$ rpki-client -vvvf rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft File: 8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft (raw, json) Hash identifier: yeTiN7Z1Xi8v0Nzvk42ARtDmq3kKmGDmIkVOE1VU7GE= Subject key identifier: 6E:92:79:4A:1B:E8:A4:00:56:68:AB:F1:7B:C5:3D:1A:BC:86:CC:A3 Authority key identifier: 8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7 Certificate issuer: /CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7 Certificate serial: 28DE885BC309E41CC31C603B40C2FDE7D51C5B1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 12:05:40 +0000 Manifest this update: Thu 24 Sep 2026 12:00:40 +0000 Manifest next update: Fri 25 Sep 2026 13:11:40 +0000 Files and hashes: 1: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: J67UWBhwkB4SyeMxqFOonlk/hP7ZCxo/ttgUlmNhJvU=) 2: 8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl (hash: kgk4thgr05KxdJNuBt9QmVg+JyOoY7Lt7bn1feiJLtQ=) 3: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: CtGqY694vs+5rhe29OiFriR1fCqTy1GqyZ3iimqLrsk=) 4: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: KbKAffsvKxiK1iR4ZLtyFSXqzPv63zoW9cNrraJoQ4s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 13:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:de:88:5b:c3:09:e4:1c:c3:1c:60:3b:40:c2:fd:e7:d5:1c:5b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7 Validity Not Before: Sep 24 12:00:40 2026 GMT Not After : Sep 25 13:11:40 2026 GMT Subject: CN=6E92794A1BE8A4005668ABF17BC53D1ABC86CCA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9f:e8:b1:2f:60:90:00:8f:6f:4e:72:76:51: d9:81:e5:49:9d:f3:65:43:c1:a5:16:12:d3:97:78: c8:d7:ef:4c:a6:ae:bb:bf:3b:fb:dd:cb:da:d7:03: dc:70:9f:b8:a4:b4:17:17:73:f7:a8:8f:6b:39:fc: 2b:99:ef:c6:12:47:c4:e7:f9:a7:92:40:9f:27:94: 4f:28:7e:83:15:2c:51:f7:a0:98:4b:7c:5c:6b:5d: ef:5f:3f:cb:ad:ab:51:f9:8c:f5:8f:04:15:00:66: 20:8a:e1:99:3e:42:37:bd:8b:60:b1:07:a1:20:05: 9e:b5:0a:18:5f:66:88:ef:24:0c:f8:03:5c:59:79: a9:34:90:07:36:5a:26:9e:4d:b0:58:44:26:a2:1a: 55:c2:2f:c5:47:94:28:a9:07:3d:dc:a7:5b:14:09: dc:a1:07:13:2d:3a:1b:c3:8d:e2:2a:ab:07:7c:84: d4:ca:dc:c9:d1:40:bc:ef:84:82:a0:18:e8:a7:3d: 04:49:18:93:02:67:4c:54:36:d8:5e:3b:e8:3f:28: 2c:db:48:b4:d5:a4:d7:6a:0b:ff:b4:3e:28:8d:1d: ee:3a:8e:3c:66:0a:7c:07:84:37:51:86:72:3b:64: 10:5b:fc:ed:bf:c4:68:62:a2:8b:db:10:1e:9b:93: 28:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:92:79:4A:1B:E8:A4:00:56:68:AB:F1:7B:C5:3D:1A:BC:86:CC:A3 X509v3 Authority Key Identifier: keyid:8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:5e:57:f7:8b:26:cb:e2:fd:f9:9e:ad:01:02:7e:13:92:70: 8e:19:cb:26:a1:bb:b4:42:ff:1a:30:f6:5a:28:52:7e:6e:01: c1:ce:4b:c4:7a:d1:cc:3c:76:cb:30:98:45:f3:6d:e6:5c:16: d0:2e:a3:8b:ca:96:b3:08:7b:4b:56:fb:2b:3f:e5:b4:33:c5: ff:ec:6c:92:bd:4d:55:0d:87:6d:f7:5c:65:b6:da:16:8a:dd: 48:33:9c:19:5f:78:c1:3e:18:21:6a:46:98:f7:13:46:7e:f7: a8:95:76:b9:13:29:1d:7a:16:bd:f1:a4:d9:5b:4b:ea:ae:e6: 38:25:84:c5:26:95:be:81:a4:0b:85:7e:b6:a9:06:76:fc:0d: cd:5d:82:8d:33:94:0e:7b:19:2d:f2:b5:3e:41:b5:d5:0f:a2: db:da:d3:c0:54:ad:05:05:11:fb:21:5e:38:b9:c0:b4:d1:d5: 7e:db:d0:8f:bc:bf:c4:17:3a:54:0f:50:5b:17:4a:f5:78:ff: e2:1a:df:0a:12:30:d0:47:8e:d9:48:64:c1:c6:56:8f:c5:2c: 5f:44:4d:9e:ff:be:33:24:b9:31:18:3e:17:23:26:de:3a:26: 44:8a:ef:45:1d:3b:96:f4:51:6b:85:d5:1f:d2:3a:de:b8:02: 38:56:19:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKN6IW8MJ5BzDHGA7QML959UcWxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENBOEE2NjhBMjQwREY3QjE1RkJDM0U0NTE2QTg0MDhC QkRDNDdFNzAeFw0yNjA5MjQxMjAwNDBaFw0yNjA5MjUxMzExNDBaMDMxMTAvBgNV BAMTKDZFOTI3OTRBMUJFOEE0MDA1NjY4QUJGMTdCQzUzRDFBQkM4NkNDQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPn+ixL2CQAI9vTnJ2UdmB5Umd 82VDwaUWEtOXeMjX70ymrru/O/vdy9rXA9xwn7iktBcXc/eoj2s5/CuZ78YSR8Tn +aeSQJ8nlE8ofoMVLFH3oJhLfFxrXe9fP8utq1H5jPWPBBUAZiCK4Zk+Qje9i2Cx B6EgBZ61ChhfZojvJAz4A1xZeak0kAc2WiaeTbBYRCaiGlXCL8VHlCipBz3cp1sU CdyhBxMtOhvDjeIqqwd8hNTK3MnRQLzvhIKgGOinPQRJGJMCZ0xUNtheO+g/KCzb SLTVpNdqC/+0PiiNHe46jjxmCnwHhDdRhnI7ZBBb/O2/xGhioovbEB6bkyjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbpJ5ShvopABWaKvxe8U9GryGzKMwHwYDVR0j BBgwFoAUjKimaKJA33sV+8PkUWqECLvcR+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQyMDc1MjMtZDVmNS00YWNjLWIwYWMtYmZiMDk1NGZhNGUwLzAvOENBOEE2NjhB MjQwREY3QjE1RkJDM0U0NTE2QTg0MDhCQkRDNDdFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0E4QTY2OEEyNDBERjdCMTVGQkMzRTQ1MTZBODQwOEJCREM0 N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvOENBOEE2NjhBMjQwREY3QjE1RkJDM0U0NTE2QTg0 MDhCQkRDNDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMdeV/eLJsvi/fmerQECfhOScI4Zyyahu7RC /xow9looUn5uAcHOS8R60cw8dsswmEXzbeZcFtAuo4vKlrMIe0tW+ys/5bQzxf/s bJK9TVUNh233XGW22haK3UgznBlfeME+GCFqRpj3E0Z+96iVdrkTKR16Fr3xpNlb S+qu5jglhMUmlb6BpAuFfrapBnb8Dc1dgo0zlA57GS3ytT5BtdUPotva08BUrQUF EfshXji5wLTR1X7b0I+8v8QXOlQPUFsXSvV4/+Ia3woSMNBHjtlIZMHGVo/FLF9E TZ7/vjMkuTEYPhcjJt46JkSK70UdO5b0UWuF1R/SOt64AjhWGRg= -----END CERTIFICATE-----Generated at Fri Sep 25 06:26:45 2026 by rpki-client