$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft File: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft (raw, json) Hash identifier: U96zldY1goawJfls+lSHT0+JZaGlLEWrPdB/nX9mILU= Subject key identifier: 00:9A:A7:DC:6E:22:AD:F5:D4:2C:8F:B7:77:72:E8:9D:46:09:79:85 Authority key identifier: 8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D Certificate issuer: /CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Certificate serial: 65C03B80F1EB92C9D96A8F508DE8D9DF276A10F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:49:00 +0000 Manifest this update: Thu 24 Sep 2026 10:44:00 +0000 Manifest next update: Fri 25 Sep 2026 12:02:00 +0000 Files and hashes: 1: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: NY8uhqteE/p2Oynj2juQDQqNJOeFUT9zptMVOdrA1BE=) 2: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: 7H5ayDey2sF8s3x7vuViq2lu5YPxfK0ha8SKey7N61Q=) 3: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl (hash: DInwPWMV9R0JM9er1dmgyWafB4FW2I/Qs4Amh2NNE88=) 4: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: LvhMo9Ji9pG6mVQPdJp//+4N2gdaqqVMar2Fp2RKr1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c0:3b:80:f1:eb:92:c9:d9:6a:8f:50:8d:e8:d9:df:27:6a:10:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Validity Not Before: Sep 24 10:44:00 2026 GMT Not After : Sep 25 12:02:00 2026 GMT Subject: CN=009AA7DC6E22ADF5D42C8FB77772E89D46097985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6d:f2:d0:0a:c0:e1:76:7e:15:5d:28:c9:4d: a3:55:c2:bd:bb:39:70:7d:8c:63:8f:0f:f6:0b:89: 53:06:73:5f:bc:69:06:c0:83:4d:c5:73:1b:d3:ce: 37:2f:15:93:61:79:ec:63:6e:a3:c2:0c:9f:6c:bb: d9:72:b8:3d:01:6d:e3:c4:28:c6:64:64:22:95:a9: 47:7c:18:5e:14:43:25:0e:ee:1e:4e:61:31:36:fe: 87:04:60:07:62:bc:64:6f:a8:a7:18:1b:81:45:c0: 9b:99:41:f0:dd:bf:83:3e:32:24:98:3e:d7:9f:94: aa:e7:89:b9:b0:97:e3:75:0e:ca:8f:83:a7:98:ff: 20:0c:e0:6f:fa:de:86:85:15:10:3d:81:9c:fb:42: 1e:a7:ea:dd:f4:29:98:78:65:50:e7:a8:d9:5c:62: c7:28:b6:de:e9:ef:43:68:d8:82:f6:ed:42:7c:1a: 6b:b4:bc:d0:e4:3a:c2:1f:1a:e2:7a:70:56:15:0a: 0b:13:3e:69:8d:d3:4d:e1:f7:77:cc:9b:78:58:4d: 5c:3b:b3:c4:61:61:ea:fd:b6:ae:b8:0b:5c:d4:9b: 17:ae:3d:49:8f:49:5e:7e:2e:31:17:cf:b5:75:ee: ed:0d:0a:dd:2f:b9:66:92:93:c8:ad:10:c9:94:19: 8d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9A:A7:DC:6E:22:AD:F5:D4:2C:8F:B7:77:72:E8:9D:46:09:79:85 X509v3 Authority Key Identifier: keyid:8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:b2:a5:ad:fd:48:e9:69:aa:30:b5:85:95:c0:ac:43:8d:b6: b2:3f:27:e7:b9:54:64:1c:67:05:60:f4:04:04:9b:36:de:70: 79:d5:84:bb:24:e2:63:ef:79:5e:20:2c:2c:f0:7a:cd:e5:4c: 7d:db:7b:f9:fe:69:b8:bf:e7:54:35:ab:7a:1e:f2:4d:9d:62: 0f:90:5a:6e:90:c3:07:bd:33:09:2f:ca:56:44:76:95:1a:84: f3:10:cb:bc:4b:53:19:ad:99:1f:ff:51:17:eb:47:7b:fa:8a: f9:24:18:96:a4:fc:1a:63:9f:72:fa:aa:46:a5:46:8b:ee:fd: 54:a8:ec:0c:f1:7b:4b:e3:7e:83:b9:be:49:23:7a:6d:4b:43: e0:29:8f:d3:2d:84:9b:68:67:60:54:c8:cf:9c:d7:4d:59:b6: fc:59:ae:a0:6e:f1:77:d5:c4:b8:d8:5c:60:62:d3:7d:e6:eb: f0:97:b4:1a:36:f6:f0:78:2f:4a:55:f3:f3:02:fd:6a:b9:ee: 9f:4d:83:ea:d0:5a:82:42:ca:c1:c1:80:8b:7a:d0:f4:dc:cb: 36:88:01:80:e9:10:14:8c:a8:dc:d8:91:82:68:a5:30:87:40: c1:cb:68:f9:6a:8f:cf:07:93:30:69:62:41:4a:c7:39:b0:ee: 62:a1:9c:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZcA7gPHrksnZao9QjejZ3ydqEPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3 NkY1QkIyRDAeFw0yNjA5MjQxMDQ0MDBaFw0yNjA5MjUxMjAyMDBaMDMxMTAvBgNV BAMTKDAwOUFBN0RDNkUyMkFERjVENDJDOEZCNzc3NzJFODlENDYwOTc5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsbfLQCsDhdn4VXSjJTaNVwr27 OXB9jGOPD/YLiVMGc1+8aQbAg03FcxvTzjcvFZNheexjbqPCDJ9su9lyuD0BbePE KMZkZCKVqUd8GF4UQyUO7h5OYTE2/ocEYAdivGRvqKcYG4FFwJuZQfDdv4M+MiSY PteflKrnibmwl+N1DsqPg6eY/yAM4G/63oaFFRA9gZz7Qh6n6t30KZh4ZVDnqNlc Yscott7p70No2IL27UJ8Gmu0vNDkOsIfGuJ6cFYVCgsTPmmN003h93fMm3hYTVw7 s8RhYer9tq64C1zUmxeuPUmPSV5+LjEXz7V17u0NCt0vuWaSk8itEMmUGY2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAJqn3G4irfXULI+3d3LonUYJeYUwHwYDVR0j BBgwFoAUi+JoRlzjv16w3zYT/r3Twnb1uy0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmZDlhNTgtYTkwNi00MDI5LTkyZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1 Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3NkY1QkIyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkUyNjg0NjVDRTNCRjVFQjBERjM2MTNGRUJERDNDMjc2RjVC QjJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQz QzI3NkY1QkIyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOypa39SOlpqjC1hZXArEONtrI/J+e5VGQc ZwVg9AQEmzbecHnVhLsk4mPveV4gLCzwes3lTH3be/n+abi/51Q1q3oe8k2dYg+Q Wm6Qwwe9MwkvylZEdpUahPMQy7xLUxmtmR//URfrR3v6ivkkGJak/Bpjn3L6qkal Rovu/VSo7Azxe0vjfoO5vkkjem1LQ+Apj9MthJtoZ2BUyM+c101ZtvxZrqBu8XfV xLjYXGBi033m6/CXtBo29vB4L0pV8/MC/Wq57p9Ng+rQWoJCysHBgIt60PTcyzaI AYDpEBSMqNzYkYJopTCHQMHLaPlqj88HkzBpYkFKxzmw7mKhnA4= -----END CERTIFICATE-----Generated at Thu Sep 24 20:21:46 2026 by rpki-client