$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft File: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft (raw, json) Hash identifier: rAkKZeJHtmLz7yGSxcjcZjx2JSLOPXQ4Tyk6vZWyxhY= Subject key identifier: F5:1D:F5:28:40:D2:5E:78:E9:EF:3E:B3:10:EC:5E:CB:0A:10:12:4D Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 2E76427B566FE8E92FD225E227FC3987E67A6BBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:36:44 +0000 Manifest this update: Thu 17 Sep 2026 02:31:44 +0000 Manifest next update: Fri 18 Sep 2026 05:52:44 +0000 Files and hashes: 1: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: icfsfhUwquzTy2StQKBYwmmyOmAVCsssAYK5CyA5iDI=) 2: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl (hash: 3Y58vVqx8u4lLNJpBXHW82YHjDugVXe8nlcOZ9sNGmY=) 3: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: JuQ4cvsB/3E/np6OBFHLGq+Nt4mQQ/GxzLV4MrmhfZo=) 4: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E=) 5: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 0WsKsDzY8LPfrJ1pgXZgjbVmTWXixBFTK8YpHb3DNxU=) 6: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: FdEj2/miSrHrif/CfoOvLE1OV+PuSrA43YH+LmHuPRM=) 7: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=) 8: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: rkn+DI7lNxqSqCTlwACNzV0qOshNnDXKFLIZsdocYhE=) 9: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:76:42:7b:56:6f:e8:e9:2f:d2:25:e2:27:fc:39:87:e6:7a:6b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: Sep 17 02:31:44 2026 GMT Not After : Sep 18 05:52:44 2026 GMT Subject: CN=F51DF52840D25E78E9EF3EB310EC5ECB0A10124D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:35:78:b7:b6:55:7e:3f:6d:00:a0:13:0f: 94:c9:c6:55:57:5f:9c:4f:d5:28:1e:fe:5e:a6:ac: 76:e1:41:0b:cb:5a:f6:37:77:1a:cf:3e:f4:5f:b9: d0:95:6e:be:87:c3:16:29:5c:4d:49:17:ef:c3:06: 0d:6b:c0:7c:2c:a7:ee:6f:bf:06:e6:ec:70:1d:52: 8e:1c:d3:05:8a:7d:f7:4e:b7:c4:89:d8:57:ac:e4: 31:ae:08:f1:11:80:03:7a:85:0e:e7:ca:c1:c7:06: 96:dd:e6:ab:41:b4:ce:f6:17:d4:22:eb:f2:d6:d4: f0:ab:2c:34:68:bc:a1:b0:b4:75:ad:0f:0e:89:65: d3:99:ea:97:d4:b5:e4:31:3e:8e:9a:07:1c:11:8a: 4f:b9:50:eb:8d:70:aa:0a:42:c7:0c:c9:96:4f:e0: 89:6e:46:45:56:12:02:a9:f7:99:82:93:9a:1f:0c: e7:a8:8d:d1:56:74:7d:8e:a4:68:63:b6:51:f4:6e: 2e:45:97:04:ea:2c:6f:90:a0:5f:8a:dd:35:b9:9b: c3:d2:22:3b:27:2d:d9:0f:12:39:4b:fe:ec:ea:b3: 57:cd:3e:d2:92:cc:84:3c:29:ad:ce:56:9f:5e:af: 18:b8:98:06:ab:dd:54:f1:61:0d:72:b0:4c:1b:7e: 99:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1D:F5:28:40:D2:5E:78:E9:EF:3E:B3:10:EC:5E:CB:0A:10:12:4D X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d0:14:0a:1c:5c:1d:cd:40:b3:6c:19:11:85:9c:b6:18:00: 1c:d4:02:4d:ff:22:44:49:0d:53:48:5e:f2:05:9e:16:7a:3d: d7:60:87:d0:9a:5c:bc:a0:88:71:0b:4a:e7:86:86:e9:b7:49: de:2a:ae:80:cd:b0:80:13:13:87:0b:c4:73:76:7f:d6:11:70: 46:66:7c:bf:99:3a:42:bc:5d:7e:3f:df:13:8d:b8:6e:92:79: 1f:41:ee:dc:a5:11:22:f0:c5:39:8f:c6:48:7d:7b:32:42:77: 34:ba:d1:5e:43:3d:64:46:cd:4f:ad:88:16:87:e7:7a:06:ee: 2a:65:6d:ab:0a:9b:2c:11:3d:a1:78:a6:e5:22:0c:48:2d:1f: 9e:8f:09:78:65:19:d1:06:dc:29:08:70:34:7a:6d:82:2b:75: 01:50:cc:8c:7b:d3:6a:8f:96:9b:e0:b5:b7:17:44:94:20:b2: be:92:92:31:40:a5:b4:ec:d3:c5:76:24:b1:16:2e:f5:ed:29: 64:74:02:76:a1:7b:21:6f:f4:05:b4:49:84:75:25:2b:5a:dd: a7:29:44:d4:63:81:d2:98:49:38:e6:af:4b:a2:f3:40:3d:bc: d2:a5:0d:0d:00:8c:c6:98:dd:fe:f2:34:22:8c:68:a0:29:39: 09:24:37:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnZCe1Zv6Okv0iXiJ/w5h+Z6a74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjA5MTcwMjMxNDRaFw0yNjA5MTgwNTUyNDRaMDMxMTAvBgNV BAMTKEY1MURGNTI4NDBEMjVFNzhFOUVGM0VCMzEwRUM1RUNCMEExMDEyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzTV4t7ZVfj9tAKATD5TJxlVX X5xP1Sge/l6mrHbhQQvLWvY3dxrPPvRfudCVbr6HwxYpXE1JF+/DBg1rwHwsp+5v vwbm7HAdUo4c0wWKffdOt8SJ2Fes5DGuCPERgAN6hQ7nysHHBpbd5qtBtM72F9Qi 6/LW1PCrLDRovKGwtHWtDw6JZdOZ6pfUteQxPo6aBxwRik+5UOuNcKoKQscMyZZP 4IluRkVWEgKp95mCk5ofDOeojdFWdH2OpGhjtlH0bi5FlwTqLG+QoF+K3TW5m8PS IjsnLdkPEjlL/uzqs1fNPtKSzIQ8Ka3OVp9erxi4mAar3VTxYQ1ysEwbfpnBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9R31KEDSXnjp7z6zEOxeywoQEk0wHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUw NDI0RThDRUM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzQFAocXB3NQLNsGRGFnLYYABzUAk3/IkRJ DVNIXvIFnhZ6Pddgh9CaXLygiHELSueGhum3Sd4qroDNsIATE4cLxHN2f9YRcEZm fL+ZOkK8XX4/3xONuG6SeR9B7tylESLwxTmPxkh9ezJCdzS60V5DPWRGzU+tiBaH 53oG7iplbasKmywRPaF4puUiDEgtH56PCXhlGdEG3CkIcDR6bYIrdQFQzIx702qP lpvgtbcXRJQgsr6SkjFApbTs08V2JLEWLvXtKWR0AnaheyFv9AW0SYR1JSta3acp RNRjgdKYSTjmr0ui80A9vNKlDQ0AjMaY3f7yNCKMaKApOQkkN58= -----END CERTIFICATE-----Generated at Thu Sep 17 14:44:58 2026 by rpki-client