$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft File: 8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft (raw, json) Hash identifier: mVoAxHEjWKymejaNpcOgMR5Xb+FfQ/vkZ68+t3MC3WE= Subject key identifier: 4A:E7:A0:BF:EC:75:D3:C6:2B:3F:3D:11:A6:D0:D4:0A:82:DF:BE:9A Authority key identifier: 87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC Certificate issuer: /CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC Certificate serial: 41CB4A304D0A6BF659D372FCA80DB78C17F6CC74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:11:25 +0000 Manifest this update: Wed 16 Sep 2026 22:06:25 +0000 Manifest next update: Thu 17 Sep 2026 22:43:25 +0000 Files and hashes: 1: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: ILEPt3NLdu2PTg7IxG5hw5UfVvO4+tHzRcaeRjRDOH8=) 2: 8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl (hash: rtxnzqNo3NmCqFb21iRF07Kxp4bG69y2q3zj20aPRY8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cb:4a:30:4d:0a:6b:f6:59:d3:72:fc:a8:0d:b7:8c:17:f6:cc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC Validity Not Before: Sep 16 22:06:25 2026 GMT Not After : Sep 17 22:43:25 2026 GMT Subject: CN=4AE7A0BFEC75D3C62B3F3D11A6D0D40A82DFBE9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:fb:c8:64:0d:e4:0a:f5:7c:11:a5:22:48: 44:e0:d0:02:03:68:c1:1c:86:4f:d8:fb:7f:ba:0f: 7d:81:8e:f4:5a:61:f4:d9:92:0a:03:96:e7:a8:2a: a3:ca:e3:44:57:75:9c:bd:1f:d7:42:10:a7:89:60: 3b:10:00:16:55:31:21:b3:24:4b:15:4a:ce:e1:43: 04:f7:98:85:3c:8c:44:96:26:09:b0:83:43:42:68: 51:00:22:09:db:56:01:7f:8d:e7:ca:a2:42:b8:26: 4c:dc:5c:38:83:1d:38:4b:a7:54:88:09:61:9f:99: 55:8a:4d:6a:2e:45:11:d2:d8:f5:bb:28:d6:24:ca: 70:04:19:66:4a:d6:b9:26:48:6c:0d:c1:14:e1:98: c1:f7:8f:16:79:09:02:f8:5a:88:23:dd:98:62:1e: 36:92:63:f6:40:5f:1a:96:32:5f:d1:a0:79:d2:2a: 71:e5:03:13:a2:38:51:02:e8:9d:37:52:7f:26:5a: 60:fc:db:64:19:29:98:68:03:ab:15:a8:fa:9b:78: 02:84:f8:e2:0e:84:a2:9c:79:96:74:b3:be:b6:7c: a2:c9:b0:e8:c7:78:c8:45:1f:95:d1:20:2b:2f:ea: cd:b7:90:0f:90:14:18:6b:f9:49:25:3f:68:a5:1a: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E7:A0:BF:EC:75:D3:C6:2B:3F:3D:11:A6:D0:D4:0A:82:DF:BE:9A X509v3 Authority Key Identifier: keyid:87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e8:9b:62:64:15:6e:cf:7b:19:61:76:2d:33:ac:40:71:df: 93:18:d7:5b:6e:53:af:97:4d:f7:1f:95:64:ba:c9:9d:3f:6d: 38:c5:62:17:c0:09:07:d5:5f:a8:09:d0:68:0c:22:eb:c5:88: 67:51:3d:18:64:d2:75:61:e1:19:aa:0a:8f:4f:c0:22:2b:41: 40:2d:70:c5:9a:83:7b:dd:cb:46:61:79:e3:4d:19:03:a5:99: 0f:a5:dc:4a:97:01:f0:5e:ed:95:cc:cc:61:ef:43:f8:da:41: b2:06:f3:34:74:5b:28:af:2a:17:f9:d3:b8:ee:2e:40:e5:23: 1c:e8:46:82:2e:d3:5b:76:76:d1:0c:c7:0a:72:34:39:9c:87: 1e:d3:3a:30:cf:5a:a2:9e:62:a5:6d:0b:03:02:01:d7:59:17: 35:24:ef:99:74:ad:c6:85:22:39:70:4d:79:fc:7a:b8:f8:5c: a8:94:4e:f5:74:fa:df:f7:95:f6:82:b1:28:fa:79:9f:9a:f5: c7:e9:17:fd:a8:5b:26:39:1c:64:ba:b7:c2:d1:55:58:cc:bf: 7c:6e:01:63:97:23:8b:df:54:51:82:57:d9:33:cb:9d:fd:a7: 05:df:0d:55:4e:71:eb:d2:d6:ad:89:36:a7:83:29:30:dc:5c: 80:64:00:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQctKME0Ka/ZZ03L8qA23jBf2zHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcwNUI1QjdGRDk3RUIyMDg5MkU4REI1QTdGN0JEMjNC RTgyNjhDQzAeFw0yNjA5MTYyMjA2MjVaFw0yNjA5MTcyMjQzMjVaMDMxMTAvBgNV BAMTKDRBRTdBMEJGRUM3NUQzQzYyQjNGM0QxMUE2RDBENDBBODJERkJFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdv/vIZA3kCvV8EaUiSETg0AID aMEchk/Y+3+6D32BjvRaYfTZkgoDlueoKqPK40RXdZy9H9dCEKeJYDsQABZVMSGz JEsVSs7hQwT3mIU8jESWJgmwg0NCaFEAIgnbVgF/jefKokK4JkzcXDiDHThLp1SI CWGfmVWKTWouRRHS2PW7KNYkynAEGWZK1rkmSGwNwRThmMH3jxZ5CQL4Wogj3Zhi HjaSY/ZAXxqWMl/RoHnSKnHlAxOiOFEC6J03Un8mWmD822QZKZhoA6sVqPqbeAKE +OIOhKKceZZ0s762fKLJsOjHeMhFH5XRICsv6s23kA+QFBhr+UklP2ilGvLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSuegv+x108YrPz0RptDUCoLfvpowHwYDVR0j BBgwFoAUhwW1t/2X6yCJLo21p/e9I76CaMwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWI3NGVjZTYtODgwYy00Y2VmLWFkZDItNzc3MTllYmVkZWM5LzAvODcwNUI1QjdG RDk3RUIyMDg5MkU4REI1QTdGN0JEMjNCRTgyNjhDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzA1QjVCN0ZEOTdFQjIwODkyRThEQjVBN0Y3QkQyM0JFODI2 OENDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvODcwNUI1QjdGRDk3RUIyMDg5MkU4REI1QTdGN0JE MjNCRTgyNjhDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvom2JkFW7Pexlhdi0zrEBx35MY11tuU6+X TfcflWS6yZ0/bTjFYhfACQfVX6gJ0GgMIuvFiGdRPRhk0nVh4RmqCo9PwCIrQUAt cMWag3vdy0ZheeNNGQOlmQ+l3EqXAfBe7ZXMzGHvQ/jaQbIG8zR0WyivKhf507ju LkDlIxzoRoIu01t2dtEMxwpyNDmchx7TOjDPWqKeYqVtCwMCAddZFzUk75l0rcaF IjlwTXn8erj4XKiUTvV0+t/3lfaCsSj6eZ+a9cfpF/2oWyY5HGS6t8LRVVjMv3xu AWOXI4vfVFGCV9kzy539pwXfDVVOcevS1q2JNqeDKTDcXIBkAG8= -----END CERTIFICATE-----Generated at Thu Sep 17 09:16:26 2026 by rpki-client