$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft File: E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft (raw, json) Hash identifier: QMbPBhZz+e2qy4xbFeExvD90rfj4m1GvMd3YvxJBTKU= Subject key identifier: 0E:87:2F:D2:00:68:F8:D4:ED:FF:F9:FC:65:69:10:A0:6F:B3:BB:CA Authority key identifier: E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6 Certificate issuer: /CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6 Certificate serial: 01C5BBBA682E5F16417BDF33FA0D22685198B267 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 12:55:29 +0000 Manifest this update: Sun 27 Sep 2026 12:50:29 +0000 Manifest next update: Mon 28 Sep 2026 13:25:29 +0000 Files and hashes: 1: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: /pHfUH1NlBnMVG+9w4rBpFljBqBGm2WJrHAQRZot61U=) 2: E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl (hash: J1RnG8Dakssop8NkGomCzLPyQGKiFdmrvAF9f2fHWAM=) 3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: 7Kp38WdKSSiLKliiaFpY9zvvkr9TIBcqJ58D1X388bM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c5:bb:ba:68:2e:5f:16:41:7b:df:33:fa:0d:22:68:51:98:b2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6 Validity Not Before: Sep 27 12:50:29 2026 GMT Not After : Sep 28 13:25:29 2026 GMT Subject: CN=0E872FD20068F8D4EDFFF9FC656910A06FB3BBCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:7e:f2:0c:82:c4:30:89:47:af:60:ff:42: 80:cb:cf:8e:53:f9:25:05:1c:01:35:65:af:25:20: 7d:78:ee:f1:ab:3c:f4:83:81:2e:4e:1c:bc:90:73: 3c:bd:85:63:0e:1f:e5:68:b4:bb:c3:3e:91:fb:79: a5:16:5a:5c:31:0c:c2:a3:14:da:3f:4c:47:19:9c: d8:67:02:cb:93:20:39:19:82:45:85:d7:b7:2e:1e: 25:b9:08:8d:7b:bc:ce:39:fc:b1:9c:12:d5:57:eb: 65:c2:17:c6:ab:29:f9:8e:62:4c:6b:ac:fc:d9:5d: d5:01:66:bd:0d:81:d0:8f:ef:a4:01:09:77:59:a5: 77:61:6f:6f:01:25:d5:db:cd:52:7b:83:72:35:29: 81:ac:97:05:ff:ae:d3:69:a3:25:bf:86:35:2f:24: cf:b0:3f:57:6b:97:a2:eb:fd:80:02:71:0e:a0:03: e4:46:ee:69:0f:b4:99:8e:81:3f:ee:f0:af:05:28: 2c:d5:c2:4c:a8:3d:94:96:c7:3b:a8:94:b5:61:56: 28:5c:90:51:62:21:83:cf:8f:36:ef:40:10:ba:72: 2e:2a:fd:49:60:ae:c6:57:55:34:ee:7f:19:7b:aa: 57:01:b4:04:c0:d0:f5:be:f4:ae:82:7b:8e:17:8c: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:87:2F:D2:00:68:F8:D4:ED:FF:F9:FC:65:69:10:A0:6F:B3:BB:CA X509v3 Authority Key Identifier: keyid:E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:aa:83:82:26:1c:06:3b:8d:8e:63:f3:72:88:87:ef:80:64: 8d:57:d0:09:bc:f3:26:13:86:2c:57:56:6e:ec:5d:62:48:ef: 00:ea:5d:1d:5e:96:ce:63:58:48:00:16:37:92:8a:fa:50:98: 66:ca:38:c2:75:2d:99:16:69:eb:af:58:c1:33:9e:69:e7:ef: a1:b0:22:cc:e4:f6:10:fd:62:85:a7:b6:f1:f7:8d:f2:4a:cd: 0d:d4:14:16:83:e0:85:5b:33:db:10:ba:8d:8c:88:98:1b:a9: e7:7d:c5:72:0c:d8:ae:eb:f7:aa:f1:df:3a:0d:79:28:18:03: 9d:6f:03:ab:db:8c:4f:7b:2b:40:35:95:7d:f2:3e:8c:c2:7d: f6:93:c7:0e:ec:27:15:15:1a:c5:a7:8b:9f:ef:67:49:4f:e6: 43:e5:07:7e:49:fc:dc:a1:79:6f:eb:2f:3b:a0:a8:05:53:9e: fa:ae:7c:2c:86:eb:03:c2:2d:2a:3a:e6:35:14:a4:c2:26:1e: 99:30:15:5d:b0:be:7e:bc:72:5a:b5:42:ba:0d:cc:3e:4d:5f: 81:64:c4:37:a5:83:b4:07:79:1c:14:ad:6d:9c:97:d6:0c:b3: b9:f5:05:38:49:b8:c0:83:59:e2:1d:8b:13:f8:51:1d:d7:f6: 65:88:cd:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAcW7umguXxZBe98z+g0iaFGYsmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEMUMxQjQxMkNCNjRGRTU4MzUwODNGNzZBNzQ4N0NF MzQ0NTJCNjAeFw0yNjA5MjcxMjUwMjlaFw0yNjA5MjgxMzI1MjlaMDMxMTAvBgNV BAMTKDBFODcyRkQyMDA2OEY4RDRFREZGRjlGQzY1NjkxMEEwNkZCM0JCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/X7yDILEMIlHr2D/QoDLz45T +SUFHAE1Za8lIH147vGrPPSDgS5OHLyQczy9hWMOH+VotLvDPpH7eaUWWlwxDMKj FNo/TEcZnNhnAsuTIDkZgkWF17cuHiW5CI17vM45/LGcEtVX62XCF8arKfmOYkxr rPzZXdUBZr0NgdCP76QBCXdZpXdhb28BJdXbzVJ7g3I1KYGslwX/rtNpoyW/hjUv JM+wP1drl6Lr/YACcQ6gA+RG7mkPtJmOgT/u8K8FKCzVwkyoPZSWxzuolLVhVihc kFFiIYPPjzbvQBC6ci4q/UlgrsZXVTTufxl7qlcBtATA0PW+9K6Ce44XjJW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDocv0gBo+NTt//n8ZWkQoG+zu8owHwYDVR0j BBgwFoAU6NHBtBLLZP5YNQg/dqdIfONEUrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIxNjY0YTctYzljOS00NDQyLTg3MTgtOWFlYzllMjExMGEyLzAvRThEMUMxQjQx MkNCNjRGRTU4MzUwODNGNzZBNzQ4N0NFMzQ0NTJCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEQxQzFCNDEyQ0I2NEZFNTgzNTA4M0Y3NkE3NDg3Q0UzNDQ1 MkI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRThEMUMxQjQxMkNCNjRGRTU4MzUwODNGNzZBNzQ4 N0NFMzQ0NTJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+qg4ImHAY7jY5j83KIh++AZI1X0Am88yYT hixXVm7sXWJI7wDqXR1els5jWEgAFjeSivpQmGbKOMJ1LZkWaeuvWMEznmnn76Gw Iszk9hD9YoWntvH3jfJKzQ3UFBaD4IVbM9sQuo2MiJgbqed9xXIM2K7r96rx3zoN eSgYA51vA6vbjE97K0A1lX3yPozCffaTxw7sJxUVGsWni5/vZ0lP5kPlB35J/Nyh eW/rLzugqAVTnvqufCyG6wPCLSo65jUUpMImHpkwFV2wvn68clq1QroNzD5NX4Fk xDelg7QHeRwUrW2cl9YMs7n1BThJuMCDWeIdixP4UR3X9mWIzVk= -----END CERTIFICATE-----Generated at Sun Sep 27 21:21:25 2026 by rpki-client