$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft File: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft (raw, json) Hash identifier: xe1sHdy5+hSb+KEpn9vWWtAcfgzJyyP92pqu7e759h8= Subject key identifier: 07:4B:53:D7:ED:BB:E9:FC:7B:60:C7:F1:19:BD:93:70:1E:17:0D:8B Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 Certificate issuer: /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Certificate serial: 64966ED97859423277A2B9BB14661A34D64D3DEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 20:46:41 +0000 Manifest this update: Wed 23 Sep 2026 20:41:41 +0000 Manifest next update: Thu 24 Sep 2026 22:45:41 +0000 Files and hashes: 1: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl (hash: 9N+clq0tijjxjYx8GV9rInxwqCpJOWB+SjeosyLYo8g=) 2: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: MdXlPd40mbCtjh7iBEjKVSFA2qec8G7HYFT+dNSNEB4=) 3: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: ZkDRUzZF2wR3zLgrv+xtI4hjJvx2gIYYCb4LSNtWkmg=) 4: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: 4e1qd57hMv+OkXmKRzkE4lf5ZpRQjvmNHhGL7MHMPZQ=) 5: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: p8zNdOn26qSx4BGXz+vWlqG1YbrlG0OsNQVGyFkCQnw=) 6: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: OJi67+qUPfc5UtqMYAV/z7dfCJOkcVNQkK5jTXZKwTQ=) 7: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: QKq/ZGAbqKpUm7CoKZ+QT0ihf4BxzPyawZc6Ixihqm0=) 8: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: ABGORh4lWt4WpXDSQFC2AfJLsKMZzwquOOsUkRU5KZw=) 9: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: 0kmlYn3U9dmyxdriKnU2KVYL6nRWvq4iRJ06VUJD99I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:96:6e:d9:78:59:42:32:77:a2:b9:bb:14:66:1a:34:d6:4d:3d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Validity Not Before: Sep 23 20:41:41 2026 GMT Not After : Sep 24 22:45:41 2026 GMT Subject: CN=074B53D7EDBBE9FC7B60C7F119BD93701E170D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:c9:dd:5a:97:b2:ab:4c:4f:e0:ae:cb:70: be:dd:a8:21:67:45:a7:0d:ab:63:16:2c:3f:34:df: 22:10:3e:c8:3d:d0:a8:02:4d:12:b6:63:e4:0a:05: b9:9b:ba:29:3e:51:2a:dc:14:34:5c:c2:dc:ef:52: f3:b8:ec:b8:e5:12:e7:76:ec:03:0a:46:84:7c:22: 0c:39:3f:a4:1b:5f:2e:2d:d9:00:e7:3f:e7:f8:ec: f3:f0:46:5c:29:d0:34:4a:d4:dc:51:32:8b:b9:ad: 81:2e:61:bc:12:55:d9:f9:fa:b7:2e:4d:f6:16:45: 6c:9c:fc:5a:ba:5f:3b:7d:bb:4b:fa:03:2b:6f:a7: 9e:17:9d:89:ad:c8:19:c6:7c:7c:18:e8:2e:82:dd: 79:57:99:d3:11:3c:26:97:09:36:d7:d7:46:c7:28: e2:4e:20:2a:79:9f:42:c7:53:87:33:e4:f1:41:08: b1:c1:6d:be:46:16:0d:3b:c1:01:6d:b4:ce:76:b7: a6:74:d2:d5:45:c6:ee:2c:b3:be:96:b9:e5:91:7d: aa:d4:44:96:30:1d:ab:43:ce:f8:88:71:4c:78:49: 5b:f5:59:03:1e:a6:d3:0b:dc:27:54:70:5a:8a:5a: 37:41:d0:1a:be:44:a5:1c:75:36:8a:53:60:2b:aa: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4B:53:D7:ED:BB:E9:FC:7B:60:C7:F1:19:BD:93:70:1E:17:0D:8B X509v3 Authority Key Identifier: keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:08:7d:e7:fe:e2:fb:d9:6f:a0:b0:19:ee:d6:48:e8:2c:a9: 2a:e9:a4:fa:0d:55:93:6a:6a:f9:c8:7e:09:87:03:64:ec:d9: a3:13:b3:d0:d0:1d:0f:bb:8c:09:e6:14:5f:2f:7c:4c:73:e8: ff:11:3e:1d:0d:95:a3:b7:3b:a0:99:60:f2:ba:74:b7:d7:53: aa:77:a9:a7:fc:d4:74:d8:53:b2:8c:06:08:ad:2c:32:76:d6: 0e:60:55:db:cc:d7:c9:4a:3c:86:64:6c:fa:16:9f:ae:cd:43: ea:4e:74:2b:e9:26:a0:f1:82:c1:df:8c:98:a9:b9:1b:db:12: 2a:4e:77:df:76:8d:0e:6d:bd:58:46:ff:64:58:aa:87:ec:23: 17:62:0a:94:95:7c:06:83:88:58:c2:af:cb:e3:df:27:12:be: 98:f4:2e:7c:40:79:4a:70:82:68:d0:50:a6:c3:8e:fb:11:d9: 77:7b:d1:53:66:7e:45:42:f1:b8:1d:67:b2:ac:f7:94:15:41: 50:f9:ca:66:98:43:28:a8:fb:b6:70:1c:30:f3:c0:3b:e6:6a: 25:72:5b:20:b3:42:ed:36:2e:27:90:c8:40:7d:3f:f6:f2:35: 0a:29:ce:a9:5e:b6:bd:72:9d:96:07:d0:70:1a:d2:74:2b:91: 44:d8:74:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJZu2XhZQjJ3orm7FGYaNNZNPeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhBMEQz QkFEMUY5NDAeFw0yNjA5MjMyMDQxNDFaFw0yNjA5MjQyMjQ1NDFaMDMxMTAvBgNV BAMTKDA3NEI1M0Q3RURCQkU5RkM3QjYwQzdGMTE5QkQ5MzcwMUUxNzBEOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJ8ndWpeyq0xP4K7LcL7dqCFn RacNq2MWLD803yIQPsg90KgCTRK2Y+QKBbmbuik+USrcFDRcwtzvUvO47LjlEud2 7AMKRoR8Igw5P6QbXy4t2QDnP+f47PPwRlwp0DRK1NxRMou5rYEuYbwSVdn5+rcu TfYWRWyc/Fq6Xzt9u0v6Aytvp54XnYmtyBnGfHwY6C6C3XlXmdMRPCaXCTbX10bH KOJOICp5n0LHU4cz5PFBCLHBbb5GFg07wQFttM52t6Z00tVFxu4ss76WueWRfarU RJYwHatDzviIcUx4SVv1WQMeptML3CdUcFqKWjdB0Bq+RKUcdTaKU2Arqk2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB0tT1+276fx7YMfxGb2TcB4XDYswHwYDVR0j BBgwFoAUgRBXDOVdhRL8vfAoGfuKDTutH5QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE0OTYwODItYTBhYS00ODM2LWI1ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENF NTVEODUxMkZDQkRGMDI4MTlGQjhBMEQzQkFEMUY5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTEwNTcwQ0U1NUQ4NTEyRkNCREYwMjgxOUZCOEEwRDNCQUQx Rjk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhB MEQzQkFEMUY5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsIfef+4vvZb6CwGe7WSOgsqSrppPoNVZNq avnIfgmHA2Ts2aMTs9DQHQ+7jAnmFF8vfExz6P8RPh0NlaO3O6CZYPK6dLfXU6p3 qaf81HTYU7KMBgitLDJ21g5gVdvM18lKPIZkbPoWn67NQ+pOdCvpJqDxgsHfjJip uRvbEipOd992jQ5tvVhG/2RYqofsIxdiCpSVfAaDiFjCr8vj3ycSvpj0LnxAeUpw gmjQUKbDjvsR2Xd70VNmfkVC8bgdZ7Ks95QVQVD5ymaYQyio+7ZwHDDzwDvmaiVy WyCzQu02LieQyEB9P/byNQopzqletr1ynZYH0HAa0nQrkUTYdEU= -----END CERTIFICATE-----Generated at Wed Sep 23 23:43:17 2026 by rpki-client