$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft File: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft (raw, json) Hash identifier: Ld1gLhLlQk5dsEh9RyE1ylAgh2RdyxllHKJ4ARhfMR4= Subject key identifier: 79:EA:D8:FE:F5:AC:9B:38:36:08:32:1A:1E:05:C4:58:84:BC:71:C9 Authority key identifier: C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 Certificate issuer: /CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Certificate serial: 36CC42EA58E765ECBD4BD4738B9ABF5A6E4E0711 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 10:16:19 +0000 Manifest this update: Thu 17 Sep 2026 10:11:19 +0000 Manifest next update: Fri 18 Sep 2026 14:12:19 +0000 Files and hashes: 1: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl (hash: AuVSUKgxGjefY3AvDjAnfDKgYlzTjVgI835hNdAv1LQ=) 2: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: qW0AGce8XtjjXQ3Aq1xPuwzcIhd6zyH7ybAi9hoWtzA=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: W+SevG4xTFDq1sgkDkONqUQc3ucQK2u8ntiRI2DImrc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:cc:42:ea:58:e7:65:ec:bd:4b:d4:73:8b:9a:bf:5a:6e:4e:07:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Validity Not Before: Sep 17 10:11:19 2026 GMT Not After : Sep 18 14:12:19 2026 GMT Subject: CN=79EAD8FEF5AC9B383608321A1E05C45884BC71C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:49:0e:48:33:01:24:d0:25:54:0f:f6:df: 9a:91:29:45:e7:c7:f7:89:6e:97:0c:2c:30:45:e1: 02:90:e2:5a:31:2d:90:fe:1c:ab:ab:54:df:6b:65: e6:31:de:9e:19:8b:63:0e:01:e0:0d:ba:2e:2e:a8: c1:4d:6d:d3:64:6b:b6:cf:02:d1:6c:8b:9d:54:be: a5:3d:9e:96:e6:01:38:ca:29:c8:21:c2:de:58:cd: 75:e4:33:ce:f7:ac:3b:2f:c7:fd:1e:7d:69:2c:4c: 9c:2f:b4:a5:a1:3f:26:1c:22:17:90:bd:bd:3d:cb: cd:e6:8d:7e:af:be:11:36:a9:36:28:d7:12:0a:3c: 31:76:bc:55:4a:fb:e1:f8:90:08:b7:8f:11:90:66: 07:fc:57:97:d6:0e:ea:6a:44:52:f9:30:17:13:c7: 7c:45:42:49:65:e1:63:7c:5f:9f:17:4f:f1:f1:76: 7b:7c:8b:67:fa:ed:e4:97:e1:64:f8:ed:96:44:fa: d0:4a:d4:12:73:77:97:6f:39:2b:dd:f8:7c:84:7e: 69:f1:1d:de:ff:e2:67:72:b0:8c:39:da:de:42:5a: 15:99:13:66:45:7e:ee:1d:6b:ac:c8:50:a6:76:95: 8a:74:f3:2f:68:2d:34:f4:69:bd:ab:d8:9f:cb:c3: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EA:D8:FE:F5:AC:9B:38:36:08:32:1A:1E:05:C4:58:84:BC:71:C9 X509v3 Authority Key Identifier: keyid:C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:7e:2b:ec:e2:86:e2:bd:9f:45:5b:e5:ac:9a:d9:d0:e1:b7: 0f:f3:b7:c1:fd:05:df:21:08:9a:aa:14:4c:aa:66:64:81:b3: 51:a2:d5:f9:21:81:d9:33:ad:ab:ba:01:cc:7d:9c:d9:1c:e0: fb:ab:c7:c1:71:ac:b3:95:b5:85:47:35:85:a4:40:55:06:47: 0f:f2:a3:13:97:d0:c2:b0:42:cd:cb:27:d2:b4:04:49:47:c1: 4d:ef:7e:5a:aa:0f:f3:29:be:8c:bf:07:91:8b:cc:fd:34:57: de:9f:9e:ed:fb:ce:05:e3:f7:2a:63:ac:46:60:e0:44:18:90: 73:57:a9:90:7b:a4:a1:36:62:0f:d8:4a:78:6c:c6:d6:2c:e4: 98:f0:a2:de:35:c0:61:41:cc:70:1a:3f:78:b6:7a:6e:80:77: ee:f2:89:58:a1:20:e9:44:81:07:3b:a5:4c:29:dc:67:ea:9a: b7:07:1d:c6:2b:3b:20:01:a0:0d:23:f1:3c:d7:b9:5e:5f:ff: 67:6e:73:c6:85:23:df:85:9d:c2:4d:e9:a8:77:6a:e4:97:26: b8:ab:74:b4:94:7c:22:5f:1a:73:9a:d4:2b:c0:ff:6a:c4:62: f1:8d:a8:9f:d2:8e:58:3b:f0:21:94:6a:72:cf:dc:76:9d:40: 20:08:8d:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNsxC6ljnZey9S9Rzi5q/Wm5OBxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2 QzRFREMzMjAeFw0yNjA5MTcxMDExMTlaFw0yNjA5MTgxNDEyMTlaMDMxMTAvBgNV BAMTKDc5RUFEOEZFRjVBQzlCMzgzNjA4MzIxQTFFMDVDNDU4ODRCQzcxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCut0kOSDMBJNAlVA/235qRKUXn x/eJbpcMLDBF4QKQ4loxLZD+HKurVN9rZeYx3p4Zi2MOAeANui4uqMFNbdNka7bP AtFsi51UvqU9npbmATjKKcghwt5YzXXkM873rDsvx/0efWksTJwvtKWhPyYcIheQ vb09y83mjX6vvhE2qTYo1xIKPDF2vFVK++H4kAi3jxGQZgf8V5fWDupqRFL5MBcT x3xFQkll4WN8X58XT/Hxdnt8i2f67eSX4WT47ZZE+tBK1BJzd5dvOSvd+HyEfmnx Hd7/4mdysIw52t5CWhWZE2ZFfu4da6zIUKZ2lYp08y9oLTT0ab2r2J/Lwzw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeerY/vWsmzg2CDIaHgXEWIS8cckwHwYDVR0j BBgwFoAUyKJ3s97IwPCqTB+lQugZNmxO3DIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIyNmIzZTEtZDdmNi00NjVlLTgzMDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNE RUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2QzRFREMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEEyNzdCM0RFQzhDMEYwQUE0QzFGQTU0MkU4MTkzNjZDNEVE QzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5 MzY2QzRFREMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZ+K+zihuK9n0Vb5aya2dDhtw/zt8H9Bd8h CJqqFEyqZmSBs1Gi1fkhgdkzrau6Acx9nNkc4Purx8FxrLOVtYVHNYWkQFUGRw/y oxOX0MKwQs3LJ9K0BElHwU3vflqqD/Mpvoy/B5GLzP00V96fnu37zgXj9ypjrEZg 4EQYkHNXqZB7pKE2Yg/YSnhsxtYs5Jjwot41wGFBzHAaP3i2em6Ad+7yiVihIOlE gQc7pUwp3GfqmrcHHcYrOyABoA0j8TzXuV5f/2duc8aFI9+FncJN6ah3auSXJrir dLSUfCJfGnOa1CvA/2rEYvGNqJ/Sjlg78CGUanLP3HadQCAIjfQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:26:27 2026 by rpki-client