$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft File: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft (raw, json) Hash identifier: AjYe4X+jMqyQP4VBuDAcLvxq6aSAkXQXBArI/Lsmubk= Subject key identifier: A0:D8:43:57:B3:A9:6C:41:C0:FD:9D:0D:F1:9E:F7:F6:9F:4F:15:75 Authority key identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E Certificate issuer: /CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Certificate serial: 6386CF7E4CC09493BF2BAAB45F5441A9AABEF5BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 18:21:54 +0000 Manifest this update: Wed 16 Sep 2026 18:16:54 +0000 Manifest next update: Thu 17 Sep 2026 21:10:54 +0000 Files and hashes: 1: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl (hash: wqyuvaEstY3FAk8EZGKqxb3nrnAknfZdJ8OYZAj4Rh8=) 2: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: Y4fdfPd8CGZXfJi8zT1Xs61mqy3uc8h/5nYm+/f9TOQ=) 3: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: VvKS0B4ZLReXOTrvcAhygsCJwutg9GJIYxL7J1Tdiis=) 4: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: j+lgNwhd7sTPpzvBZDbz7MtwJzwdtzVrzUiO5CTg4C0=) 5: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: tUv0W4gMiS1vhejBIsoiDaLo6/xoWf91YpxI7rtj5ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:86:cf:7e:4c:c0:94:93:bf:2b:aa:b4:5f:54:41:a9:aa:be:f5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Validity Not Before: Sep 16 18:16:54 2026 GMT Not After : Sep 17 21:10:54 2026 GMT Subject: CN=A0D84357B3A96C41C0FD9D0DF19EF7F69F4F1575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:ab:72:ca:e1:86:51:c6:2e:a1:95:35:e4: 13:99:81:fd:e9:8e:92:06:a8:f3:29:a4:52:39:eb: 88:70:4e:4f:32:05:ba:09:f3:d8:75:fa:48:56:24: 4b:b0:37:c5:52:18:c3:22:e2:2c:76:38:60:04:89: 2b:0b:07:a7:6e:19:51:81:e8:b6:ca:e2:28:b2:f6: 0e:99:ff:23:8b:53:6c:ae:4d:ae:35:82:af:5a:8c: b8:ec:6c:31:95:0d:42:87:a1:60:c5:da:8f:7c:81: f2:c0:90:55:e7:12:db:21:fc:7f:a2:83:b1:3f:28: fd:ca:93:b1:c0:6d:f7:b4:3c:b4:2f:66:a2:a9:30: f4:3d:76:da:7e:c4:1b:04:f3:c4:85:ab:85:fc:6c: 47:bd:36:0f:6d:f9:51:bd:d9:8a:2c:a1:eb:4a:9f: f7:66:dd:cd:f5:e3:ff:22:42:ad:2f:9c:93:5a:48: 37:75:83:ab:9d:fc:bd:f8:52:fc:93:d6:69:75:2b: 10:ed:c6:ec:fa:ee:83:b6:75:b3:e9:77:14:31:2a: 0a:cf:49:00:84:ed:e8:21:23:ee:00:71:e3:1e:36: de:4b:20:b5:39:87:39:d7:b8:77:66:ae:41:21:a8: b8:d4:f2:b3:be:3a:65:5d:99:12:44:64:4f:72:e1: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D8:43:57:B3:A9:6C:41:C0:FD:9D:0D:F1:9E:F7:F6:9F:4F:15:75 X509v3 Authority Key Identifier: keyid:8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5d:86:19:b3:a3:65:19:ab:4a:f9:0c:46:65:40:1f:f1:c9: 29:34:f2:ba:11:aa:f7:20:8d:5a:28:39:7e:b0:67:35:55:fb: 02:df:91:83:e9:bc:77:36:fe:77:04:64:fd:df:d4:6e:36:77: bf:40:d9:cb:56:39:7b:0c:ab:f8:21:a3:3d:74:26:e5:90:f9: e4:65:3a:51:0f:bd:fa:dd:91:b8:41:a9:63:e8:65:c2:ba:db: 7c:ce:34:7c:7f:3e:40:82:4c:85:97:be:f6:fb:ea:35:0f:e3: 37:7b:c9:a4:3e:1f:c7:66:05:07:46:5f:54:13:fa:56:ea:b6: 5a:ba:47:e0:41:0c:c3:67:af:dd:0f:ae:34:f0:fb:48:00:b5: a1:4c:fe:1d:15:8a:eb:3b:fc:59:39:8b:56:22:8c:d5:0c:2d: 4e:9f:53:fd:5b:85:0a:7d:47:1d:b4:99:5f:06:41:ac:6b:70: 46:72:f4:22:ab:96:e5:db:44:54:2c:d2:77:ca:2b:42:f6:4d: 60:ac:d5:65:e5:9f:be:27:b8:4a:db:2d:5d:41:c4:8b:cd:fa: 2e:f4:28:7d:7d:be:11:de:12:8b:f0:f3:3c:47:d6:70:2c:fb: c7:f5:45:f2:0b:92:98:c4:df:53:2d:44:d1:1f:18:f7:05:70: 8c:f6:e2:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4bPfkzAlJO/K6q0X1RBqaq+9bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEy OUJBMUQ4RTAeFw0yNjA5MTYxODE2NTRaFw0yNjA5MTcyMTEwNTRaMDMxMTAvBgNV BAMTKEEwRDg0MzU3QjNBOTZDNDFDMEZEOUQwREYxOUVGN0Y2OUY0RjE1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSp6tyyuGGUcYuoZU15BOZgf3p jpIGqPMppFI564hwTk8yBboJ89h1+khWJEuwN8VSGMMi4ix2OGAEiSsLB6duGVGB 6LbK4iiy9g6Z/yOLU2yuTa41gq9ajLjsbDGVDUKHoWDF2o98gfLAkFXnEtsh/H+i g7E/KP3Kk7HAbfe0PLQvZqKpMPQ9dtp+xBsE88SFq4X8bEe9Ng9t+VG92YosoetK n/dm3c314/8iQq0vnJNaSDd1g6ud/L34UvyT1ml1KxDtxuz67oO2dbPpdxQxKgrP SQCE7eghI+4AceMeNt5LILU5hznXuHdmrkEhqLjU8rO+OmVdmRJEZE9y4RznAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoNhDV7OpbEHA/Z0N8Z739p9PFXUwHwYDVR0j BBgwFoAUjNb8AlX9HtF/2Cz6i2bSSim6HY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZlNjNjZDItZmIzYy00MWIyLWI5NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1 NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEyOUJBMUQ4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q2RkMwMjU1RkQxRUQxN0ZEODJDRkE4QjY2RDI0QTI5QkEx RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQy NEEyOUJBMUQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9dhhmzo2UZq0r5DEZlQB/xySk08roRqvcg jVooOX6wZzVV+wLfkYPpvHc2/ncEZP3f1G42d79A2ctWOXsMq/ghoz10JuWQ+eRl OlEPvfrdkbhBqWPoZcK623zONHx/PkCCTIWXvvb76jUP4zd7yaQ+H8dmBQdGX1QT +lbqtlq6R+BBDMNnr90PrjTw+0gAtaFM/h0Vius7/Fk5i1YijNUMLU6fU/1bhQp9 Rx20mV8GQaxrcEZy9CKrluXbRFQs0nfKK0L2TWCs1WXln74nuErbLV1BxIvN+i70 KH19vhHeEovw8zxH1nAs+8f1RfILkpjE31MtRNEfGPcFcIz24rM= -----END CERTIFICATE-----Generated at Thu Sep 17 09:15:20 2026 by rpki-client