$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft File: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft (raw, json) Hash identifier: b2gTTEOEQ6LZmWozXGPiRfaERGl2Vk+zndDNgqS9ffM= Subject key identifier: E9:4B:9D:79:A1:5E:72:3D:1A:AE:2F:96:D0:12:07:DD:6A:8F:18:DF Authority key identifier: 8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 Certificate issuer: /CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Certificate serial: 3008684EA917A68A7BCB02FBC89807B8D7A308F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 00:41:34 +0000 Manifest this update: Thu 24 Sep 2026 00:36:34 +0000 Manifest next update: Fri 25 Sep 2026 00:53:34 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: 3gBu5z4wg47/tNqaD7YsE1EFFZZ6JYTR0325QFX63A0=) 2: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl (hash: woc7ryTGxYrLQWVQGrx+WlEStqU8M6KRNK1OgD8wF5g=) 3: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: FAM0vFS+CEP/k4I2FWb6JASyBXq3gfqT8CiCE9WHTo0=) 4: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: vEKBFb87szZHK58hOoWh27DXWyqF6KjiEygYywKcCcA=) 5: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: nhCth3GuuL56/ZX/YpeRjeCAIHYgJ/lFofg+gthNMoU=) 6: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: r7dovsQ2SZSV7IfPAfAuGK0MlNXhEY5b9y9M8jygZbk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:08:68:4e:a9:17:a6:8a:7b:cb:02:fb:c8:98:07:b8:d7:a3:08:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Validity Not Before: Sep 24 00:36:34 2026 GMT Not After : Sep 25 00:53:34 2026 GMT Subject: CN=E94B9D79A15E723D1AAE2F96D01207DD6A8F18DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:c4:20:61:d6:ba:b3:ea:16:a7:db:6e:42: 57:82:88:57:67:5b:82:01:f3:82:99:32:01:72:78: b0:9b:5b:78:23:d4:b0:fd:02:7b:51:08:47:b7:e8: 4e:24:14:cf:2c:3c:fd:4b:45:8a:fc:02:c5:40:12: aa:23:0d:f1:5e:ab:56:65:26:d4:26:4c:e7:12:f5: f0:7b:ce:77:47:ad:e1:16:d3:ce:a0:0d:eb:6e:29: 49:7b:94:09:85:f7:17:26:c6:0a:00:03:2d:05:8d: c0:19:b6:fd:f5:cb:ab:25:f1:ec:0a:3c:e6:8f:7e: d5:91:2e:71:0b:3c:db:ff:e0:e7:df:09:13:83:0b: 9b:95:93:3f:e6:ad:d2:bb:f3:7b:89:b3:11:f8:52: 04:bd:db:c0:f3:6f:18:08:56:16:d8:56:ed:f8:c9: b4:bd:9c:96:5a:aa:f3:47:f3:4a:14:dc:d7:e7:c1: 85:61:11:31:37:a9:6f:12:4a:90:60:1b:8e:3a:b2: d6:f6:ca:97:bd:ad:f2:99:b5:b4:2d:8f:19:7a:15: 27:82:51:a9:e4:18:36:4a:1e:3f:69:58:fb:28:55: 25:5c:b1:6d:87:9f:e7:f4:96:9b:90:94:1f:c2:a0: 58:4f:fd:a0:66:e6:00:4b:df:be:85:75:8b:70:7c: cd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4B:9D:79:A1:5E:72:3D:1A:AE:2F:96:D0:12:07:DD:6A:8F:18:DF X509v3 Authority Key Identifier: keyid:8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0d:07:72:11:d8:6f:fd:79:f2:bb:37:28:35:86:ea:82:05: 6f:05:23:9b:6b:34:3a:df:5c:e8:17:97:59:ac:7b:99:11:e3: a9:7a:a0:25:07:2e:3a:1a:27:8f:13:29:12:1f:6e:2e:56:5b: 6f:af:70:e8:aa:90:13:28:75:02:f5:e7:65:21:7a:b3:b0:82: 61:8d:6e:bb:22:ea:b9:e6:9e:ec:cf:52:3f:a6:39:e9:61:a7: b5:27:44:cf:aa:c1:95:32:19:8f:dc:1a:08:db:63:1c:b2:e2: f0:5a:e4:43:6f:96:50:1b:11:90:94:02:df:a8:28:a3:f3:cf: 1d:c9:25:4d:a5:eb:93:09:49:65:d3:b9:a1:84:6f:5c:5c:4d: dd:e6:b2:9e:e5:d5:54:57:4c:c2:6d:9c:09:6f:d7:5e:e1:e8: 8d:13:a9:11:2e:0f:12:ff:40:47:61:0f:3a:83:57:d8:d0:9a: a5:0a:37:92:58:3e:47:5c:2e:19:df:f6:88:cc:a3:0e:b8:33: 6f:a7:e7:47:40:5b:01:bf:18:16:c7:58:7f:28:4b:09:d2:07: 91:08:ab:1b:df:36:4f:f8:5e:f0:ca:66:40:0d:ac:b7:80:b1: 7e:55:63:63:3e:34:f9:55:72:2f:e6:6a:43:4f:26:8b:63:48: f9:37:72:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAhoTqkXpop7ywL7yJgHuNejCPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTczMTYy QTQzMTZFOTAeFw0yNjA5MjQwMDM2MzRaFw0yNjA5MjUwMDUzMzRaMDMxMTAvBgNV BAMTKEU5NEI5RDc5QTE1RTcyM0QxQUFFMkY5NkQwMTIwN0RENkE4RjE4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjsQgYda6s+oWp9tuQleCiFdn W4IB84KZMgFyeLCbW3gj1LD9AntRCEe36E4kFM8sPP1LRYr8AsVAEqojDfFeq1Zl JtQmTOcS9fB7zndHreEW086gDetuKUl7lAmF9xcmxgoAAy0FjcAZtv31y6sl8ewK POaPftWRLnELPNv/4OffCRODC5uVkz/mrdK783uJsxH4UgS928DzbxgIVhbYVu34 ybS9nJZaqvNH80oU3NfnwYVhETE3qW8SSpBgG446stb2ype9rfKZtbQtjxl6FSeC UankGDZKHj9pWPsoVSVcsW2Hn+f0lpuQlB/CoFhP/aBm5gBL376FdYtwfM3rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6UudeaFecj0ari+W0BIH3WqPGN8wHwYDVR0j BBgwFoAUjn0puLLm8vCbUH/DazFzFipDFukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI1MmVhZDMtZGM4Zi00ZDg2LWFmY2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhC MkU2RjJGMDlCNTA3RkMzNkIzMTczMTYyQTQzMTZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTdEMjlCOEIyRTZGMkYwOUI1MDdGQzM2QjMxNzMxNjJBNDMx NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTcz MTYyQTQzMTZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0NB3IR2G/9efK7Nyg1huqCBW8FI5trNDrf XOgXl1mse5kR46l6oCUHLjoaJ48TKRIfbi5WW2+vcOiqkBModQL152UherOwgmGN brsi6rnmnuzPUj+mOelhp7UnRM+qwZUyGY/cGgjbYxyy4vBa5ENvllAbEZCUAt+o KKPzzx3JJU2l65MJSWXTuaGEb1xcTd3msp7l1VRXTMJtnAlv117h6I0TqREuDxL/ QEdhDzqDV9jQmqUKN5JYPkdcLhnf9ojMow64M2+n50dAWwG/GBbHWH8oSwnSB5EI qxvfNk/4XvDKZkANrLeAsX5VY2M+NPlVci/makNPJotjSPk3co4= -----END CERTIFICATE-----Generated at Thu Sep 24 17:19:24 2026 by rpki-client