSoBZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI4ODBkZWUtN2FhMi00YmU0LWJmMzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2 Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRFNEE4MDU5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBQTY2NTZDQUVCMTg5NzA1RjAzQzdCNDE0ODYyNEU0QTgw NTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2 MjRFNEE4MDU5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy+z2+MeK0zSb+Co4eK6LTImwN1W2dW6QeE NysjibnZ/gaT4/CNMSYDvLXpl2PavVyp6ii0qP5YFD0VrOQXefxspU29rS7YQ4Ss CoE25XupbceNsBraIw8Z3ycPN7DqoV7zvvH9RPVOpeZbAC34p5X5vd7APEP1tOgR J6dNwWApb2+9fTXB+kFxLKuzsmqHvw/gBIGQsG7l9lAVLaGWl47dr6Nh4hYV/WRU 7zuPwH3QI1704yJjZsld6YcWQGSed+NvpOVpCiiUnuXr+8pJlUJbk/TVv/vH60oA QmWQgjva4UhbVN4xo9v/xW+prcDSQjtgHgAObMlF4xWFCL2SZpc= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:42 2026 by rpki-client