$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft File: E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft (raw, json) Hash identifier: CgvhffxfPBd2WNwVzfQkKRk1yPBM6tzrGrE9JcQAcEA= Subject key identifier: B2:F7:40:7B:5D:F4:B3:DE:FE:1D:B7:7C:AD:B6:9C:4D:02:1E:3B:2F Authority key identifier: E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6 Certificate issuer: /CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6 Certificate serial: 5706648F5FC40F9A0C7471B20BE4E48EFDBC66EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 04:44:15 +0000 Manifest this update: Thu 17 Sep 2026 04:39:15 +0000 Manifest next update: Fri 18 Sep 2026 06:31:15 +0000 Files and hashes: 1: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: /pHfUH1NlBnMVG+9w4rBpFljBqBGm2WJrHAQRZot61U=) 2: E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl (hash: gVHPys5vUMQzHQY7DuXYPf7zEthCkLCV3A4Y5Jqejoc=) 3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: 7Kp38WdKSSiLKliiaFpY9zvvkr9TIBcqJ58D1X388bM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:06:64:8f:5f:c4:0f:9a:0c:74:71:b2:0b:e4:e4:8e:fd:bc:66:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6 Validity Not Before: Sep 17 04:39:15 2026 GMT Not After : Sep 18 06:31:15 2026 GMT Subject: CN=B2F7407B5DF4B3DEFE1DB77CADB69C4D021E3B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:18:7b:73:76:c2:c3:af:45:27:18:a0:c8: 2e:a7:e3:48:3a:46:08:91:42:09:86:7d:c6:b5:e6: 8a:48:84:51:c9:bf:14:16:c5:8d:c7:a9:3d:90:8d: 21:19:5d:10:40:27:eb:2d:5e:d6:f0:67:12:b0:a8: 5f:fc:cd:71:31:bd:03:7e:98:b8:2f:ae:79:0b:dd: 34:d7:db:96:4b:a1:d4:9b:54:67:c6:e3:6e:f8:63: 34:f7:00:72:75:6c:2e:ee:3d:35:e9:e5:a2:b8:7a: 0f:32:bd:91:d0:44:2c:11:7a:13:90:fb:f4:fd:b0: 49:21:57:24:a9:9d:ee:c0:a3:80:7d:26:6e:ba:00: a1:a0:e3:ce:c0:fb:47:29:71:cb:09:6f:34:1c:11: 2e:b3:d0:e5:45:47:0f:ea:c8:e6:1d:f3:73:d4:eb: ff:c3:02:7f:93:76:b7:6e:fb:e5:95:ef:a2:4a:3a: a0:a9:38:19:4d:a8:aa:7d:45:f4:18:2a:34:8b:ee: 21:92:61:3d:78:d5:ae:22:0e:2d:28:38:1f:aa:92: f7:f0:c9:f5:08:8d:91:0f:96:3c:fb:db:96:27:ef: 5d:47:08:16:aa:a2:a2:f0:b3:64:62:d1:1e:04:fd: 0d:ed:23:a3:d2:ba:f3:75:20:ea:41:b7:58:45:e3: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F7:40:7B:5D:F4:B3:DE:FE:1D:B7:7C:AD:B6:9C:4D:02:1E:3B:2F X509v3 Authority Key Identifier: keyid:E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:bd:ce:c9:48:ca:6f:7f:84:af:2c:a4:6d:5d:8b:45:a0:67: 30:ac:08:5d:11:29:62:28:49:23:2b:a4:7a:fc:f1:e4:00:21: 3b:d6:11:9f:57:39:a3:e8:b2:81:99:01:6c:aa:14:0e:b0:bd: b5:66:45:4b:14:a3:a9:ab:20:e2:d3:95:34:24:b3:2b:d9:de: de:31:8e:03:49:47:00:36:77:23:5d:56:c0:b1:95:a6:a6:f3: 3e:6a:3b:55:24:58:33:a9:69:1b:fd:24:4b:be:c2:0e:9a:29: 5c:c0:64:e6:09:27:5a:9e:dc:59:be:19:9e:72:ef:2d:e9:7b: 2e:7c:cf:55:0d:e5:c2:7a:35:62:71:3e:2e:7d:30:f3:78:c6: 62:eb:2e:2b:42:8d:77:cd:17:3e:9e:18:60:b2:04:be:9a:28: a4:8b:8c:54:5d:94:e7:4f:73:04:be:49:2a:c9:df:6a:22:4f: 57:63:e4:eb:ac:89:11:2c:0b:48:1f:07:fe:31:62:a8:09:8c: 04:f9:15:17:c2:c2:7a:54:e7:13:b1:81:ef:33:a2:26:7c:3c: 7b:a2:f2:0a:7d:df:2a:b4:c7:92:66:b9:c2:bd:7c:1e:48:6c: 29:fd:59:79:3c:e1:dc:c0:03:46:cf:21:27:51:8f:90:c1:7a: 95:ca:66:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwZkj1/ED5oMdHGyC+Tkjv28ZuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEMUMxQjQxMkNCNjRGRTU4MzUwODNGNzZBNzQ4N0NF MzQ0NTJCNjAeFw0yNjA5MTcwNDM5MTVaFw0yNjA5MTgwNjMxMTVaMDMxMTAvBgNV BAMTKEIyRjc0MDdCNURGNEIzREVGRTFEQjc3Q0FEQjY5QzREMDIxRTNCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk1Rh7c3bCw69FJxigyC6n40g6 RgiRQgmGfca15opIhFHJvxQWxY3HqT2QjSEZXRBAJ+stXtbwZxKwqF/8zXExvQN+ mLgvrnkL3TTX25ZLodSbVGfG4274YzT3AHJ1bC7uPTXp5aK4eg8yvZHQRCwRehOQ +/T9sEkhVySpne7Ao4B9Jm66AKGg487A+0cpccsJbzQcES6z0OVFRw/qyOYd83PU 6//DAn+Tdrdu++WV76JKOqCpOBlNqKp9RfQYKjSL7iGSYT141a4iDi0oOB+qkvfw yfUIjZEPljz725Yn711HCBaqoqLws2Ri0R4E/Q3tI6PSuvN1IOpBt1hF4wW7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsvdAe130s97+Hbd8rbacTQIeOy8wHwYDVR0j BBgwFoAU6NHBtBLLZP5YNQg/dqdIfONEUrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIxNjY0YTctYzljOS00NDQyLTg3MTgtOWFlYzllMjExMGEyLzAvRThEMUMxQjQx MkNCNjRGRTU4MzUwODNGNzZBNzQ4N0NFMzQ0NTJCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEQxQzFCNDEyQ0I2NEZFNTgzNTA4M0Y3NkE3NDg3Q0UzNDQ1 MkI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRThEMUMxQjQxMkNCNjRGRTU4MzUwODNGNzZBNzQ4 N0NFMzQ0NTJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANe9zslIym9/hK8spG1di0WgZzCsCF0RKWIo SSMrpHr88eQAITvWEZ9XOaPosoGZAWyqFA6wvbVmRUsUo6mrIOLTlTQksyvZ3t4x jgNJRwA2dyNdVsCxlaam8z5qO1UkWDOpaRv9JEu+wg6aKVzAZOYJJ1qe3Fm+GZ5y 7y3pey58z1UN5cJ6NWJxPi59MPN4xmLrLitCjXfNFz6eGGCyBL6aKKSLjFRdlOdP cwS+SSrJ32oiT1dj5OusiREsC0gfB/4xYqgJjAT5FRfCwnpU5xOxge8zoiZ8PHui 8gp93yq0x5JmucK9fB5IbCn9WXk84dzAA0bPISdRj5DBepXKZoM= -----END CERTIFICATE-----Generated at Thu Sep 17 14:45:44 2026 by rpki-client