$ rpki-client -vvvf rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft File: 8A88C62D67BF9B5D27095014663D7564A99145C4.mft (raw, json) Hash identifier: 87pyyDFRo/UM9tvTOEiV2VydRsbn7mCWeREw2IDTBiM= Subject key identifier: 1B:28:84:1E:6B:5E:3B:11:B3:E7:53:F2:D6:36:8C:43:DD:F1:20:0C Authority key identifier: 8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4 Certificate issuer: /CN=8A88C62D67BF9B5D27095014663D7564A99145C4 Certificate serial: 2D4ADCF69DB2CC7BB3EB2874EA267B38CAC9ACBF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft Manifest number: C8 Signing time: Tue 29 Sep 2026 03:28:56 +0000 Manifest this update: Tue 29 Sep 2026 03:23:56 +0000 Manifest next update: Wed 30 Sep 2026 07:03:56 +0000 Files and hashes: 1: 8A88C62D67BF9B5D27095014663D7564A99145C4.crl (hash: brYPytv8gti4XUEcijWf87B3DEZ8FfaZp+Gg9Utn5Q0=) 2: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: F053eE0i+9sM4Zlpf0wasuwbYczZ4FiYljBeIYhXU8s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:4a:dc:f6:9d:b2:cc:7b:b3:eb:28:74:ea:26:7b:38:ca:c9:ac:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A88C62D67BF9B5D27095014663D7564A99145C4 Validity Not Before: Sep 29 03:23:56 2026 GMT Not After : Sep 30 07:03:56 2026 GMT Subject: CN=1B28841E6B5E3B11B3E753F2D6368C43DDF1200C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:e8:ad:43:76:ef:23:70:07:f4:e9:ca:a9: 7d:1f:52:b7:52:75:06:25:40:98:e4:c1:60:06:2e: 94:cb:be:22:a1:a1:0a:27:96:9d:68:7f:78:46:72: c7:f9:39:14:15:5c:8a:eb:6c:98:69:50:34:29:ba: 12:52:87:2e:5d:b1:c1:0c:b2:da:57:7f:89:3e:af: 28:5f:2c:0a:79:b7:34:7c:9d:5a:3b:d2:8a:44:b4: f4:fc:a7:0b:c9:40:93:9c:7b:bd:8f:21:13:f3:55: 1c:38:ad:2e:4b:95:43:65:72:05:dd:d8:23:40:f6: 83:14:47:77:c7:dc:54:1c:d2:e1:77:71:72:34:a2: c2:1d:2e:51:92:2b:28:70:cd:a2:dd:48:16:cd:39: df:fa:7b:11:b4:47:a6:22:d3:af:ee:73:c5:e6:91: b6:91:9b:c1:95:83:01:eb:6d:69:37:64:85:7d:4d: dc:b1:09:32:68:47:5c:b8:2b:91:6b:86:f5:68:44: 4b:e8:8e:b0:47:9e:1f:27:08:a5:d4:e7:a3:4c:f8: 82:3d:12:1f:61:59:31:a1:17:d4:22:3e:4a:14:ad: 84:b9:3e:d9:e9:4a:84:f0:eb:0f:aa:55:49:5b:dc: c6:4e:de:76:cf:45:db:6e:a2:ca:4d:de:ce:d2:a5: 50:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:28:84:1E:6B:5E:3B:11:B3:E7:53:F2:D6:36:8C:43:DD:F1:20:0C X509v3 Authority Key Identifier: keyid:8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:45:48:1f:23:0e:71:b0:02:37:a5:11:6e:56:2f:c5:9e:bc: 8b:2b:0e:20:12:f9:5d:4f:e3:cd:4d:25:52:32:cc:2e:13:4a: 8c:e1:2f:e5:1d:9b:5d:37:50:40:24:e0:6d:e4:d3:d1:af:a8: 49:22:03:ef:57:d3:94:8c:77:60:2f:7f:c9:74:b0:d2:e2:ac: 26:a7:59:c2:bf:da:a1:37:58:68:a9:3e:f7:a8:81:33:ce:ea: 91:36:90:79:de:a4:e7:7a:02:f3:f9:42:11:9c:6a:4b:c0:59: 8c:73:85:6b:08:54:46:2b:4c:54:cf:b5:e8:82:fc:df:e5:a7: d3:59:5a:b7:93:13:1e:45:84:bb:8f:cf:c0:5c:90:3f:e5:95: 89:b3:30:21:b2:01:fc:aa:27:ff:0a:ad:fe:2f:ff:a2:9c:b6: 87:f2:87:a2:be:69:bd:70:78:bc:bb:14:73:c7:21:cb:d6:2d: 25:63:bc:25:3a:36:4b:5f:6e:4a:6a:22:3f:d1:34:bb:df:88: a7:16:b8:f0:c6:31:3c:16:5e:c3:b9:38:7f:57:3e:e0:58:e6: 79:7d:44:53:b3:ea:cb:8b:88:c4:1b:32:aa:74:a6:dc:94:66: fe:44:be:68:af:8c:59:bc:10:1b:c4:e4:7f:d4:4e:c2:c1:b2: 8e:8f:c8:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUrc9p2yzHuz6yh06iZ7OMrJrL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRB OTkxNDVDNDAeFw0yNjA5MjkwMzIzNTZaFw0yNjA5MzAwNzAzNTZaMDMxMTAvBgNV BAMTKDFCMjg4NDFFNkI1RTNCMTFCM0U3NTNGMkQ2MzY4QzQzRERGMTIwMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWOitQ3bvI3AH9OnKqX0fUrdS dQYlQJjkwWAGLpTLviKhoQonlp1of3hGcsf5ORQVXIrrbJhpUDQpuhJShy5dscEM stpXf4k+ryhfLAp5tzR8nVo70opEtPT8pwvJQJOce72PIRPzVRw4rS5LlUNlcgXd 2CNA9oMUR3fH3FQc0uF3cXI0osIdLlGSKyhwzaLdSBbNOd/6exG0R6Yi06/uc8Xm kbaRm8GVgwHrbWk3ZIV9TdyxCTJoR1y4K5FrhvVoREvojrBHnh8nCKXU56NM+II9 Eh9hWTGhF9QiPkoUrYS5PtnpSoTw6w+qVUlb3MZO3nbPRdtuospN3s7SpVBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGyiEHmteOxGz51Py1jaMQ93xIAwwHwYDVR0j BBgwFoAUiojGLWe/m10nCVAUZj11ZKmRRcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY0YzMxNTUtYzhmZi00MjA3LWEyZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2 N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRBOTkxNDVDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTg4QzYyRDY3QkY5QjVEMjcwOTUwMTQ2NjNENzU2NEE5OTE0 NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY0YzMxNTUtYzhmZi00MjA3LWEy ZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1 NjRBOTkxNDVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdFSB8jDnGwAjelEW5WL8WevIsrDiAS+V1P 481NJVIyzC4TSozhL+Udm103UEAk4G3k09GvqEkiA+9X05SMd2Avf8l0sNLirCan WcK/2qE3WGipPveogTPO6pE2kHnepOd6AvP5QhGcakvAWYxzhWsIVEYrTFTPteiC /N/lp9NZWreTEx5FhLuPz8BckD/llYmzMCGyAfyqJ/8Krf4v/6Kctofyh6K+ab1w eLy7FHPHIcvWLSVjvCU6NktfbkpqIj/RNLvfiKcWuPDGMTwWXsO5OH9XPuBY5nl9 RFOz6suLiMQbMqp0ptyUZv5EvmivjFm8EBvE5H/UTsLBso6PyOE= -----END CERTIFICATE-----Generated at Tue Sep 29 12:35:22 2026 by rpki-client