$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft File: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft (raw, json) Hash identifier: acusM3U7vwmCaESrXmz2epCQqluX6mzO5aqDt7bkT8c= Subject key identifier: D0:C4:EE:07:0E:BB:83:4B:ED:07:01:54:00:BC:1D:4F:1C:97:8D:7A Authority key identifier: F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 Certificate issuer: /CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Certificate serial: 220EADE58186D790780BF8BCD23A79837F332E69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:28:59 +0000 Manifest this update: Thu 17 Sep 2026 04:23:59 +0000 Manifest next update: Fri 18 Sep 2026 06:13:59 +0000 Files and hashes: 1: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: prj58PGbUwDLvrT9h5jO7nMgDDmjvocJnN5ph+z3PrU=) 2: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ebJX0xmBUCyzAXEckdnMbEf0pSEsLD4g9s9OXuyGYmM=) 3: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl (hash: g0Z8zRx4e5fv0zg3OY7xj0ZavbkA0hiOJRlDX2+AuMQ=) 4: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: rPbVerJ1hIqpxViNC0hFDNp8HCiflf0mjWJTLUhjlFU=) 5: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: VGZWopnP5E+cpki2YrX/ob7V+wdxOvea5qW0A+eDkWM=) 6: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: 9E/Ti671GF/WZdUwZ2RH1G2YB9kJfWY4JlzPZetlvoI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0e:ad:e5:81:86:d7:90:78:0b:f8:bc:d2:3a:79:83:7f:33:2e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Validity Not Before: Sep 17 04:23:59 2026 GMT Not After : Sep 18 06:13:59 2026 GMT Subject: CN=D0C4EE070EBB834BED07015400BC1D4F1C978D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:04:67:d6:22:2b:99:cd:ef:ba:b9:6a:9f: 59:b4:75:1d:eb:b7:94:26:98:2c:f4:b0:65:f4:b7: 79:4d:e0:b7:29:fb:ed:fb:c6:35:4b:f8:25:30:d1: 8e:c4:5c:91:b9:20:08:59:7e:15:34:81:77:8f:0c: 53:09:14:90:53:0e:69:42:b2:57:fc:05:2f:67:5c: b4:4f:55:35:e6:a7:8d:0f:20:04:a8:17:29:42:bc: ee:d1:06:dd:c6:09:43:87:15:b3:22:a8:27:01:53: 01:6e:43:c5:2a:2e:52:a2:5c:d1:87:24:ba:5c:3a: 35:7c:3d:01:2a:a6:90:81:1d:6b:6a:fc:c5:cc:f8: ca:87:7d:e5:1b:dd:5b:68:6c:6c:40:8a:6a:45:bc: b3:67:c1:df:cd:c2:09:77:24:8d:c6:51:f0:19:61: 58:f7:58:0c:aa:e9:d6:28:9b:46:d8:6a:cd:ee:13: f0:c5:42:ae:b9:fb:84:28:79:6f:1e:74:02:a1:57: 84:e7:af:de:90:67:37:cb:1d:dc:ac:65:cf:21:1b: cd:aa:7e:36:ea:9f:71:ee:fc:97:8e:31:78:8e:1a: fd:d9:44:e4:38:3d:73:8a:97:4f:de:9c:d6:9c:ec: a0:85:7a:c1:5b:aa:65:65:18:23:54:68:67:2f:f9: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C4:EE:07:0E:BB:83:4B:ED:07:01:54:00:BC:1D:4F:1C:97:8D:7A X509v3 Authority Key Identifier: keyid:F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a1:f6:04:7a:cf:95:3f:65:bb:85:71:0b:19:ab:c1:6b:a7: 2d:82:16:f2:e8:7d:e0:74:2c:cb:6c:aa:3d:ee:9b:ab:31:b7: fe:98:83:35:51:07:e1:fc:06:16:84:b9:87:16:1d:dd:37:e5: e6:4b:82:fd:8a:a6:8c:9c:ff:d4:f0:7f:62:48:54:3f:1b:eb: 65:d6:1b:a6:37:da:1f:04:e1:05:6a:1e:c2:85:a2:99:47:76: 1a:7b:93:a6:a5:b2:cc:cb:b6:b6:bb:b1:15:d4:9f:c8:31:3d: cc:d3:f4:ac:d3:5b:b3:ae:12:4c:79:e5:3e:91:ad:4b:57:14: 04:31:ab:07:df:b2:b8:fc:0c:62:2d:8e:ca:2a:a2:25:89:20: d4:c1:fc:2d:db:9f:46:6f:3a:9f:a8:f6:4e:6e:19:f8:96:23: d5:ee:e8:91:57:6b:78:66:11:0a:32:f1:44:ba:74:53:56:12: 95:4f:89:d0:75:09:63:f3:72:0d:d1:a3:a1:9d:04:1c:33:39: 63:b4:ab:a2:1a:aa:ea:cb:c7:69:7f:69:e5:b8:7c:b7:64:5a: 3e:91:3a:0c:c7:9a:06:e3:9e:0e:4e:6a:43:64:83:2b:b4:5e: 4a:c7:88:b7:15:b8:f4:2f:7b:5b:4e:7e:5a:3c:77:5d:7e:c0: 37:13:ae:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIg6t5YGG15B4C/i80jp5g38zLmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlC MUVCRDIxNDAeFw0yNjA5MTcwNDIzNTlaFw0yNjA5MTgwNjEzNTlaMDMxMTAvBgNV BAMTKEQwQzRFRTA3MEVCQjgzNEJFRDA3MDE1NDAwQkMxRDRGMUM5NzhEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfQRn1iIrmc3vurlqn1m0dR3r t5QmmCz0sGX0t3lN4Lcp++37xjVL+CUw0Y7EXJG5IAhZfhU0gXePDFMJFJBTDmlC slf8BS9nXLRPVTXmp40PIASoFylCvO7RBt3GCUOHFbMiqCcBUwFuQ8UqLlKiXNGH JLpcOjV8PQEqppCBHWtq/MXM+MqHfeUb3VtobGxAimpFvLNnwd/Nwgl3JI3GUfAZ YVj3WAyq6dYom0bYas3uE/DFQq65+4QoeW8edAKhV4Tnr96QZzfLHdysZc8hG82q fjbqn3Hu/JeOMXiOGv3ZROQ4PXOKl0/enNac7KCFesFbqmVlGCNUaGcv+eL5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0MTuBw67g0vtBwFUALwdTxyXjXowHwYDVR0j BBgwFoAU+OnUjRfMOONMv8dLXAf0qbHr0hQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOGQ5MDgtMWI5OS00NTVjLWFjNzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQx N0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlCMUVCRDIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEU5RDQ4RDE3Q0MzOEUzNENCRkM3NEI1QzA3RjRBOUIxRUJE MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0 QTlCMUVCRDIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6h9gR6z5U/ZbuFcQsZq8Frpy2CFvLofeB0 LMtsqj3um6sxt/6YgzVRB+H8BhaEuYcWHd035eZLgv2Kpoyc/9Twf2JIVD8b62XW G6Y32h8E4QVqHsKFoplHdhp7k6alsszLtra7sRXUn8gxPczT9KzTW7OuEkx55T6R rUtXFAQxqwffsrj8DGItjsoqoiWJINTB/C3bn0ZvOp+o9k5uGfiWI9Xu6JFXa3hm EQoy8US6dFNWEpVPidB1CWPzcg3Ro6GdBBwzOWO0q6IaqurLx2l/aeW4fLdkWj6R OgzHmgbjng5OakNkgyu0XkrHiLcVuPQve1tOflo8d11+wDcTruE= -----END CERTIFICATE-----Generated at Thu Sep 17 08:33:04 2026 by rpki-client