$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft File: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft (raw, json) Hash identifier: R2dYpUhSA03cBc6LLTkZRcG/w5sBdHl1IIVjuhDjnrM= Subject key identifier: 63:E0:42:19:D9:70:3F:A0:91:6B:37:30:FD:C7:04:9D:E9:5E:30:C2 Authority key identifier: 85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E Certificate issuer: /CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Certificate serial: 65D2C91EFAA691D5557912614B63448BBADD487C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 13:48:04 +0000 Manifest this update: Thu 24 Sep 2026 13:43:04 +0000 Manifest next update: Fri 25 Sep 2026 17:28:04 +0000 Files and hashes: 1: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uYXVOfIT7P6Dr33KoZiS4hHMvBugVDHDvO0rydITSy0=) 2: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: ymv/QzmelT0mY8Z1NXChI2j7830jRvZf9HvAHfEuKp0=) 3: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: b9vSoEj12pKvRl6GFlwGqwDqlYjOzNMwdmXHDB/QoPA=) 4: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl (hash: sp62abLgBAinMGqAOdHFOW87yLM1Jgg8CxHKFXCzL2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d2:c9:1e:fa:a6:91:d5:55:79:12:61:4b:63:44:8b:ba:dd:48:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Validity Not Before: Sep 24 13:43:04 2026 GMT Not After : Sep 25 17:28:04 2026 GMT Subject: CN=63E04219D9703FA0916B3730FDC7049DE95E30C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:40:b9:88:7e:11:fe:b5:a3:39:d1:62:43: 84:cd:e0:d6:f1:1e:fc:d3:d3:19:64:cc:2f:46:69: a0:38:b7:75:30:0f:31:dc:82:cb:10:fa:81:13:8f: f1:4f:cf:8f:3e:8a:3b:3e:41:dd:76:1c:36:41:2b: 8d:53:40:a8:fe:30:16:f7:0a:7f:76:7b:cc:46:15: 40:1c:cd:ea:55:d3:69:d1:73:8a:99:df:bb:33:f4: 41:e0:cf:3f:4f:ee:c2:dc:3d:81:18:b2:3b:88:59: fd:29:10:fc:68:69:90:41:55:c6:04:c1:4c:ff:4d: 50:55:fe:16:6b:f4:67:05:1d:03:b1:28:29:8c:f7: 7b:01:1e:70:f2:cb:4c:17:ae:ff:fc:ed:a7:04:d8: 1d:3d:44:5a:69:c1:3a:5f:ac:ea:cc:ba:a1:10:da: 43:79:8e:aa:e1:0c:68:f9:fe:00:83:e2:34:21:8d: 0f:79:65:44:35:d7:ee:4c:c8:69:16:ab:88:96:fa: 13:22:d0:e3:2d:a0:0f:bd:2e:82:5c:9b:e8:58:78: 2a:bc:ff:85:1a:50:29:43:4d:6c:cf:56:20:79:4f: 8b:aa:5f:17:a8:71:9a:ff:f2:9c:58:f5:04:c0:15: 2b:4a:f3:e8:72:e4:12:5a:fc:6b:0a:24:52:fd:a3: e6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E0:42:19:D9:70:3F:A0:91:6B:37:30:FD:C7:04:9D:E9:5E:30:C2 X509v3 Authority Key Identifier: keyid:85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:69:a9:96:40:32:75:6c:73:e2:56:b1:01:fe:0b:63:8f:1e: 62:09:31:90:a0:ea:12:f4:92:3f:27:f2:5c:8d:b7:50:25:cf: b6:57:ab:3c:80:83:88:20:12:d8:c2:a4:e3:4d:ae:13:44:3f: d4:4f:b8:11:6a:ba:e2:07:31:3d:e4:22:be:cf:a3:35:d2:af: a1:ba:d9:37:e6:65:f7:0f:29:82:57:5f:54:47:6a:0b:9c:d7: d3:1c:78:78:19:7d:3e:fa:15:ff:cb:0d:9c:39:58:77:1d:d9: 71:e9:39:72:74:5c:a6:c5:7e:88:69:74:a2:20:e1:03:09:bc: e6:6a:11:2e:36:af:e4:53:35:6f:cd:f7:19:ce:d5:b4:4b:ef: 0a:26:cf:89:a6:55:59:7d:b1:49:30:89:a4:4c:de:16:51:dc: b8:39:e5:4d:bd:7d:1b:14:06:68:b2:6b:bc:e3:07:b2:9f:7f: d6:cf:e7:23:f2:d5:1b:a9:54:8f:b4:78:aa:fa:53:b7:e8:12: e2:9a:8f:f2:dc:a5:d8:f6:ab:9a:fc:6d:51:b5:5a:dd:56:4f: 59:83:23:fa:aa:53:82:e0:5c:a4:fc:7d:26:78:4d:84:ac:18: 73:e2:f0:1f:17:12:88:95:05:78:bc:1b:40:1d:42:bd:a7:ec: 90:fb:92:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdLJHvqmkdVVeRJhS2NEi7rdSHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRB QzY2QTQwRTAeFw0yNjA5MjQxMzQzMDRaFw0yNjA5MjUxNzI4MDRaMDMxMTAvBgNV BAMTKDYzRTA0MjE5RDk3MDNGQTA5MTZCMzczMEZEQzcwNDlERTk1RTMwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdb0C5iH4R/rWjOdFiQ4TN4Nbx HvzT0xlkzC9GaaA4t3UwDzHcgssQ+oETj/FPz48+ijs+Qd12HDZBK41TQKj+MBb3 Cn92e8xGFUAczepV02nRc4qZ37sz9EHgzz9P7sLcPYEYsjuIWf0pEPxoaZBBVcYE wUz/TVBV/hZr9GcFHQOxKCmM93sBHnDyy0wXrv/87acE2B09RFppwTpfrOrMuqEQ 2kN5jqrhDGj5/gCD4jQhjQ95ZUQ11+5MyGkWq4iW+hMi0OMtoA+9LoJcm+hYeCq8 /4UaUClDTWzPViB5T4uqXxeocZr/8pxY9QTAFStK8+hy5BJa/GsKJFL9o+YpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY+BCGdlwP6CRazcw/ccEneleMMIwHwYDVR0j BBgwFoAUhXdwLWFMjLgpyizFHCszdKxmpA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU0ODE2MDYtZDVmZC00MTk2LWFiY2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2 MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRBQzY2QTQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NTc3NzAyRDYxNEM4Q0I4MjlDQTJDQzUxQzJCMzM3NEFDNjZB NDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMz NzRBQzY2QTQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBpqZZAMnVsc+JWsQH+C2OPHmIJMZCg6hL0 kj8n8lyNt1Alz7ZXqzyAg4ggEtjCpONNrhNEP9RPuBFquuIHMT3kIr7PozXSr6G6 2TfmZfcPKYJXX1RHaguc19MceHgZfT76Ff/LDZw5WHcd2XHpOXJ0XKbFfohpdKIg 4QMJvOZqES42r+RTNW/N9xnO1bRL7womz4mmVVl9sUkwiaRM3hZR3Lg55U29fRsU Bmiya7zjB7Kff9bP5yPy1RupVI+0eKr6U7foEuKaj/Lcpdj2q5r8bVG1Wt1WT1mD I/qqU4LgXKT8fSZ4TYSsGHPi8B8XEoiVBXi8G0AdQr2n7JD7ksc= -----END CERTIFICATE-----Generated at Fri Sep 25 03:32:06 2026 by rpki-client