$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft File: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft (raw, json) Hash identifier: mAsQAhyz/6WjIeSnV54Uhp8FZs0p7P0mJYJWk3fcUqQ= Subject key identifier: F5:30:F3:FB:AF:32:D4:DF:F7:57:88:95:1A:70:68:B2:40:3B:E5:54 Authority key identifier: 8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 Certificate issuer: /CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Certificate serial: 373C1F0A9A1983381F6E7421D9BC3E12C3361CFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 19:24:36 +0000 Manifest this update: Thu 24 Sep 2026 19:19:36 +0000 Manifest next update: Fri 25 Sep 2026 19:35:36 +0000 Files and hashes: 1: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl (hash: is9J47QcvQ5mnwh5aHliTC2CxKANbOn9UARSuZPfMxM=) 2: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: HeHfGZB/GAp4q9T9TRaLUnaN9SyHYBb/bDC0hRan7Ak=) 3: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: 71PyqcaPYwvm2e6i8fnxEnvNfxXMokDQ1xxLp0rozYA=) 4: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: PZbtbKk588SOuMSDyRHv/Fg/EjC+9RQB0ZQtHocb618=) 5: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: NdF7z4Axz0mBE/lC0pc0IGrEEOoXFiCSmtcjnukP0y4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3c:1f:0a:9a:19:83:38:1f:6e:74:21:d9:bc:3e:12:c3:36:1c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Validity Not Before: Sep 24 19:19:36 2026 GMT Not After : Sep 25 19:35:36 2026 GMT Subject: CN=F530F3FBAF32D4DFF75788951A7068B2403BE554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:42:c6:b1:b0:96:a1:d7:8b:00:a8:4d:06:a5: 08:0c:63:1b:e0:22:c4:37:77:50:98:87:06:b2:52: 02:0b:5b:7f:86:cf:a5:28:8b:09:7b:d2:99:cc:67: cb:4c:70:15:aa:95:b7:ce:f9:0c:52:73:db:aa:cd: 66:38:05:b8:16:20:c6:f3:c8:70:3f:86:2f:8a:39: 4b:70:71:3e:f2:1f:d4:da:67:c2:14:12:49:c0:e3: bb:ff:58:60:d9:58:ac:20:f6:27:fd:f4:0c:a3:b9: 10:28:7d:8f:51:c6:09:76:c5:ab:7d:96:e7:bd:43: 3f:79:8e:ba:df:1e:67:0a:93:ca:ab:fb:43:4e:ba: 37:40:5f:b4:cc:97:57:a8:dd:30:ab:3d:65:fb:6a: 02:a6:56:3d:5e:a7:62:cb:4b:aa:f9:40:07:4f:bd: 32:05:36:2a:a3:58:eb:e9:2f:88:2a:e4:5e:25:8f: d5:b8:2b:53:2d:b3:1c:26:2c:8b:64:1d:20:ae:ba: 1a:5d:14:a7:ad:42:39:e0:4d:dc:71:a9:f9:65:7a: 9a:2f:d4:f5:d0:66:62:aa:11:fc:c2:3b:71:71:6f: bf:65:07:2d:45:23:4c:f4:da:76:7b:51:57:8b:fe: 7b:17:30:5d:26:fe:bf:60:52:07:5a:a6:fe:d1:de: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:30:F3:FB:AF:32:D4:DF:F7:57:88:95:1A:70:68:B2:40:3B:E5:54 X509v3 Authority Key Identifier: keyid:8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4d:b8:fd:12:09:31:b4:53:35:5c:8c:49:ec:67:08:de:d1: d2:56:38:31:29:18:c6:60:f0:2d:28:0a:5d:eb:d6:74:09:1c: f5:ce:29:c5:8f:d8:a8:5e:5b:69:73:0d:48:32:a1:b5:1d:d1: cc:39:3a:94:85:72:fd:73:45:18:c7:9b:60:d2:a0:3c:14:32: 83:2e:02:44:62:85:ed:f9:bd:3a:bb:2b:f9:c5:2c:9d:45:0e: 17:fd:e4:60:9b:99:aa:de:7e:3f:88:1a:0a:a7:9f:3d:0a:e6: 4d:7c:08:cf:62:74:dc:ce:0e:88:40:28:a7:ec:fd:a0:f2:8e: 9f:53:b9:35:f2:5d:8e:8b:b2:f0:88:e4:36:52:67:a4:31:cf: ab:7d:d5:c9:9a:ad:2e:99:c7:da:c2:30:74:cf:ea:c5:b1:50: bf:91:82:e1:a0:a2:96:fb:9f:d8:ec:46:42:21:be:4e:0b:30: c0:69:c9:16:80:84:19:c4:1e:e2:55:fe:8c:7b:11:d6:a5:5d: 80:1d:22:ed:5d:be:59:89:a2:46:c4:3f:f4:57:7d:e0:6b:e3: 28:f1:b8:64:82:e6:0d:67:4d:8d:71:a4:4f:33:45:60:07:bc: 95:8e:5f:7f:0b:4c:98:b4:7c:85:7a:dd:ab:1b:cf:63:c4:e7: 40:95:e6:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNzwfCpoZgzgfbnQh2bw+EsM2HPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdDODdG OUVBMTdBNzAeFw0yNjA5MjQxOTE5MzZaFw0yNjA5MjUxOTM1MzZaMDMxMTAvBgNV BAMTKEY1MzBGM0ZCQUYzMkQ0REZGNzU3ODg5NTFBNzA2OEIyNDAzQkU1NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQsaxsJah14sAqE0GpQgMYxvg IsQ3d1CYhwayUgILW3+Gz6Uoiwl70pnMZ8tMcBWqlbfO+QxSc9uqzWY4BbgWIMbz yHA/hi+KOUtwcT7yH9TaZ8IUEknA47v/WGDZWKwg9if99AyjuRAofY9Rxgl2xat9 lue9Qz95jrrfHmcKk8qr+0NOujdAX7TMl1eo3TCrPWX7agKmVj1ep2LLS6r5QAdP vTIFNiqjWOvpL4gq5F4lj9W4K1MtsxwmLItkHSCuuhpdFKetQjngTdxxqfllepov 1PXQZmKqEfzCO3Fxb79lBy1FI0z02nZ7UVeL/nsXMF0m/r9gUgdapv7R3meHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9TDz+68y1N/3V4iVGnBoskA75VQwHwYDVR0j BBgwFoAUjuweA7jlL2agcT3rFCF8h/nqF6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMyNTA2NjItM2VlZi00YWE5LTllZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNC OEU1MkY2NkEwNzEzREVCMTQyMTdDODdGOUVBMTdBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUVDMUUwM0I4RTUyRjY2QTA3MTNERUIxNDIxN0M4N0Y5RUEx N0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdD ODdGOUVBMTdBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClNuP0SCTG0UzVcjEnsZwje0dJWODEpGMZg 8C0oCl3r1nQJHPXOKcWP2KheW2lzDUgyobUd0cw5OpSFcv1zRRjHm2DSoDwUMoMu AkRihe35vTq7K/nFLJ1FDhf95GCbmarefj+IGgqnnz0K5k18CM9idNzODohAKKfs /aDyjp9TuTXyXY6LsvCI5DZSZ6Qxz6t91cmarS6Zx9rCMHTP6sWxUL+RguGgopb7 n9jsRkIhvk4LMMBpyRaAhBnEHuJV/ox7EdalXYAdIu1dvlmJokbEP/RXfeBr4yjx uGSC5g1nTY1xpE8zRWAHvJWOX38LTJi0fIV63asbz2PE50CV5gw= -----END CERTIFICATE-----Generated at Fri Sep 25 06:56:50 2026 by rpki-client