$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft File: 008FD9C34C50033457705A2A8FA8AD31C58901DF.mft (raw, json) Hash identifier: lS9oaWwIEpBLrPvn02gV63HbhDbvlQ+Dyi+tY0AT8II= Subject key identifier: A8:BD:13:19:F5:18:B3:3C:22:3E:A9:59:90:E8:53:89:69:14:0A:37 Authority key identifier: 00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF Certificate issuer: /CN=008FD9C34C50033457705A2A8FA8AD31C58901DF Certificate serial: 3DB5E19E56D137AD2BE11AD76B6D8E4C96B7ADAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:40:26 +0000 Manifest this update: Thu 17 Sep 2026 05:35:26 +0000 Manifest next update: Fri 18 Sep 2026 09:34:26 +0000 Files and hashes: 1: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: 7PYR6KQD363PCA9CqbyRe3Hlyct7YlcslSh5J5MCne8=) 2: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: Uo09a87NfO0QaaV8cWvKqLh7Yr8GIHaL3+B8rEdhvDg=) 3: 008FD9C34C50033457705A2A8FA8AD31C58901DF.crl (hash: quHiGdWhoTI5wlMbuy4d9pegnrzPox6I+r0AYDguLxA=) 4: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: Xc9Z6aCULt4h5E7uCljF8rbSvL2mpzVI9I3SrwLMdKA=) 5: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: KRcAvz4S9RiZMOJ4ntySfmti6yb9mI07p7EYZgs2VTA=) 6: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: +gg97NXHVYnGyTZICqnb0be/ZegxXSjwLJ69frhtl8g=) 7: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: NbNZZ1h00KtVz1iU/OgERwDxHBaHy3Lol9PQ30yLH20=) 8: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: Ym+oQJAC/FZcNlOtyNB+PyxQjFt4qpTGx2NjQCjEW8k=) 9: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: WS26qbff4FZd1gBCBy7MpBk2HRkLgCPS9ErpAbqZ1Kk=) 10: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: ikR/F9w4LitTShzkD+KXZlE08zWYB4wLcQeSOu40MHY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b5:e1:9e:56:d1:37:ad:2b:e1:1a:d7:6b:6d:8e:4c:96:b7:ad:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=008FD9C34C50033457705A2A8FA8AD31C58901DF Validity Not Before: Sep 17 05:35:26 2026 GMT Not After : Sep 18 09:34:26 2026 GMT Subject: CN=A8BD1319F518B33C223EA95990E8538969140A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:f9:0d:3a:4a:14:90:38:cc:f7:b8:d3:73: 53:8b:23:c6:44:c5:b9:ad:a1:8e:da:fe:d7:65:ea: 9d:82:26:0e:82:d7:03:72:f0:d5:bb:7b:f9:9b:3e: 6f:74:4c:06:83:38:42:c2:10:d2:e1:63:e3:5d:e6: 50:0d:de:fb:aa:c6:20:12:aa:06:50:76:52:6c:73: 53:1d:49:9d:68:bf:fe:74:29:07:a7:2e:cb:4a:3d: df:51:52:57:44:f8:8e:c6:3c:41:df:f3:ce:69:6e: 00:02:b5:c8:f3:d4:8d:65:57:69:f8:27:af:72:26: fe:f7:f8:9e:74:57:c7:e3:c1:b9:c6:72:5d:1d:3d: 7e:86:ed:3f:d2:3f:4b:cd:25:86:b3:ce:ef:dc:75: 69:e8:88:f5:ed:9c:db:b9:08:2b:ca:3d:ca:7b:3c: c0:0f:37:1c:8e:8e:7b:3a:23:8b:f7:63:a4:b1:a7: d0:21:7b:e8:0d:2b:bf:66:db:19:ba:0a:8f:ef:27: 99:f5:e2:7b:02:8d:70:84:e7:03:d3:32:ad:4f:76: 86:4f:5d:60:90:c9:df:1a:01:ea:bd:c5:15:e1:fa: 26:85:50:d6:d9:01:f8:5c:cd:f1:7c:80:9a:5b:88: fc:b6:bd:32:fe:fe:ec:70:75:08:5d:40:ce:e3:f4: e7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BD:13:19:F5:18:B3:3C:22:3E:A9:59:90:E8:53:89:69:14:0A:37 X509v3 Authority Key Identifier: keyid:00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:fa:5d:ea:94:88:3e:6f:9e:40:5b:bb:f5:25:29:8b:08:43: c0:43:31:79:53:a9:74:9d:e0:9f:7e:aa:63:bb:29:c3:87:88: fc:46:dd:fd:d7:3e:68:f5:62:2a:33:99:68:2e:63:a2:db:3f: 8f:a5:40:89:84:90:9f:a3:b6:c6:70:9c:63:82:52:0d:99:c5: 41:81:f3:43:23:72:0f:61:05:c3:1a:99:82:95:e6:85:39:be: 08:25:35:fe:0b:09:1b:5d:fa:cc:31:83:37:b2:d2:4f:e2:e7: 40:55:71:c5:1e:84:19:84:b7:a1:ee:7b:c5:86:05:c6:25:58: 1f:b6:53:4b:52:28:35:97:e9:82:c5:51:c6:7f:ea:16:d0:3e: 16:7a:f1:3a:f1:f9:e7:cf:86:19:11:ee:fc:77:c4:7e:fa:ba: 43:26:84:21:17:49:56:da:41:2a:3e:24:bc:9e:56:4d:7f:ca: 84:ca:0c:84:68:4f:6b:cf:e4:2e:cb:12:ff:67:84:b3:c2:50: 68:b9:15:d8:ef:91:81:ad:9a:dc:89:80:e9:f5:35:7a:38:af: 3e:e3:4a:a4:89:7c:f0:65:ff:c3:e8:09:b5:51:52:f7:21:4e: 34:68:a8:b3:ec:70:6f:75:34:ec:7b:5f:02:c4:f4:fd:a6:91: 3f:43:20:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbXhnlbRN60r4RrXa22OTJa3raswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4RkQ5QzM0QzUwMDMzNDU3NzA1QTJBOEZBOEFEMzFD NTg5MDFERjAeFw0yNjA5MTcwNTM1MjZaFw0yNjA5MTgwOTM0MjZaMDMxMTAvBgNV BAMTKEE4QkQxMzE5RjUxOEIzM0MyMjNFQTk1OTkwRTg1Mzg5NjkxNDBBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYfkNOkoUkDjM97jTc1OLI8ZE xbmtoY7a/tdl6p2CJg6C1wNy8NW7e/mbPm90TAaDOELCENLhY+Nd5lAN3vuqxiAS qgZQdlJsc1MdSZ1ov/50KQenLstKPd9RUldE+I7GPEHf885pbgACtcjz1I1lV2n4 J69yJv73+J50V8fjwbnGcl0dPX6G7T/SP0vNJYazzu/cdWnoiPXtnNu5CCvKPcp7 PMAPNxyOjns6I4v3Y6Sxp9Ahe+gNK79m2xm6Co/vJ5n14nsCjXCE5wPTMq1PdoZP XWCQyd8aAeq9xRXh+iaFUNbZAfhczfF8gJpbiPy2vTL+/uxwdQhdQM7j9OdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqL0TGfUYszwiPqlZkOhTiWkUCjcwHwYDVR0j BBgwFoAUAI/Zw0xQAzRXcFoqj6itMcWJAd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2NjllYTQtZTgyZi00NmMzLThkZDMtMmU5ODgxNTliMjAyLzAvMDA4RkQ5QzM0 QzUwMDMzNDU3NzA1QTJBOEZBOEFEMzFDNTg5MDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDhGRDlDMzRDNTAwMzM0NTc3MDVBMkE4RkE4QUQzMUM1ODkw MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2NjllYTQtZTgyZi00NmMzLThk ZDMtMmU5ODgxNTliMjAyLzAvMDA4RkQ5QzM0QzUwMDMzNDU3NzA1QTJBOEZBOEFE MzFDNTg5MDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGL6XeqUiD5vnkBbu/UlKYsIQ8BDMXlTqXSd 4J9+qmO7KcOHiPxG3f3XPmj1YiozmWguY6LbP4+lQImEkJ+jtsZwnGOCUg2ZxUGB 80Mjcg9hBcMamYKV5oU5vgglNf4LCRtd+swxgzey0k/i50BVccUehBmEt6Hue8WG BcYlWB+2U0tSKDWX6YLFUcZ/6hbQPhZ68Trx+efPhhkR7vx3xH76ukMmhCEXSVba QSo+JLyeVk1/yoTKDIRoT2vP5C7LEv9nhLPCUGi5FdjvkYGtmtyJgOn1NXo4rz7j SqSJfPBl/8PoCbVRUvchTjRoqLPscG91NOx7XwLE9P2mkT9DIBM= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:13 2026 by rpki-client