$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft File: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft (raw, json) Hash identifier: VDLwAqRBwzJaOTBIFW3732UNAkknpQmjexwy5REZAhM= Subject key identifier: 84:81:A0:CB:D7:86:D0:93:D1:AE:B0:96:7B:A5:D4:C0:5D:C3:DA:6A Authority key identifier: 08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB Certificate issuer: /CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Certificate serial: 5F161BC88D02653A3AFE01A4CD92D1C7849E0B37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 02:06:09 +0000 Manifest this update: Thu 17 Sep 2026 02:01:09 +0000 Manifest next update: Fri 18 Sep 2026 02:21:09 +0000 Files and hashes: 1: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: Mcg9nbFeFqcbrXtsnWz+m6gsNfmlAcJQ2rPda7V7VVk=) 2: 08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl (hash: zbX+1V2qmtYWmPOppdf3dYNqrdgMB6/4h5DqYhMdX6g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:16:1b:c8:8d:02:65:3a:3a:fe:01:a4:cd:92:d1:c7:84:9e:0b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB Validity Not Before: Sep 17 02:01:09 2026 GMT Not After : Sep 18 02:21:09 2026 GMT Subject: CN=8481A0CBD786D093D1AEB0967BA5D4C05DC3DA6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:94:b6:9c:56:b9:38:a7:5f:3f:64:1e:5a: 65:c4:51:11:8e:4e:15:92:6c:49:55:82:99:52:c5: c0:66:0b:8e:ce:f2:17:f6:3f:a8:7c:ea:d7:7a:fa: 1b:66:57:d9:d5:5c:ab:f8:1e:83:c3:4f:c0:a5:c2: 9c:41:f6:cb:8e:26:df:17:fd:f5:55:d8:fd:dd:24: bc:bd:a1:1b:9a:c0:da:cf:dd:73:25:10:f3:67:d4: f6:b9:22:0d:05:a8:8d:14:d4:82:6e:6a:f2:c1:31: 1d:1c:ac:f2:57:93:a3:c8:83:7d:82:2b:12:14:7e: 43:8b:b8:14:34:69:17:35:c5:2a:e0:d6:b9:e5:46: 26:a1:ca:03:2e:3e:10:2c:56:a3:3b:f8:f0:73:cb: e1:93:ae:90:d5:4a:d2:65:26:24:73:10:ac:be:7f: 8d:88:3b:1f:fb:5c:8e:83:3d:d5:0b:68:f2:21:55: 9d:40:21:57:d5:34:6b:ac:fc:f1:a2:b9:57:9c:f6: 62:6c:7a:09:3a:4d:fa:4d:38:2e:2d:20:43:fe:ad: 75:b2:30:8a:6e:a6:36:6d:e0:2b:3c:da:ba:5d:86: ed:dd:9d:4d:76:a7:c2:84:96:a6:67:73:1e:38:82: 64:da:f2:86:fb:a2:de:db:99:76:de:4e:b8:b6:b5: 8f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:81:A0:CB:D7:86:D0:93:D1:AE:B0:96:7B:A5:D4:C0:5D:C3:DA:6A X509v3 Authority Key Identifier: keyid:08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a3:1a:ff:9a:8f:0f:68:c0:c5:13:10:fc:91:cf:f9:0f:8b: d7:ad:40:c5:ed:86:fc:4c:77:a1:25:0c:61:34:7b:84:c1:8a: 07:72:28:02:d7:24:d0:19:ff:8d:15:c5:c2:6e:17:54:1c:bd: 69:a9:e8:81:76:34:74:73:f7:74:14:88:1e:52:a4:df:35:54: a4:cf:68:8a:d3:b2:a3:ed:8c:8d:74:12:96:89:b5:93:dd:a4: 0c:60:90:ae:f6:8f:17:4e:a0:9c:36:04:07:52:e1:59:20:50: 44:31:8d:d0:d1:2c:2f:d2:17:9d:46:b2:b0:85:8e:14:94:d9: 68:f9:e9:86:25:6c:30:cc:c9:68:5f:de:e8:4f:5b:66:f3:da: cb:ed:6f:64:2f:e9:72:43:db:b9:79:a3:fb:db:af:4b:e2:42: 8e:b9:19:18:d7:54:c9:41:cf:e3:53:47:66:e0:69:1b:30:c9: 16:de:6d:98:e0:84:4d:bd:16:be:62:72:1a:cd:2b:0c:67:e9: 40:0f:d3:2f:59:6a:52:25:3e:19:40:25:e9:24:49:8a:8b:6b: 1c:d3:f9:92:bc:50:e6:94:12:a2:16:6a:86:d1:d3:45:19:9d: ba:56:f4:3a:8f:09:5e:c6:d1:3a:53:d6:91:f0:cb:a6:ae:41: 3a:39:c7:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxYbyI0CZTo6/gGkzZLRx4SeCzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMx OUIzMDBGQjAeFw0yNjA5MTcwMjAxMDlaFw0yNjA5MTgwMjIxMDlaMDMxMTAvBgNV BAMTKDg0ODFBMENCRDc4NkQwOTNEMUFFQjA5NjdCQTVENEMwNURDM0RBNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoCZS2nFa5OKdfP2QeWmXEURGO ThWSbElVgplSxcBmC47O8hf2P6h86td6+htmV9nVXKv4HoPDT8ClwpxB9suOJt8X /fVV2P3dJLy9oRuawNrP3XMlEPNn1Pa5Ig0FqI0U1IJuavLBMR0crPJXk6PIg32C KxIUfkOLuBQ0aRc1xSrg1rnlRiahygMuPhAsVqM7+PBzy+GTrpDVStJlJiRzEKy+ f42IOx/7XI6DPdULaPIhVZ1AIVfVNGus/PGiuVec9mJsegk6TfpNOC4tIEP+rXWy MIpupjZt4Cs82rpdhu3dnU12p8KElqZncx44gmTa8ob7ot7bmXbeTri2tY/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhIGgy9eG0JPRrrCWe6XUwF3D2mowHwYDVR0j BBgwFoAUCNsctHaQ8fZxmnGgay6v/BmzAPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjE3Zjc5YjAtYjllMy00YzNkLWExMTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3 NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMxOUIzMDBGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wOERCMUNCNDc2OTBGMUY2NzE5QTcxQTA2QjJFQUZGQzE5QjMw MEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFG RkMxOUIzMDBGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKjGv+ajw9owMUTEPyRz/kPi9etQMXthvxM d6ElDGE0e4TBigdyKALXJNAZ/40VxcJuF1QcvWmp6IF2NHRz93QUiB5SpN81VKTP aIrTsqPtjI10EpaJtZPdpAxgkK72jxdOoJw2BAdS4VkgUEQxjdDRLC/SF51GsrCF jhSU2Wj56YYlbDDMyWhf3uhPW2bz2svtb2Qv6XJD27l5o/vbr0viQo65GRjXVMlB z+NTR2bgaRswyRbebZjghE29Fr5ichrNKwxn6UAP0y9ZalIlPhlAJekkSYqLaxzT +ZK8UOaUEqIWaobR00UZnbpW9DqPCV7G0TpT1pHwy6auQTo5x14= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:50 2026 by rpki-client