$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft File: 8BBABE3D733222C2B6A217449635616F4F2C9625.mft (raw, json) Hash identifier: VdisUAqgagpzCfhZW/jeluw7jmTZiF+VAZdYtVXnrUI= Subject key identifier: 4C:12:D8:49:05:90:1D:D2:8A:DB:A7:CB:70:88:DC:C1:49:0C:30:3A Authority key identifier: 8B:BA:BE:3D:73:32:22:C2:B6:A2:17:44:96:35:61:6F:4F:2C:96:25 Certificate issuer: /CN=8BBABE3D733222C2B6A217449635616F4F2C9625 Certificate serial: 3A25465FBE6EAC02EE0B57B2F249103C8D4E5DF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:30:37 +0000 Manifest this update: Wed 16 Sep 2026 21:25:37 +0000 Manifest next update: Thu 17 Sep 2026 21:47:37 +0000 Files and hashes: 1: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: 3IjI2krzhLJYlKJkWyMM6q/EfNey4aUG89WZvwYr9zI=) 2: 8BBABE3D733222C2B6A217449635616F4F2C9625.crl (hash: qDFyaUsCaniDAK0ACIy+NGpjOXpYKZQ9n5+bs13vOSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.crl rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:25:46:5f:be:6e:ac:02:ee:0b:57:b2:f2:49:10:3c:8d:4e:5d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BBABE3D733222C2B6A217449635616F4F2C9625 Validity Not Before: Sep 16 21:25:37 2026 GMT Not After : Sep 17 21:47:37 2026 GMT Subject: CN=4C12D84905901DD28ADBA7CB7088DCC1490C303A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:52:32:93:40:0f:a5:2f:6b:0e:9d:15:06: 3b:3f:78:84:57:28:67:90:40:dc:a0:40:47:bf:f6: bb:98:40:af:0a:e1:9e:66:07:34:3b:90:4f:87:2d: be:dd:6a:9e:b1:4c:9b:ba:d8:60:c0:79:3c:28:35: 37:71:02:bc:b7:e2:2e:83:5e:64:f5:1b:25:4a:15: b4:a9:5c:cb:95:66:78:ce:b0:b3:91:34:21:5b:01: f8:99:1f:4a:53:6b:16:6b:ed:1f:04:8b:61:c4:17: 7f:a2:a2:3c:1e:db:b7:6d:86:db:16:09:e0:98:bc: bf:02:3f:49:9d:46:3d:07:ff:5f:2a:cc:57:d5:c1: bd:09:1e:15:3d:0a:68:65:7f:13:cb:40:a7:85:48: bc:4b:f3:a4:d5:33:fd:96:eb:92:a2:39:4e:dd:26: f6:95:27:b8:92:bf:16:0f:76:a6:64:46:ad:35:65: 7a:3c:28:46:61:e3:52:eb:08:1b:78:17:ad:3d:d7: 3d:c4:9e:fd:ed:d2:c7:cf:f7:84:26:7b:12:69:02: b1:d6:e0:bc:4f:50:28:64:bb:d0:d3:9f:f2:c3:ef: 1e:53:03:47:a5:f7:c7:6e:8b:dd:7e:fa:10:0b:e2: 8f:e5:f1:60:98:8c:8d:46:63:48:ae:74:7f:63:1d: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:12:D8:49:05:90:1D:D2:8A:DB:A7:CB:70:88:DC:C1:49:0C:30:3A X509v3 Authority Key Identifier: keyid:8B:BA:BE:3D:73:32:22:C2:B6:A2:17:44:96:35:61:6F:4F:2C:96:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:14:55:27:ce:8a:33:7f:68:90:27:60:25:64:7f:de:ab:e0: 8c:84:bc:fa:b9:eb:94:30:75:1a:0e:2d:ae:70:dc:d5:3e:d6: 16:58:44:2d:e9:a2:4a:c3:39:8a:2f:57:db:04:e4:94:70:86: 2a:73:18:6c:9c:e4:46:a0:93:f3:47:dd:74:1b:bc:22:74:41: 4c:c6:c5:72:f6:61:08:6c:c6:77:f6:02:02:78:e5:0d:64:e9: d5:83:d9:a0:0c:72:5f:16:02:f5:a5:ab:9d:9a:fd:0f:3b:fb: ac:cc:2a:a0:6a:f5:eb:e9:f4:43:02:92:7e:6e:70:02:a7:d6: 23:04:ac:75:35:8e:3e:36:c6:52:3e:c6:8a:83:47:23:26:7d: 46:ff:70:61:91:6c:1a:79:b0:ee:f5:8d:4a:1f:c2:1c:ce:2b: 0d:52:a1:89:d6:21:cc:bd:52:36:6b:3e:f7:a0:1c:4a:c5:e1: f3:35:40:9d:ec:04:14:90:a8:3c:df:d4:a4:3f:0e:58:64:3e: d2:ae:9f:f6:4e:0d:87:d7:2c:76:df:89:44:a5:da:32:75:fb: 7c:ed:23:78:7e:72:43:e5:a4:c0:e4:39:f5:76:f4:a8:c7:48: b1:cf:52:fc:e2:9f:11:5e:40:16:32:34:7e:86:aa:9d:1b:48: 78:42:35:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOiVGX75urALuC1ey8kkQPI1OXfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCQUJFM0Q3MzMyMjJDMkI2QTIxNzQ0OTYzNTYxNkY0 RjJDOTYyNTAeFw0yNjA5MTYyMTI1MzdaFw0yNjA5MTcyMTQ3MzdaMDMxMTAvBgNV BAMTKDRDMTJEODQ5MDU5MDFERDI4QURCQTdDQjcwODhEQ0MxNDkwQzMwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgG1Iyk0APpS9rDp0VBjs/eIRX KGeQQNygQEe/9ruYQK8K4Z5mBzQ7kE+HLb7dap6xTJu62GDAeTwoNTdxAry34i6D XmT1GyVKFbSpXMuVZnjOsLORNCFbAfiZH0pTaxZr7R8Ei2HEF3+iojwe27dthtsW CeCYvL8CP0mdRj0H/18qzFfVwb0JHhU9CmhlfxPLQKeFSLxL86TVM/2W65KiOU7d JvaVJ7iSvxYPdqZkRq01ZXo8KEZh41LrCBt4F6091z3Env3t0sfP94QmexJpArHW 4LxPUChku9DTn/LD7x5TA0el98dui91++hAL4o/l8WCYjI1GY0iudH9jHcJzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTBLYSQWQHdKK26fLcIjcwUkMMDowHwYDVR0j BBgwFoAUi7q+PXMyIsK2ohdEljVhb08sliUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFmMDAzMWUtMmE5ZS00N2NhLTkyODMtNDBlOTI3ZTM1OTkzLzAvOEJCQUJFM0Q3 MzMyMjJDMkI2QTIxNzQ0OTYzNTYxNkY0RjJDOTYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkJBQkUzRDczMzIyMkMyQjZBMjE3NDQ5NjM1NjE2RjRGMkM5 NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvOEJCQUJFM0Q3MzMyMjJDMkI2QTIxNzQ0OTYzNTYx NkY0RjJDOTYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsUVSfOijN/aJAnYCVkf96r4IyEvPq565Qw dRoOLa5w3NU+1hZYRC3pokrDOYovV9sE5JRwhipzGGyc5Eagk/NH3XQbvCJ0QUzG xXL2YQhsxnf2AgJ45Q1k6dWD2aAMcl8WAvWlq52a/Q87+6zMKqBq9evp9EMCkn5u cAKn1iMErHU1jj42xlI+xoqDRyMmfUb/cGGRbBp5sO71jUofwhzOKw1SoYnWIcy9 UjZrPvegHErF4fM1QJ3sBBSQqDzf1KQ/DlhkPtKun/ZODYfXLHbfiUSl2jJ1+3zt I3h+ckPlpMDkOfV29KjHSLHPUvzinxFeQBYyNH6Gqp0bSHhCNWM= -----END CERTIFICATE-----Generated at Thu Sep 17 10:57:34 2026 by rpki-client