$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft File: 8EE74284879D5768C14DFF59F408307443024F52.mft (raw, json) Hash identifier: ZV/99qIG2jVVVMAn494+CF+5g26jrkUFjG0HSOGt9H0= Subject key identifier: 37:CC:74:73:77:11:12:4E:C6:0B:DC:6D:73:A7:8E:93:18:C3:3F:51 Authority key identifier: 8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52 Certificate issuer: /CN=8EE74284879D5768C14DFF59F408307443024F52 Certificate serial: 7670E4D6BCBE591F709A5852042E8B35B6C6EA5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 21:25:26 +0000 Manifest this update: Wed 16 Sep 2026 21:20:26 +0000 Manifest next update: Thu 17 Sep 2026 23:35:26 +0000 Files and hashes: 1: 8EE74284879D5768C14DFF59F408307443024F52.crl (hash: HszVGBRFlAUNBVREFSR2Oosp5kgMMueQcksPr5l4qzk=) 2: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: qVGDGNhc8J+1zH3v5gLnqpqbccQ37nMtlVBvAtU2Qic=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:70:e4:d6:bc:be:59:1f:70:9a:58:52:04:2e:8b:35:b6:c6:ea:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE74284879D5768C14DFF59F408307443024F52 Validity Not Before: Sep 16 21:20:26 2026 GMT Not After : Sep 17 23:35:26 2026 GMT Subject: CN=37CC74737711124EC60BDC6D73A78E9318C33F51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:e7:af:d3:f9:17:58:b0:46:66:f1:e0:83: 3c:4b:8e:49:a2:e6:73:1a:92:12:ed:d4:b4:b4:80: 8b:fa:69:f8:20:47:94:5c:8d:27:0f:e9:1b:41:00: 3f:f6:54:83:76:3c:ed:e2:24:36:64:36:8e:67:43: 92:12:45:0c:ef:bb:59:1b:e7:11:d3:12:de:7a:db: af:17:4b:cb:54:f8:e3:69:61:07:02:c0:9c:5c:b7: 58:bb:b1:4f:a8:11:3a:2b:d5:8f:70:6a:59:a2:96: 6c:93:ff:6b:57:29:f1:6d:16:90:0b:a9:1a:6d:36: e5:11:3f:8a:97:6d:2a:0b:fc:f1:f0:59:19:a8:a7: aa:6d:c2:a5:9b:05:ef:21:22:22:04:06:f5:f3:8c: aa:36:41:87:4a:ab:2b:84:3f:1c:27:26:5b:ec:41: 13:5d:86:f4:e3:68:32:69:0f:3e:ca:6a:8a:9e:c5: 54:f7:05:45:22:8a:78:d0:05:6f:aa:32:dd:b8:ca: f4:63:19:32:8e:a8:46:77:41:50:c6:04:7f:cb:44: 1b:e8:05:39:ae:e7:74:bb:96:41:14:cd:36:fd:51: 4e:6b:56:a1:15:7c:5c:b6:d9:26:c1:ec:0c:43:2a: a6:43:cf:fa:d7:e8:5e:6a:06:64:90:80:48:ec:63: 9f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CC:74:73:77:11:12:4E:C6:0B:DC:6D:73:A7:8E:93:18:C3:3F:51 X509v3 Authority Key Identifier: keyid:8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e4:c2:d5:67:8e:63:07:26:5d:63:87:33:02:65:4e:b6:34: de:3e:4e:95:ba:7b:c7:7d:76:5d:88:bd:9d:c1:1d:26:4a:6c: bc:9e:02:b8:b5:4e:cb:90:1c:e2:af:15:27:ea:a6:e4:5e:87: 79:1d:67:44:e6:f5:47:30:de:80:3d:f1:57:04:07:a2:ad:8d: 42:92:5f:dd:1c:69:cb:05:99:42:b1:d0:9f:a8:67:b3:93:84: 91:c7:80:b2:3f:46:4c:89:14:4a:13:cc:4a:55:7c:5e:b9:aa: a9:58:af:17:93:8b:6a:bb:63:c3:9b:6f:c8:32:96:4a:9d:4b: c9:4e:76:3b:53:62:7b:c2:77:37:57:5f:4a:58:cf:81:ee:8a: 93:04:9f:54:ba:81:99:e9:99:44:74:c5:e3:ba:7a:56:48:47: f1:7a:9d:fa:6d:47:69:c3:3a:d9:42:08:33:72:3d:44:b4:1f: d1:bd:9a:c5:55:7b:08:5b:50:38:be:4c:a1:fa:ac:23:ec:eb: 5e:4b:3d:08:20:48:5d:f8:31:d4:47:b1:7b:54:a6:95:aa:72: d4:69:1b:e8:6c:c0:1b:5c:a6:d2:dc:9f:46:c5:fa:e6:6b:d1: 54:7e:9f:54:38:4e:be:28:7a:f1:c2:84:7f:c4:b4:63:be:8f: 58:1e:21:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdnDk1ry+WR9wmlhSBC6LNbbG6lswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0 MzAyNEY1MjAeFw0yNjA5MTYyMTIwMjZaFw0yNjA5MTcyMzM1MjZaMDMxMTAvBgNV BAMTKDM3Q0M3NDczNzcxMTEyNEVDNjBCREM2RDczQTc4RTkzMThDMzNGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetOev0/kXWLBGZvHggzxLjkmi 5nMakhLt1LS0gIv6afggR5RcjScP6RtBAD/2VIN2PO3iJDZkNo5nQ5ISRQzvu1kb 5xHTEt56268XS8tU+ONpYQcCwJxct1i7sU+oETor1Y9walmilmyT/2tXKfFtFpAL qRptNuURP4qXbSoL/PHwWRmop6ptwqWbBe8hIiIEBvXzjKo2QYdKqyuEPxwnJlvs QRNdhvTjaDJpDz7KaoqexVT3BUUiinjQBW+qMt24yvRjGTKOqEZ3QVDGBH/LRBvo BTmu53S7lkEUzTb9UU5rVqEVfFy22SbB7AxDKqZDz/rX6F5qBmSQgEjsY59/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN8x0c3cREk7GC9xtc6eOkxjDP1EwHwYDVR0j BBgwFoAUjudChIedV2jBTf9Z9AgwdEMCT1IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMyZTk0NWMtZWQzZC00ODlhLTgzZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4 NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0MzAyNEY1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUU3NDI4NDg3OUQ1NzY4QzE0REZGNTlGNDA4MzA3NDQzMDI0 RjUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMw NzQ0MzAyNEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPkwtVnjmMHJl1jhzMCZU62NN4+TpW6e8d9 dl2IvZ3BHSZKbLyeAri1TsuQHOKvFSfqpuReh3kdZ0Tm9Ucw3oA98VcEB6KtjUKS X90cacsFmUKx0J+oZ7OThJHHgLI/RkyJFEoTzEpVfF65qqlYrxeTi2q7Y8Obb8gy lkqdS8lOdjtTYnvCdzdXX0pYz4HuipMEn1S6gZnpmUR0xeO6elZIR/F6nfptR2nD OtlCCDNyPUS0H9G9msVVewhbUDi+TKH6rCPs615LPQggSF34MdRHsXtUppWqctRp G+hswBtcptLcn0bF+uZr0VR+n1Q4Tr4oevHChH/EtGO+j1geIek= -----END CERTIFICATE-----Generated at Thu Sep 17 11:04:21 2026 by rpki-client