$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft File: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft (raw, json) Hash identifier: aFY0berGgBHl2M6D79Zif1N6ECaaoQvpqstvTYIR3wo= Subject key identifier: D4:40:27:BC:90:93:F2:DF:2C:75:13:F3:9D:91:40:FD:72:BF:38:71 Authority key identifier: 53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 Certificate issuer: /CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Certificate serial: 40BDF61C6A7ABE0BA3628B1F46C37C1736FE3F71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:57:42 +0000 Manifest this update: Wed 16 Sep 2026 18:52:42 +0000 Manifest next update: Thu 17 Sep 2026 19:47:42 +0000 Files and hashes: 1: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: 1t9yzNFOj0CAbODcXUQcoM9eYOKr+Gim4y4R0hZm1ws=) 2: 5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl (hash: F8fL45ZDrMLmrtIGor6EpU6TMVF74xw75RjM0yKEeew=) 3: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: d/lQ7Oz9/jWtBq0Ck1NBYGMJFkT573cCc0+ynKJPdok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:bd:f6:1c:6a:7a:be:0b:a3:62:8b:1f:46:c3:7c:17:36:fe:3f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849 Validity Not Before: Sep 16 18:52:42 2026 GMT Not After : Sep 17 19:47:42 2026 GMT Subject: CN=D44027BC9093F2DF2C7513F39D9140FD72BF3871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:0c:43:1d:ef:6b:dd:27:8a:b5:0c:6b:df: 7b:16:1e:48:d9:46:45:bb:1c:a1:60:17:7b:04:7f: 49:fb:a4:de:f5:50:7b:57:52:42:bf:1c:54:e1:e0: 52:75:e9:6a:f0:28:66:4a:74:7a:e4:bb:e1:4a:d5: 9c:2c:37:a2:f2:3e:9f:80:f4:e6:e5:e0:9b:81:e5: 84:79:71:56:9f:ee:11:df:ca:8d:b3:af:0b:4d:42: 1f:5a:4b:53:11:80:f5:fb:5c:eb:06:49:b1:e9:18: 91:4d:3b:d5:ad:b3:70:14:20:74:62:a7:63:88:8d: 00:d5:70:d7:97:62:98:59:8e:3d:e8:bb:80:ac:1c: 9d:36:d1:f7:d7:02:3f:e8:d1:60:09:c0:37:14:a7: d8:bc:72:ed:20:f7:29:07:54:0e:aa:72:95:1c:4c: 1c:f8:d6:58:0d:5a:fe:a0:2d:12:e6:28:b6:10:ee: 5d:1c:be:95:30:a9:0b:c7:e8:7a:c5:dd:91:3b:c1: 81:e5:51:fe:3e:00:01:36:4f:e7:43:e7:a0:e6:4e: 7f:e3:84:38:71:05:9f:1d:a9:20:ac:57:09:10:fc: 35:95:28:d1:be:15:f1:61:ef:ee:a2:cd:89:25:82: 4b:47:2f:f8:d0:6b:10:3f:63:05:0f:05:b3:7a:e6: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:40:27:BC:90:93:F2:DF:2C:75:13:F3:9D:91:40:FD:72:BF:38:71 X509v3 Authority Key Identifier: keyid:53:00:D0:EE:C7:A2:1A:AF:AD:61:B6:E4:08:28:CB:BA:7C:03:C8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/5300D0EEC7A21AAFAD61B6E40828CBBA7C03C849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0a:c3:72:56:77:e0:cc:37:7c:51:12:53:48:0a:c5:0e:c3: 7d:8a:97:de:39:bc:49:75:44:76:00:78:77:56:b1:2e:3a:aa: a7:5d:60:d6:8b:4c:b4:fd:aa:f1:50:e1:20:b7:3a:37:10:fd: 9c:e6:bb:e3:91:50:be:60:c1:5e:0a:6a:18:85:92:f8:6d:d1: e5:90:78:ed:99:fd:3d:a3:84:5c:9b:90:3d:73:93:13:20:ec: 72:cb:77:4a:6f:c2:17:52:23:57:96:35:fb:4e:97:a5:7e:7c: 62:a7:eb:ac:87:73:fb:8e:af:fe:53:09:09:c1:56:ca:7f:47: df:58:2d:ea:3d:48:77:84:a0:26:3e:21:cd:7f:c1:44:6d:d9: 04:46:9c:4e:cc:47:88:da:08:81:55:6e:ff:e9:1f:01:29:74: 28:13:98:3a:d0:69:f8:7c:4e:f1:24:0a:bb:3c:48:02:c9:01: 35:53:48:7a:31:67:50:73:76:9e:b9:1e:6d:70:22:ee:b5:2a: f4:d7:94:4f:06:54:f4:a6:d2:b5:d1:5e:eb:ae:ab:6e:4f:36: 69:ae:d0:5e:fb:af:9e:1d:28:4e:0c:30:66:02:9e:14:32:f8: 66:ce:3d:d8:ca:22:02:e4:30:3b:65:09:71:27:cf:db:98:ce: 9c:28:1c:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQL32HGp6vgujYosfRsN8Fzb+P3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENCQkE3 QzAzQzg0OTAeFw0yNjA5MTYxODUyNDJaFw0yNjA5MTcxOTQ3NDJaMDMxMTAvBgNV BAMTKEQ0NDAyN0JDOTA5M0YyREYyQzc1MTNGMzlEOTE0MEZENzJCRjM4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthwxDHe9r3SeKtQxr33sWHkjZ RkW7HKFgF3sEf0n7pN71UHtXUkK/HFTh4FJ16WrwKGZKdHrku+FK1ZwsN6LyPp+A 9Obl4JuB5YR5cVaf7hHfyo2zrwtNQh9aS1MRgPX7XOsGSbHpGJFNO9Wts3AUIHRi p2OIjQDVcNeXYphZjj3ou4CsHJ020ffXAj/o0WAJwDcUp9i8cu0g9ykHVA6qcpUc TBz41lgNWv6gLRLmKLYQ7l0cvpUwqQvH6HrF3ZE7wYHlUf4+AAE2T+dD56DmTn/j hDhxBZ8dqSCsVwkQ/DWVKNG+FfFh7+6izYklgktHL/jQaxA/YwUPBbN65ithAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1EAnvJCT8t8sdRPznZFA/XK/OHEwHwYDVR0j BBgwFoAUUwDQ7seiGq+tYbbkCCjLunwDyEkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFiM2MwM2QtMmUyZS00ODk3LTg2OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVD N0EyMUFBRkFENjFCNkU0MDgyOENCQkE3QzAzQzg0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzAwRDBFRUM3QTIxQUFGQUQ2MUI2RTQwODI4Q0JCQTdDMDND ODQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvNTMwMEQwRUVDN0EyMUFBRkFENjFCNkU0MDgyOENC QkE3QzAzQzg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAKw3JWd+DMN3xRElNICsUOw32Kl945vEl1 RHYAeHdWsS46qqddYNaLTLT9qvFQ4SC3OjcQ/Zzmu+ORUL5gwV4KahiFkvht0eWQ eO2Z/T2jhFybkD1zkxMg7HLLd0pvwhdSI1eWNftOl6V+fGKn66yHc/uOr/5TCQnB Vsp/R99YLeo9SHeEoCY+Ic1/wURt2QRGnE7MR4jaCIFVbv/pHwEpdCgTmDrQafh8 TvEkCrs8SALJATVTSHoxZ1Bzdp65Hm1wIu61KvTXlE8GVPSm0rXRXuuuq25PNmmu 0F77r54dKE4MMGYCnhQy+GbOPdjKIgLkMDtlCXEnz9uYzpwoHPQ= -----END CERTIFICATE-----Generated at Thu Sep 17 09:23:57 2026 by rpki-client