$ rpki-client -vvvf rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft File: 8F6B228755F970273B8D779247A1AE56FE0C9587.mft (raw, json) Hash identifier: 908qutZYxK95N0cgi/NeZyt4km/P4Y/UklH8Rg+nO+E= Subject key identifier: A9:8E:6D:44:5F:8A:8A:69:2D:8B:D0:A0:7A:3D:08:37:9E:63:04:B5 Authority key identifier: 8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 Certificate issuer: /CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Certificate serial: 1594617B47C628F7286A3A0457DFEDC37B10CF58 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:07:09 +0000 Manifest this update: Wed 23 Sep 2026 17:02:09 +0000 Manifest next update: Thu 24 Sep 2026 20:40:09 +0000 Files and hashes: 1: 8F6B228755F970273B8D779247A1AE56FE0C9587.crl (hash: ZI2Lptq9I8hlLP8uWJm4uvBlx2dc57PXgZTykrDiYW4=) 2: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: Xy8vvuZlhVSnjTAKWEI2yBt5W17a07XY3wxdN0sfnOc=) 3: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: ZGy+loCXTZu4lKXZ9Xy1tyQd/a/a5ZNJkzDyvD+H2Qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:94:61:7b:47:c6:28:f7:28:6a:3a:04:57:df:ed:c3:7b:10:cf:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Validity Not Before: Sep 23 17:02:09 2026 GMT Not After : Sep 24 20:40:09 2026 GMT Subject: CN=A98E6D445F8A8A692D8BD0A07A3D08379E6304B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:eb:32:91:5c:13:d6:a6:e4:b8:92:a4:30: e4:f5:d3:0d:5f:40:e6:63:79:91:e9:77:11:9a:1f: be:79:20:ea:3e:88:37:80:e4:4b:9d:06:e3:58:30: 27:31:b5:64:79:8c:07:54:a0:d4:28:c3:e1:af:b3: 45:8b:61:72:94:9a:0c:1e:6e:2c:17:52:6a:4e:d3: 1d:be:e4:8e:3c:e6:fb:41:38:37:3a:f1:13:ec:f2: 5e:7b:32:c7:15:95:c4:aa:50:af:ef:c3:3f:b5:b6: 92:50:42:74:ee:eb:f0:31:c6:ae:ca:01:aa:49:24: 51:81:27:ef:e1:76:db:9f:aa:fc:d7:d6:3c:6a:b9: 3c:e6:cd:28:62:49:a9:69:de:0a:f0:22:dd:5d:73: 45:06:3a:db:ee:8a:eb:65:b7:78:5e:d5:c3:90:57: 35:6c:5b:78:5a:20:67:3c:d5:77:a0:21:b4:00:92: 32:85:48:59:47:97:98:7b:8e:14:5c:1a:25:28:89: 0f:f2:86:30:2b:78:8f:36:be:4f:31:ae:0f:23:e1: e9:3f:c7:bc:96:c1:45:75:80:a1:fe:26:07:a1:e1: 12:46:16:74:09:25:9b:2f:30:64:8f:33:5a:e5:b1: d2:93:31:32:64:fd:9f:79:e1:3a:25:0a:19:2e:6e: 3a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8E:6D:44:5F:8A:8A:69:2D:8B:D0:A0:7A:3D:08:37:9E:63:04:B5 X509v3 Authority Key Identifier: keyid:8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ba:c0:fd:15:96:ca:71:aa:a7:68:ce:3d:cb:1a:cb:e3:28: 8e:42:ef:60:12:78:d9:6f:10:00:80:f2:95:96:38:5a:7c:62: 8b:4d:9c:ad:34:28:a8:c7:04:a5:f5:fb:8e:10:f0:fc:a3:cc: a5:2d:42:d7:70:bd:ca:6a:81:81:6e:ee:57:b5:02:d7:63:cb: a7:7f:77:d4:48:0f:5b:e0:bc:fa:bf:3e:50:37:63:f4:cf:38: 56:6c:11:dc:2d:d9:af:7c:05:03:34:a2:1b:34:50:a2:45:05: d5:39:28:58:74:1e:a8:42:a4:84:2c:03:34:58:f8:b3:59:e4: 56:76:5c:9d:5e:39:ac:3a:7b:53:23:00:11:43:46:9b:26:47: ae:06:c5:24:42:e9:97:bc:2f:eb:1d:7f:22:d4:be:22:7f:4d: b7:8b:8f:0d:32:6f:d1:b2:87:18:ef:19:73:ad:a2:5e:ed:70: f9:a7:b3:81:38:1a:cf:c2:7d:35:16:43:45:c1:19:3c:ca:a0: 3e:03:05:a9:6b:5f:7d:51:5b:89:09:9f:16:50:fc:cb:fd:26: 06:9a:e2:90:b9:a5:53:d0:3e:c5:e7:87:10:f9:5d:03:a7:7d: 3d:19:80:c7:9d:2c:04:59:31:a5:92:f6:a7:a1:6f:09:cc:4b: d7:4e:ab:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZRhe0fGKPcoajoEV9/tw3sQz1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY2QjIyODc1NUY5NzAyNzNCOEQ3NzkyNDdBMUFFNTZG RTBDOTU4NzAeFw0yNjA5MjMxNzAyMDlaFw0yNjA5MjQyMDQwMDlaMDMxMTAvBgNV BAMTKEE5OEU2RDQ0NUY4QThBNjkyRDhCRDBBMDdBM0QwODM3OUU2MzA0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1oOsykVwT1qbkuJKkMOT10w1f QOZjeZHpdxGaH755IOo+iDeA5EudBuNYMCcxtWR5jAdUoNQow+Gvs0WLYXKUmgwe biwXUmpO0x2+5I485vtBODc68RPs8l57MscVlcSqUK/vwz+1tpJQQnTu6/Axxq7K AapJJFGBJ+/hdtufqvzX1jxquTzmzShiSalp3grwIt1dc0UGOtvuiutlt3he1cOQ VzVsW3haIGc81XegIbQAkjKFSFlHl5h7jhRcGiUoiQ/yhjAreI82vk8xrg8j4ek/ x7yWwUV1gKH+Jgeh4RJGFnQJJZsvMGSPM1rlsdKTMTJk/Z954TolChkubjoJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqY5tRF+Kimkti9Cgej0IN55jBLUwHwYDVR0j BBgwFoAUj2sih1X5cCc7jXeSR6GuVv4MlYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU3ZmIxN2UtOWQ1OC00ZDUxLTg0NmUtMGE4NGM4Njk5MTQyLzAvOEY2QjIyODc1 NUY5NzAyNzNCOEQ3NzkyNDdBMUFFNTZGRTBDOTU4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjZCMjI4NzU1Rjk3MDI3M0I4RDc3OTI0N0ExQUU1NkZFMEM5 NTg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOEY2QjIyODc1NUY5NzAyNzNCOEQ3NzkyNDdBMUFF NTZGRTBDOTU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy6wP0Vlspxqqdozj3LGsvjKI5C72ASeNlv EACA8pWWOFp8YotNnK00KKjHBKX1+44Q8PyjzKUtQtdwvcpqgYFu7le1Atdjy6d/ d9RID1vgvPq/PlA3Y/TPOFZsEdwt2a98BQM0ohs0UKJFBdU5KFh0HqhCpIQsAzRY +LNZ5FZ2XJ1eOaw6e1MjABFDRpsmR64GxSRC6Ze8L+sdfyLUviJ/TbeLjw0yb9Gy hxjvGXOtol7tcPmns4E4Gs/CfTUWQ0XBGTzKoD4DBalrX31RW4kJnxZQ/Mv9Jgaa 4pC5pVPQPsXnhxD5XQOnfT0ZgMedLARZMaWS9qehbwnMS9dOq3s= -----END CERTIFICATE-----Generated at Thu Sep 24 09:01:06 2026 by rpki-client