$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft File: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft (raw, json) Hash identifier: 2vFwqEKTuLRNFKciPaJEu1z0kYqwW147nsb2vlMydzA= Subject key identifier: ED:B3:E4:75:A4:4A:7E:57:69:DE:26:2D:89:78:C7:A6:34:3F:7F:4A Authority key identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E Certificate issuer: /CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Certificate serial: 459B6DA3380BB3632903AA86349AD3E688894E20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 16:11:07 +0000 Manifest this update: Wed 23 Sep 2026 16:06:07 +0000 Manifest next update: Thu 24 Sep 2026 19:26:07 +0000 Files and hashes: 1: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: j+lgNwhd7sTPpzvBZDbz7MtwJzwdtzVrzUiO5CTg4C0=) 2: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl (hash: mAPvarq/9UIN26A+uTRzOp/T/QLWBAM3IOYpPE5O/ao=) 3: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: Y4fdfPd8CGZXfJi8zT1Xs61mqy3uc8h/5nYm+/f9TOQ=) 4: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: tUv0W4gMiS1vhejBIsoiDaLo6/xoWf91YpxI7rtj5ao=) 5: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: VvKS0B4ZLReXOTrvcAhygsCJwutg9GJIYxL7J1Tdiis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9b:6d:a3:38:0b:b3:63:29:03:aa:86:34:9a:d3:e6:88:89:4e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Validity Not Before: Sep 23 16:06:07 2026 GMT Not After : Sep 24 19:26:07 2026 GMT Subject: CN=EDB3E475A44A7E5769DE262D8978C7A6343F7F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:d8:b2:a4:de:0c:fb:7d:d3:81:9d:b1:10: f5:43:fb:dc:bd:9c:5a:26:bd:91:13:38:8d:53:21: 63:7d:5e:f0:d2:36:1a:ac:13:6d:68:7e:fe:71:44: d2:e8:84:a6:b0:7c:d9:c5:8d:77:5e:f9:5f:73:7f: b2:9f:ca:22:4d:56:12:30:46:02:4b:86:62:f3:e6: 55:14:8c:46:68:56:a2:8e:19:0a:dd:b6:7e:8e:c2: cf:13:cf:68:9f:cc:e0:9f:89:5f:60:31:a7:90:17: ed:d5:85:8a:32:18:2d:b4:2b:c3:bd:f5:ce:65:a2: 19:07:d4:ad:ff:22:e0:80:cc:bb:a9:8a:24:22:bb: 1b:91:aa:0a:11:3f:73:5b:99:5e:4c:81:b9:49:4b: a9:85:fa:7d:57:57:00:06:a3:2c:2d:e0:52:31:26: 5c:41:01:46:9a:f6:51:bf:2d:85:1c:3d:09:35:92: 31:b0:b3:ba:4a:3f:e8:64:5e:b8:2c:b8:dc:e4:4c: 48:c2:ca:7b:e9:27:90:15:54:19:9d:d5:6c:02:58: 28:d8:6a:1b:26:38:cd:44:84:77:92:93:fe:bb:bf: 06:fb:6f:6c:ba:cd:7e:d5:08:19:ae:de:cf:99:05: cf:96:0c:74:7b:88:dd:b3:0c:50:51:33:cd:d8:4c: a3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B3:E4:75:A4:4A:7E:57:69:DE:26:2D:89:78:C7:A6:34:3F:7F:4A X509v3 Authority Key Identifier: keyid:8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:45:57:2f:97:d2:fe:92:a7:75:35:5d:a4:da:c0:17:0d:98: e0:0b:3d:f2:4e:fa:73:02:41:1d:b7:15:28:d4:2c:b5:76:17: 99:c0:60:39:5a:6f:76:26:7c:31:74:fb:9d:96:54:ee:3d:c3: d1:c6:a8:d2:2b:09:27:44:0a:89:88:6d:10:69:93:f5:7b:35: 1a:a9:b6:68:c0:54:1b:ef:05:01:cd:cf:24:4b:7b:aa:36:85: 27:07:29:79:5d:09:72:ec:fb:a0:16:fb:79:3a:fa:43:17:ac: 06:98:b1:38:9a:d1:0b:5b:db:dd:50:5a:b0:88:42:fd:83:1d: 3b:d2:ce:4a:15:e3:e9:ad:b5:91:d6:52:92:3d:3c:12:4f:e9: 79:3c:62:f7:95:92:77:6d:c0:21:4e:7f:f7:d0:0a:f7:f4:8c: 90:32:39:c0:37:4d:59:c2:d6:c5:42:d6:b2:d8:18:2a:47:34: 44:cc:2f:9d:88:b4:90:71:40:23:aa:55:f9:b2:90:77:a5:96: 02:e4:5e:bd:3a:d8:ce:37:9a:24:b9:5a:b4:fd:25:63:e2:72: 56:40:d4:e9:ae:3a:51:32:de:0b:53:97:31:f0:e4:93:e8:c8: 68:a5:08:cc:93:c4:0e:6f:6c:8f:e5:1e:f5:c7:ca:cb:3d:96: 91:b8:24:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZttozgLs2MpA6qGNJrT5oiJTiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEy OUJBMUQ4RTAeFw0yNjA5MjMxNjA2MDdaFw0yNjA5MjQxOTI2MDdaMDMxMTAvBgNV BAMTKEVEQjNFNDc1QTQ0QTdFNTc2OURFMjYyRDg5NzhDN0E2MzQzRjdGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhdiypN4M+33TgZ2xEPVD+9y9 nFomvZETOI1TIWN9XvDSNhqsE21ofv5xRNLohKawfNnFjXde+V9zf7KfyiJNVhIw RgJLhmLz5lUUjEZoVqKOGQrdtn6Ows8Tz2ifzOCfiV9gMaeQF+3VhYoyGC20K8O9 9c5lohkH1K3/IuCAzLupiiQiuxuRqgoRP3NbmV5MgblJS6mF+n1XVwAGoywt4FIx JlxBAUaa9lG/LYUcPQk1kjGws7pKP+hkXrgsuNzkTEjCynvpJ5AVVBmd1WwCWCjY ahsmOM1EhHeSk/67vwb7b2y6zX7VCBmu3s+ZBc+WDHR7iN2zDFBRM83YTKMhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7bPkdaRKfldp3iYtiXjHpjQ/f0owHwYDVR0j BBgwFoAUjNb8AlX9HtF/2Cz6i2bSSim6HY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZlNjNjZDItZmIzYy00MWIyLWI5NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1 NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEyOUJBMUQ4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q2RkMwMjU1RkQxRUQxN0ZEODJDRkE4QjY2RDI0QTI5QkEx RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQy NEEyOUJBMUQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANRFVy+X0v6Sp3U1XaTawBcNmOALPfJO+nMC QR23FSjULLV2F5nAYDlab3YmfDF0+52WVO49w9HGqNIrCSdEComIbRBpk/V7NRqp tmjAVBvvBQHNzyRLe6o2hScHKXldCXLs+6AW+3k6+kMXrAaYsTia0Qtb291QWrCI Qv2DHTvSzkoV4+mttZHWUpI9PBJP6Xk8YveVkndtwCFOf/fQCvf0jJAyOcA3TVnC 1sVC1rLYGCpHNETML52ItJBxQCOqVfmykHellgLkXr062M43miS5WrT9JWPiclZA 1OmuOlEy3gtTlzHw5JPoyGilCMyTxA5vbI/lHvXHyss9lpG4JPg= -----END CERTIFICATE-----Generated at Wed Sep 23 20:53:45 2026 by rpki-client