$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft File: 8FFAA6656CAEB189705F03C7B4148624E4A80597.mft (raw, json) Hash identifier: pphaB+a/1Z6/tVieZICSs97M5ETPdfSVBkPsdsALuRE= Subject key identifier: C0:AB:7F:5C:21:98:80:62:34:A6:E1:03:65:5C:1F:1F:CB:03:DD:D6 Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Certificate serial: 054CD2DA28B9F30AC857AA557D46C8AD3AA44315 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 05:17:16 +0000 Manifest this update: Thu 24 Sep 2026 05:12:16 +0000 Manifest next update: Fri 25 Sep 2026 07:16:16 +0000 Files and hashes: 1: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: j7IknYgKj7dl1bu8AJ/aQ/eLpW5VQAB5YDLHEEVUQxU=) 2: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 5tE3feCM9vyNUB/qpwvXZKU/4/GsAVh0LYhHMntcLoo=) 3: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: 9g/ng/5n6hJoQNhHnUHUl6+xhhnGERFtgslQ205VyPU=) 4: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: QgX53d3ZPmwqUeHqTZtdjccW/DQcVacKXuBLz3xuE+Q=) 5: 8FFAA6656CAEB189705F03C7B4148624E4A80597.crl (hash: DrF0XN35LwZuvzjJnIrucvRaNKup6CvFOG+cJEnRr2E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4c:d2:da:28:b9:f3:0a:c8:57:aa:55:7d:46:c8:ad:3a:a4:43:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Validity Not Before: Sep 24 05:12:16 2026 GMT Not After : Sep 25 07:16:16 2026 GMT Subject: CN=C0AB7F5C2198806234A6E103655C1F1FCB03DDD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:dc:f2:08:1a:51:de:a7:3a:59:52:4d:c4: d7:b6:15:68:88:c4:fe:ef:88:c0:ec:ac:4b:a0:44: 42:38:95:6a:0d:51:b7:33:f8:e7:10:c5:d1:30:f4: 1c:4d:e3:1e:e6:23:9b:28:72:ae:8f:44:67:70:ee: 39:e3:4a:67:8f:2b:ed:70:4a:84:64:f2:dc:fb:44: 76:6a:19:da:d3:1b:9a:38:70:f8:35:f3:dc:64:b8: 87:f9:6b:f9:b7:48:e9:27:b2:83:8b:96:88:41:d9: 58:52:06:e7:f2:86:d6:41:b7:a2:d3:49:7f:ff:2f: 90:ce:0d:08:42:8a:69:40:12:fb:71:9f:c4:c0:2e: d0:d3:8f:b7:10:03:96:7a:43:ac:0e:d3:d2:6a:29: 31:4a:e1:ce:90:90:f6:3d:14:b1:02:d3:49:43:43: dc:5b:4e:36:59:f7:c8:04:40:1d:f1:51:6e:fc:2f: 8c:28:cc:58:fb:33:21:2e:8d:c7:0b:fa:26:61:35: 89:01:58:b2:06:37:66:cc:39:93:d6:85:be:6f:97: 04:76:01:dc:b6:78:3a:55:f1:a4:eb:ce:27:2e:b7: 5f:2f:30:47:a4:45:02:e1:dc:70:7d:ca:46:9c:cc: 50:77:1d:67:3c:07:5f:11:27:4e:80:b7:ee:b7:f5: 96:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AB:7F:5C:21:98:80:62:34:A6:E1:03:65:5C:1F:1F:CB:03:DD:D6 X509v3 Authority Key Identifier: keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7c:b0:1d:97:ea:16:fc:9e:c3:27:13:00:c3:5a:a9:d8:26: 85:e8:bd:17:b8:f3:50:8b:10:85:e8:f9:43:60:03:e8:33:86: d7:4f:8a:4e:b1:b1:00:25:73:f5:4c:de:3d:8b:7e:40:d3:69: 1d:0f:e5:0e:03:84:94:a6:9f:71:9b:f6:82:ac:da:f1:bb:c2: 12:44:82:9f:3e:29:6f:94:55:90:06:83:4e:aa:a2:f2:d1:96: e4:bd:96:c0:da:7d:ed:73:5f:df:aa:0b:38:17:1f:98:34:d7: d6:73:e7:5c:31:7e:93:77:d7:78:ef:f6:f5:51:91:f7:de:81: 7d:ab:d2:ec:03:87:3c:99:23:df:75:9b:77:46:8d:11:3d:1e: 03:30:61:9e:fb:33:09:75:9e:34:3f:b8:31:72:ad:02:72:e2: e0:ce:9a:71:84:54:c2:7d:64:9c:2d:29:e6:34:ca:90:eb:e2: a9:4c:07:96:30:51:ef:45:81:45:d8:d1:80:76:b6:60:98:e6: 0b:87:34:24:7c:4e:76:18:e0:5d:b4:9d:b6:1c:c2:f4:9a:50: 62:25:e6:2c:c4:91:43:1e:a9:4b:30:cd:20:46:5d:c0:ec:a8: 39:53:73:1a:63:c1:64:94:74:11:27:58:9f:29:4a:2a:45:15: 2c:75:e3:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUzS2ii58wrIV6pVfUbIrTqkQxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRF NEE4MDU5NzAeFw0yNjA5MjQwNTEyMTZaFw0yNjA5MjUwNzE2MTZaMDMxMTAvBgNV BAMTKEMwQUI3RjVDMjE5ODgwNjIzNEE2RTEwMzY1NUMxRjFGQ0IwM0RERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJudzyCBpR3qc6WVJNxNe2FWiI xP7viMDsrEugREI4lWoNUbcz+OcQxdEw9BxN4x7mI5socq6PRGdw7jnjSmePK+1w SoRk8tz7RHZqGdrTG5o4cPg189xkuIf5a/m3SOknsoOLlohB2VhSBufyhtZBt6LT SX//L5DODQhCimlAEvtxn8TALtDTj7cQA5Z6Q6wO09JqKTFK4c6QkPY9FLEC00lD Q9xbTjZZ98gEQB3xUW78L4wozFj7MyEujccL+iZhNYkBWLIGN2bMOZPWhb5vlwR2 Ady2eDpV8aTrzicut18vMEekRQLh3HB9ykaczFB3HWc8B18RJ06At+639ZYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwKt/XCGYgGI0puEDZVwfH8sD3dYwHwYDVR0j BBgwFoAUj/qmZWyusYlwXwPHtBSGJOSoBZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI4ODBkZWUtN2FhMi00YmU0LWJmMzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2 Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRFNEE4MDU5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBQTY2NTZDQUVCMTg5NzA1RjAzQzdCNDE0ODYyNEU0QTgw NTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2 MjRFNEE4MDU5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGN8sB2X6hb8nsMnEwDDWqnYJoXovRe481CL EIXo+UNgA+gzhtdPik6xsQAlc/VM3j2LfkDTaR0P5Q4DhJSmn3Gb9oKs2vG7whJE gp8+KW+UVZAGg06qovLRluS9lsDafe1zX9+qCzgXH5g019Zz51wxfpN313jv9vVR kffegX2r0uwDhzyZI991m3dGjRE9HgMwYZ77Mwl1njQ/uDFyrQJy4uDOmnGEVMJ9 ZJwtKeY0ypDr4qlMB5YwUe9FgUXY0YB2tmCY5guHNCR8TnYY4F20nbYcwvSaUGIl 5izEkUMeqUswzSBGXcDsqDlTcxpjwWSUdBEnWJ8pSipFFSx14yc= -----END CERTIFICATE-----Generated at Thu Sep 24 13:00:02 2026 by rpki-client