$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft File: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft (raw, json) Hash identifier: QIzCmVPtFguyjZmdLLZDLNH7szWApTogm1BpZ6dzo/o= Subject key identifier: E0:84:AE:35:79:1F:B8:F5:55:85:15:D7:3B:5E:0F:B8:A9:84:DC:7D Authority key identifier: 8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 Certificate issuer: /CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Certificate serial: 070EF0DB538E5D774F167C64B8B4DCE8093855CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 13:20:38 +0000 Manifest this update: Wed 16 Sep 2026 13:15:38 +0000 Manifest next update: Thu 17 Sep 2026 16:31:38 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: NR10Bfbwh6SYopHFVcr7fLYC1ZrjLqSPhi8hfWEGSfc=) 2: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl (hash: GkOliEzky5QaJbwtVcsR1mshd8yEfGns0D2uik2SSXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:0e:f0:db:53:8e:5d:77:4f:16:7c:64:b8:b4:dc:e8:09:38:55:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Validity Not Before: Sep 16 13:15:38 2026 GMT Not After : Sep 17 16:31:38 2026 GMT Subject: CN=E084AE35791FB8F5558515D73B5E0FB8A984DC7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:38:48:42:91:24:08:47:84:24:06:eb:e3:ce: 23:74:e6:d0:96:7b:ce:c1:59:d6:b8:03:04:c8:bb: ce:4d:69:f6:80:02:92:dc:35:cb:9d:24:45:09:3b: 96:10:6d:be:04:9e:95:34:49:98:59:18:4e:a6:6f: 79:b0:63:dc:1d:5b:14:81:78:46:9b:eb:ca:d8:7d: a7:43:3f:d9:ef:1e:98:b4:72:2a:79:ae:df:6c:a1: 5c:b4:c2:b4:39:a2:a2:7b:44:20:25:df:55:be:7a: 4a:46:c3:47:fb:60:2d:10:49:e0:ea:9f:60:d7:e4: 92:e6:02:08:1d:a2:19:b7:10:73:47:b6:44:d2:99: d6:bd:f0:56:8d:a3:87:52:86:ac:ad:c1:7f:42:bb: b3:eb:46:b3:ae:7a:52:a7:50:d0:35:ab:4c:57:54: e4:e0:e3:92:1d:ca:b0:ce:fe:36:e6:70:8b:91:98: d3:41:98:f5:97:a9:cc:ae:7d:63:60:01:27:3d:3c: 7d:bf:68:74:5b:9a:ad:37:b2:73:a3:ca:ab:28:21: 4a:1d:07:aa:49:44:e9:6f:df:e1:18:4c:90:79:c8: a5:4c:cc:af:48:91:90:a6:49:71:56:8b:2a:49:43: d2:81:40:81:a1:08:9a:53:f6:ca:02:34:b3:7c:c2: b6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:84:AE:35:79:1F:B8:F5:55:85:15:D7:3B:5E:0F:B8:A9:84:DC:7D X509v3 Authority Key Identifier: keyid:8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:41:c8:47:fe:a2:22:1a:b8:6a:00:d6:44:08:c3:5c:be:8a: f3:64:82:37:f2:bd:8a:c5:b2:19:0f:90:16:bd:33:c2:49:d0: 1c:f2:62:04:15:93:eb:6a:19:b8:27:f8:49:69:59:f2:99:00: ae:15:7e:d9:0e:80:6f:be:01:ae:94:37:9b:62:56:c3:e0:79: c7:70:c0:9a:ae:05:7a:f7:66:b6:fb:c2:cb:a2:c9:02:51:f6: b9:ba:bb:e9:51:33:1a:4f:46:dd:99:49:e1:04:fd:df:41:09: 31:c6:dc:c3:b8:22:42:04:e1:3c:0d:fc:11:4d:c4:82:86:9f: 74:f8:27:ad:0d:cd:87:4e:4b:6c:d9:4f:40:76:26:3f:4d:fb: 45:50:4c:d4:d7:f1:2c:39:7e:ef:1c:1b:1b:da:ab:b7:a9:8f: 3d:ab:3a:c3:10:04:aa:62:59:7e:9b:8a:7a:58:95:69:20:a1: 5c:b3:0c:47:67:74:f4:b6:85:1b:a4:ca:5d:16:fd:ac:0f:6d: d6:73:b7:7e:78:22:46:dd:79:21:d1:4c:ac:82:c3:e4:e9:30: b3:89:ab:a9:43:c2:05:a4:e1:a8:92:5c:28:8f:97:38:63:73: 7b:0d:62:a4:c7:2f:68:68:ce:df:b8:75:24:d8:55:06:5f:cf: 90:c9:eb:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBw7w21OOXXdPFnxkuLTc6Ak4VcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5 QjFCNDU3MzAeFw0yNjA5MTYxMzE1MzhaFw0yNjA5MTcxNjMxMzhaMDMxMTAvBgNV BAMTKEUwODRBRTM1NzkxRkI4RjU1NTg1MTVENzNCNUUwRkI4QTk4NERDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsOEhCkSQIR4QkBuvjziN05tCW e87BWda4AwTIu85NafaAApLcNcudJEUJO5YQbb4EnpU0SZhZGE6mb3mwY9wdWxSB eEab68rYfadDP9nvHpi0cip5rt9soVy0wrQ5oqJ7RCAl31W+ekpGw0f7YC0QSeDq n2DX5JLmAggdohm3EHNHtkTSmda98FaNo4dShqytwX9Cu7PrRrOuelKnUNA1q0xX VOTg45IdyrDO/jbmcIuRmNNBmPWXqcyufWNgASc9PH2/aHRbmq03snOjyqsoIUod B6pJROlv3+EYTJB5yKVMzK9IkZCmSXFWiypJQ9KBQIGhCJpT9soCNLN8wrY3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ISuNXkfuPVVhRXXO14PuKmE3H0wHwYDVR0j BBgwFoAUjRqU6g+f1RSOCcrgowe9yZsbRXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2MjExMWQtMGExMy00NDA3LWFmMzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEw RjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5QjFCNDU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDFBOTRFQTBGOUZENTE0OEUwOUNBRTBBMzA3QkRDOTlCMUI0 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JE Qzk5QjFCNDU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZByEf+oiIauGoA1kQIw1y+ivNkgjfyvYrF shkPkBa9M8JJ0BzyYgQVk+tqGbgn+ElpWfKZAK4VftkOgG++Aa6UN5tiVsPgecdw wJquBXr3Zrb7wsuiyQJR9rm6u+lRMxpPRt2ZSeEE/d9BCTHG3MO4IkIE4TwN/BFN xIKGn3T4J60NzYdOS2zZT0B2Jj9N+0VQTNTX8Sw5fu8cGxvaq7epjz2rOsMQBKpi WX6binpYlWkgoVyzDEdndPS2hRukyl0W/awPbdZzt354IkbdeSHRTKyCw+TpMLOJ q6lDwgWk4aiSXCiPlzhjc3sNYqTHL2hozt+4dSTYVQZfz5DJ6yY= -----END CERTIFICATE-----Generated at Thu Sep 17 09:28:15 2026 by rpki-client