$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft File: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft (raw, json) Hash identifier: BX36kPFgtYww9BKsRCsJnubugZhXXfEuAgJwa5uWfh8= Subject key identifier: 89:09:2A:D5:EB:EA:8E:94:DA:87:60:0C:C7:D6:FB:08:89:EE:33:64 Authority key identifier: C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 Certificate issuer: /CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Certificate serial: 018E716ABA9E741E5D7E83094C20950BDB862B6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:22:35 +0000 Manifest this update: Wed 23 Sep 2026 13:17:35 +0000 Manifest next update: Thu 24 Sep 2026 14:38:35 +0000 Files and hashes: 1: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: W+SevG4xTFDq1sgkDkONqUQc3ucQK2u8ntiRI2DImrc=) 2: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl (hash: dx7CdAE5tXlky4Eutlp2Mm4j4DICeMaGWpmCuPU9mTY=) 3: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: qW0AGce8XtjjXQ3Aq1xPuwzcIhd6zyH7ybAi9hoWtzA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:71:6a:ba:9e:74:1e:5d:7e:83:09:4c:20:95:0b:db:86:2b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Validity Not Before: Sep 23 13:17:35 2026 GMT Not After : Sep 24 14:38:35 2026 GMT Subject: CN=89092AD5EBEA8E94DA87600CC7D6FB0889EE3364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:dd:88:91:b2:6d:ac:79:c8:82:7b:ed:6b: 93:01:58:9c:03:b4:34:26:06:15:2a:59:71:8c:21: 41:20:7f:ee:c1:b6:49:93:31:90:9d:19:b8:4e:47: 49:27:42:12:2c:af:20:9d:1b:e4:a4:33:83:26:2b: 1a:41:79:d2:e3:83:8c:0d:ca:22:b8:df:54:6c:47: c1:39:11:4d:9c:6b:33:8a:fe:26:e0:da:21:09:ac: b3:50:26:74:36:18:b0:ff:47:de:ba:0a:85:57:82: e9:f4:76:b8:51:1f:e9:16:42:de:26:78:45:60:01: f6:a3:62:ea:87:cf:42:62:aa:b7:bf:5b:1c:c7:a0: c2:3e:23:64:3a:64:fe:1b:e4:a5:05:ba:48:af:f0: 17:16:56:11:0f:d6:20:9a:9b:8f:8c:ed:94:8a:7f: 29:ff:a8:7d:5f:37:26:66:42:fd:35:33:23:e4:42: f0:26:bb:a6:5d:69:bd:03:06:b8:8b:bd:b7:ea:6d: fe:e3:23:ed:68:8e:a3:4a:a4:2b:fd:3c:d8:0b:22: 69:4a:dd:0c:cc:87:e3:6e:06:e6:ad:34:4c:36:d9: 6e:c0:af:6e:ec:60:53:23:d5:70:08:37:e6:44:86: 4c:7d:61:40:38:0f:41:d3:4b:69:63:b1:71:e6:e8: 91:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:09:2A:D5:EB:EA:8E:94:DA:87:60:0C:C7:D6:FB:08:89:EE:33:64 X509v3 Authority Key Identifier: keyid:C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:89:70:da:c0:cc:a7:80:80:3d:08:b6:a4:68:02:64:07:14: 80:c3:75:a4:86:36:c4:2f:74:88:3a:1d:8c:66:1b:25:23:80: 93:47:fd:c9:62:4f:bf:30:38:a2:91:5b:22:17:c3:29:aa:3f: 36:4e:28:d8:b0:2d:9c:7c:20:b2:f3:24:1d:42:e5:54:4f:ba: 24:82:4f:f8:e6:3f:cb:eb:c7:20:90:a5:c5:ed:4f:02:8d:f4: 9b:6c:cd:7c:0b:35:5b:99:e3:d6:ce:5a:9d:0d:21:40:2f:9c: 79:bb:57:2a:71:a1:dd:f7:a8:47:91:ff:99:40:6a:67:b1:96: 42:b2:a6:cd:92:80:64:f2:44:a3:97:68:7f:29:ef:9f:bf:fe: 87:4e:c5:44:23:ed:fa:4e:26:76:8b:66:4f:db:2d:6a:d9:db: b2:eb:74:b0:21:19:3e:b3:2d:d4:f9:20:76:32:52:89:48:9e: 6a:f3:6e:0d:11:09:bd:0e:4d:7e:d6:c9:f9:87:e3:06:46:dd: 73:59:ea:94:45:8b:d6:27:b9:9f:ec:17:18:7e:f5:b9:29:70: ff:4f:f6:8d:41:0b:df:5a:cf:7e:e6:91:9c:c7:83:1c:77:d3: 83:88:17:b3:e7:a0:a5:a7:86:45:02:15:83:c1:03:f8:cd:e6: dd:61:4b:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAY5xarqedB5dfoMJTCCVC9uGK24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2 QzRFREMzMjAeFw0yNjA5MjMxMzE3MzVaFw0yNjA5MjQxNDM4MzVaMDMxMTAvBgNV BAMTKDg5MDkyQUQ1RUJFQThFOTREQTg3NjAwQ0M3RDZGQjA4ODlFRTMzNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPaN2IkbJtrHnIgnvta5MBWJwD tDQmBhUqWXGMIUEgf+7BtkmTMZCdGbhOR0knQhIsryCdG+SkM4MmKxpBedLjg4wN yiK431RsR8E5EU2cazOK/ibg2iEJrLNQJnQ2GLD/R966CoVXgun0drhRH+kWQt4m eEVgAfajYuqHz0Jiqre/WxzHoMI+I2Q6ZP4b5KUFukiv8BcWVhEP1iCam4+M7ZSK fyn/qH1fNyZmQv01MyPkQvAmu6Zdab0DBriLvbfqbf7jI+1ojqNKpCv9PNgLImlK 3QzMh+NuBuatNEw22W7Ar27sYFMj1XAIN+ZEhkx9YUA4D0HTS2ljsXHm6JG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQkq1evqjpTah2AMx9b7CInuM2QwHwYDVR0j BBgwFoAUyKJ3s97IwPCqTB+lQugZNmxO3DIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIyNmIzZTEtZDdmNi00NjVlLTgzMDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNE RUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2QzRFREMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEEyNzdCM0RFQzhDMEYwQUE0QzFGQTU0MkU4MTkzNjZDNEVE QzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5 MzY2QzRFREMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+JcNrAzKeAgD0ItqRoAmQHFIDDdaSGNsQv dIg6HYxmGyUjgJNH/cliT78wOKKRWyIXwymqPzZOKNiwLZx8ILLzJB1C5VRPuiSC T/jmP8vrxyCQpcXtTwKN9JtszXwLNVuZ49bOWp0NIUAvnHm7Vypxod33qEeR/5lA amexlkKyps2SgGTyRKOXaH8p75+//odOxUQj7fpOJnaLZk/bLWrZ27LrdLAhGT6z LdT5IHYyUolInmrzbg0RCb0OTX7WyfmH4wZG3XNZ6pRFi9YnuZ/sFxh+9bkpcP9P 9o1BC99az37mkZzHgxx304OIF7PnoKWnhkUCFYPBA/jN5t1hS58= -----END CERTIFICATE-----Generated at Thu Sep 24 03:51:41 2026 by rpki-client