$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft File: 8B43E14BD4588C4904A641356A5D07D628190CAB.mft (raw, json) Hash identifier: uyCmvdyCdIhpqmwQxS2JNNJn7NKwAX+T1EwjUZQiMPg= Subject key identifier: DB:14:8A:04:03:01:34:69:81:E9:87:4B:B1:CF:6C:0B:98:31:81:5F Authority key identifier: 8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB Certificate issuer: /CN=8B43E14BD4588C4904A641356A5D07D628190CAB Certificate serial: 36D074AF659A6D4D2878CCD40EEA10B2DF06CE08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft Manifest number: CD Signing time: Fri 02 Oct 2026 21:02:05 +0000 Manifest this update: Fri 02 Oct 2026 20:57:05 +0000 Manifest next update: Sat 03 Oct 2026 21:13:05 +0000 Files and hashes: 1: 8B43E14BD4588C4904A641356A5D07D628190CAB.crl (hash: Sqzv5aMftZvOHnHJOwfDyx9Cip3OpJ87tS9TRBBNMtM=) 2: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: 0flsrdaSAjsWCJEWyeVcLLzCVtlFqOFqVNzD5e/gcuA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.crl rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 21:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d0:74:af:65:9a:6d:4d:28:78:cc:d4:0e:ea:10:b2:df:06:ce:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B43E14BD4588C4904A641356A5D07D628190CAB Validity Not Before: Oct 2 20:57:05 2026 GMT Not After : Oct 3 21:13:05 2026 GMT Subject: CN=DB148A040301346981E9874BB1CF6C0B9831815F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:2f:67:ef:c0:d9:10:36:5e:b2:b4:d6:d3: 9d:15:76:30:af:b2:30:5d:10:dc:59:42:73:19:24: 16:4a:ca:51:d7:d0:bf:76:d6:e5:91:b2:22:29:b1: ea:b0:fc:cd:f4:f6:0d:8c:92:3c:c8:29:aa:5f:10: 9a:62:2f:0d:87:ee:9c:db:75:e4:4f:63:b4:24:18: 08:e5:28:2e:52:49:3b:cf:51:78:75:e5:f4:82:83: 9d:9f:a9:47:f7:be:d3:a1:d0:9e:42:1f:04:9d:54: d4:9e:da:18:c1:b5:d5:76:28:ef:00:2f:75:c2:10: 5e:35:44:ab:3e:2d:4b:25:8d:62:f4:7c:91:1c:97: 07:d5:b0:d2:57:da:3d:1c:75:26:c3:7c:25:f2:17: e6:d1:b1:89:53:08:a8:f9:7d:ff:0a:0a:cc:41:ac: 1c:11:dd:69:cd:13:64:ec:bc:f3:81:42:a5:e6:c3: 26:f8:31:4a:99:79:84:07:e7:90:ff:0d:3c:4a:da: e1:d8:70:1d:5d:1f:99:f4:8f:a6:68:cb:e4:5d:12: 18:3f:57:b5:ac:23:37:77:c5:aa:a6:fd:25:12:82: f7:65:98:75:ca:9f:41:00:b0:64:c1:20:92:bf:a6: 41:cc:0f:80:9e:41:13:7b:b5:33:d8:f4:1e:60:e3: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:14:8A:04:03:01:34:69:81:E9:87:4B:B1:CF:6C:0B:98:31:81:5F X509v3 Authority Key Identifier: keyid:8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c2:04:3f:cd:ae:4a:5f:11:4a:1e:00:6a:94:12:9e:6e:ad: 7d:5e:6a:ce:bb:4d:b6:06:e3:45:cc:e8:dc:c4:fb:a4:7b:c7: 04:44:d8:d5:2f:2d:6d:4f:b2:c7:b6:26:49:08:cd:1b:32:4f: 22:27:a0:6a:a3:e9:a4:84:56:c2:f9:c6:b2:38:4a:78:c3:b6: 96:a2:3e:5a:8b:2a:4b:a3:5d:75:fe:fe:32:20:8b:40:e9:08: 86:72:d9:49:37:c8:12:94:c7:a7:3b:8b:56:aa:74:ef:2a:e9: e0:c2:5c:10:6c:8c:de:1a:c9:ed:e7:d1:b9:0e:a9:5d:bf:6f: 67:b6:bf:da:fb:f3:e6:1e:d5:84:c3:3c:dd:22:e0:fb:ba:ed: 19:b5:c8:74:ae:ca:ad:ed:2b:eb:0b:ee:e4:6c:59:9f:59:21: c4:e8:06:0d:27:70:15:f9:91:9e:a0:31:ea:3d:12:78:5b:46: c7:eb:d1:ff:e9:2b:5f:23:3a:15:21:9c:19:14:bf:33:a0:12: f2:e0:41:79:4e:4c:13:5f:3e:bd:1c:c5:ef:f6:21:03:12:9b: 7d:2d:75:00:34:43:dc:37:a0:11:85:15:16:a0:77:b6:94:61: d4:69:bb:eb:8f:aa:c2:2b:3a:d4:3e:e5:8f:64:d2:0b:30:90: 65:bb:92:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNtB0r2WabU0oeMzUDuoQst8GzggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0M0UxNEJENDU4OEM0OTA0QTY0MTM1NkE1RDA3RDYy ODE5MENBQjAeFw0yNjEwMDIyMDU3MDVaFw0yNjEwMDMyMTEzMDVaMDMxMTAvBgNV BAMTKERCMTQ4QTA0MDMwMTM0Njk4MUU5ODc0QkIxQ0Y2QzBCOTgzMTgxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGdC9n78DZEDZesrTW050VdjCv sjBdENxZQnMZJBZKylHX0L921uWRsiIpseqw/M309g2MkjzIKapfEJpiLw2H7pzb deRPY7QkGAjlKC5SSTvPUXh15fSCg52fqUf3vtOh0J5CHwSdVNSe2hjBtdV2KO8A L3XCEF41RKs+LUsljWL0fJEclwfVsNJX2j0cdSbDfCXyF+bRsYlTCKj5ff8KCsxB rBwR3WnNE2TsvPOBQqXmwyb4MUqZeYQH55D/DTxK2uHYcB1dH5n0j6Zoy+RdEhg/ V7WsIzd3xaqm/SUSgvdlmHXKn0EAsGTBIJK/pkHMD4CeQRN7tTPY9B5g49X5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2xSKBAMBNGmB6YdLsc9sC5gxgV8wHwYDVR0j BBgwFoAUi0PhS9RYjEkEpkE1al0H1igZDKswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzRhMjNjNGUtMzkzMi00M2JkLTgxNzYtZjYyNTFkZGVhODQyLzAvOEI0M0UxNEJE NDU4OEM0OTA0QTY0MTM1NkE1RDA3RDYyODE5MENBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjQzRTE0QkQ0NTg4QzQ5MDRBNjQxMzU2QTVEMDdENjI4MTkw Q0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvOEI0M0UxNEJENDU4OEM0OTA0QTY0MTM1NkE1RDA3 RDYyODE5MENBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXCBD/NrkpfEUoeAGqUEp5urX1eas67TbYG 40XM6NzE+6R7xwRE2NUvLW1Psse2JkkIzRsyTyInoGqj6aSEVsL5xrI4SnjDtpai PlqLKkujXXX+/jIgi0DpCIZy2Uk3yBKUx6c7i1aqdO8q6eDCXBBsjN4aye3n0bkO qV2/b2e2v9r78+Ye1YTDPN0i4Pu67Rm1yHSuyq3tK+sL7uRsWZ9ZIcToBg0ncBX5 kZ6gMeo9EnhbRsfr0f/pK18jOhUhnBkUvzOgEvLgQXlOTBNfPr0cxe/2IQMSm30t dQA0Q9w3oBGFFRagd7aUYdRpu+uPqsIrOtQ+5Y9k0gswkGW7ktE= -----END CERTIFICATE-----Generated at Sat Oct 3 13:29:51 2026 by rpki-client