$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft File: 8638D28E3BD2280125963C7B30C34A226398A39F.mft (raw, json) Hash identifier: zSosroRvbzm6xiCLiQwFZLbwkZ8ZkzikH6rPzoNTqUY= Subject key identifier: 3F:25:F2:63:B2:E7:CD:A1:D5:15:28:9C:13:E2:B9:D9:3D:26:85:7A Authority key identifier: 86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F Certificate issuer: /CN=8638D28E3BD2280125963C7B30C34A226398A39F Certificate serial: 63056987ED9A65A3B42D13E63B6956AC47364B89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:40:43 +0000 Manifest this update: Wed 16 Sep 2026 21:35:43 +0000 Manifest next update: Thu 17 Sep 2026 23:53:43 +0000 Files and hashes: 1: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: K8RuD4iVWNDoq5/nKnK+l+BvrNOPQLNp6COtNPtCMfY=) 2: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: 7CUUFxXBF00bkdoTMxFKQ2ao9fNDKa33JZ3nwQoI/v0=) 3: 8638D28E3BD2280125963C7B30C34A226398A39F.crl (hash: LX22sFTozlHOSRQu8RFxqzSQOgc/LD5rav1/xATqmPM=) 4: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 9/PIsC2XMlKZxB7OIm0Zr26jWW2WY5JodvXs3A+orYA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:05:69:87:ed:9a:65:a3:b4:2d:13:e6:3b:69:56:ac:47:36:4b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8638D28E3BD2280125963C7B30C34A226398A39F Validity Not Before: Sep 16 21:35:43 2026 GMT Not After : Sep 17 23:53:43 2026 GMT Subject: CN=3F25F263B2E7CDA1D515289C13E2B9D93D26857A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c7:fd:0b:fa:55:bc:b0:1d:c6:45:ee:12:21: 32:0b:8a:de:c9:06:40:b0:76:27:55:44:f7:e5:5b: a5:62:34:f9:c3:c7:8b:e2:54:ce:ed:cb:d2:4d:dd: 2d:9b:24:86:b0:0f:8c:53:31:67:60:3a:96:46:2e: 75:41:f9:8a:ad:2c:57:dc:34:eb:7c:56:79:10:ec: 18:1e:f0:b2:48:b8:64:cf:dd:30:98:47:4b:63:0c: 4f:72:43:32:2d:26:3f:0b:e4:d8:56:32:68:81:dd: 82:20:fc:de:61:5d:03:5b:1c:2f:d5:9d:94:ac:07: 85:91:2b:e7:06:9f:cb:49:28:64:59:9e:a6:b9:d6: 50:64:ea:1f:bd:6b:95:d7:87:87:a0:a7:e0:83:93: f7:5c:ad:77:9a:eb:36:8d:e0:fa:8c:9d:14:e1:1b: 82:be:b1:db:90:c4:16:14:94:8d:86:f8:a8:97:c6: 36:e4:c7:e9:ee:eb:33:fa:aa:88:cf:d8:d0:57:06: ee:c0:10:2f:f1:d1:e1:0f:e5:96:b5:78:ce:7c:e0: 58:ed:60:6d:3d:8c:51:0e:b0:b9:2f:7f:69:2e:cb: 4d:85:4b:ee:ad:4c:cc:4d:b8:c5:c2:5f:95:80:69: 83:2a:49:75:dd:d2:c7:8d:80:d8:61:7c:90:ab:60: 3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:25:F2:63:B2:E7:CD:A1:D5:15:28:9C:13:E2:B9:D9:3D:26:85:7A X509v3 Authority Key Identifier: keyid:86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:6c:6d:05:cf:90:97:ef:56:24:ed:56:d1:af:64:3c:36:3a: 4f:2d:31:ea:17:36:f4:e4:e6:66:1b:00:41:e7:f4:78:12:02: 23:f6:75:1a:00:4c:bc:4c:93:7e:f8:29:dd:b3:8a:a9:2a:77: 28:30:17:90:ca:b4:29:2b:72:fc:ad:99:93:5e:af:a2:2a:9b: 6e:28:bc:52:74:8d:6a:63:11:a8:3b:df:a6:1d:f4:ba:dd:2c: 36:25:5f:5f:d3:59:38:a2:51:e6:fa:39:ce:5c:ca:f5:a8:84: 58:a7:cf:8c:e7:ab:60:e0:82:1d:9c:7c:e7:03:12:f6:38:a6: 63:27:21:66:7c:32:26:91:c1:6a:9b:5b:e0:4b:a5:bd:0c:60: a3:de:45:89:98:21:8a:2a:50:4f:40:2c:9b:5b:99:8b:8a:b0: 22:bc:fd:89:8c:cd:da:03:f3:e6:db:08:a5:9d:e2:c9:cc:0f: 88:15:48:7f:1f:9d:32:c3:81:d9:cb:73:78:3c:d3:76:5d:cd: bf:88:42:8b:40:20:96:28:e4:85:0c:20:4d:1f:c0:6a:f5:55: f5:60:77:a2:cd:3c:97:08:0f:dc:cd:ea:ab:c8:de:92:28:d4: 06:4b:e5:ed:24:9c:69:43:2a:69:e8:78:03:5a:6a:45:47:08: f9:ea:23:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYwVph+2aZaO0LRPmO2lWrEc2S4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2 Mzk4QTM5RjAeFw0yNjA5MTYyMTM1NDNaFw0yNjA5MTcyMzUzNDNaMDMxMTAvBgNV BAMTKDNGMjVGMjYzQjJFN0NEQTFENTE1Mjg5QzEzRTJCOUQ5M0QyNjg1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmx/0L+lW8sB3GRe4SITILit7J BkCwdidVRPflW6ViNPnDx4viVM7ty9JN3S2bJIawD4xTMWdgOpZGLnVB+YqtLFfc NOt8VnkQ7Bge8LJIuGTP3TCYR0tjDE9yQzItJj8L5NhWMmiB3YIg/N5hXQNbHC/V nZSsB4WRK+cGn8tJKGRZnqa51lBk6h+9a5XXh4egp+CDk/dcrXea6zaN4PqMnRTh G4K+sduQxBYUlI2G+KiXxjbkx+nu6zP6qojP2NBXBu7AEC/x0eEP5Za1eM584Fjt YG09jFEOsLkvf2kuy02FS+6tTMxNuMXCX5WAaYMqSXXd0seNgNhhfJCrYD2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPyXyY7LnzaHVFSicE+K52T0mhXowHwYDVR0j BBgwFoAUhjjSjjvSKAElljx7MMNKImOYo58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdmZjAxZDAtMjZmOS00YjIwLWEzMTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUz QkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2Mzk4QTM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjM4RDI4RTNCRDIyODAxMjU5NjNDN0IzMEMzNEEyMjYzOThB MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRB MjI2Mzk4QTM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZsbQXPkJfvViTtVtGvZDw2Ok8tMeoXNvTk 5mYbAEHn9HgSAiP2dRoATLxMk374Kd2ziqkqdygwF5DKtCkrcvytmZNer6Iqm24o vFJ0jWpjEag736Yd9LrdLDYlX1/TWTiiUeb6Oc5cyvWohFinz4znq2Dggh2cfOcD EvY4pmMnIWZ8MiaRwWqbW+BLpb0MYKPeRYmYIYoqUE9ALJtbmYuKsCK8/YmMzdoD 8+bbCKWd4snMD4gVSH8fnTLDgdnLc3g803Zdzb+IQotAIJYo5IUMIE0fwGr1VfVg d6LNPJcID9zN6qvI3pIo1AZL5e0knGlDKmnoeANaakVHCPnqI0U= -----END CERTIFICATE-----Generated at Thu Sep 17 15:21:22 2026 by rpki-client