$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft File: 8557597ED1797691974B01C1D7D410DE0468CB64.mft (raw, json) Hash identifier: LeMjeZbRX+haxcjTTO02732hkBxz2uC3z5rPoXEc7Cg= Subject key identifier: 2E:B9:C2:0D:D0:B0:A7:0E:A3:CE:BC:4E:0C:BB:15:07:35:1B:94:5E Authority key identifier: 85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64 Certificate issuer: /CN=8557597ED1797691974B01C1D7D410DE0468CB64 Certificate serial: 54D6B0A27450277A7FDF2E5859BEA8FC754E2E79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 13:58:20 +0000 Manifest this update: Thu 24 Sep 2026 13:53:20 +0000 Manifest next update: Fri 25 Sep 2026 14:49:20 +0000 Files and hashes: 1: 8557597ED1797691974B01C1D7D410DE0468CB64.crl (hash: ct9hqKdRnytZHhXwxth6grnDdRccQQG9q6Ma42xO0fc=) 2: 3130332e3139352e36352e302f32342d3234203d3e20313532333638.roa (hash: cqcltXHdESyCAro4lMlrbhRLXh2L5uRV2u8+8/UIEXU=) 3: 3130332e3139352e36352e302f32342d3234203d3e203530313034.roa (hash: TL3itnqoh4qV4HBGxDux8BTRX5lkC3J82Sib/ZT6wuU=) 4: 3130332e3139352e36352e302f32342d3234203d3e203234333132.roa (hash: +2lXgv7qT46jamYAhQHOD/peUAc/KCPSkZn0WfZ6XNU=) 5: 3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (hash: ooohintErIiZJY6PsGdeSKgN/xAUtlDemuxd4hTQIlw=) 6: 3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (hash: TH1xxKIpC/iys3VyCm1mmUpDcchr21F0tjGUobHxDDI=) 7: 3130332e3139352e36352e302f32342d3234203d3e2036393339.roa (hash: 7N8cgyb6Ww7RJC4vhy0UsAqS4uP5oOpnOjak+OLi484=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d6:b0:a2:74:50:27:7a:7f:df:2e:58:59:be:a8:fc:75:4e:2e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8557597ED1797691974B01C1D7D410DE0468CB64 Validity Not Before: Sep 24 13:53:20 2026 GMT Not After : Sep 25 14:49:20 2026 GMT Subject: CN=2EB9C20DD0B0A70EA3CEBC4E0CBB1507351B945E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:7c:33:29:1b:e6:a6:17:2a:cb:91:2a:dc: f6:a6:c1:42:6e:41:c4:7b:d7:54:95:8a:d4:03:e0: ad:a2:cd:6c:12:b5:99:d3:17:7d:87:86:b1:fc:c1: da:15:bc:8d:6b:fa:30:a2:1b:bc:9e:cc:8d:41:3a: 12:cc:8a:a2:e4:99:7b:8c:8b:13:4d:07:58:c8:05: 7a:5c:72:eb:2f:0f:67:1e:3c:7b:ac:d8:3c:4e:1b: ba:64:fc:b8:19:e0:b4:a0:0d:5f:ad:fa:1a:e7:9d: 5f:83:13:63:53:87:57:0c:4c:c2:58:1c:40:ae:a0: 41:c2:59:66:5e:e9:c9:2a:da:ad:8b:34:a5:db:1e: 67:a4:1e:56:48:99:d9:fa:4d:4d:94:90:e3:67:c5: c5:df:3a:7d:c7:e1:66:d5:88:cf:36:59:39:3c:0d: 8f:3d:6a:9f:7a:fc:20:7d:97:f5:cd:03:84:32:ae: af:51:3e:b4:b7:ee:2b:26:7d:5b:23:a6:02:9a:30: 89:f5:ea:5d:76:b5:a2:32:69:37:84:b5:51:d7:35: 9a:cc:51:75:4a:47:69:fe:b2:18:4c:2e:9f:d7:6c: 7b:91:90:e7:02:0f:72:db:33:10:a1:6b:58:f5:e3: df:ba:de:55:d5:a1:5f:93:00:06:48:99:55:74:21: 98:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B9:C2:0D:D0:B0:A7:0E:A3:CE:BC:4E:0C:BB:15:07:35:1B:94:5E X509v3 Authority Key Identifier: keyid:85:57:59:7E:D1:79:76:91:97:4B:01:C1:D7:D4:10:DE:04:68:CB:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8557597ED1797691974B01C1D7D410DE0468CB64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/8557597ED1797691974B01C1D7D410DE0468CB64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:3f:43:a2:36:51:86:dc:6b:5c:98:30:d8:3b:4b:59:25:8b: 9b:24:2e:ac:74:a5:c2:5b:68:f3:cf:2b:96:c9:32:5d:d3:b6: 63:fa:9a:0e:ef:a1:08:ed:42:2f:b8:b4:ac:4f:ff:1a:d0:fd: 04:49:a8:d4:f4:41:48:d5:01:e4:59:a8:fa:ad:ac:9f:20:17: 1f:41:ac:15:23:63:9b:fe:da:4a:11:d5:51:37:26:b0:f3:83: de:91:b6:0c:61:94:d4:11:07:f7:c6:73:b0:d5:ff:85:55:75: d8:8e:30:8c:f7:2e:14:6a:69:5a:19:d0:ec:96:f8:de:47:39: 1b:4d:ee:c9:ea:1d:5c:91:65:19:04:6d:03:3b:be:c2:02:79: 0d:00:6d:cf:29:17:cc:2f:0e:81:22:15:c1:b6:c2:c3:dd:83: b1:10:c3:7f:ba:51:1d:28:a3:3c:2c:98:c3:c0:b2:f4:60:10: f9:3d:7b:7f:da:14:d4:0f:ae:29:9f:f7:2c:05:5a:52:5a:de: 09:e6:7e:a4:f1:e5:93:21:dd:b7:6e:f3:26:78:ae:12:ac:88: b6:11:4e:33:60:a8:b5:d7:55:09:4e:3f:f0:0a:3b:76:70:77: 61:0c:c3:d1:92:d7:70:a5:f1:a2:47:0b:b8:0a:d5:7a:51:90: dc:a3:12:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNawonRQJ3p/3y5YWb6o/HVOLnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1NzU5N0VEMTc5NzY5MTk3NEIwMUMxRDdENDEwREUw NDY4Q0I2NDAeFw0yNjA5MjQxMzUzMjBaFw0yNjA5MjUxNDQ5MjBaMDMxMTAvBgNV BAMTKDJFQjlDMjBERDBCMEE3MEVBM0NFQkM0RTBDQkIxNTA3MzUxQjk0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+XwzKRvmphcqy5Eq3PamwUJu QcR711SVitQD4K2izWwStZnTF32HhrH8wdoVvI1r+jCiG7yezI1BOhLMiqLkmXuM ixNNB1jIBXpccusvD2cePHus2DxOG7pk/LgZ4LSgDV+t+hrnnV+DE2NTh1cMTMJY HECuoEHCWWZe6ckq2q2LNKXbHmekHlZImdn6TU2UkONnxcXfOn3H4WbViM82WTk8 DY89ap96/CB9l/XNA4Qyrq9RPrS37ismfVsjpgKaMIn16l12taIyaTeEtVHXNZrM UXVKR2n+shhMLp/XbHuRkOcCD3LbMxCha1j149+63lXVoV+TAAZImVV0IZg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULrnCDdCwpw6jzrxODLsVBzUblF4wHwYDVR0j BBgwFoAUhVdZftF5dpGXSwHB19QQ3gRoy2QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBjZTQ3OTYtNDlkZS00M2IxLWExNTItYjE4ZDExYWRhNTI5LzAvODU1NzU5N0VE MTc5NzY5MTk3NEIwMUMxRDdENDEwREUwNDY4Q0I2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTU3NTk3RUQxNzk3NjkxOTc0QjAxQzFEN0Q0MTBERTA0NjhD QjY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBjZTQ3OTYtNDlkZS00M2IxLWEx NTItYjE4ZDExYWRhNTI5LzAvODU1NzU5N0VEMTc5NzY5MTk3NEIwMUMxRDdENDEw REUwNDY4Q0I2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFg/Q6I2UYbca1yYMNg7S1kli5skLqx0pcJb aPPPK5bJMl3TtmP6mg7voQjtQi+4tKxP/xrQ/QRJqNT0QUjVAeRZqPqtrJ8gFx9B rBUjY5v+2koR1VE3JrDzg96RtgxhlNQRB/fGc7DV/4VVddiOMIz3LhRqaVoZ0OyW +N5HORtN7snqHVyRZRkEbQM7vsICeQ0Abc8pF8wvDoEiFcG2wsPdg7EQw3+6UR0o ozwsmMPAsvRgEPk9e3/aFNQPrimf9ywFWlJa3gnmfqTx5ZMh3bdu8yZ4rhKsiLYR TjNgqLXXVQlOP/AKO3Zwd2EMw9GS13Cl8aJHC7gK1XpRkNyjEp4= -----END CERTIFICATE-----Generated at Thu Sep 24 17:52:59 2026 by rpki-client