$ rpki-client -vvvf rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft File: B806053521FE6FECB8809B52E561CCCA002004C5.mft (raw, json) Hash identifier: jSZOJYV1ql3vLWG48GiC2RNa+LrzI9KCDBmYntbDu+0= Subject key identifier: 85:58:CA:85:A3:DF:39:6D:C1:8D:60:ED:3F:23:17:98:A9:77:AF:7A Authority key identifier: B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5 Certificate issuer: /CN=B806053521FE6FECB8809B52E561CCCA002004C5 Certificate serial: 41EDA36328F7F39D4BEF3BE87F5290739A9F6183 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:44:21 +0000 Manifest this update: Thu 17 Sep 2026 08:39:21 +0000 Manifest next update: Fri 18 Sep 2026 11:26:21 +0000 Files and hashes: 1: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: vm98v9W8rSeQ8Av1Tc7EkqP0Z8ZuAgCRGwku9YNKDo0=) 2: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: un5iMbvwLLHgZ/gVlHFbug00/xJXBrdaRm/T/UqWjVI=) 3: B806053521FE6FECB8809B52E561CCCA002004C5.crl (hash: YRqO/vgrPn97DwZzM+gW264TNgkK10Z9c1r7FVVMzl4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.crl rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ed:a3:63:28:f7:f3:9d:4b:ef:3b:e8:7f:52:90:73:9a:9f:61:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B806053521FE6FECB8809B52E561CCCA002004C5 Validity Not Before: Sep 17 08:39:21 2026 GMT Not After : Sep 18 11:26:21 2026 GMT Subject: CN=8558CA85A3DF396DC18D60ED3F231798A977AF7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:fd:d8:bf:d7:44:5f:da:40:f7:48:da:61: 67:4e:40:aa:17:1f:b6:0c:b2:28:c8:a5:86:f8:88: 55:7e:02:0d:53:57:71:97:1f:fb:16:fe:da:fa:7c: e7:9d:59:f5:0c:aa:8e:21:ab:38:d4:fd:2f:08:b4: 55:bf:fc:e6:f7:aa:4a:37:2f:96:d0:1b:c3:ed:82: 57:da:84:b9:6c:3e:87:58:85:cb:6e:16:70:9e:5c: 6c:91:89:51:45:b8:0f:d0:26:70:7c:12:ac:a7:90: eb:00:08:6c:de:fc:c0:66:86:bb:45:e8:40:cd:49: f7:9e:41:f5:cf:9d:88:5f:47:da:7a:db:71:f7:3e: 3a:3a:59:a0:b8:06:dc:34:1c:04:4e:40:a8:4b:90: 7a:fe:b1:35:e1:27:89:87:a9:55:d3:1c:2b:d9:e7: 15:53:29:74:3f:a5:92:29:2c:f7:65:4b:58:3f:cf: c8:dc:ce:9b:f5:f7:12:97:d1:5b:15:44:73:59:44: 43:e2:ed:d4:a4:54:b0:84:a8:54:d2:d5:6c:0f:62: f1:76:31:22:c5:88:5d:95:e8:3d:23:ad:c4:20:ef: 6a:38:6a:4b:24:6a:9c:21:bb:3a:6a:cc:16:26:ce: 7f:57:28:ff:79:3b:33:ee:68:7e:24:b4:85:9d:d0: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:58:CA:85:A3:DF:39:6D:C1:8D:60:ED:3F:23:17:98:A9:77:AF:7A X509v3 Authority Key Identifier: keyid:B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a0:30:b7:45:04:e1:c4:d3:1f:13:5c:36:33:aa:7f:a1:3c: 66:aa:75:1f:0a:51:08:6a:cb:76:32:af:12:90:e4:96:9e:2c: 07:82:2e:03:4f:33:4f:8d:5d:f3:a1:4e:a6:70:94:c5:16:b3: 51:40:28:9c:38:8a:fb:56:66:b0:b6:8a:71:af:f8:46:6a:a9: e3:56:bc:b4:b8:69:49:9c:05:5b:2e:09:da:1e:6c:10:cb:35: cf:7c:27:9b:38:a2:cb:f1:cf:81:66:e2:50:87:f5:84:41:58: 09:78:34:89:48:37:ed:ac:c6:0f:fe:6f:9a:e2:db:ce:93:f0: 4d:5f:c5:2b:68:06:dd:db:2f:47:8e:87:26:16:24:93:57:41: 70:92:8b:d4:a8:75:a7:97:c2:99:e2:78:95:1b:63:52:a8:cb: 5a:5a:40:3a:92:56:ec:72:98:46:2a:e3:e5:72:5d:67:73:12: 70:fb:6e:a0:9f:a4:23:4b:0a:89:0b:c6:b1:1e:79:74:67:50: 6d:a1:3a:1d:fb:47:c9:a5:cb:69:eb:dc:01:84:25:c5:df:a9: 31:70:7f:1f:e4:d5:2c:31:b6:25:46:22:c9:3f:83:59:4b:d8: c4:eb:a3:7a:02:88:ae:76:7b:39:6a:33:4d:f1:72:76:4b:8b: 63:58:06:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQe2jYyj3851L7zvof1KQc5qfYYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgwNjA1MzUyMUZFNkZFQ0I4ODA5QjUyRTU2MUNDQ0Ew MDIwMDRDNTAeFw0yNjA5MTcwODM5MjFaFw0yNjA5MTgxMTI2MjFaMDMxMTAvBgNV BAMTKDg1NThDQTg1QTNERjM5NkRDMThENjBFRDNGMjMxNzk4QTk3N0FGN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAb/3Yv9dEX9pA90jaYWdOQKoX H7YMsijIpYb4iFV+Ag1TV3GXH/sW/tr6fOedWfUMqo4hqzjU/S8ItFW//Ob3qko3 L5bQG8PtglfahLlsPodYhctuFnCeXGyRiVFFuA/QJnB8EqynkOsACGze/MBmhrtF 6EDNSfeeQfXPnYhfR9p623H3Pjo6WaC4Btw0HAROQKhLkHr+sTXhJ4mHqVXTHCvZ 5xVTKXQ/pZIpLPdlS1g/z8jczpv19xKX0VsVRHNZREPi7dSkVLCEqFTS1WwPYvF2 MSLFiF2V6D0jrcQg72o4akskapwhuzpqzBYmzn9XKP95OzPuaH4ktIWd0Gu9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhVjKhaPfOW3BjWDtPyMXmKl3r3owHwYDVR0j BBgwFoAUuAYFNSH+b+y4gJtS5WHMygAgBMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODEzNjQ1ZDQtNTQzYi00NDRiLWEzYTUtZmRjZDQxODExYzIxLzAvQjgwNjA1MzUy MUZFNkZFQ0I4ODA5QjUyRTU2MUNDQ0EwMDIwMDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODA2MDUzNTIxRkU2RkVDQjg4MDlCNTJFNTYxQ0NDQTAwMjAw NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvQjgwNjA1MzUyMUZFNkZFQ0I4ODA5QjUyRTU2MUND Q0EwMDIwMDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEygMLdFBOHE0x8TXDYzqn+hPGaqdR8KUQhq y3YyrxKQ5JaeLAeCLgNPM0+NXfOhTqZwlMUWs1FAKJw4ivtWZrC2inGv+EZqqeNW vLS4aUmcBVsuCdoebBDLNc98J5s4osvxz4Fm4lCH9YRBWAl4NIlIN+2sxg/+b5ri 286T8E1fxStoBt3bL0eOhyYWJJNXQXCSi9SodaeXwpnieJUbY1Koy1paQDqSVuxy mEYq4+VyXWdzEnD7bqCfpCNLCokLxrEeeXRnUG2hOh37R8mly2nr3AGEJcXfqTFw fx/k1SwxtiVGIsk/g1lL2MTro3oCiK52ezlqM03xcnZLi2NYBhM= -----END CERTIFICATE-----Generated at Thu Sep 17 14:39:32 2026 by rpki-client