$ rpki-client -vvvf rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft File: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft (raw, json) Hash identifier: lJRe6a5uNt0674Fs+pGEtGSfI/xBLHJeRxLTfJ1YgHA= Subject key identifier: F1:DF:A1:56:3D:2B:27:08:23:20:78:6D:39:D1:96:E1:EC:38:85:39 Authority key identifier: 8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D Certificate issuer: /CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Certificate serial: 6AF02C71309FA8D9E6FBD5AF5C046C8D69D9080E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft Manifest number: BB Signing time: Wed 16 Sep 2026 21:05:03 +0000 Manifest this update: Wed 16 Sep 2026 21:00:03 +0000 Manifest next update: Thu 17 Sep 2026 21:49:03 +0000 Files and hashes: 1: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: Iad4oKdG+cP+QGtzN+0DsTs9ponKGFoBE7JkBGARiyQ=) 2: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl (hash: Ir2S2yCiiNpcRQJuVTNAZqV2KfWxXQ4zGhtYonNU8Ks=) 3: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: xeD49NnJaETxYZ89zZqsZvQW0lQqtHHDYp/1/JjzAG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f0:2c:71:30:9f:a8:d9:e6:fb:d5:af:5c:04:6c:8d:69:d9:08:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Validity Not Before: Sep 16 21:00:03 2026 GMT Not After : Sep 17 21:49:03 2026 GMT Subject: CN=F1DFA1563D2B27082320786D39D196E1EC388539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:38:44:b6:16:93:3e:32:06:13:4b:4c:4b: bc:b7:cd:a6:fd:22:41:da:32:23:e6:b9:66:c2:9d: f6:fa:69:9b:82:ed:a2:50:8a:1a:12:62:ad:69:02: 41:79:2e:02:d1:58:29:1d:2e:6e:03:d9:dd:e1:d0: 7d:66:7c:13:50:d1:d3:77:91:21:ed:79:7f:3b:5e: a2:bd:10:e8:3b:36:d3:b0:9a:44:94:9a:8e:ce:f9: d9:3b:65:d7:20:88:40:44:6d:3d:db:37:e9:2c:5a: 48:d7:8d:c8:a8:82:53:4f:f1:19:18:ee:5e:e1:b7: 6f:5f:b0:50:aa:e5:c2:85:c0:d8:10:34:5b:1f:22: e3:e6:a9:8e:cd:31:b0:74:1e:ae:28:35:ed:3d:66: 6b:de:30:53:65:d9:de:5c:a5:0d:e2:2d:c6:0b:2f: 4a:2a:03:6f:2e:71:1e:8a:19:85:1b:e1:be:54:b5: 87:5f:83:64:46:3a:c1:4c:1c:a0:cf:83:83:46:95: 59:a7:ea:7c:66:bd:81:ed:ee:0b:80:11:91:f0:e2: d7:19:a5:85:a1:a6:d8:e4:24:42:4a:f1:db:34:aa: 24:8e:e6:37:a8:f8:ab:37:d2:40:32:81:d2:56:6e: 98:3d:e5:ee:47:35:33:07:59:71:c3:b0:29:0f:28: 5e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DF:A1:56:3D:2B:27:08:23:20:78:6D:39:D1:96:E1:EC:38:85:39 X509v3 Authority Key Identifier: keyid:8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:13:43:74:bf:18:01:39:9a:74:dd:05:b4:27:9e:de:19:ac: 96:c3:e0:75:a7:ed:aa:87:5d:2f:98:0a:44:cb:b1:29:b6:10: 7a:df:fe:a3:4d:bc:3e:ff:58:36:78:52:28:2a:34:d7:00:10: f5:df:2e:d9:77:68:92:fd:c7:89:23:a1:49:94:bf:d7:ac:94: ae:c0:c8:57:82:db:86:b5:7a:e1:ed:29:6b:57:1f:1c:14:c5: f5:84:60:fc:a5:b9:49:52:ff:dc:5d:e7:ed:87:56:de:a5:4a: 45:d4:bc:88:b8:6b:24:58:f8:d3:f8:49:b5:d9:7a:c3:f7:67: b9:06:82:eb:13:10:1f:5c:e4:57:3c:2f:dd:ab:45:d2:6f:03: 59:ae:e9:cd:83:eb:8b:1a:90:40:ed:bb:5f:a2:23:22:28:52: 8f:a2:89:04:82:73:fc:1c:30:89:01:4b:3b:62:41:74:a2:1f: 6b:85:69:22:33:4c:13:f2:4a:fc:b9:5a:76:a4:c6:f0:22:0e: d4:11:8e:d4:54:8d:25:91:3d:aa:b7:93:20:c8:8c:2b:db:62: 3b:0a:62:73:19:c8:08:f2:c2:36:1a:cb:d3:67:46:bf:63:25: 36:24:6a:1b:ae:47:79:1a:bd:e6:04:b5:70:31:1b:62:a8:0e: a5:2c:fd:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavAscTCfqNnm+9WvXARsjWnZCA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3MTcx RUEzRDk2RDAeFw0yNjA5MTYyMTAwMDNaFw0yNjA5MTcyMTQ5MDNaMDMxMTAvBgNV BAMTKEYxREZBMTU2M0QyQjI3MDgyMzIwNzg2RDM5RDE5NkUxRUMzODg1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiBDhEthaTPjIGE0tMS7y3zab9 IkHaMiPmuWbCnfb6aZuC7aJQihoSYq1pAkF5LgLRWCkdLm4D2d3h0H1mfBNQ0dN3 kSHteX87XqK9EOg7NtOwmkSUmo7O+dk7ZdcgiEBEbT3bN+ksWkjXjcioglNP8RkY 7l7ht29fsFCq5cKFwNgQNFsfIuPmqY7NMbB0Hq4oNe09ZmveMFNl2d5cpQ3iLcYL L0oqA28ucR6KGYUb4b5UtYdfg2RGOsFMHKDPg4NGlVmn6nxmvYHt7guAEZHw4tcZ pYWhptjkJEJK8ds0qiSO5jeo+Ks30kAygdJWbpg95e5HNTMHWXHDsCkPKF7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8d+hVj0rJwgjIHhtOdGW4ew4hTkwHwYDVR0j BBgwFoAUjNhuNOGiG+hzt63MjSrnFx6j2W0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njg0NjY4ODktYzFlZi00NDEwLWFkOWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRF MUEyMUJFODczQjdBRENDOEQyQUU3MTcxRUEzRDk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q4NkUzNEUxQTIxQkU4NzNCN0FEQ0M4RDJBRTcxNzFFQTNE OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3 MTcxRUEzRDk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoTQ3S/GAE5mnTdBbQnnt4ZrJbD4HWn7aqH XS+YCkTLsSm2EHrf/qNNvD7/WDZ4UigqNNcAEPXfLtl3aJL9x4kjoUmUv9eslK7A yFeC24a1euHtKWtXHxwUxfWEYPyluUlS/9xd5+2HVt6lSkXUvIi4ayRY+NP4SbXZ esP3Z7kGgusTEB9c5Fc8L92rRdJvA1mu6c2D64sakEDtu1+iIyIoUo+iiQSCc/wc MIkBSztiQXSiH2uFaSIzTBPySvy5WnakxvAiDtQRjtRUjSWRPaq3kyDIjCvbYjsK YnMZyAjywjYay9NnRr9jJTYkahuuR3kaveYEtXAxG2KoDqUs/dQ= -----END CERTIFICATE-----Generated at Thu Sep 17 15:08:22 2026 by rpki-client