$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft File: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft (raw, json) Hash identifier: 88hLw+IJcXQ1eS4K+3gCkGVEXYQ/QXJPeNAIwS/Jm7c= Subject key identifier: 7E:68:62:28:D7:78:BD:93:A4:44:36:9C:AF:92:5C:01:3C:DB:20:FC Authority key identifier: 8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D Certificate issuer: /CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Certificate serial: 1FB08FC0AAB67BBFE7A723950748035666BEB40F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:24:03 +0000 Manifest this update: Thu 17 Sep 2026 00:19:03 +0000 Manifest next update: Fri 18 Sep 2026 02:18:03 +0000 Files and hashes: 1: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl (hash: Lb0Js51G4qAEKCCIVyJEIHjfDIH7GfoQj89/0IXDcSQ=) 2: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: 7H5ayDey2sF8s3x7vuViq2lu5YPxfK0ha8SKey7N61Q=) 3: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: NY8uhqteE/p2Oynj2juQDQqNJOeFUT9zptMVOdrA1BE=) 4: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: LvhMo9Ji9pG6mVQPdJp//+4N2gdaqqVMar2Fp2RKr1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b0:8f:c0:aa:b6:7b:bf:e7:a7:23:95:07:48:03:56:66:be:b4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Validity Not Before: Sep 17 00:19:03 2026 GMT Not After : Sep 18 02:18:03 2026 GMT Subject: CN=7E686228D778BD93A444369CAF925C013CDB20FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e4:78:c3:ce:a2:c2:1c:5f:ea:01:9c:3b:86: cb:40:d1:02:61:d5:24:6e:ef:f6:71:55:c9:5d:81: 6b:88:44:44:3c:9c:28:3f:61:96:d5:2f:b5:22:71: 13:84:df:8c:ec:42:85:5b:a3:a5:af:79:b4:5b:92: 18:9b:54:ff:b9:c5:e2:ef:d1:92:f8:ed:e2:d1:1f: 55:80:7b:8b:d9:a8:2a:70:8f:46:ec:45:02:93:d7: 7a:b7:8c:8b:bf:76:72:99:42:bb:04:58:ba:4e:f2: aa:5d:9c:b8:c0:e5:71:01:ef:d7:5e:a9:aa:95:36: 21:4e:60:76:ab:52:fa:66:04:9c:7f:2d:56:84:63: e4:a6:b3:a6:70:db:bf:ce:79:34:aa:41:59:ba:17: 99:7f:71:9b:8b:01:2b:d2:44:42:be:8c:9d:b2:41: 07:5a:c7:56:49:a6:79:4b:7d:60:13:6c:e9:85:80: e6:bb:2f:f4:8f:7f:4b:a5:a0:e9:cf:c4:0f:b4:26: 17:6e:24:d0:ca:1c:f5:0d:0a:6d:ab:cd:50:54:8e: 30:e0:6b:d5:3d:22:8a:a3:6a:a8:51:17:e2:8d:70: e6:43:17:b5:60:d1:1c:cf:64:45:02:ad:19:7b:6e: c8:09:8a:8d:7f:35:2e:91:64:1d:8e:b2:12:f6:7b: 58:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:68:62:28:D7:78:BD:93:A4:44:36:9C:AF:92:5C:01:3C:DB:20:FC X509v3 Authority Key Identifier: keyid:8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7a:cb:ee:db:93:36:be:aa:7b:74:00:99:a2:80:bd:e2:94: fa:db:78:3e:0e:08:50:88:2a:d8:f8:38:c4:4b:28:83:22:b3: e7:b8:7c:ad:80:87:eb:54:b9:34:f8:e1:84:e6:01:d6:50:40: 7a:a5:da:49:ea:e5:94:ef:ef:08:27:66:2d:8b:5e:b7:d7:1b: 35:2c:d7:e3:f5:8a:bb:f8:01:5b:ce:da:c7:91:21:15:a7:c7: 1a:32:87:9a:51:95:4d:e4:fa:99:6b:2c:31:7d:ba:fe:01:5e: 0b:a6:67:87:6a:9c:94:eb:a9:f2:83:4f:6a:94:20:2f:c7:97: 3e:2f:5c:49:c4:78:a2:b2:d2:e0:4e:2f:1f:4e:55:cf:17:53: 15:57:ab:49:74:df:be:93:f7:45:19:88:7e:9d:32:31:04:73: 93:3d:49:06:25:9d:09:a1:6b:26:a1:44:4e:8d:2a:2d:62:79: 96:a8:a3:59:1b:c2:6a:fc:a8:ac:1b:f9:55:8a:7f:e3:6c:3e: 13:43:4b:26:5d:57:94:2c:42:7f:24:cc:55:4b:d7:0b:7a:65: 72:ac:06:ac:18:87:7b:15:10:bd:fb:2e:ce:4f:13:4a:e1:7b: 7b:5d:3c:7e:f5:a9:b5:53:25:fb:51:e1:04:41:1d:38:72:a3: 36:ea:89:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7CPwKq2e7/npyOVB0gDVma+tA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3 NkY1QkIyRDAeFw0yNjA5MTcwMDE5MDNaFw0yNjA5MTgwMjE4MDNaMDMxMTAvBgNV BAMTKDdFNjg2MjI4RDc3OEJEOTNBNDQ0MzY5Q0FGOTI1QzAxM0NEQjIwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL5HjDzqLCHF/qAZw7hstA0QJh 1SRu7/ZxVcldgWuIREQ8nCg/YZbVL7UicROE34zsQoVbo6WvebRbkhibVP+5xeLv 0ZL47eLRH1WAe4vZqCpwj0bsRQKT13q3jIu/dnKZQrsEWLpO8qpdnLjA5XEB79de qaqVNiFOYHarUvpmBJx/LVaEY+Sms6Zw27/OeTSqQVm6F5l/cZuLASvSREK+jJ2y QQdax1ZJpnlLfWATbOmFgOa7L/SPf0uloOnPxA+0JhduJNDKHPUNCm2rzVBUjjDg a9U9IoqjaqhRF+KNcOZDF7Vg0RzPZEUCrRl7bsgJio1/NS6RZB2OshL2e1glAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfmhiKNd4vZOkRDacr5JcATzbIPwwHwYDVR0j BBgwFoAUi+JoRlzjv16w3zYT/r3Twnb1uy0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmZDlhNTgtYTkwNi00MDI5LTkyZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1 Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3NkY1QkIyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkUyNjg0NjVDRTNCRjVFQjBERjM2MTNGRUJERDNDMjc2RjVC QjJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQz QzI3NkY1QkIyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJ6y+7bkza+qnt0AJmigL3ilPrbeD4OCFCI Ktj4OMRLKIMis+e4fK2Ah+tUuTT44YTmAdZQQHql2knq5ZTv7wgnZi2LXrfXGzUs 1+P1irv4AVvO2seRIRWnxxoyh5pRlU3k+plrLDF9uv4BXgumZ4dqnJTrqfKDT2qU IC/Hlz4vXEnEeKKy0uBOLx9OVc8XUxVXq0l0376T90UZiH6dMjEEc5M9SQYlnQmh ayahRE6NKi1ieZaoo1kbwmr8qKwb+VWKf+NsPhNDSyZdV5QsQn8kzFVL1wt6ZXKs BqwYh3sVEL37Ls5PE0rhe3tdPH71qbVTJftR4QRBHThyozbqiUI= -----END CERTIFICATE-----Generated at Thu Sep 17 13:57:26 2026 by rpki-client