$ rpki-client -vvvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft File: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft (raw, json) Hash identifier: IYdosxfdCH7SGD+itw+DcHo/bKPQZi9ruyAHHORFWcQ= Subject key identifier: 86:31:9B:15:87:10:BC:34:4A:D6:A3:9B:5B:8D:62:05:55:1E:63:EA Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Certificate serial: 5E91BA899072D599F3F49014348375A00D358DF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 18:03:19 +0000 Manifest this update: Wed 23 Sep 2026 17:58:19 +0000 Manifest next update: Thu 24 Sep 2026 20:40:19 +0000 Files and hashes: 1: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: X24eGimplx9OKKA54SDn3PccRcDMInDYSFbqOhNXsRk=) 2: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: kKPyA87cBNNbll+wZXw03s3L6LbkLTPgrzdBootFsHQ=) 3: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: Fg6XcYLXwzdBTEEbtVqZPj3EQucOEbeogJk1AzgGxAQ=) 4: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: iFasMrZpPZhCJqBPOEUsMWSE1IL6XiDkC/rJS8HVQTo=) 5: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: v5Ut+HnAU8B++keMYhHXiHiE6JJw8p9vB3wAUzitQ/s=) 6: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: ZMKJ6qvXBCnIGQclOHQhPWyyMM8hgD3nw2GXMro25Y4=) 7: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: XYH3WtUdslBTF725L3cOP4xs8XuxcDg3daKQgahU/wE=) 8: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: zrBSW8GC94FsmSWPx82P8/uTVF2HgCkoo/2hN3b+4hM=) 9: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: apqtipmn5kmXtB7pKv4YlNHER/Ifv3+XPDXaeex3R9k=) 10: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: V8AjpSzdxp8GDyMCHA7YtvW4QSVvG85ynWbgCsAEXEs=) 11: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl (hash: Y0FhsXdPvdj/KnZgMmn56j2C0BBD/VFz/dljCT4LpQQ=) 12: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: esq0SPO+hAIrG7YQPAU2RMpBG0FEhngieVqoN2H1Z00=) 13: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: BS5YihTbZaw+pKOipVulLJrh9jJr2QhVUAXi4IwAkiI=) 14: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: Q18y495vHxKdcsVM96pc/tUI9Fl6GfmbLs035wir/JU=) 15: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: ZWNoTl3f/QBfpXE45HAww//4eS88vFgydiSHbe0zdhA=) 16: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: CnBcLvoSDxEWtZrVDvNMamVH18oi4O/jyEx1Mt/oRO8=) 17: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: /XQUhdaX/lnH/4pSzymUR8gU8PBZoGnTr2RxGh6dJJI=) 18: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: TN3/E7Y5c/nedOyTgYgff8HK90H5iShgi5mk+WZX5nw=) 19: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: t5lI2fSBgF1Qk+xi/wexkm174c0g31j+0DtjwN72lnc=) 20: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: bS5P/W+hj7so9J/fGjANaNnPonvylnMwWx29PNvc6E4=) 21: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: hVG5QJJlsbYPr5L1RCfsG/I/X2H5aI8Xq7RBOYv0G3o=) 22: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: bcUDOpCB0dNiYwZx7hB9TNsT/6Q2Z4ktB8wuICtWZXQ=) 23: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: svAi0R5XEu9X4Ys1yfCbCgtQxluGGulsPQVUUn8ta/o=) 24: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: OvSsEeapnu+/oiKYJIcMYudEmuSdyI2NmSImX5jHoH4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:91:ba:89:90:72:d5:99:f3:f4:90:14:34:83:75:a0:0d:35:8d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Validity Not Before: Sep 23 17:58:19 2026 GMT Not After : Sep 24 20:40:19 2026 GMT Subject: CN=86319B158710BC344AD6A39B5B8D6205551E63EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:bc:21:43:1b:9f:86:be:ed:3b:6a:79:bf: 81:02:05:68:5c:00:69:fd:d5:6a:7b:8e:5e:c0:47: c8:3f:84:96:e1:80:b5:7a:c0:30:ba:4d:35:cd:06: 29:74:d6:89:b1:9b:31:8d:c5:07:d4:20:39:c2:dc: 9d:4a:3d:ad:cf:f0:6a:98:4a:86:d2:ca:7e:9c:8e: 7c:c2:89:66:39:22:f3:a2:85:c4:67:f8:e4:b2:eb: 17:43:bf:82:06:74:9f:2e:4d:53:cd:0f:fc:8e:8b: dd:ec:b3:01:f2:24:32:d8:27:cf:09:26:95:6e:72: 1b:9d:e0:ef:8c:77:87:6a:ba:85:e3:8c:df:f9:46: 7a:18:c7:b1:a6:9f:7a:1a:7e:90:68:e0:eb:f3:5c: 6b:f0:2a:f1:fc:e3:1b:70:21:de:bc:b2:27:88:dc: db:64:5c:33:fb:2c:d4:dd:18:eb:de:3d:4d:9e:9a: 90:36:4e:ba:ff:44:a7:69:20:db:9c:99:c5:cb:c0: 72:2e:ce:3d:07:06:0f:a6:7d:d8:b7:9a:49:47:d0: 9a:46:89:b4:05:6e:35:4d:b2:eb:b5:0a:0a:62:82: 8e:69:90:ff:93:08:c1:1c:37:50:66:75:ce:de:2f: 6a:d4:6f:aa:50:c3:fa:ea:6d:95:ed:a0:f3:38:43: 0f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:31:9B:15:87:10:BC:34:4A:D6:A3:9B:5B:8D:62:05:55:1E:63:EA X509v3 Authority Key Identifier: keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e1:03:45:08:ea:1f:2b:07:37:71:26:51:f3:f3:56:39:fa: d3:11:d0:a0:14:a5:be:77:a1:0b:73:1d:23:34:2a:90:88:46: fe:39:85:04:88:b1:58:9c:47:e4:73:40:6c:1f:2c:3b:70:a9: 97:b8:71:ca:f4:3d:de:2b:fd:8a:13:cd:af:8e:b7:fa:03:98: 20:bb:fa:05:61:80:fd:87:c5:2f:53:67:75:1c:8b:12:7c:88: b8:c7:eb:ec:55:53:84:f6:43:38:74:bf:a5:c9:83:a0:c8:3e: ec:58:ac:f3:28:c1:b9:3e:b8:a7:22:51:a7:97:62:af:b9:df: 0a:af:28:28:f3:2f:af:1d:63:b0:da:ab:85:51:c5:5f:9f:07: 02:35:f0:db:b0:d3:3d:83:39:53:ae:49:0b:87:a2:8f:8c:e8: 90:8e:1a:5d:14:94:a3:dc:8f:28:1f:a4:c8:db:ff:89:9d:28: a2:10:14:12:6c:6f:be:84:11:b4:58:da:eb:77:b0:f5:88:7f: 74:1e:52:5f:47:f2:8a:65:ed:47:39:41:17:eb:fd:df:9a:c5: 45:ec:3b:e7:36:8b:1c:50:f7:3f:cd:32:e5:75:b4:86:d6:9d: bc:0f:b0:49:c2:dd:db:5b:b0:a2:b3:39:d7:b2:83:32:99:83: 74:71:d6:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpG6iZBy1Znz9JAUNIN1oA01jfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMxODA4 NkE4MzJDOTAeFw0yNjA5MjMxNzU4MTlaFw0yNjA5MjQyMDQwMTlaMDMxMTAvBgNV BAMTKDg2MzE5QjE1ODcxMEJDMzQ0QUQ2QTM5QjVCOEQ2MjA1NTUxRTYzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQ7whQxufhr7tO2p5v4ECBWhc AGn91Wp7jl7AR8g/hJbhgLV6wDC6TTXNBil01omxmzGNxQfUIDnC3J1KPa3P8GqY SobSyn6cjnzCiWY5IvOihcRn+OSy6xdDv4IGdJ8uTVPND/yOi93sswHyJDLYJ88J JpVuchud4O+Md4dquoXjjN/5RnoYx7Gmn3oafpBo4OvzXGvwKvH84xtwId68sieI 3NtkXDP7LNTdGOvePU2empA2Trr/RKdpINucmcXLwHIuzj0HBg+mfdi3mklH0JpG ibQFbjVNsuu1Cgpigo5pkP+TCMEcN1Bmdc7eL2rUb6pQw/rqbZXtoPM4Qw8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjGbFYcQvDRK1qObW41iBVUeY+owHwYDVR0j BBgwFoAU+OtvTpHd1H+o4EgbYNTBgIaoMskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAwZjRmMzctYzdmYi00N2QwLThhODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5 MURERDQ3RkE4RTA0ODFCNjBENEMxODA4NkE4MzJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVCNkY0RTkxRERENDdGQThFMDQ4MUI2MEQ0QzE4MDg2QTgz MkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMx ODA4NkE4MzJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPhA0UI6h8rBzdxJlHz81Y5+tMR0KAUpb53 oQtzHSM0KpCIRv45hQSIsVicR+RzQGwfLDtwqZe4ccr0Pd4r/YoTza+Ot/oDmCC7 +gVhgP2HxS9TZ3UcixJ8iLjH6+xVU4T2Qzh0v6XJg6DIPuxYrPMowbk+uKciUaeX Yq+53wqvKCjzL68dY7Daq4VRxV+fBwI18Nuw0z2DOVOuSQuHoo+M6JCOGl0UlKPc jygfpMjb/4mdKKIQFBJsb76EEbRY2ut3sPWIf3QeUl9H8opl7Uc5QRfr/d+axUXs O+c2ixxQ9z/NMuV1tIbWnbwPsEnC3dtbsKKzOdeygzKZg3Rx1mc= -----END CERTIFICATE-----Generated at Thu Sep 24 12:20:58 2026 by rpki-client