$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft File: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft (raw, json) Hash identifier: qT95X958/lIZNcSkyINNSyytlZPHOYEb2uFEZ7hA9Rs= Subject key identifier: DC:7C:8C:E2:05:3E:B4:B8:C0:E1:94:94:91:B3:1E:6E:11:50:18:D4 Authority key identifier: 8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 Certificate issuer: /CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Certificate serial: 7111CFED4C70C5D2D14312907590552F086D9089 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 16:03:59 +0000 Manifest this update: Wed 16 Sep 2026 15:58:59 +0000 Manifest next update: Thu 17 Sep 2026 19:52:59 +0000 Files and hashes: 1: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: WXHF3ztWLcHGSe6MPgiYVl8CmUEe+OPjuifFRIwvCro=) 2: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl (hash: F5ByHCiGJAP6WeIOGcG7oAOj0u0YbFcfoHx47tqnYts=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:11:cf:ed:4c:70:c5:d2:d1:43:12:90:75:90:55:2f:08:6d:90:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Validity Not Before: Sep 16 15:58:59 2026 GMT Not After : Sep 17 19:52:59 2026 GMT Subject: CN=DC7C8CE2053EB4B8C0E1949491B31E6E115018D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fe:08:78:6d:81:ed:82:98:40:63:bf:cf:3d: b5:5f:a4:28:0f:33:c7:b0:e8:d2:bb:40:11:76:72: 55:e8:a5:9e:b5:9a:3f:ee:7a:6c:ba:b7:5e:38:6d: 48:1d:e7:b1:ba:4a:59:e7:7b:9b:36:94:7e:f4:20: dd:df:14:02:a4:e1:a9:01:92:69:ae:96:56:3f:09: 70:ad:79:f3:1c:97:1a:47:4b:cf:ad:81:a1:54:6d: f8:06:c5:07:05:0f:1c:35:c6:c3:01:0a:83:3b:19: 94:1c:c8:44:c0:eb:55:28:d9:2b:93:0b:19:2d:e5: e6:aa:c0:43:e5:40:89:4a:1b:b7:b1:8b:64:a3:a6: 9c:32:dc:dc:3b:5e:bc:ac:6a:61:32:31:76:9d:55: 5f:65:5f:98:ca:84:ae:fc:ad:4e:96:06:8a:c8:2c: 15:1a:6c:35:55:12:3b:f6:66:9b:01:bc:2c:0c:bf: dd:86:c6:5d:d0:f6:f4:33:d7:83:d1:5d:8f:49:0d: 90:33:57:08:81:ff:f7:8c:6a:a1:f7:6a:99:8c:a9: c1:a9:b1:7e:b4:64:33:7e:c5:76:89:c6:1d:2c:32: ca:07:0a:a0:69:a3:fe:14:98:bb:77:ff:10:84:0c: 88:47:bb:68:7b:51:6a:4b:3e:7f:e9:79:c7:64:4e: 35:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7C:8C:E2:05:3E:B4:B8:C0:E1:94:94:91:B3:1E:6E:11:50:18:D4 X509v3 Authority Key Identifier: keyid:8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:81:1c:25:5b:3a:d4:8e:84:fd:92:c9:0f:2b:4b:51:cc:58: 5a:e9:5c:2d:91:77:7d:f2:79:eb:c9:74:32:65:93:00:86:49: 92:36:5d:80:4e:fa:a7:98:a4:f4:70:7b:b4:7b:e6:56:0a:09: 16:4d:34:28:b5:c2:db:70:c5:b2:7c:7f:1d:d4:0f:f2:0f:d3: 32:98:7e:22:33:34:4b:d9:dc:ee:3a:4d:86:02:42:c2:28:9a: da:e6:38:a0:5c:ca:60:a8:13:ca:b1:6e:d5:bb:09:eb:97:a1: ae:9e:cc:c6:3d:12:4c:2a:fa:a8:ad:4d:8e:55:d5:c0:8d:8b: 8a:ec:4b:a1:e4:d2:52:c6:8b:c1:63:0b:38:84:ea:53:2a:85: af:2c:22:06:80:2d:fb:79:f9:19:b4:b5:99:9b:51:0d:2d:c2: 06:cf:a5:b9:91:95:5d:8e:05:0a:e8:4b:e4:01:ba:e0:78:4f: 10:0b:d8:82:c3:30:92:bb:6a:a2:61:89:f8:ba:32:33:ba:62: 7c:9c:85:54:15:b3:e0:a5:45:53:e5:f5:8e:1c:dc:39:b7:a9: 0c:57:fe:e6:ba:49:1f:bb:50:46:2e:bc:fe:f0:d4:9e:26:08: 7f:ee:9b:eb:0d:d1:f8:60:61:3a:61:5b:2c:b1:31:98:d0:b1: c9:ee:94:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRHP7UxwxdLRQxKQdZBVLwhtkIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2 MURCNzhBNjAeFw0yNjA5MTYxNTU4NTlaFw0yNjA5MTcxOTUyNTlaMDMxMTAvBgNV BAMTKERDN0M4Q0UyMDUzRUI0QjhDMEUxOTQ5NDkxQjMxRTZFMTE1MDE4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP/gh4bYHtgphAY7/PPbVfpCgP M8ew6NK7QBF2clXopZ61mj/uemy6t144bUgd57G6Slnne5s2lH70IN3fFAKk4akB kmmullY/CXCtefMclxpHS8+tgaFUbfgGxQcFDxw1xsMBCoM7GZQcyETA61Uo2SuT Cxkt5eaqwEPlQIlKG7exi2Sjppwy3Nw7XrysamEyMXadVV9lX5jKhK78rU6WBorI LBUabDVVEjv2ZpsBvCwMv92Gxl3Q9vQz14PRXY9JDZAzVwiB//eMaqH3apmMqcGp sX60ZDN+xXaJxh0sMsoHCqBpo/4UmLt3/xCEDIhHu2h7UWpLPn/pecdkTjW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3HyM4gU+tLjA4ZSUkbMebhFQGNQwHwYDVR0j BBgwFoAUiqUttdtx9jjpQSVKawzmg2HbeKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmUxY2JkNzktOGYyNi00YjBlLThiM2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVE QjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2MURCNzhBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUE1MkRCNURCNzFGNjM4RTk0MTI1NEE2QjBDRTY4MzYxREI3 OEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2 ODM2MURCNzhBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKBHCVbOtSOhP2SyQ8rS1HMWFrpXC2Rd33y eevJdDJlkwCGSZI2XYBO+qeYpPRwe7R75lYKCRZNNCi1wttwxbJ8fx3UD/IP0zKY fiIzNEvZ3O46TYYCQsIomtrmOKBcymCoE8qxbtW7CeuXoa6ezMY9Ekwq+qitTY5V 1cCNi4rsS6Hk0lLGi8FjCziE6lMqha8sIgaALft5+Rm0tZmbUQ0twgbPpbmRlV2O BQroS+QBuuB4TxAL2ILDMJK7aqJhifi6MjO6YnychVQVs+ClRVPl9Y4c3Dm3qQxX /ua6SR+7UEYuvP7w1J4mCH/um+sN0fhgYTphWyyxMZjQscnulFo= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:43 2026 by rpki-client