$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft File: 008FD9C34C50033457705A2A8FA8AD31C58901DF.mft (raw, json) Hash identifier: 4TzHz46HA/UeabjX+ux+LJN0inB0SEkYxeF+tNFnBBU= Subject key identifier: B7:AE:2B:80:25:F2:9F:09:60:BF:A2:37:8A:2D:D1:7C:C6:BC:13:4C Authority key identifier: 00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF Certificate issuer: /CN=008FD9C34C50033457705A2A8FA8AD31C58901DF Certificate serial: 1588BAA73ACFEF295B112302C13A2C061FEA7CEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 09:17:34 +0000 Manifest this update: Wed 23 Sep 2026 09:12:34 +0000 Manifest next update: Thu 24 Sep 2026 11:52:34 +0000 Files and hashes: 1: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: ikR/F9w4LitTShzkD+KXZlE08zWYB4wLcQeSOu40MHY=) 2: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: NbNZZ1h00KtVz1iU/OgERwDxHBaHy3Lol9PQ30yLH20=) 3: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: +gg97NXHVYnGyTZICqnb0be/ZegxXSjwLJ69frhtl8g=) 4: 008FD9C34C50033457705A2A8FA8AD31C58901DF.crl (hash: ZciSl7xnK/ZZ3ioWgeCMTODv1qbOP2BcwcOjuTIKWC4=) 5: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: 7PYR6KQD363PCA9CqbyRe3Hlyct7YlcslSh5J5MCne8=) 6: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: Uo09a87NfO0QaaV8cWvKqLh7Yr8GIHaL3+B8rEdhvDg=) 7: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: Xc9Z6aCULt4h5E7uCljF8rbSvL2mpzVI9I3SrwLMdKA=) 8: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: Ym+oQJAC/FZcNlOtyNB+PyxQjFt4qpTGx2NjQCjEW8k=) 9: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: WS26qbff4FZd1gBCBy7MpBk2HRkLgCPS9ErpAbqZ1Kk=) 10: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: KRcAvz4S9RiZMOJ4ntySfmti6yb9mI07p7EYZgs2VTA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:88:ba:a7:3a:cf:ef:29:5b:11:23:02:c1:3a:2c:06:1f:ea:7c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=008FD9C34C50033457705A2A8FA8AD31C58901DF Validity Not Before: Sep 23 09:12:34 2026 GMT Not After : Sep 24 11:52:34 2026 GMT Subject: CN=B7AE2B8025F29F0960BFA2378A2DD17CC6BC134C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:69:e2:6c:2c:c2:5a:e7:a2:b7:70:b0:c6: da:6a:66:44:c9:fe:27:d3:2f:c0:80:48:d1:0d:65: 0a:05:7c:9e:b7:58:49:1b:44:d2:d6:09:b3:73:22: fb:4f:f0:14:63:67:e2:2f:97:4a:65:3e:61:e3:f1: 63:3f:b8:d1:dc:f8:62:a7:d6:11:ca:f3:ff:cc:cf: d9:3f:be:6e:5e:53:4c:19:c5:bc:47:4d:1e:8b:5c: 5a:32:ca:c2:f2:ed:ec:91:3d:5c:d7:07:d7:89:80: 39:55:7d:55:54:1b:ee:be:98:f2:09:a0:83:01:65: fe:e7:e3:75:b5:a1:b2:56:e9:a7:86:99:6b:93:81: 13:72:d9:1e:c4:d3:45:2d:5f:37:39:d0:97:3e:1b: 99:29:aa:e9:c1:b0:ab:94:6d:32:72:3a:db:d5:eb: 50:36:78:57:78:f0:e7:d3:d4:e5:94:43:36:b6:66: 73:96:73:60:63:a6:b8:16:0b:75:15:bf:e9:71:0c: c9:82:d1:1e:ee:23:25:f0:24:63:5d:d1:ce:de:aa: d1:4e:e1:a2:f0:4f:02:f1:c0:7e:db:8d:da:99:17: 8a:ae:d1:8e:03:73:45:21:31:39:53:b6:f1:d7:3a: c1:75:68:71:80:d3:63:60:a5:e3:f2:f9:85:97:73: de:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AE:2B:80:25:F2:9F:09:60:BF:A2:37:8A:2D:D1:7C:C6:BC:13:4C X509v3 Authority Key Identifier: keyid:00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9e:e8:11:48:68:76:6a:20:e6:16:18:cd:e1:3f:cd:c1:f6: f7:e0:7c:b4:96:92:51:28:27:7d:5d:59:a1:bb:4c:6c:91:45: d8:a5:74:31:4d:70:ce:12:ef:cf:d5:47:fa:9b:19:8c:13:56: a0:7f:9f:73:62:71:f0:4f:d2:4d:f8:ac:9c:85:63:e3:7e:2a: 1b:c6:f8:f5:b5:d8:4d:19:c2:21:91:d2:ec:97:ed:37:b4:47: 31:e8:4a:5a:d6:86:c3:a5:a5:a5:5d:ee:97:5a:13:b9:0b:a2: b0:74:9f:e7:6c:17:20:b3:cb:90:c8:40:b9:d6:9c:a2:18:bc: 0e:40:5e:fd:c1:e3:93:88:6b:d4:b1:16:3c:cd:73:d2:83:39: ce:36:59:c4:82:70:7e:bf:81:a6:fd:77:1e:4e:70:87:fe:08: 11:ce:18:8a:d8:4f:29:05:16:0a:f7:06:46:0d:2f:a6:e4:57: 39:81:67:10:3e:ae:b5:4f:7a:d3:54:9e:73:ac:fa:ce:a7:bd: f2:8f:e4:e2:26:f5:76:b2:08:fb:d3:1d:66:bc:6f:8f:d1:8c: c4:35:52:be:62:a6:6b:95:0e:a1:1a:d7:d8:c6:30:92:28:80: 97:23:74:68:0d:6c:7c:84:97:44:91:d6:6e:1b:d5:b4:25:82: c6:81:65:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFYi6pzrP7ylbESMCwTosBh/qfOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4RkQ5QzM0QzUwMDMzNDU3NzA1QTJBOEZBOEFEMzFD NTg5MDFERjAeFw0yNjA5MjMwOTEyMzRaFw0yNjA5MjQxMTUyMzRaMDMxMTAvBgNV BAMTKEI3QUUyQjgwMjVGMjlGMDk2MEJGQTIzNzhBMkREMTdDQzZCQzEzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOLmnibCzCWueit3CwxtpqZkTJ /ifTL8CASNENZQoFfJ63WEkbRNLWCbNzIvtP8BRjZ+Ivl0plPmHj8WM/uNHc+GKn 1hHK8//Mz9k/vm5eU0wZxbxHTR6LXFoyysLy7eyRPVzXB9eJgDlVfVVUG+6+mPIJ oIMBZf7n43W1obJW6aeGmWuTgRNy2R7E00UtXzc50Jc+G5kpqunBsKuUbTJyOtvV 61A2eFd48OfT1OWUQza2ZnOWc2BjprgWC3UVv+lxDMmC0R7uIyXwJGNd0c7eqtFO 4aLwTwLxwH7bjdqZF4qu0Y4Dc0UhMTlTtvHXOsF1aHGA02NgpePy+YWXc95jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt64rgCXynwlgv6I3ii3RfMa8E0wwHwYDVR0j BBgwFoAUAI/Zw0xQAzRXcFoqj6itMcWJAd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2NjllYTQtZTgyZi00NmMzLThkZDMtMmU5ODgxNTliMjAyLzAvMDA4RkQ5QzM0 QzUwMDMzNDU3NzA1QTJBOEZBOEFEMzFDNTg5MDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDhGRDlDMzRDNTAwMzM0NTc3MDVBMkE4RkE4QUQzMUM1ODkw MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2NjllYTQtZTgyZi00NmMzLThk ZDMtMmU5ODgxNTliMjAyLzAvMDA4RkQ5QzM0QzUwMDMzNDU3NzA1QTJBOEZBOEFE MzFDNTg5MDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWe6BFIaHZqIOYWGM3hP83B9vfgfLSWklEo J31dWaG7TGyRRdildDFNcM4S78/VR/qbGYwTVqB/n3NicfBP0k34rJyFY+N+KhvG +PW12E0ZwiGR0uyX7Te0RzHoSlrWhsOlpaVd7pdaE7kLorB0n+dsFyCzy5DIQLnW nKIYvA5AXv3B45OIa9SxFjzNc9KDOc42WcSCcH6/gab9dx5OcIf+CBHOGIrYTykF Fgr3BkYNL6bkVzmBZxA+rrVPetNUnnOs+s6nvfKP5OIm9XayCPvTHWa8b4/RjMQ1 Ur5ipmuVDqEa19jGMJIogJcjdGgNbHyEl0SR1m4b1bQlgsaBZSA= -----END CERTIFICATE-----Generated at Thu Sep 24 02:34:22 2026 by rpki-client