$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft File: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft (raw, json) Hash identifier: gYW3xBZv2TEIgXTx76VZGIAkRr68Q67GpKez+U+aPtw= Subject key identifier: A6:7D:F0:22:44:DA:9C:7A:3E:A6:44:5F:8A:7A:DE:97:B4:3D:9B:B9 Authority key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 Certificate issuer: /CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Certificate serial: 5E8859679D5CA7773833D660B0A22BE5AF728695 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 00:20:33 +0000 Manifest this update: Fri 25 Sep 2026 00:15:33 +0000 Manifest next update: Sat 26 Sep 2026 00:28:33 +0000 Files and hashes: 1: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: YXjtjwoesJUSGw40nC73us7OdL7eSn74JJVfMRae8cI=) 2: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: lli6DgdKqwmEkLtB+BG1rU9nYBqGkyyXfGUHRRk2kyY=) 3: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl (hash: Cp+qe00fQqs/2xsMWVB94vk9+tSL6wZsmwu7adAgkE0=) 4: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: kq6A8cL9NTZnFPc2HUzKmlVXrKIf6u5lrw0WIGV14uo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:88:59:67:9d:5c:a7:77:38:33:d6:60:b0:a2:2b:e5:af:72:86:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Validity Not Before: Sep 25 00:15:33 2026 GMT Not After : Sep 26 00:28:33 2026 GMT Subject: CN=A67DF02244DA9C7A3EA6445F8A7ADE97B43D9BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:1b:67:2f:d0:66:4d:ae:5a:e2:3c:d4:52: 61:8f:43:88:32:2b:ca:a4:db:15:63:f3:3e:1e:43: 42:3f:46:d4:f2:3b:25:25:39:0e:c6:09:86:6d:69: 25:ee:af:ab:81:16:7e:53:1b:27:eb:9e:f7:3a:63: c5:ff:69:1c:a1:7e:40:db:06:c6:2b:b3:83:84:96: d8:b9:b8:a4:b4:91:bb:d6:5e:8c:29:75:b9:60:e2: e5:cf:f7:f9:4b:73:49:6c:a1:9c:0b:62:da:4a:f2: 15:91:7a:b5:b0:d7:4c:b7:0e:1c:fb:65:ec:d3:fc: f2:af:78:bb:96:bd:36:99:a8:6f:e9:32:0d:eb:7b: 6c:11:e6:34:1e:a5:7f:7c:4d:2b:f2:40:f0:c7:aa: 47:e8:f6:d5:02:8c:e4:0e:7a:a7:36:c6:70:7d:da: 35:3d:48:77:8a:a0:5d:01:ba:8f:30:a9:5f:31:a8: 4b:d1:b0:42:23:9d:ab:c2:52:74:b3:1b:0f:53:9a: 55:b9:4b:94:3c:84:6c:01:0b:bc:38:bb:fa:fb:cc: b1:43:28:b3:08:56:a9:48:2e:a7:c5:38:4d:cb:3e: 83:dd:4c:3b:85:b5:ef:6e:d6:a8:57:e3:39:43:0c: 77:1f:a0:80:21:ed:29:c0:b5:3c:28:ab:80:18:6c: 4b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7D:F0:22:44:DA:9C:7A:3E:A6:44:5F:8A:7A:DE:97:B4:3D:9B:B9 X509v3 Authority Key Identifier: keyid:8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:91:fd:e1:d8:29:b3:ab:c6:c0:7f:11:87:e1:65:1c:9e:8e: 8b:c5:97:0d:09:e6:2a:1f:d3:e6:34:1d:e3:23:a5:c1:dc:7e: 9a:e6:38:5b:51:72:ff:b5:f4:1a:9d:63:30:96:7f:ef:35:e6: 8e:cd:da:04:00:8f:53:38:48:fd:62:9a:b9:0b:6a:d4:0f:13: 1c:f9:cd:e3:1f:99:07:db:28:28:49:fe:b9:1e:5b:4d:a2:a1: 28:26:93:4e:51:6f:93:99:fe:3b:42:c2:36:85:78:cb:f1:18: 33:c1:62:5b:39:2e:a0:81:3b:42:0a:85:93:92:4d:d4:7b:cf: 1c:a1:40:28:6c:fa:94:02:a7:aa:c3:4c:20:ec:d9:78:54:e8: 8d:9b:98:60:f9:af:04:58:20:70:34:81:15:ce:9f:ca:fb:47: 05:f6:eb:08:df:34:11:40:5b:e5:50:ca:23:dc:c9:34:60:71: 00:31:94:33:cd:7b:cc:18:f6:99:a2:c1:2b:d0:4d:d1:66:22: 97:d6:cb:6d:e2:90:27:52:db:4b:d6:5d:5f:b8:b4:7e:0f:bc: 6d:5b:87:fa:e6:25:3c:05:ea:d8:11:20:5a:64:a2:c6:d3:d3: 54:13:68:f5:5e:5a:34:48:ee:6a:a4:16:21:d6:a2:54:65:e0: 2d:dd:d4:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXohZZ51cp3c4M9ZgsKIr5a9yhpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhD RjIyNTVEODAeFw0yNjA5MjUwMDE1MzNaFw0yNjA5MjYwMDI4MzNaMDMxMTAvBgNV BAMTKEE2N0RGMDIyNDREQTlDN0EzRUE2NDQ1RjhBN0FERTk3QjQzRDlCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCszhtnL9BmTa5a4jzUUmGPQ4gy K8qk2xVj8z4eQ0I/RtTyOyUlOQ7GCYZtaSXur6uBFn5TGyfrnvc6Y8X/aRyhfkDb BsYrs4OElti5uKS0kbvWXowpdblg4uXP9/lLc0lsoZwLYtpK8hWRerWw10y3Dhz7 ZezT/PKveLuWvTaZqG/pMg3re2wR5jQepX98TSvyQPDHqkfo9tUCjOQOeqc2xnB9 2jU9SHeKoF0Buo8wqV8xqEvRsEIjnavCUnSzGw9TmlW5S5Q8hGwBC7w4u/r7zLFD KLMIVqlILqfFOE3LPoPdTDuFte9u1qhX4zlDDHcfoIAh7SnAtTwoq4AYbEvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpn3wIkTanHo+pkRfinrel7Q9m7kwHwYDVR0j BBgwFoAUjqjsmRJT8GZfQUnV/kLD+M8iVdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM5MDg3ODItNDUyMC00NWI0LTk5ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkx MjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhDRjIyNTVEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUE4RUM5OTEyNTNGMDY2NUY0MTQ5RDVGRTQyQzNGOENGMjI1 NUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMz RjhDRjIyNTVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqR/eHYKbOrxsB/EYfhZRyejovFlw0J5iof 0+Y0HeMjpcHcfprmOFtRcv+19BqdYzCWf+815o7N2gQAj1M4SP1imrkLatQPExz5 zeMfmQfbKChJ/rkeW02ioSgmk05Rb5OZ/jtCwjaFeMvxGDPBYls5LqCBO0IKhZOS TdR7zxyhQChs+pQCp6rDTCDs2XhU6I2bmGD5rwRYIHA0gRXOn8r7RwX26wjfNBFA W+VQyiPcyTRgcQAxlDPNe8wY9pmiwSvQTdFmIpfWy23ikCdS20vWXV+4tH4PvG1b h/rmJTwF6tgRIFpkosbT01QTaPVeWjRI7mqkFiHWolRl4C3d1Cw= -----END CERTIFICATE-----Generated at Fri Sep 25 10:38:09 2026 by rpki-client