$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft File: 8D7E0574648D2E037D2147F409FC002E56E42A23.mft (raw, json) Hash identifier: glROTIMY4A99a+Ha5K35Trfky2/XeEcOAd0iYlrgE/Q= Subject key identifier: B6:1C:85:7E:BE:A7:43:DE:B3:CC:8D:90:E6:54:65:36:5E:BF:2E:D1 Authority key identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 Certificate issuer: /CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Certificate serial: 187E112C3ED30B190C1C09EC2529396B743EE459 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft Manifest number: A2 Signing time: Mon 31 Aug 2026 18:32:52 +0000 Manifest this update: Mon 31 Aug 2026 18:27:52 +0000 Manifest next update: Tue 01 Sep 2026 19:34:52 +0000 Files and hashes: 1: 8D7E0574648D2E037D2147F409FC002E56E42A23.crl (hash: i5RJpAkSjv1v9AJ5IKtD3oZrpsa9sRdu5jSGg54iPDs=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: Wh9jPiaMLmpVJg4WJmhSTDv7ObmHyLTAXzkGZmow5b0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 19:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7e:11:2c:3e:d3:0b:19:0c:1c:09:ec:25:29:39:6b:74:3e:e4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Validity Not Before: Aug 31 18:27:52 2026 GMT Not After : Sep 1 19:34:52 2026 GMT Subject: CN=B61C857EBEA743DEB3CC8D90E65465365EBF2ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:3d:08:74:d5:93:1d:0d:12:23:c1:1d:bd: 0a:7f:26:27:e1:88:51:8c:d9:48:c4:8a:a0:ab:d6: 24:55:d1:d9:a1:75:c3:66:ec:28:b9:fd:17:b4:54: 89:13:69:b1:cc:80:8d:ce:8b:c4:5d:95:bf:5f:fd: 68:a1:87:c7:b0:4d:02:dc:3c:1f:9f:24:74:8d:cc: aa:d3:a5:ca:1a:45:e3:1a:43:09:e2:15:dc:7b:ca: 6c:a0:3a:07:4e:b0:3d:ea:ff:4d:ab:05:c2:cb:8b: f8:68:e2:4e:e3:99:c7:e1:68:71:eb:56:b5:13:f9: 0b:fa:27:cd:12:40:28:c9:95:7a:ad:3f:58:67:88: 7e:e9:66:66:34:36:9a:cb:af:20:8c:74:a9:67:49: ba:63:77:3b:a6:f1:33:53:9c:89:60:8b:11:d3:c0: 83:61:d5:ad:92:89:d8:ad:fa:24:0b:79:2f:0b:4f: 6e:04:b6:f0:af:90:6e:98:78:c7:6e:b9:a0:d2:9e: 61:7d:5d:e2:55:4e:b0:a9:8b:f6:af:2f:ca:44:75: fc:3a:f5:7c:9d:e8:27:0b:33:37:f6:32:1e:ff:36: 84:1e:a5:ef:f6:76:03:85:ad:9c:7f:5f:76:33:8e: 39:90:7f:52:ae:f8:74:a0:18:32:af:45:c6:ed:e1: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1C:85:7E:BE:A7:43:DE:B3:CC:8D:90:E6:54:65:36:5E:BF:2E:D1 X509v3 Authority Key Identifier: keyid:8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ef:d2:d0:0c:43:bd:0b:21:a6:5e:75:73:d2:0b:64:81:42: 0d:a3:ee:06:1d:95:2c:ba:74:ee:21:02:fd:4e:cf:5d:35:bd: c5:a6:c2:a4:46:a1:ab:f5:37:b0:39:bb:b9:1c:66:ec:b1:ac: f1:a4:44:5b:80:3e:67:b9:67:96:a2:f6:65:46:3c:d3:88:99: 93:98:34:61:aa:19:b5:0b:ae:80:03:f4:53:0e:b4:4b:5b:47: b8:52:9c:b7:11:4f:67:6a:80:9b:7d:b2:6d:ae:43:85:7e:a5: f3:86:27:c9:2b:ae:e9:b7:5f:0c:b2:e4:75:1a:39:aa:86:ca: 20:0a:53:75:38:97:d7:5c:4e:65:90:b5:ee:7b:6f:76:bc:b5: b6:c9:98:66:f7:f9:08:c1:1d:cc:f2:2f:42:aa:4d:0d:0c:90: 79:6c:99:3b:49:0a:e4:f8:28:6b:db:53:f0:90:61:55:bb:a3: 6b:51:47:e9:df:f7:f8:6f:01:6f:4e:04:54:8c:76:78:05:83: 1c:c5:56:bd:8d:fe:da:48:21:08:11:32:83:61:67:16:fd:46: 62:20:10:9a:ed:13:7e:0b:5d:75:7d:09:9a:22:4f:b3:fa:e4: 2a:6e:7f:9c:b4:14:ad:18:c2:98:3f:26:3e:f3:ed:5d:aa:4b: e3:cc:5f:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGH4RLD7TCxkMHAnsJSk5a3Q+5FkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1 NkU0MkEyMzAeFw0yNjA4MzExODI3NTJaFw0yNjA5MDExOTM0NTJaMDMxMTAvBgNV BAMTKEI2MUM4NTdFQkVBNzQzREVCM0NDOEQ5MEU2NTQ2NTM2NUVCRjJFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgT0IdNWTHQ0SI8EdvQp/Jifh iFGM2UjEiqCr1iRV0dmhdcNm7Ci5/Re0VIkTabHMgI3Oi8Rdlb9f/Wihh8ewTQLc PB+fJHSNzKrTpcoaReMaQwniFdx7ymygOgdOsD3q/02rBcLLi/ho4k7jmcfhaHHr VrUT+Qv6J80SQCjJlXqtP1hniH7pZmY0NprLryCMdKlnSbpjdzum8TNTnIlgixHT wINh1a2Sidit+iQLeS8LT24EtvCvkG6YeMduuaDSnmF9XeJVTrCpi/avL8pEdfw6 9Xyd6CcLMzf2Mh7/NoQepe/2dgOFrZx/X3YzjjmQf1Ku+HSgGDKvRcbt4R8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUthyFfr6nQ96zzI2Q5lRlNl6/LtEwHwYDVR0j BBgwFoAUjX4FdGSNLgN9IUf0CfwALlbkKiMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2 NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1NkU0MkEyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDdFMDU3NDY0OEQyRTAzN0QyMTQ3RjQwOUZDMDAyRTU2RTQy QTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAw MkU1NkU0MkEyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTv0tAMQ70LIaZedXPSC2SBQg2j7gYdlSy6 dO4hAv1Oz101vcWmwqRGoav1N7A5u7kcZuyxrPGkRFuAPme5Z5ai9mVGPNOImZOY NGGqGbULroAD9FMOtEtbR7hSnLcRT2dqgJt9sm2uQ4V+pfOGJ8krrum3Xwyy5HUa OaqGyiAKU3U4l9dcTmWQte57b3a8tbbJmGb3+QjBHczyL0KqTQ0MkHlsmTtJCuT4 KGvbU/CQYVW7o2tRR+nf9/hvAW9OBFSMdngFgxzFVr2N/tpIIQgRMoNhZxb9RmIg EJrtE34LXXV9CZoiT7P65Cpuf5y0FK0Ywpg/Jj7z7V2qS+PMX7w= -----END CERTIFICATE-----Generated at Tue Sep 1 06:22:05 2026 by rpki-client