$ rpki-client -vvvf rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft File: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft (raw, json) Hash identifier: rbLsMqOcW9g08E5h4HcU6NBwvlnuUQjCPr9GM/nIMhg= Subject key identifier: E8:62:D8:AD:C0:E0:1A:41:D4:7A:16:0A:DB:D4:76:8F:B0:D0:39:A8 Authority key identifier: 86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 Certificate issuer: /CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Certificate serial: 7939C96526CE81227F455D7C628A37C5246782F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 20:00:11 +0000 Manifest this update: Thu 24 Sep 2026 19:55:11 +0000 Manifest next update: Fri 25 Sep 2026 22:18:11 +0000 Files and hashes: 1: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: A51y95Y2VvHOxleNisrOn7Mw2CXWlCwKbBD4RKfiRXo=) 2: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl (hash: JJXabWzq16CjQ1rbRYrTM4tkbKc2joO/0sQuVCtF+gM=) 3: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: V+R7emBXYGxGYC8TKAJDN/rKFNkkzGGzXMecTJssl6Q=) 4: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: buNf/KMT3H26jyT7kcH4G4XIVCs19dscJeFhejymKUs=) 5: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AiKeHz2pWrwnk84HIHiggHrF6Y+TQyS0iMZkjpVVcMY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 22:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:39:c9:65:26:ce:81:22:7f:45:5d:7c:62:8a:37:c5:24:67:82:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Validity Not Before: Sep 24 19:55:11 2026 GMT Not After : Sep 25 22:18:11 2026 GMT Subject: CN=E862D8ADC0E01A41D47A160ADBD4768FB0D039A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:8a:7a:2c:4d:12:5e:3a:10:f7:84:71:c7: d3:f0:a9:6f:bc:5b:40:70:8b:cd:50:f0:63:65:be: 47:3f:1e:e0:bd:0d:16:1d:61:dd:92:64:ab:5e:c4: 4e:69:8c:7c:5e:47:f6:22:91:03:6b:a7:58:f5:58: 0a:05:1f:66:a4:d0:bd:a4:b3:49:a2:21:2c:fe:a2: a2:a9:57:35:54:d2:14:8d:87:8f:6f:20:a1:e7:8d: 3f:cb:6f:df:bd:a8:c3:b9:d7:70:a7:32:49:2a:0d: be:8c:f4:8e:28:62:b8:31:00:3d:bb:c4:46:fc:df: 04:49:6c:ce:77:e5:8c:de:59:74:0c:97:d7:5d:29: 7c:47:b8:cf:ce:8d:75:42:ed:44:e4:d4:fd:38:2b: 54:e7:b2:44:dc:48:9f:1d:c3:0f:31:a0:12:d0:0d: c2:f8:89:0c:31:61:35:64:cc:f3:a8:16:b3:e8:bd: 9d:89:48:e7:02:f1:74:d3:d9:a2:f9:b0:03:b0:a2: 0d:d3:a6:64:66:00:f6:60:1e:0f:ec:0b:80:23:6d: 55:4c:64:69:96:61:08:0c:20:ab:db:88:1e:38:4a: a1:9b:24:a6:25:70:87:6e:bd:bf:d3:26:52:dd:97: c3:b3:14:cb:a7:81:e3:46:d6:95:6f:5f:15:4c:3d: 18:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:62:D8:AD:C0:E0:1A:41:D4:7A:16:0A:DB:D4:76:8F:B0:D0:39:A8 X509v3 Authority Key Identifier: keyid:86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:33:48:90:25:ad:61:5e:c7:2a:b2:c9:84:18:4c:21:4f:4d: 75:de:4d:02:46:ca:bd:07:ba:4c:71:1c:e2:48:b4:25:3a:dc: ff:17:51:c3:12:ef:81:6a:06:7a:38:49:aa:75:22:24:f6:a5: d3:75:14:84:64:0a:73:cf:6b:e1:96:2e:9c:0b:da:07:aa:04: 11:bb:9c:8e:cf:7a:65:53:96:92:9c:2f:83:c1:de:c9:c0:07: f2:49:e8:2d:32:68:d6:ab:ff:0d:90:9e:6b:b3:62:47:cd:6c: 9e:54:9b:ff:e0:8c:98:76:08:c9:9b:c7:7f:6b:5e:6d:13:af: 84:88:43:b0:34:30:50:d9:b6:e9:f5:44:a3:c8:e2:1c:1f:b6: 81:3d:07:f2:30:1c:ab:92:0f:58:20:c7:b2:a2:9f:07:df:17: 9e:0f:61:1c:d6:d0:7f:eb:9d:52:4c:fc:0c:25:a0:ca:7d:e2: 1d:eb:b5:53:47:f7:ca:01:02:d1:76:d4:d6:70:66:28:34:15: 24:0e:57:3e:53:fe:e3:44:01:3d:73:cf:44:71:9e:63:4c:06: 23:67:b6:29:b2:6e:cd:4d:f3:df:e6:0a:90:8e:45:6d:46:58: 14:d4:5f:d2:e6:8a:ce:6d:6b:de:c7:42:dc:56:53:bb:61:db: 15:f6:74:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTnJZSbOgSJ/RV18Yoo3xSRngvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQw QUQ5QzA3NzAeFw0yNjA5MjQxOTU1MTFaFw0yNjA5MjUyMjE4MTFaMDMxMTAvBgNV BAMTKEU4NjJEOEFEQzBFMDFBNDFENDdBMTYwQURCRDQ3NjhGQjBEMDM5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj4Ip6LE0SXjoQ94Rxx9PwqW+8 W0Bwi81Q8GNlvkc/HuC9DRYdYd2SZKtexE5pjHxeR/YikQNrp1j1WAoFH2ak0L2k s0miISz+oqKpVzVU0hSNh49vIKHnjT/Lb9+9qMO513CnMkkqDb6M9I4oYrgxAD27 xEb83wRJbM535YzeWXQMl9ddKXxHuM/OjXVC7UTk1P04K1TnskTcSJ8dww8xoBLQ DcL4iQwxYTVkzPOoFrPovZ2JSOcC8XTT2aL5sAOwog3TpmRmAPZgHg/sC4AjbVVM ZGmWYQgMIKvbiB44SqGbJKYlcIduvb/TJlLdl8OzFMungeNG1pVvXxVMPRgdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6GLYrcDgGkHUehYK29R2j7DQOagwHwYDVR0j BBgwFoAUhkTvXK/W/yx1ODO1iNbV5ArZwHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDJjYjBiM2EtNjkyZC00NDJlLTkzMDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNB RkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQwQUQ5QzA3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjQ0RUY1Q0FGRDZGRjJDNzUzODMzQjU4OEQ2RDVFNDBBRDlD MDc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1 RTQwQUQ5QzA3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkzSJAlrWFexyqyyYQYTCFPTXXeTQJGyr0H ukxxHOJItCU63P8XUcMS74FqBno4Sap1IiT2pdN1FIRkCnPPa+GWLpwL2geqBBG7 nI7PemVTlpKcL4PB3snAB/JJ6C0yaNar/w2QnmuzYkfNbJ5Um//gjJh2CMmbx39r Xm0Tr4SIQ7A0MFDZtun1RKPI4hwftoE9B/IwHKuSD1ggx7KinwffF54PYRzW0H/r nVJM/AwloMp94h3rtVNH98oBAtF21NZwZig0FSQOVz5T/uNEAT1zz0RxnmNMBiNn timybs1N89/mCpCORW1GWBTUX9Lmis5ta97HQtxWU7th2xX2dPw= -----END CERTIFICATE-----Generated at Fri Sep 25 13:09:47 2026 by rpki-client