$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft File: 8BE5D6878B464D9FA654023C63F4762E67599164.mft (raw, json) Hash identifier: kZxnC0sHmMHqkfMR7b1EjtAP4qOfHnD2lFsiT6NqRto= Subject key identifier: 39:55:F1:17:05:DA:AE:CB:07:6A:3D:D1:D0:45:43:BE:E3:9A:A8:93 Authority key identifier: 8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64 Certificate issuer: /CN=8BE5D6878B464D9FA654023C63F4762E67599164 Certificate serial: 3DBC81C0FEF6BC0E6A3041AF16E15B3AEBAEBDAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft Manifest number: C8 Signing time: Tue 29 Sep 2026 11:23:26 +0000 Manifest this update: Tue 29 Sep 2026 11:18:26 +0000 Manifest next update: Wed 30 Sep 2026 11:34:26 +0000 Files and hashes: 1: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: j1q7Tjwd0n3nZPl8Mige83XpdVNq8A8OBRmyY8xB6w0=) 2: 8BE5D6878B464D9FA654023C63F4762E67599164.crl (hash: Ly++sfNh0RnxBrvUsI101SjGHDQeIvnS9NPRpEuV8t0=) 3: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: gsCaOX96MCEfxecmW7euDwqW3eYjaAOY81K1Ab8R/sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 11:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:bc:81:c0:fe:f6:bc:0e:6a:30:41:af:16:e1:5b:3a:eb:ae:bd:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE5D6878B464D9FA654023C63F4762E67599164 Validity Not Before: Sep 29 11:18:26 2026 GMT Not After : Sep 30 11:34:26 2026 GMT Subject: CN=3955F11705DAAECB076A3DD1D04543BEE39AA893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:68:a6:0c:b9:d9:41:3f:98:7a:84:bb:0e: 21:08:63:02:91:e7:10:c0:7e:2c:a4:e9:42:c8:d9: b5:02:47:29:9c:dd:bd:b3:ae:a4:5c:02:92:24:ff: b2:05:84:73:bb:57:84:06:69:68:38:4e:7f:ca:73: d2:e0:98:50:21:8a:2b:07:0a:bc:f2:d9:f1:f5:2d: f9:3d:88:74:51:87:db:0b:9a:62:d6:a1:71:e3:65: 6a:df:14:c9:39:dc:e5:7b:f0:b6:49:39:81:2e:e7: cb:b1:28:8a:de:b2:0b:a4:aa:0d:b7:d3:2a:4d:4e: 6e:78:51:52:82:a1:8c:14:fa:50:e4:28:06:1d:06: 42:d1:c5:fd:84:24:bd:aa:3a:43:48:47:4d:f8:c5: fe:05:f0:4d:00:dd:45:63:7d:b2:1c:d7:cb:10:79: 2f:89:f8:15:fb:6e:78:30:c6:ce:52:3c:46:fd:9e: 69:58:a1:5e:76:9b:65:f4:4d:72:c8:30:00:03:93: e1:66:67:65:38:70:4c:d5:83:5c:1d:66:1a:f5:26: 49:ce:2d:84:74:19:73:c3:e1:7c:ee:0c:b4:82:2c: 42:4c:79:c1:de:e9:2c:c6:be:73:f4:4f:55:11:c2: 28:a0:94:8e:11:a3:c6:5e:0b:45:b6:a5:64:b1:b3: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:55:F1:17:05:DA:AE:CB:07:6A:3D:D1:D0:45:43:BE:E3:9A:A8:93 X509v3 Authority Key Identifier: keyid:8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6e:0a:7c:b6:d3:dc:13:87:63:ae:c4:eb:06:9c:0f:96:9b: b6:10:85:56:7d:95:ad:33:46:c9:be:a8:05:a2:2d:b2:63:35: 6e:99:66:9f:b5:52:8d:75:73:0d:cd:0c:a4:c3:88:fc:6c:b2: ea:81:40:20:4a:8e:d4:40:a0:24:f5:18:e0:ba:b8:ef:71:2e: 81:ff:8b:46:da:a8:90:5e:37:22:d0:a6:7f:03:ef:dc:80:f3: 94:83:9a:7e:08:12:31:ae:08:fe:62:94:e2:56:ff:99:54:53: 54:9b:5d:7a:fc:9b:64:49:8e:36:c0:91:bf:8b:f5:02:7f:1e: e7:a8:b0:34:bd:03:f8:70:80:33:90:07:57:ce:11:25:72:d9: ba:a4:d3:21:f6:01:bf:bf:6b:69:5b:4f:1c:5d:6b:e3:cc:94: 9a:e5:fd:68:8c:54:ed:9c:16:e1:3f:cd:a8:b2:83:b8:4d:ae: 99:f2:ae:ca:7f:34:51:cd:b4:00:5e:12:f8:e3:b5:a3:00:59: 10:e1:d6:d9:cc:30:fe:a6:a4:a1:18:f0:36:97:23:df:9c:3f: c1:0a:58:28:98:86:e1:fa:cc:50:0f:4f:2e:60:85:ad:f4:1c: 98:6b:be:62:da:8d:21:72:e6:dc:ce:1f:6a:c0:e0:a1:9c:65: 1c:79:1d:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbyBwP72vA5qMEGvFuFbOuuuvawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNUQ2ODc4QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2MkU2 NzU5OTE2NDAeFw0yNjA5MjkxMTE4MjZaFw0yNjA5MzAxMTM0MjZaMDMxMTAvBgNV BAMTKDM5NTVGMTE3MDVEQUFFQ0IwNzZBM0REMUQwNDU0M0JFRTM5QUE4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCieGimDLnZQT+YeoS7DiEIYwKR 5xDAfiyk6ULI2bUCRymc3b2zrqRcApIk/7IFhHO7V4QGaWg4Tn/Kc9LgmFAhiisH Crzy2fH1Lfk9iHRRh9sLmmLWoXHjZWrfFMk53OV78LZJOYEu58uxKIresgukqg23 0ypNTm54UVKCoYwU+lDkKAYdBkLRxf2EJL2qOkNIR034xf4F8E0A3UVjfbIc18sQ eS+J+BX7bngwxs5SPEb9nmlYoV52m2X0TXLIMAADk+FmZ2U4cEzVg1wdZhr1JknO LYR0GXPD4XzuDLSCLEJMecHe6SzGvnP0T1URwiiglI4Ro8ZeC0W2pWSxs269AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOVXxFwXarssHaj3R0EVDvuOaqJMwHwYDVR0j BBgwFoAUi+XWh4tGTZ+mVAI8Y/R2LmdZkWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I3ZWY1MTUtODU2NC00MWU4LTlkMjAtMmQzM2Q0NWNjYmQ2LzAvOEJFNUQ2ODc4 QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2MkU2NzU5OTE2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkU1RDY4NzhCNDY0RDlGQTY1NDAyM0M2M0Y0NzYyRTY3NTk5 MTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvOEJFNUQ2ODc4QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2 MkU2NzU5OTE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtuCny209wTh2OuxOsGnA+Wm7YQhVZ9la0z Rsm+qAWiLbJjNW6ZZp+1Uo11cw3NDKTDiPxssuqBQCBKjtRAoCT1GOC6uO9xLoH/ i0baqJBeNyLQpn8D79yA85SDmn4IEjGuCP5ilOJW/5lUU1SbXXr8m2RJjjbAkb+L 9QJ/HueosDS9A/hwgDOQB1fOESVy2bqk0yH2Ab+/a2lbTxxda+PMlJrl/WiMVO2c FuE/zaiyg7hNrpnyrsp/NFHNtABeEvjjtaMAWRDh1tnMMP6mpKEY8DaXI9+cP8EK WCiYhuH6zFAPTy5gha30HJhrvmLajSFy5tzOH2rA4KGcZRx5Hdc= -----END CERTIFICATE-----Generated at Wed Sep 30 08:00:16 2026 by rpki-client