$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft File: 8DD710534DF68AAB08361EE28306B8FDEE71D144.mft (raw, json) Hash identifier: 1G5li6avQDXIRjc+C1fDqnIOzlYMu7V8D+WPFoRt65U= Subject key identifier: E4:5D:13:A7:A4:A0:72:AA:6D:64:97:A6:D4:CD:C2:F8:2D:11:44:EE Authority key identifier: 8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 Certificate issuer: /CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Certificate serial: 49EDBB262D3B77C9CFD520DB4494576E85A54D9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 21:35:42 +0000 Manifest this update: Wed 16 Sep 2026 21:30:42 +0000 Manifest next update: Thu 17 Sep 2026 22:27:42 +0000 Files and hashes: 1: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: mt9y4ArG2gRgvhKLs+xygsf6wYJsNzK3vkSOg2Yasms=) 2: 8DD710534DF68AAB08361EE28306B8FDEE71D144.crl (hash: sYbmG0xDk/h4ty/eyowl/YHCiKL3eL4tXUgbWOKQ3N8=) 3: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: OzarGbzrKygn581G2dCLdzA7C4q7lKqki8T+O4VVozc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ed:bb:26:2d:3b:77:c9:cf:d5:20:db:44:94:57:6e:85:a5:4d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Validity Not Before: Sep 16 21:30:42 2026 GMT Not After : Sep 17 22:27:42 2026 GMT Subject: CN=E45D13A7A4A072AA6D6497A6D4CDC2F82D1144EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:1b:fb:a3:1e:19:78:d4:b9:5d:34:8b:b1: 8f:f9:ed:b4:2f:3f:49:ee:db:f2:80:18:a8:2c:5d: 9b:91:55:6d:f9:c2:78:87:30:ab:ce:18:2e:34:72: 3f:ac:03:8e:06:78:aa:32:e3:09:80:51:da:78:41: 3d:ea:45:01:ef:5b:18:76:bc:ae:1c:b1:a4:e1:c9: 75:62:1f:2e:70:82:f6:87:ac:47:44:1a:e3:f3:da: 57:3b:56:d3:c6:e4:b8:c3:72:38:c7:bc:d6:70:56: 57:5b:aa:83:8d:e9:55:51:06:a4:80:76:9b:71:e6: 2d:fc:aa:f0:58:6b:5f:c6:d3:be:81:66:1c:65:b9: e5:fd:33:c6:5a:5a:7d:45:21:90:98:37:20:07:df: f1:d6:1b:07:f7:1b:4e:87:e3:70:89:32:3d:45:e8: 5b:fe:20:d8:c2:4c:fc:2d:80:31:f3:26:bc:fa:8d: 05:2f:1a:33:04:3e:b0:6f:07:a2:d4:26:24:b4:bf: 13:26:71:fb:5f:c2:30:a6:00:2e:fa:99:22:ad:f4: be:c7:8b:00:79:54:c8:cf:98:f2:65:04:12:e3:48: c3:44:2d:d7:7f:af:4d:24:35:09:90:6c:06:c3:f8: 1f:06:33:e8:19:6d:f2:83:31:ad:6d:55:8b:00:d3: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5D:13:A7:A4:A0:72:AA:6D:64:97:A6:D4:CD:C2:F8:2D:11:44:EE X509v3 Authority Key Identifier: keyid:8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:1f:90:10:a0:fa:d1:45:d0:3f:43:31:87:6b:b8:37:71:66: b7:6e:3c:cc:a8:b2:ef:40:84:68:15:3d:30:26:09:ac:6a:ff: d6:47:bd:6f:e1:ef:39:94:34:ae:59:a2:87:d4:61:29:9d:e1: 14:a3:e8:d5:0c:a7:2f:d2:d3:11:c6:d2:26:6f:b4:8f:96:fc: de:43:53:35:ca:b0:5b:81:66:2d:28:32:59:34:62:50:ba:0e: 27:78:6d:4d:46:b3:b0:76:64:88:b9:17:de:a6:9f:d3:77:d6: 91:6c:de:bf:9e:dd:d5:9f:7a:d1:79:96:68:29:d1:74:a2:47: dc:e4:13:f4:98:09:55:c7:1e:5e:96:88:0e:91:c9:d7:bd:2c: 55:26:92:33:4c:05:6e:59:1f:48:cb:b0:7e:50:fc:0f:54:14: 9e:9f:c1:20:88:13:0f:b4:9c:88:88:24:94:01:bc:b3:4d:d7: 72:da:ad:98:00:ec:ed:6a:87:3a:e9:da:28:bb:14:20:eb:80: cd:b4:e3:c0:48:b5:c8:db:b2:a0:1c:98:40:98:15:5f:38:ca: c7:33:a1:f4:9c:85:ac:7e:e7:f5:9f:68:cd:44:1e:09:3a:35: 27:a8:cf:85:1d:6b:06:3f:ca:7d:b6:47:65:be:db:1c:fe:0f: 97:6c:2c:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSe27Ji07d8nP1SDbRJRXboWlTZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4RkRF RTcxRDE0NDAeFw0yNjA5MTYyMTMwNDJaFw0yNjA5MTcyMjI3NDJaMDMxMTAvBgNV BAMTKEU0NUQxM0E3QTRBMDcyQUE2RDY0OTdBNkQ0Q0RDMkY4MkQxMTQ0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC77Bv7ox4ZeNS5XTSLsY/57bQv P0nu2/KAGKgsXZuRVW35wniHMKvOGC40cj+sA44GeKoy4wmAUdp4QT3qRQHvWxh2 vK4csaThyXViHy5wgvaHrEdEGuPz2lc7VtPG5LjDcjjHvNZwVldbqoON6VVRBqSA dptx5i38qvBYa1/G076BZhxlueX9M8ZaWn1FIZCYNyAH3/HWGwf3G06H43CJMj1F 6Fv+INjCTPwtgDHzJrz6jQUvGjMEPrBvB6LUJiS0vxMmcftfwjCmAC76mSKt9L7H iwB5VMjPmPJlBBLjSMNELdd/r00kNQmQbAbD+B8GM+gZbfKDMa1tVYsA0+LJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5F0Tp6SgcqptZJem1M3C+C0RRO4wHwYDVR0j BBgwFoAUjdcQU032iqsINh7igwa4/e5x0UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjcyNGU0NWItMjU0Yi00ZmViLWJmOGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0 REY2OEFBQjA4MzYxRUUyODMwNkI4RkRFRTcxRDE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84REQ3MTA1MzRERjY4QUFCMDgzNjFFRTI4MzA2QjhGREVFNzFE MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4 RkRFRTcxRDE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcfkBCg+tFF0D9DMYdruDdxZrduPMyosu9A hGgVPTAmCaxq/9ZHvW/h7zmUNK5ZoofUYSmd4RSj6NUMpy/S0xHG0iZvtI+W/N5D UzXKsFuBZi0oMlk0YlC6Did4bU1Gs7B2ZIi5F96mn9N31pFs3r+e3dWfetF5lmgp 0XSiR9zkE/SYCVXHHl6WiA6Ryde9LFUmkjNMBW5ZH0jLsH5Q/A9UFJ6fwSCIEw+0 nIiIJJQBvLNN13LarZgA7O1qhzrp2ii7FCDrgM2048BItcjbsqAcmECYFV84yscz ofSchax+5/WfaM1EHgk6NSeoz4UdawY/yn22R2W+2xz+D5dsLKo= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:21 2026 by rpki-client