$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft File: 873409842DEE948D3DE05C618194C87A259E04BF.mft (raw, json) Hash identifier: DqrtbBNLwyAOep+W3F4/bsjnFWJyHndPp5ZCzplOlBo= Subject key identifier: 13:74:92:92:FB:2E:BB:84:04:71:D8:A0:63:73:76:32:1C:4D:1D:E9 Authority key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF Certificate issuer: /CN=873409842DEE948D3DE05C618194C87A259E04BF Certificate serial: 5D0E229DA7DD1F4DCF09B9573051F4A15E4BD615 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft Manifest number: 9E Signing time: Thu 27 Aug 2026 17:06:39 +0000 Manifest this update: Thu 27 Aug 2026 17:01:39 +0000 Manifest next update: Fri 28 Aug 2026 17:24:39 +0000 Files and hashes: 1: 873409842DEE948D3DE05C618194C87A259E04BF.crl (hash: 30the/4Fi07uCy4L4qnnc/bi29dv2AYMAugWHYsyU38=) 2: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: M8QTZuDsRpJ1yY06WkCYeFwFPm5+TLSWxZVTx0+FX3U=) 3: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: grkHY3zf57XsShC3GloC/Ysy8CRxkBA2HYvszXntAaM=) 4: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: OzhJdHffqoSTJ5pFjxmQ04VEvXqHaJWqkM8YRHVnaeQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 17:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0e:22:9d:a7:dd:1f:4d:cf:09:b9:57:30:51:f4:a1:5e:4b:d6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873409842DEE948D3DE05C618194C87A259E04BF Validity Not Before: Aug 27 17:01:39 2026 GMT Not After : Aug 28 17:24:39 2026 GMT Subject: CN=13749292FB2EBB840471D8A0637376321C4D1DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:40:d4:2f:9b:48:32:ba:dc:4f:4d:ce:0b: de:7b:16:05:71:6c:5c:ae:d8:6d:be:ea:8b:f7:c0: 1f:aa:1c:e0:a7:b7:30:fc:81:82:e0:d2:fb:35:e2: 86:49:58:7e:3f:60:f0:62:cf:b4:4b:50:96:d9:d3: ae:a4:09:f6:04:40:66:25:79:af:5f:c1:58:af:ae: e5:cf:d3:b9:d0:3f:30:e3:25:33:7b:e7:b2:0b:b9: d1:3f:89:5b:19:93:04:54:06:5e:d0:d2:61:aa:4c: de:dc:f5:67:b5:c3:8d:e9:13:36:f5:bd:12:aa:dd: 92:d9:98:27:ab:db:91:e6:4d:0f:bc:ec:25:f6:2c: c9:42:e5:3e:af:ce:fe:44:d9:cf:e5:c9:b0:a7:f2: 45:fe:8b:a7:79:1a:90:0f:36:73:83:5c:11:7c:de: 5d:fa:42:0c:39:6e:f5:e2:ff:10:f5:b5:1b:80:21: 65:48:9b:03:62:f3:11:e2:27:63:a9:e6:db:1e:0a: d7:42:cd:c6:ed:1e:b9:03:09:88:71:5f:40:16:32: a8:7e:a4:b0:4c:2d:fe:e6:eb:1c:52:be:fb:fa:5b: bb:de:f6:49:fb:8a:50:8e:13:f9:9c:72:f7:69:f4: 86:c5:d4:a1:39:96:f6:28:f3:ae:8b:0d:c8:f9:60: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:74:92:92:FB:2E:BB:84:04:71:D8:A0:63:73:76:32:1C:4D:1D:E9 X509v3 Authority Key Identifier: keyid:87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:3e:e8:9c:29:00:1d:40:22:d0:62:7b:fc:71:b8:72:62:a4: f8:1b:ed:eb:69:98:29:f9:6e:66:f3:78:62:f5:d8:35:f9:f1: d1:e1:9f:57:7d:48:69:4c:b3:dc:cb:24:7a:f7:66:73:7d:20: 8c:be:65:09:fb:21:41:54:43:a4:58:44:a9:0c:4c:6d:b8:93: 70:f2:68:4d:a4:f2:30:05:be:e8:a3:8f:64:75:23:43:86:28: 07:9a:e9:0c:c2:26:29:73:b5:8f:8b:a8:a7:b5:aa:82:7a:9e: 76:e9:14:bb:60:ab:77:5d:b0:e4:30:0a:9a:e7:12:d9:22:ce: 10:08:c2:10:15:c8:09:c0:1e:25:11:36:4a:2f:73:52:a6:43: 36:9f:c5:74:ea:88:de:d6:62:45:26:a8:11:30:4a:c5:f8:59: 08:8a:16:45:76:66:cf:18:da:13:c1:0a:27:ec:b7:4a:d1:3a: 93:5d:61:98:14:58:ba:ff:96:db:4a:a8:80:92:07:a7:3f:fe: 8f:c6:13:c5:46:c5:b9:ea:91:b4:bc:e0:50:a1:1b:69:23:05: a6:c8:7f:6b:e6:6c:f5:08:13:25:51:ee:ba:54:fa:9a:fd:f4: a5:57:ec:3d:9a:7d:ea:11:2c:ad:37:81:29:f0:44:89:f0:2a: d0:ec:6c:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQ4inafdH03PCblXMFH0oV5L1hUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4N0Ey NTlFMDRCRjAeFw0yNjA4MjcxNzAxMzlaFw0yNjA4MjgxNzI0MzlaMDMxMTAvBgNV BAMTKDEzNzQ5MjkyRkIyRUJCODQwNDcxRDhBMDYzNzM3NjMyMUM0RDFERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDf0DUL5tIMrrcT03OC957FgVx bFyu2G2+6ov3wB+qHOCntzD8gYLg0vs14oZJWH4/YPBiz7RLUJbZ066kCfYEQGYl ea9fwVivruXP07nQPzDjJTN757ILudE/iVsZkwRUBl7Q0mGqTN7c9We1w43pEzb1 vRKq3ZLZmCer25HmTQ+87CX2LMlC5T6vzv5E2c/lybCn8kX+i6d5GpAPNnODXBF8 3l36Qgw5bvXi/xD1tRuAIWVImwNi8xHiJ2Op5tseCtdCzcbtHrkDCYhxX0AWMqh+ pLBMLf7m6xxSvvv6W7ve9kn7ilCOE/mccvdp9IbF1KE5lvYo866LDcj5YPrNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE3SSkvsuu4QEcdigY3N2MhxNHekwHwYDVR0j BBgwFoAUhzQJhC3ulI094FxhgZTIeiWeBL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRjZjQwNjctYTY5ZC00OTA4LWJlZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQy REVFOTQ4RDNERTA1QzYxODE5NEM4N0EyNTlFMDRCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzM0MDk4NDJERUU5NDhEM0RFMDVDNjE4MTk0Qzg3QTI1OUUw NEJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4 N0EyNTlFMDRCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIg+6JwpAB1AItBie/xxuHJipPgb7etpmCn5 bmbzeGL12DX58dHhn1d9SGlMs9zLJHr3ZnN9IIy+ZQn7IUFUQ6RYRKkMTG24k3Dy aE2k8jAFvuijj2R1I0OGKAea6QzCJilztY+LqKe1qoJ6nnbpFLtgq3ddsOQwCprn EtkizhAIwhAVyAnAHiURNkovc1KmQzafxXTqiN7WYkUmqBEwSsX4WQiKFkV2Zs8Y 2hPBCifst0rROpNdYZgUWLr/lttKqICSB6c//o/GE8VGxbnqkbS84FChG2kjBabI f2vmbPUIEyVR7rpU+pr99KVX7D2afeoRLK03gSnwRInwKtDsbOw= -----END CERTIFICATE-----Generated at Thu Aug 27 21:41:42 2026 by rpki-client