$ rpki-client -vvvf rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft File: 8A88C62D67BF9B5D27095014663D7564A99145C4.mft (raw, json) Hash identifier: LZ7ISNvIRxeLbsN4RY5JTpHD0v2/xvdsEIQ0RFiAXhA= Subject key identifier: D0:22:49:D6:AD:49:3C:E6:95:A7:57:1E:FF:99:A9:3C:D4:A9:56:A5 Authority key identifier: 8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4 Certificate issuer: /CN=8A88C62D67BF9B5D27095014663D7564A99145C4 Certificate serial: 7195BF214729CD405E06B5A2CA800139E52F0FFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:22:50 +0000 Manifest this update: Wed 16 Sep 2026 23:17:50 +0000 Manifest next update: Fri 18 Sep 2026 01:56:50 +0000 Files and hashes: 1: 8A88C62D67BF9B5D27095014663D7564A99145C4.crl (hash: kzoYbPEQlD7fHUx08TtEW2gsrO74TCq8TrtbexNfPfM=) 2: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: F053eE0i+9sM4Zlpf0wasuwbYczZ4FiYljBeIYhXU8s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:95:bf:21:47:29:cd:40:5e:06:b5:a2:ca:80:01:39:e5:2f:0f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A88C62D67BF9B5D27095014663D7564A99145C4 Validity Not Before: Sep 16 23:17:50 2026 GMT Not After : Sep 18 01:56:50 2026 GMT Subject: CN=D02249D6AD493CE695A7571EFF99A93CD4A956A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:1d:77:58:65:44:2c:30:f3:55:fb:f7:52: 15:f1:af:10:5f:89:da:98:5a:e6:74:36:20:e1:eb: a6:4a:08:26:dd:c4:36:18:24:94:e6:8b:5c:20:85: af:bc:7e:f5:44:d6:92:66:70:fb:53:17:88:cf:50: f6:f2:46:7c:a3:73:17:74:96:ae:f7:ac:fe:e2:5b: f5:18:9d:5a:25:a0:03:15:b7:83:e8:7c:2f:11:e3: b3:57:49:ab:79:26:1d:1e:d1:84:50:13:38:f0:bc: 19:f3:06:99:88:39:ca:0e:77:73:85:b5:dd:31:28: 9a:7f:88:89:d3:8f:c2:25:58:9f:da:29:3d:30:de: 0a:63:e1:77:5a:29:71:d8:4a:a3:91:f7:0e:e3:25: c3:0e:f5:87:c9:5f:a8:1d:ca:df:92:ed:01:e9:02: ca:78:15:fd:b3:0f:99:e6:13:4c:a0:74:bf:9c:3d: 93:5e:dc:ca:7c:a5:e3:b0:b9:f4:35:52:c8:4a:cd: 74:13:be:78:98:94:34:36:94:1b:29:8f:be:3d:0e: 32:05:3e:01:1b:df:13:02:5a:2e:8f:b6:b8:13:b3: 0e:c9:ba:83:e6:43:9f:ab:1a:ce:b3:95:65:07:a9: 56:2b:c5:ed:6a:f8:63:39:5a:c5:a1:bc:7f:d3:af: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:22:49:D6:AD:49:3C:E6:95:A7:57:1E:FF:99:A9:3C:D4:A9:56:A5 X509v3 Authority Key Identifier: keyid:8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c2:04:93:df:4f:b5:05:7f:fd:a3:86:33:ae:74:d0:72:df: 2d:f7:1b:f9:85:24:25:89:ce:47:3c:39:79:e6:4b:37:55:98: 22:4a:24:14:ea:9f:1d:db:eb:c3:cc:4a:f4:6f:9d:78:c2:fd: 4d:28:0e:1c:cd:ae:21:ba:d4:f1:e2:13:7c:19:0f:b9:a1:82: 7f:b7:07:17:7a:e7:7c:33:9e:5b:6f:ad:ee:cc:c1:a7:d1:03: 51:fa:0a:e3:5d:29:1f:c2:a7:c9:33:c3:34:89:83:a0:d8:49: 02:b5:b7:99:5d:eb:72:ee:fb:65:28:6f:ec:23:b7:f9:f5:48: 47:c1:65:05:2e:b0:2c:6f:b5:24:48:ae:94:cc:aa:2e:d0:68: 62:95:06:1a:e4:bb:8f:b2:3b:aa:17:1a:e3:dd:57:1a:6e:81: 01:25:14:37:07:96:b7:36:7c:02:1f:1a:01:20:29:1a:92:53: 4f:e0:02:e2:73:65:3d:f3:eb:89:ec:8f:23:6f:f5:4b:03:1a: 1d:53:78:5b:d1:ff:df:87:14:4d:b5:0f:1b:aa:8c:ce:98:e8: 69:36:58:6a:3f:af:dd:22:8f:d0:20:51:16:e6:df:2e:a3:9a: 6b:31:fa:53:be:22:98:7d:e5:8f:d9:8a:84:16:94:2a:7a:1c: ff:c1:94:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZW/IUcpzUBeBrWiyoABOeUvD/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRB OTkxNDVDNDAeFw0yNjA5MTYyMzE3NTBaFw0yNjA5MTgwMTU2NTBaMDMxMTAvBgNV BAMTKEQwMjI0OUQ2QUQ0OTNDRTY5NUE3NTcxRUZGOTlBOTNDRDRBOTU2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgh13WGVELDDzVfv3UhXxrxBf idqYWuZ0NiDh66ZKCCbdxDYYJJTmi1wgha+8fvVE1pJmcPtTF4jPUPbyRnyjcxd0 lq73rP7iW/UYnVoloAMVt4PofC8R47NXSat5Jh0e0YRQEzjwvBnzBpmIOcoOd3OF td0xKJp/iInTj8IlWJ/aKT0w3gpj4XdaKXHYSqOR9w7jJcMO9YfJX6gdyt+S7QHp Asp4Ff2zD5nmE0ygdL+cPZNe3Mp8peOwufQ1UshKzXQTvniYlDQ2lBspj749DjIF PgEb3xMCWi6PtrgTsw7JuoPmQ5+rGs6zlWUHqVYrxe1q+GM5WsWhvH/Try7rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0CJJ1q1JPOaVp1ce/5mpPNSpVqUwHwYDVR0j BBgwFoAUiojGLWe/m10nCVAUZj11ZKmRRcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY0YzMxNTUtYzhmZi00MjA3LWEyZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2 N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRBOTkxNDVDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTg4QzYyRDY3QkY5QjVEMjcwOTUwMTQ2NjNENzU2NEE5OTE0 NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY0YzMxNTUtYzhmZi00MjA3LWEy ZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1 NjRBOTkxNDVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfCBJPfT7UFf/2jhjOudNBy3y33G/mFJCWJ zkc8OXnmSzdVmCJKJBTqnx3b68PMSvRvnXjC/U0oDhzNriG61PHiE3wZD7mhgn+3 Bxd653wznltvre7MwafRA1H6CuNdKR/Cp8kzwzSJg6DYSQK1t5ld63Lu+2Uob+wj t/n1SEfBZQUusCxvtSRIrpTMqi7QaGKVBhrku4+yO6oXGuPdVxpugQElFDcHlrc2 fAIfGgEgKRqSU0/gAuJzZT3z64nsjyNv9UsDGh1TeFvR/9+HFE21DxuqjM6Y6Gk2 WGo/r90ij9AgURbm3y6jmmsx+lO+Iph95Y/ZioQWlCp6HP/BlJQ= -----END CERTIFICATE-----Generated at Thu Sep 17 12:41:12 2026 by rpki-client