$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft File: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft (raw, json) Hash identifier: fIU5iRLZt7enGJ0awJXBiAgj6KF1fN9axsJ7p0DF2Pg= Subject key identifier: 5D:37:FC:15:2B:DF:4B:45:7E:94:82:32:91:67:00:21:99:A2:E7:08 Authority key identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F Certificate issuer: /CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Certificate serial: 56E68D13FEB5C17845F6781C1866381EB87FCEF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:59:46 +0000 Manifest this update: Thu 17 Sep 2026 00:54:46 +0000 Manifest next update: Fri 18 Sep 2026 04:20:46 +0000 Files and hashes: 1: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: BSuw1whkNZvJE4R4/j402PtZbyO7u4uvse4a8U9c4JA=) 2: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: 4zjQiDOO1u6032UYBIQ3bbHO8yvV/zbc51HnTLw1PKM=) 3: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl (hash: 2YchGtEJfU5JEc6hEeZrbyZsE3DFrw3LeHUDVdMyyRw=) 4: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: aqo6iqJhHng8SceS0GB2zDkvhHekA+jqXPQYRYjWZBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e6:8d:13:fe:b5:c1:78:45:f6:78:1c:18:66:38:1e:b8:7f:ce:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Validity Not Before: Sep 17 00:54:46 2026 GMT Not After : Sep 18 04:20:46 2026 GMT Subject: CN=5D37FC152BDF4B457E9482329167002199A2E708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:db:1b:2a:f5:7e:b7:6f:33:76:c8:9e:fb: 59:9d:3c:68:13:b4:dd:07:c0:b8:c1:c0:61:d4:90: b0:f9:27:79:8a:4b:0d:08:3b:c6:60:d0:57:d3:b8: 3a:30:95:27:c3:3d:c1:53:69:28:88:a6:80:d8:f9: b5:3a:d3:63:15:62:d9:b2:63:d6:32:46:cb:97:34: 4c:9e:10:01:44:50:58:7d:4b:07:5a:f4:61:0b:14: 8b:4f:80:85:14:3e:e4:75:21:e3:96:3d:2f:cf:77: 5c:18:fc:dc:97:09:8c:4c:6f:41:dd:7e:a8:9f:e8: 6e:c2:92:5d:f5:66:28:eb:fc:6f:d1:bc:4a:a6:bd: be:08:60:57:7c:dc:af:f1:2f:da:1a:bf:d9:93:45: f9:13:88:65:5f:9d:aa:f2:6a:23:1c:18:5c:9a:02: ac:de:b6:21:1b:c9:f8:66:c6:75:61:b6:8d:e0:aa: 0f:1f:07:f8:e2:5a:35:ff:41:51:de:0b:d9:ff:7f: 7d:8b:b1:56:d9:47:57:63:f2:af:86:b2:0f:0b:d7: 84:a6:57:00:49:f6:63:b4:2a:a5:a3:10:4f:b4:ac: b7:02:18:6e:62:ad:5b:e3:a6:9f:2f:25:73:de:a5: 77:1d:ce:cc:bd:10:47:13:fb:85:a1:3d:e7:6e:a9: ac:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:37:FC:15:2B:DF:4B:45:7E:94:82:32:91:67:00:21:99:A2:E7:08 X509v3 Authority Key Identifier: keyid:D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:82:ed:ab:c6:c6:85:ee:2e:a2:18:50:ec:8d:c8:67:6f:b3: 0d:16:f7:d1:b2:dd:ff:47:22:98:b3:9b:7b:e0:3c:34:a9:3d: c7:2f:0f:3d:e6:0e:9d:d4:02:5d:f6:05:27:1c:e4:46:51:0e: 79:cb:91:8c:5a:76:f9:5a:1f:2d:c6:e8:21:29:c1:82:b7:3c: d8:b8:a8:99:a9:ea:c4:ff:00:59:54:c8:5d:0a:7d:8f:59:75: 1d:e1:3c:c5:cc:2f:6c:46:eb:c2:b1:51:ec:c2:6b:79:05:6e: f3:67:fb:27:11:d2:ed:a7:f6:39:33:33:2d:62:a1:de:d7:fa: c6:97:64:9c:ee:88:b2:a4:6c:a8:8e:77:53:7a:0c:f5:0c:46: 78:a6:5f:09:53:75:c6:8d:14:93:01:f8:8c:66:ab:93:a8:e7: b8:26:a1:67:70:ae:d5:d1:e0:ca:1b:75:b2:72:83:40:8f:c1: e9:49:c1:84:cd:a0:82:62:98:6e:cc:27:35:7c:c9:9e:b0:e0: 25:43:13:82:77:1f:4b:cc:bc:73:f5:61:dd:82:67:89:ed:54: 14:d7:60:7f:81:4b:c0:14:80:ed:fb:e7:fc:1e:f9:6c:7c:1a: 5a:58:8f:b9:6e:85:3c:00:1b:ba:72:d2:21:3c:08:36:ce:92: 06:d0:4f:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVuaNE/61wXhF9ngcGGY4Hrh/zvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0 NkYyOUQ3RjAeFw0yNjA5MTcwMDU0NDZaFw0yNjA5MTgwNDIwNDZaMDMxMTAvBgNV BAMTKDVEMzdGQzE1MkJERjRCNDU3RTk0ODIzMjkxNjcwMDIxOTlBMkU3MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl09sbKvV+t28zdsie+1mdPGgT tN0HwLjBwGHUkLD5J3mKSw0IO8Zg0FfTuDowlSfDPcFTaSiIpoDY+bU602MVYtmy Y9YyRsuXNEyeEAFEUFh9Swda9GELFItPgIUUPuR1IeOWPS/Pd1wY/NyXCYxMb0Hd fqif6G7Ckl31Zijr/G/RvEqmvb4IYFd83K/xL9oav9mTRfkTiGVfnaryaiMcGFya AqzetiEbyfhmxnVhto3gqg8fB/jiWjX/QVHeC9n/f32LsVbZR1dj8q+Gsg8L14Sm VwBJ9mO0KqWjEE+0rLcCGG5irVvjpp8vJXPepXcdzsy9EEcT+4WhPeduqazfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXTf8FSvfS0V+lIIykWcAIZmi5wgwHwYDVR0j BBgwFoAU2Mt/i1Zm4H5Xy+/AI8b2A0bynX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM2YWIwNGQtNjhjNy00MjQ5LWIxMDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1 NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0NkYyOUQ3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOENCN0Y4QjU2NjZFMDdFNTdDQkVGQzAyM0M2RjYwMzQ2RjI5 RDdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2 MDM0NkYyOUQ3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOC7avGxoXuLqIYUOyNyGdvsw0W99Gy3f9H Ipizm3vgPDSpPccvDz3mDp3UAl32BScc5EZRDnnLkYxadvlaHy3G6CEpwYK3PNi4 qJmp6sT/AFlUyF0KfY9ZdR3hPMXML2xG68KxUezCa3kFbvNn+ycR0u2n9jkzMy1i od7X+saXZJzuiLKkbKiOd1N6DPUMRnimXwlTdcaNFJMB+Ixmq5Oo57gmoWdwrtXR 4MobdbJyg0CPwelJwYTNoIJimG7MJzV8yZ6w4CVDE4J3H0vMvHP1Yd2CZ4ntVBTX YH+BS8AUgO375/we+Wx8GlpYj7luhTwAG7py0iE8CDbOkgbQT9g= -----END CERTIFICATE-----Generated at Thu Sep 17 14:24:01 2026 by rpki-client