$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft File: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft (raw, json) Hash identifier: gj1jJ+jHSlELVGRh/E6VtUmUx2TvAY/KeEHmW9qXP10= Subject key identifier: 04:95:F9:46:4F:99:B6:3B:46:02:1B:48:B8:BA:4A:46:A7:B1:DE:88 Authority key identifier: 8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C Certificate issuer: /CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Certificate serial: 22BF238BA3868D1A60A384E21B8A4652416D8581 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 21:06:11 +0000 Manifest this update: Sat 26 Sep 2026 21:01:11 +0000 Manifest next update: Sun 27 Sep 2026 23:40:11 +0000 Files and hashes: 1: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: gHaL9xm6upsCMiwuTIzMiljzjIKdP3tM2s5bdfg68uM=) 2: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: kAF9XX+k/l/rK1GEr+bjFHX1YeYovpaBVZcUfCaqwVQ=) 3: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl (hash: ZDR8WmgW4TMuSfunmr+Qcm1hllnmuFYyZayMuM4Gilw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:bf:23:8b:a3:86:8d:1a:60:a3:84:e2:1b:8a:46:52:41:6d:85:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Validity Not Before: Sep 26 21:01:11 2026 GMT Not After : Sep 27 23:40:11 2026 GMT Subject: CN=0495F9464F99B63B46021B48B8BA4A46A7B1DE88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:84:6c:24:d4:45:24:4b:71:17:10:53:4d:15: 17:ea:b6:86:fd:b8:85:4d:eb:72:d5:28:ec:d2:98: f2:13:bc:f9:63:40:20:69:35:ac:2f:61:cc:95:bf: e5:73:85:73:76:aa:2a:ca:cf:66:3b:1b:1f:35:74: 13:f7:0b:fe:36:2c:3a:c7:78:87:c3:21:30:7a:0e: 47:db:3e:f3:46:9e:73:99:22:b2:24:d6:75:9b:c4: 31:22:ee:16:3b:53:2f:d8:25:88:da:76:e2:e0:2d: 70:35:80:d3:3e:6f:56:c2:e4:87:32:68:97:d8:6f: c3:ab:17:88:0f:1e:42:dd:8a:ec:70:2f:58:f3:b0: 63:35:8c:e7:c7:d1:90:72:38:b1:d2:ec:f7:a4:36: 42:9f:5d:69:b2:3e:a9:0f:a4:13:10:d4:32:37:20: eb:1f:5c:13:78:a7:fb:06:a0:eb:0e:91:81:4d:27: 5b:54:e5:7c:51:e4:ba:f4:d8:cc:c1:8d:8a:f2:1d: 4e:6c:eb:f8:fd:a2:0c:d7:6c:e5:4f:d5:11:7c:fe: 13:2d:d5:72:fd:16:5c:55:b3:42:17:8a:2b:c5:3e: 3a:f8:c3:08:e9:17:b9:bf:bd:16:56:7f:22:ef:e5: e7:f6:39:9a:98:b5:5a:2f:67:14:5d:61:59:52:96: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:95:F9:46:4F:99:B6:3B:46:02:1B:48:B8:BA:4A:46:A7:B1:DE:88 X509v3 Authority Key Identifier: keyid:8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:71:7d:f5:34:5b:73:72:75:3b:36:9c:0f:26:52:81:83:2c: 6c:32:99:68:6c:1a:08:04:72:9f:05:7f:b8:e3:be:da:96:9c: 5d:7d:40:fd:9d:c3:4a:36:15:e0:b2:f5:df:0c:22:90:e5:e7: 45:a6:a5:4c:ec:1f:97:e7:43:14:e7:45:87:dd:2f:2f:1f:e0: 8d:5c:4d:71:22:cc:4b:1d:de:82:46:63:ae:12:05:e3:fb:76: eb:a8:fe:07:3a:1f:c1:81:f2:ac:d3:d6:91:79:a3:b9:5c:45: 43:4c:e3:f7:f0:d3:46:15:3e:18:d4:cc:45:60:c3:79:ff:c6: 50:4c:d1:63:7b:e6:3e:52:85:85:d8:38:f3:a0:d7:0f:05:09: 55:47:ba:5d:b0:4c:67:1e:b9:b8:df:63:b0:ca:83:4c:4e:a4: 44:a7:10:cb:ee:e2:99:a5:59:09:61:00:a7:c1:5d:4a:8e:a8: 5c:b4:69:7b:a3:42:31:de:74:37:54:ea:56:cb:c2:38:16:c4: 95:ac:62:a9:d5:37:1e:62:51:09:cd:0f:a1:7b:9f:f5:11:fc: 2c:4c:37:98:1b:05:be:65:b2:80:e0:e4:b1:b7:a7:f5:e0:98: 33:09:d9:dc:2d:95:d0:53:f1:e7:f4:8e:e9:c3:a8:5a:8c:4c: 92:7c:60:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIr8ji6OGjRpgo4TiG4pGUkFthYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVC MTRDODk2QzAeFw0yNjA5MjYyMTAxMTFaFw0yNjA5MjcyMzQwMTFaMDMxMTAvBgNV BAMTKDA0OTVGOTQ2NEY5OUI2M0I0NjAyMUI0OEI4QkE0QTQ2QTdCMURFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQhGwk1EUkS3EXEFNNFRfqtob9 uIVN63LVKOzSmPITvPljQCBpNawvYcyVv+VzhXN2qirKz2Y7Gx81dBP3C/42LDrH eIfDITB6DkfbPvNGnnOZIrIk1nWbxDEi7hY7Uy/YJYjaduLgLXA1gNM+b1bC5Icy aJfYb8OrF4gPHkLdiuxwL1jzsGM1jOfH0ZByOLHS7PekNkKfXWmyPqkPpBMQ1DI3 IOsfXBN4p/sGoOsOkYFNJ1tU5XxR5Lr02MzBjYryHU5s6/j9ogzXbOVP1RF8/hMt 1XL9FlxVs0IXiivFPjr4wwjpF7m/vRZWfyLv5ef2OZqYtVovZxRdYVlSli2HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBJX5Rk+ZtjtGAhtIuLpKRqex3ogwHwYDVR0j BBgwFoAUj/qLucCdxMpCyVyBfA/9lbFMiWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ1YWYyMmMtN2UzZS00MGI1LWFjNTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlD MDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVCMTRDODk2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBOEJCOUMwOURDNENBNDJDOTVDODE3QzBGRkQ5NUIxNEM4 OTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZE OTVCMTRDODk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBxffU0W3NydTs2nA8mUoGDLGwymWhsGggE cp8Ff7jjvtqWnF19QP2dw0o2FeCy9d8MIpDl50WmpUzsH5fnQxTnRYfdLy8f4I1c TXEizEsd3oJGY64SBeP7duuo/gc6H8GB8qzT1pF5o7lcRUNM4/fw00YVPhjUzEVg w3n/xlBM0WN75j5ShYXYOPOg1w8FCVVHul2wTGceubjfY7DKg0xOpESnEMvu4pml WQlhAKfBXUqOqFy0aXujQjHedDdU6lbLwjgWxJWsYqnVNx5iUQnND6F7n/UR/CxM N5gbBb5lsoDg5LG3p/XgmDMJ2dwtldBT8ef0junDqFqMTJJ8YL4= -----END CERTIFICATE-----Generated at Sun Sep 27 09:58:19 2026 by rpki-client