$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft File: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft (raw, json) Hash identifier: knrz3jS8spsYuTr5WSTv7DvS3HvTpVJs9YuuyGnueXs= Subject key identifier: 87:7C:5B:05:D7:09:2B:ED:36:AD:5C:68:CC:8E:AE:9C:E7:5A:DD:A1 Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4 Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4 Certificate serial: 5331F3B915F8C6C9DF61618859006667C9AC0435 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft Manifest number: D0 Signing time: Fri 02 Oct 2026 08:15:48 +0000 Manifest this update: Fri 02 Oct 2026 08:10:48 +0000 Manifest next update: Sat 03 Oct 2026 08:33:48 +0000 Files and hashes: 1: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: fBaN9jIwXMILmSYsIQ3Ue7JGtw7WhLW8vbb21prGNGk=) 2: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: L1mfkBCHBmcBCuB53aap/zrreHda+IVKN915WxYStVY=) 3: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: RlgIs0QjanrifNmC6pZ/6muj/iE2ejRnuLFDY7kN47g=) 4: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: NtkyFz71abqYBOulA/yf0usZVvUpaEttpy+f3u3kpp8=) 5: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: Z/jdDipYuv3lK5eimMJ72Z70XTynWpBlz182XUeNc+E=) 6: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: hujlKc3DzwZfu+/QrUX39XVrQUFGamfbziw+u/7dNJ0=) 7: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: Yobd92nJofxIMDnwcBhGJ8U1ARrNN8Txd0D+kOpJodU=) 8: 34332e3234332e3138362e302f32332d3233203d3e203633383237.roa (hash: qqj+W0YE7lPcQQyjA0h+/ikJ5uDXNaW6laVzLp1Qk3I=) 9: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl (hash: 9N2o5R9TI9gUnSp/6WYOQ9uzzeex47c4txrdMZC7FaM=) 10: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: CH+q+cxW04syGQTs2qRuGVzpDs6qixBBw3uVzFWNK2g=) 11: 34332e3234332e3138342e302f32322d3232203d3e203633383237.roa (hash: MAEO7ACMQfPreayi5zBOy6AnAEF+RmZdQiFdMvjwjTI=) 12: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: jBX/qKx/JGa1Du2q2fgwV/fWVjEIgXCKAL9/GZt06jk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 04:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:31:f3:b9:15:f8:c6:c9:df:61:61:88:59:00:66:67:c9:ac:04:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4 Validity Not Before: Oct 2 08:10:48 2026 GMT Not After : Oct 3 08:33:48 2026 GMT Subject: CN=877C5B05D7092BED36AD5C68CC8EAE9CE75ADDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:f0:ed:2b:2c:bf:e6:94:ef:a3:d5:23:1a: 82:aa:77:29:dc:38:6f:82:11:93:57:15:2e:ab:ff: ba:df:6a:c4:7a:be:30:1b:c3:a5:5e:43:f1:b5:28: 2e:1c:bc:95:8b:93:ce:ea:2b:e0:35:e1:9f:93:00: 24:67:39:8a:71:10:7e:34:9c:17:1c:c1:86:97:88: 20:2b:2d:2e:e7:d8:18:94:fa:16:40:1e:12:27:71: ea:f4:8a:cc:47:02:e6:62:10:cd:04:94:13:7b:95: 1b:71:97:ee:a9:e7:0e:65:a1:81:b4:c4:ac:ed:ae: 61:6b:b0:79:96:22:64:c4:0a:e8:f7:41:de:08:a8: ca:5f:9e:fc:8e:92:e0:3a:51:e1:9b:06:65:c7:6d: 65:1b:cf:bd:22:1d:e5:c8:41:14:32:77:18:a0:15: 97:ad:2e:0f:56:79:a2:70:c4:d3:67:76:70:7f:4b: ae:ad:36:74:b9:af:f0:95:38:42:b9:92:dd:6a:58: 1c:79:df:80:58:22:35:11:79:7b:0e:8e:f0:13:bb: 0e:7f:89:ca:53:eb:77:d0:cc:5e:b1:f6:ed:6e:7b: 89:5f:6b:84:27:b5:b3:21:2e:28:6c:f2:6b:85:73: 9e:1c:89:73:73:9c:50:56:c4:d1:1a:76:2b:09:a6: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7C:5B:05:D7:09:2B:ED:36:AD:5C:68:CC:8E:AE:9C:E7:5A:DD:A1 X509v3 Authority Key Identifier: keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:55:8e:ae:38:2f:24:b0:62:cd:67:4e:b5:5e:ba:fd:f5:23: 02:54:c2:3e:48:73:de:73:6d:1e:cd:44:20:d3:8a:ea:f5:cf: a6:66:c6:1b:4c:6f:04:e4:36:66:ab:ab:7f:27:05:fa:44:36: 55:41:c4:ee:23:3d:98:30:93:d3:3c:5f:9f:a8:96:5e:83:60: 18:7b:95:14:e8:7d:e4:12:4c:8f:a8:ac:9f:7a:98:6e:c3:3a: 1e:f4:ed:65:51:81:ae:dc:cf:46:71:dc:28:1d:4f:95:58:eb: ea:3c:e6:5b:ff:1f:2a:73:30:61:cb:26:8b:fd:26:15:8c:0f: cc:d8:15:e0:bc:bb:5c:c2:21:26:50:c0:ed:7e:34:60:9c:5a: c8:29:6c:83:a9:81:61:15:2a:d9:b8:2f:b5:c1:e9:29:b9:48: bb:42:72:53:c2:66:f3:5d:a5:14:5f:9e:d0:2c:d6:6f:f7:bb: 6e:46:46:75:9c:12:34:3d:a3:2f:5d:86:06:24:2f:80:d1:09: 63:8e:fe:13:a3:08:c4:ae:ac:2c:57:11:ac:e7:ca:3d:f7:6d: 70:89:8f:9a:99:da:17:70:f2:3f:77:84:b6:9b:ce:6d:5e:69: 1a:90:6d:a0:37:6e:e7:a2:98:88:b3:05:2c:b3:fc:0b:56:37: 14:f9:7b:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzHzuRX4xsnfYWGIWQBmZ8msBDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEM0Q1NTZBOTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0 MDI5RTZDNDAeFw0yNjEwMDIwODEwNDhaFw0yNjEwMDMwODMzNDhaMDMxMTAvBgNV BAMTKDg3N0M1QjA1RDcwOTJCRUQzNkFENUM2OENDOEVBRTlDRTc1QUREQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0fPDtKyy/5pTvo9UjGoKqdync OG+CEZNXFS6r/7rfasR6vjAbw6VeQ/G1KC4cvJWLk87qK+A14Z+TACRnOYpxEH40 nBccwYaXiCArLS7n2BiU+hZAHhIncer0isxHAuZiEM0ElBN7lRtxl+6p5w5loYG0 xKztrmFrsHmWImTECuj3Qd4IqMpfnvyOkuA6UeGbBmXHbWUbz70iHeXIQRQydxig FZetLg9WeaJwxNNndnB/S66tNnS5r/CVOEK5kt1qWBx534BYIjUReXsOjvATuw5/ icpT63fQzF6x9u1ue4lfa4QntbMhLihs8muFc54ciXNznFBWxNEadisJpjHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh3xbBdcJK+02rVxozI6unOda3aEwHwYDVR0j BBgwFoAUCNPVVqmJ4OR37+uCQoVNekAp5sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFhNjg3MTItMWQ5YS00MTQzLTgyZjEtMWM4MmMzMzE2NWVhLzAvMDhEM0Q1NTZB OTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0MDI5RTZDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOEQzRDU1NkE5ODlFMEU0NzdFRkVCODI0Mjg1NEQ3QTQwMjlF NkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFhNjg3MTItMWQ5YS00MTQzLTgy ZjEtMWM4MmMzMzE2NWVhLzAvMDhEM0Q1NTZBOTg5RTBFNDc3RUZFQjgyNDI4NTRE N0E0MDI5RTZDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFVjq44LySwYs1nTrVeuv31IwJUwj5Ic95z bR7NRCDTiur1z6ZmxhtMbwTkNmarq38nBfpENlVBxO4jPZgwk9M8X5+oll6DYBh7 lRTofeQSTI+orJ96mG7DOh707WVRga7cz0Zx3CgdT5VY6+o85lv/HypzMGHLJov9 JhWMD8zYFeC8u1zCISZQwO1+NGCcWsgpbIOpgWEVKtm4L7XB6Sm5SLtCclPCZvNd pRRfntAs1m/3u25GRnWcEjQ9oy9dhgYkL4DRCWOO/hOjCMSurCxXEaznyj33bXCJ j5qZ2hdw8j93hLabzm1eaRqQbaA3bueimIizBSyz/AtWNxT5e4o= -----END CERTIFICATE-----Generated at Fri Oct 2 20:59:11 2026 by rpki-client