$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft File: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft (raw, json) Hash identifier: 5A0N5zUInoXPWI6Epgg096J07A4LjsUsMfNBNkGuaXA= Subject key identifier: EF:F5:AE:7F:CF:73:DA:0D:01:7B:AD:E4:C1:DD:DB:D1:A0:F6:1C:C9 Authority key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 Certificate issuer: /CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Certificate serial: 22493C1243591543C081D27F19927AAD09F3467A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 16:30:45 +0000 Manifest this update: Fri 25 Sep 2026 16:25:45 +0000 Manifest next update: Sat 26 Sep 2026 17:54:45 +0000 Files and hashes: 1: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl (hash: VuEC0yORmdEEeKJstvkpaVyZNdtfKVeaClcpD+t9M9s=) 2: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: lli6DgdKqwmEkLtB+BG1rU9nYBqGkyyXfGUHRRk2kyY=) 3: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: kq6A8cL9NTZnFPc2HUzKmlVXrKIf6u5lrw0WIGV14uo=) 4: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: YXjtjwoesJUSGw40nC73us7OdL7eSn74JJVfMRae8cI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:49:3c:12:43:59:15:43:c0:81:d2:7f:19:92:7a:ad:09:f3:46:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Validity Not Before: Sep 25 16:25:45 2026 GMT Not After : Sep 26 17:54:45 2026 GMT Subject: CN=EFF5AE7FCF73DA0D017BADE4C1DDDBD1A0F61CC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1c:bf:90:7b:80:e5:8c:8d:ef:f7:66:1b:85: 1b:5a:07:9a:bf:51:1f:a7:7f:ca:c1:91:cd:e6:d7: 53:d7:d1:0a:30:b5:7f:7b:5a:e0:70:93:25:d2:a8: 53:51:56:fb:c4:da:de:ba:e8:81:6f:a1:68:b8:5c: 79:7d:35:bd:e5:85:3e:0f:66:6b:ad:07:81:21:cd: f0:7a:c7:4c:82:23:16:ff:83:2e:9a:1f:b0:48:41: ea:c0:90:8b:b4:48:ba:93:78:28:52:6d:21:2c:43: a3:0a:bc:87:2a:5d:49:76:2c:c5:3a:1e:51:39:5c: fe:a8:a7:99:a8:45:35:76:fa:96:31:52:ee:bf:31: 65:5d:16:fa:83:f2:be:fc:9e:7d:5f:a9:09:b6:6a: 6e:14:66:1f:07:c8:0e:ce:5f:20:c8:ad:bc:3d:6a: 31:15:51:f7:d7:76:22:3a:85:e4:9d:93:c8:ba:7f: ef:a8:9b:59:b9:72:fc:5a:ea:9d:4e:9b:a6:48:92: 2e:89:b8:3b:1f:8a:4a:77:f9:de:57:14:a8:eb:f2: 11:12:94:a6:eb:4b:f7:37:63:33:54:44:7d:7d:54: a7:1f:74:16:b7:b1:e0:3d:f2:f3:87:bd:f7:f9:60: 0e:a7:70:19:48:11:d4:6d:f3:35:c0:15:c5:1e:f7: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F5:AE:7F:CF:73:DA:0D:01:7B:AD:E4:C1:DD:DB:D1:A0:F6:1C:C9 X509v3 Authority Key Identifier: keyid:8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:61:94:fb:96:5f:28:a7:7a:0d:59:41:cc:be:db:04:9c:67: b9:1f:6b:5e:fe:57:50:7a:cb:7d:3a:6d:70:13:71:b4:73:4f: 98:14:87:8d:dc:39:26:bf:6e:8b:b6:48:a4:13:3d:70:0f:0e: cf:56:ca:77:b0:9d:1e:9c:79:d8:43:1b:89:0d:d9:09:82:a6: 73:28:1e:cb:88:00:76:44:ca:4f:e1:f8:c1:f3:ec:34:9c:5a: 13:dc:16:c4:3b:e6:b1:d4:be:ea:2c:02:30:85:77:e3:84:51: 21:e3:cf:b9:52:89:a3:b2:9c:7f:b2:19:b0:8d:a5:77:94:67: 36:97:a9:98:77:98:f1:1e:03:ba:f4:aa:a6:c6:b3:45:0c:40: d6:fa:5d:b6:db:e9:42:4b:5d:fb:76:ac:25:70:9a:d5:6c:32: 2c:b9:e6:5d:68:e9:21:5f:64:81:4a:2f:74:97:cc:d5:a1:f7: 36:a3:6a:25:e7:19:eb:b9:e4:ce:eb:74:60:91:0f:4e:c0:60: 14:17:83:9d:32:d9:e1:08:bf:a3:4e:0c:b9:b6:d1:9b:0b:89: e1:b6:d5:e1:83:5c:30:03:37:93:55:30:f7:6f:30:07:77:80: 6f:97:95:c2:d0:34:0e:de:7b:36:0d:e7:eb:1e:db:f4:b5:57: eb:ad:eb:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIkk8EkNZFUPAgdJ/GZJ6rQnzRnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhD RjIyNTVEODAeFw0yNjA5MjUxNjI1NDVaFw0yNjA5MjYxNzU0NDVaMDMxMTAvBgNV BAMTKEVGRjVBRTdGQ0Y3M0RBMEQwMTdCQURFNEMxREREQkQxQTBGNjFDQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVHL+Qe4DljI3v92YbhRtaB5q/ UR+nf8rBkc3m11PX0QowtX97WuBwkyXSqFNRVvvE2t666IFvoWi4XHl9Nb3lhT4P ZmutB4EhzfB6x0yCIxb/gy6aH7BIQerAkIu0SLqTeChSbSEsQ6MKvIcqXUl2LMU6 HlE5XP6op5moRTV2+pYxUu6/MWVdFvqD8r78nn1fqQm2am4UZh8HyA7OXyDIrbw9 ajEVUffXdiI6heSdk8i6f++om1m5cvxa6p1Om6ZIki6JuDsfikp3+d5XFKjr8hES lKbrS/c3YzNURH19VKcfdBa3seA98vOHvff5YA6ncBlIEdRt8zXAFcUe98yhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7/Wuf89z2g0Be63kwd3b0aD2HMkwHwYDVR0j BBgwFoAUjqjsmRJT8GZfQUnV/kLD+M8iVdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM5MDg3ODItNDUyMC00NWI0LTk5ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkx MjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhDRjIyNTVEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUE4RUM5OTEyNTNGMDY2NUY0MTQ5RDVGRTQyQzNGOENGMjI1 NUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMz RjhDRjIyNTVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5hlPuWXyineg1ZQcy+2wScZ7kfa17+V1B6 y306bXATcbRzT5gUh43cOSa/bou2SKQTPXAPDs9WynewnR6cedhDG4kN2QmCpnMo HsuIAHZEyk/h+MHz7DScWhPcFsQ75rHUvuosAjCFd+OEUSHjz7lSiaOynH+yGbCN pXeUZzaXqZh3mPEeA7r0qqbGs0UMQNb6Xbbb6UJLXft2rCVwmtVsMiy55l1o6SFf ZIFKL3SXzNWh9zajaiXnGeu55M7rdGCRD07AYBQXg50y2eEIv6NODLm20ZsLieG2 1eGDXDADN5NVMPdvMAd3gG+XlcLQNA7eezYN5+se2/S1V+ut61g= -----END CERTIFICATE-----Generated at Fri Sep 25 19:16:13 2026 by rpki-client