$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft File: 8B57121B495DA86939D79B7BA261CF6D38C999CF.mft (raw, json) Hash identifier: iMkTJDBX6TXlfcpo7ClYFNq2B5ob4hITLuzLX8vWv+M= Subject key identifier: 2D:E5:39:F1:B7:C4:CC:3C:E1:41:38:D7:CC:69:B3:D2:EA:BB:A5:08 Authority key identifier: 8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF Certificate issuer: /CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Certificate serial: 4E763980F08B74A024CAA3A8FC117294EAA92180 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft Manifest number: C8 Signing time: Tue 29 Sep 2026 07:33:45 +0000 Manifest this update: Tue 29 Sep 2026 07:28:45 +0000 Manifest next update: Wed 30 Sep 2026 11:09:45 +0000 Files and hashes: 1: 8B57121B495DA86939D79B7BA261CF6D38C999CF.crl (hash: 9nff7PtEepWJNdUa9r8sXvJC4ldOjrCN57oXIBylO3A=) 2: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: w+XxfdGQbvXdRZjpGQCwUdlhFyEQmevCuv9dcfZGuKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:76:39:80:f0:8b:74:a0:24:ca:a3:a8:fc:11:72:94:ea:a9:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Validity Not Before: Sep 29 07:28:45 2026 GMT Not After : Sep 30 11:09:45 2026 GMT Subject: CN=2DE539F1B7C4CC3CE14138D7CC69B3D2EABBA508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:eb:47:55:05:2c:0a:15:7f:a7:ab:03:53: 60:37:62:2e:e4:e7:60:52:e2:d4:61:3b:fe:a2:77: dd:da:80:07:39:81:3e:43:c6:b6:66:cc:a0:58:f6: b8:35:fc:ce:26:0d:5b:16:34:b5:8f:b1:7e:25:75: b6:1f:f8:c2:32:aa:ff:38:de:28:4b:04:3a:67:d4: 3b:70:74:21:1d:ea:8c:52:88:24:a7:e2:24:db:3d: 39:27:50:60:99:5d:00:3e:df:e6:64:3b:1c:ff:88: 56:68:5e:4a:60:47:1b:00:2a:de:90:44:5a:8f:a4: 26:33:f2:22:95:86:d0:d7:bb:4d:bc:23:b7:88:ce: c0:a5:ee:1a:dc:82:cc:47:02:3c:1e:d9:1f:6c:d2: b0:48:18:e8:f4:8d:02:4b:06:9f:38:4c:ec:c9:4f: 9d:a2:6a:6f:b8:55:7a:c4:bd:e1:2f:d3:17:fa:44: 38:c1:5a:a1:77:fd:26:91:37:33:32:38:f8:41:06: 21:a7:02:a7:a6:5f:f4:60:9e:f5:77:a1:be:03:f9: ad:44:4e:0f:43:7d:c8:66:07:d6:2b:95:6e:c1:09: 2e:e3:61:8a:22:66:68:42:47:8e:c6:e2:95:42:6c: 11:d6:82:e5:79:f5:69:32:4b:fb:bc:81:56:44:cf: a4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E5:39:F1:B7:C4:CC:3C:E1:41:38:D7:CC:69:B3:D2:EA:BB:A5:08 X509v3 Authority Key Identifier: keyid:8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a4:87:9a:aa:18:69:d2:45:46:f7:e0:06:6d:ea:29:90:cc: 72:af:8a:39:d5:98:1d:23:4d:dc:04:a3:3d:3c:3f:59:3c:49: 22:74:b2:53:40:11:c4:84:20:32:e6:fc:95:74:c4:af:9c:3d: 97:a5:1f:ba:a2:ce:a9:01:80:54:39:7a:e6:3f:14:ce:40:94: 0a:9a:c6:ea:0d:af:6d:46:ae:64:29:ab:aa:67:84:cf:05:cc: 35:22:26:84:58:f4:15:5b:f0:28:f3:67:ab:c3:eb:f3:5f:63: c7:21:df:e0:57:78:e5:b4:5f:71:54:2c:95:b2:15:fb:23:bc: 9e:f6:7b:1c:8a:ca:12:2c:b6:8d:ef:7a:93:bb:46:54:ba:3c: e1:17:32:e9:0f:24:c2:e8:ba:ca:cf:e1:1f:57:39:d9:07:09: 48:41:19:d1:62:d0:f2:4a:8f:48:a5:84:ea:83:50:01:87:23: 62:59:44:8f:ab:2d:71:1b:d1:3c:5a:07:78:db:ec:1d:a0:15: bf:f8:0a:d8:8d:71:14:3f:f7:1a:47:4a:20:93:f7:93:e7:58: 91:aa:ca:1f:01:fe:0c:76:a2:50:75:88:66:fc:46:2f:b2:76: 4f:64:90:65:83:6f:df:a6:4a:6a:7e:3f:e9:e5:1e:c9:8f:9a: ae:7b:90:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTnY5gPCLdKAkyqOo/BFylOqpIYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQz OEM5OTlDRjAeFw0yNjA5MjkwNzI4NDVaFw0yNjA5MzAxMTA5NDVaMDMxMTAvBgNV BAMTKDJERTUzOUYxQjdDNENDM0NFMTQxMzhEN0NDNjlCM0QyRUFCQkE1MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8utHVQUsChV/p6sDU2A3Yi7k 52BS4tRhO/6id93agAc5gT5DxrZmzKBY9rg1/M4mDVsWNLWPsX4ldbYf+MIyqv84 3ihLBDpn1DtwdCEd6oxSiCSn4iTbPTknUGCZXQA+3+ZkOxz/iFZoXkpgRxsAKt6Q RFqPpCYz8iKVhtDXu028I7eIzsCl7hrcgsxHAjwe2R9s0rBIGOj0jQJLBp84TOzJ T52iam+4VXrEveEv0xf6RDjBWqF3/SaRNzMyOPhBBiGnAqemX/RgnvV3ob4D+a1E Tg9DfchmB9YrlW7BCS7jYYoiZmhCR47G4pVCbBHWguV59WkyS/u8gVZEz6RdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULeU58bfEzDzhQTjXzGmz0uq7pQgwHwYDVR0j BBgwFoAUi1cSG0ldqGk515t7omHPbTjJmc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NjNTYwNWQtZjE3YS00MDEwLTkyNTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0 OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQzOEM5OTlDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjU3MTIxQjQ5NURBODY5MzlENzlCN0JBMjYxQ0Y2RDM4Qzk5 OUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNG NkQzOEM5OTlDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2kh5qqGGnSRUb34AZt6imQzHKvijnVmB0j TdwEoz08P1k8SSJ0slNAEcSEIDLm/JV0xK+cPZelH7qizqkBgFQ5euY/FM5AlAqa xuoNr21GrmQpq6pnhM8FzDUiJoRY9BVb8CjzZ6vD6/NfY8ch3+BXeOW0X3FULJWy FfsjvJ72exyKyhIsto3vepO7RlS6POEXMukPJMLousrP4R9XOdkHCUhBGdFi0PJK j0ilhOqDUAGHI2JZRI+rLXEb0TxaB3jb7B2gFb/4CtiNcRQ/9xpHSiCT95PnWJGq yh8B/gx2olB1iGb8Ri+ydk9kkGWDb9+mSmp+P+nlHsmPmq57kDQ= -----END CERTIFICATE-----Generated at Tue Sep 29 13:05:46 2026 by rpki-client