$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft File: 8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft (raw, json) Hash identifier: wIQgIOmGVKPRH4sA7qZO04Svtu2bsRV7eZJEvGVRurA= Subject key identifier: C4:72:D9:A7:39:09:70:CA:3F:6F:40:A9:7A:94:0B:3C:8E:6F:60:70 Authority key identifier: 8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6 Certificate issuer: /CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6 Certificate serial: 7E61B91FFE54206E83FD14E0844923F54B9ACB5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft Manifest number: B9 Signing time: Fri 18 Sep 2026 00:49:14 +0000 Manifest this update: Fri 18 Sep 2026 00:44:14 +0000 Manifest next update: Sat 19 Sep 2026 03:27:14 +0000 Files and hashes: 1: 8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl (hash: LfJHNcFCvsyOHq0Y/c8op+SIWaBTRPINpY6Pa0PKX5w=) 2: 3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (hash: 4plAU79kda3Ea5yOILPSDn9wEB9ioJGFSdINnT7EfAQ=) 3: 3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa (hash: 4io3eCxu167AtlWBsa6dTLlDoZVSSBjQBvpZbbKn9o4=) 4: 3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa (hash: c92Ozjnq7svCLrrjEbFGyASoSulZ/x0HLm65BX9w5Mw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 03:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:61:b9:1f:fe:54:20:6e:83:fd:14:e0:84:49:23:f5:4b:9a:cb:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BA221ECCD92C8CB8DD59503B2722C57C3367BF6 Validity Not Before: Sep 18 00:44:14 2026 GMT Not After : Sep 19 03:27:14 2026 GMT Subject: CN=C472D9A7390970CA3F6F40A97A940B3C8E6F6070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c5:5b:0c:9c:d5:d4:1c:83:7d:13:19:ef:b3: 20:28:30:a4:bf:4f:d2:b6:39:c0:5b:58:9a:f1:91: ea:73:11:62:32:6c:a1:f5:60:b7:d9:ed:9f:93:90: 53:27:86:96:48:46:3b:02:0a:3a:a0:95:c7:5a:c5: bd:cf:3a:f6:dc:34:36:aa:07:c7:f5:d0:16:5c:55: 7d:9d:56:bc:27:1e:d9:f6:af:ec:d5:fc:3f:7b:79: 1d:9d:40:27:e5:b2:57:6d:a2:ae:a8:5f:92:62:fb: 94:72:04:b5:a7:5f:a7:d9:5e:9a:47:a1:29:72:de: 75:4d:36:c8:a0:6f:b9:24:0b:96:c3:9e:b3:63:30: 2f:ef:54:40:f0:a6:c5:cd:2f:d3:08:94:d2:ba:f1: d2:00:45:82:4f:9e:e1:7d:68:ab:2d:ff:f2:4d:7e: 21:c1:0b:ad:b4:cf:e4:8b:e3:2e:1f:6d:af:01:92: 62:09:25:a0:9c:b1:84:6d:8e:16:61:8c:56:9b:9e: 7c:d0:7a:d8:f2:a6:52:21:6c:44:ab:d4:2f:c9:af: 6b:6b:1b:95:bc:9f:a2:78:b0:b7:e3:19:4d:23:da: 73:28:91:91:82:f8:a9:1d:ae:79:4b:3e:cd:60:08: f7:e7:fe:af:27:3d:a9:26:0b:90:83:c7:86:24:93: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:72:D9:A7:39:09:70:CA:3F:6F:40:A9:7A:94:0B:3C:8E:6F:60:70 X509v3 Authority Key Identifier: keyid:8B:A2:21:EC:CD:92:C8:CB:8D:D5:95:03:B2:72:2C:57:C3:36:7B:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/8BA221ECCD92C8CB8DD59503B2722C57C3367BF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:35:19:f8:8f:5b:26:af:ea:c5:cd:61:6a:f6:08:4b:02:ba: dd:60:cf:03:2e:1a:c3:e1:da:00:86:f5:b5:ca:1a:2b:d0:49: d2:07:3d:65:25:2e:b4:08:ad:54:16:7f:41:88:ea:47:fe:33: 13:fd:64:f8:49:f7:22:dc:f8:28:5e:f2:40:ca:24:2d:51:0e: 71:05:ed:89:db:f2:f2:d4:2e:99:8c:dc:44:ac:2f:ec:8b:24: f1:e3:86:81:1a:cd:28:99:46:63:e2:54:02:09:2a:f1:04:15: 11:22:02:91:29:58:55:ed:f5:b3:7f:ec:69:14:c3:b0:a8:43: 2f:af:a5:6d:69:57:6f:8b:8e:8c:bb:21:1a:2b:bb:74:ba:14: b5:65:04:b6:eb:95:4c:66:c7:1d:36:c7:4b:67:ec:dc:14:bf: 51:24:7a:d8:6e:4c:71:3c:1d:23:f5:80:35:88:7e:cc:93:01: 76:8b:6d:f5:78:24:3d:60:97:cb:4d:6a:fc:0d:52:73:2b:8b: 70:ec:8e:f2:6f:b7:75:2e:21:f4:a5:14:e9:d0:4c:1c:fa:4f: 08:c9:b0:1a:f2:7b:20:c3:0d:11:09:1d:ef:e3:8a:48:33:1d: ca:4e:36:22:ad:0f:e6:a3:0e:64:7b:eb:82:1e:e6:9a:8c:2e: 77:05:6f:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfmG5H/5UIG6D/RTghEkj9Uuay1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBMjIxRUNDRDkyQzhDQjhERDU5NTAzQjI3MjJDNTdD MzM2N0JGNjAeFw0yNjA5MTgwMDQ0MTRaFw0yNjA5MTkwMzI3MTRaMDMxMTAvBgNV BAMTKEM0NzJEOUE3MzkwOTcwQ0EzRjZGNDBBOTdBOTQwQjNDOEU2RjYwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xVsMnNXUHIN9ExnvsyAoMKS/ T9K2OcBbWJrxkepzEWIybKH1YLfZ7Z+TkFMnhpZIRjsCCjqglcdaxb3POvbcNDaq B8f10BZcVX2dVrwnHtn2r+zV/D97eR2dQCflsldtoq6oX5Ji+5RyBLWnX6fZXppH oSly3nVNNsigb7kkC5bDnrNjMC/vVEDwpsXNL9MIlNK68dIARYJPnuF9aKst//JN fiHBC620z+SL4y4fba8BkmIJJaCcsYRtjhZhjFabnnzQetjyplIhbESr1C/Jr2tr G5W8n6J4sLfjGU0j2nMokZGC+KkdrnlLPs1gCPfn/q8nPakmC5CDx4Ykk3jTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxHLZpzkJcMo/b0CpepQLPI5vYHAwHwYDVR0j BBgwFoAUi6Ih7M2SyMuN1ZUDsnIsV8M2e/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQ0NDBjODUtMzQ3MS00NDYxLWI1OTAtMTYwMWUxOWY1MzE4LzAvOEJBMjIxRUND RDkyQzhDQjhERDU5NTAzQjI3MjJDNTdDMzM2N0JGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkEyMjFFQ0NEOTJDOENCOERENTk1MDNCMjcyMkM1N0MzMzY3 QkY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ0NDBjODUtMzQ3MS00NDYxLWI1 OTAtMTYwMWUxOWY1MzE4LzAvOEJBMjIxRUNDRDkyQzhDQjhERDU5NTAzQjI3MjJD NTdDMzM2N0JGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGI1GfiPWyav6sXNYWr2CEsCut1gzwMuGsPh 2gCG9bXKGivQSdIHPWUlLrQIrVQWf0GI6kf+MxP9ZPhJ9yLc+Che8kDKJC1RDnEF 7Ynb8vLULpmM3ESsL+yLJPHjhoEazSiZRmPiVAIJKvEEFREiApEpWFXt9bN/7GkU w7CoQy+vpW1pV2+Ljoy7IRoru3S6FLVlBLbrlUxmxx02x0tn7NwUv1EkethuTHE8 HSP1gDWIfsyTAXaLbfV4JD1gl8tNavwNUnMri3DsjvJvt3UuIfSlFOnQTBz6TwjJ sBryeyDDDREJHe/jikgzHcpONiKtD+ajDmR764Ie5pqMLncFbys= -----END CERTIFICATE-----Generated at Fri Sep 18 15:07:37 2026 by rpki-client