$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft File: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft (raw, json) Hash identifier: joVggaNwj6nJWJlnCRZc3IfWX9ydOAU4IrVSK5hCxvY= Subject key identifier: 4E:BB:D7:AA:B2:B7:D0:24:25:96:3A:D3:FD:0D:58:D2:DA:24:60:A0 Authority key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC Certificate issuer: /CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Certificate serial: 386322B9C5F3948D968B73F796707D98D91B9BC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft Manifest number: BF Signing time: Wed 23 Sep 2026 14:23:54 +0000 Manifest this update: Wed 23 Sep 2026 14:18:54 +0000 Manifest next update: Thu 24 Sep 2026 17:29:54 +0000 Files and hashes: 1: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: ohA41RSForcViKph50xgqT5CqEd5p9C2x10sK3Y5aMA=) 2: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: b/pe4WCQVQeP9RG6dCLewRuXkpf7Roy9CSyh5UkTXss=) 3: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: SmTgUdBZ5Gm9MMySo1hy5IKAztpPtBz8UdMvR7+0nS8=) 4: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl (hash: Pv3Nlrp9+vdw+EZNo0LLKlZva2wFYDyYw0npFDO/fi0=) 5: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: 1A2FPi3qFfpFktBr0BMwE4Qlw/qHnARWJ5AeRKnXK6A=) 6: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: 4f9KIpK4kwJHh2WI32w5acQI96jbMxoNcHopJHYsb/k=) 7: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: lR/t7u2Id9Tm/5RG+xZK/WwNnzBrvYgkf9KgY4fbdVM=) 8: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: UPuTvMckcIYLBYZ54B2+SqyW/0kMWr4eDhHIIPK9IxA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:63:22:b9:c5:f3:94:8d:96:8b:73:f7:96:70:7d:98:d9:1b:9b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Validity Not Before: Sep 23 14:18:54 2026 GMT Not After : Sep 24 17:29:54 2026 GMT Subject: CN=4EBBD7AAB2B7D02425963AD3FD0D58D2DA2460A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:7c:3f:12:8e:15:d1:fc:9b:15:c0:49:b2: 7c:dc:dc:03:fa:03:78:ad:81:3f:07:44:35:88:e1: 51:82:c5:37:dc:02:19:b9:f3:5f:df:56:24:d9:75: 8c:0a:53:2d:c4:8a:10:1f:a8:fc:d2:9e:90:e6:e8: 59:ff:a2:6f:90:db:8a:95:09:2b:26:e5:51:38:97: ad:a8:20:e4:8f:1f:31:e3:7a:dc:72:b4:ae:29:70: 4a:05:da:c0:47:6d:84:1e:5f:56:b5:b2:f5:ce:a7: ac:a8:dd:c2:0c:5e:91:ff:40:6d:4e:22:bb:03:bc: 4b:bf:fa:68:a6:7f:d3:7e:48:ed:43:74:21:e3:58: 1f:81:ca:7d:19:71:1f:ac:21:9d:ee:7d:8f:4d:76: 4c:8e:7c:6b:bb:50:b0:65:28:fb:98:4b:b7:7e:94: 4c:77:2a:58:3e:71:34:a3:e8:78:91:48:fb:1c:18: d2:71:18:bd:08:ef:ab:b9:34:d4:8c:d2:d9:b2:0a: 47:6e:f3:35:1c:c9:7d:e5:97:a9:35:91:54:41:09: 75:c2:b9:cf:84:24:b7:ff:ed:96:88:98:55:8c:ce: b3:d1:b5:3d:44:e4:84:b4:a6:5a:04:ad:44:da:91: 69:d1:c7:1a:b8:e9:18:3a:3e:4a:27:2f:6e:2e:04: a8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BB:D7:AA:B2:B7:D0:24:25:96:3A:D3:FD:0D:58:D2:DA:24:60:A0 X509v3 Authority Key Identifier: keyid:8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bf:ce:25:9c:01:11:4c:70:dc:f4:5e:d5:82:ca:88:89:4a: 13:7b:dd:f4:e6:3c:69:a2:3c:86:56:82:05:d0:11:6b:f8:a1: 30:ef:08:9c:b5:0b:91:26:a9:18:a4:41:94:50:2d:7b:e4:1e: d8:05:88:27:83:3e:1f:77:45:ea:46:66:78:d4:9e:79:28:09: a1:4e:43:34:3b:92:da:3c:5e:b8:2e:af:91:01:f0:6d:9b:ab: d7:87:73:05:26:b2:dd:27:c6:f1:41:60:60:b9:88:22:df:ac: e4:b6:de:7b:5e:49:f6:42:3a:f7:56:66:09:4c:22:19:d6:ef: df:13:aa:78:28:d8:c5:4e:ba:10:3c:bd:39:ce:3d:dc:bd:e5: 17:37:c0:07:33:d3:8a:8c:82:a7:e8:29:bc:59:d9:b8:e4:aa: 8a:d7:85:f6:80:2f:67:7e:7d:41:13:15:0c:ce:5d:a0:b2:35: 5d:25:22:17:0e:d9:29:36:f1:1b:ce:de:ef:aa:8d:42:ba:9c: ee:26:0b:44:72:4f:0c:b8:37:40:b3:a2:db:7c:69:73:87:64: 69:c8:17:a2:16:51:0b:52:77:50:ee:e0:4d:19:17:ec:92:dc: 18:fb:f1:1f:ff:ff:4e:dc:aa:7d:24:7b:f5:29:84:ef:6f:bf: 17:d9:80:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGMiucXzlI2Wi3P3lnB9mNkbm8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0 RTNBRTZFQzAeFw0yNjA5MjMxNDE4NTRaFw0yNjA5MjQxNzI5NTRaMDMxMTAvBgNV BAMTKDRFQkJEN0FBQjJCN0QwMjQyNTk2M0FEM0ZEMEQ1OEQyREEyNDYwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wnw/Eo4V0fybFcBJsnzc3AP6 A3itgT8HRDWI4VGCxTfcAhm581/fViTZdYwKUy3EihAfqPzSnpDm6Fn/om+Q24qV CSsm5VE4l62oIOSPHzHjetxytK4pcEoF2sBHbYQeX1a1svXOp6yo3cIMXpH/QG1O IrsDvEu/+mimf9N+SO1DdCHjWB+Byn0ZcR+sIZ3ufY9NdkyOfGu7ULBlKPuYS7d+ lEx3Klg+cTSj6HiRSPscGNJxGL0I76u5NNSM0tmyCkdu8zUcyX3ll6k1kVRBCXXC uc+EJLf/7ZaImFWMzrPRtT1E5IS0ploErUTakWnRxxq46Rg6PkonL24uBKjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTrvXqrK30CQlljrT/Q1Y0tokYKAwHwYDVR0j BBgwFoAUjuNZiH7UeUfnTsw9Etfdh0465uwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVjN2E0MDQtZWIzZi00Y2YxLTk5ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3 RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0RTNBRTZFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUUzNTk4ODdFRDQ3OTQ3RTc0RUNDM0QxMkQ3REQ4NzRFM0FF NkVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0RE ODc0RTNBRTZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABO/ziWcARFMcNz0XtWCyoiJShN73fTmPGmi PIZWggXQEWv4oTDvCJy1C5EmqRikQZRQLXvkHtgFiCeDPh93RepGZnjUnnkoCaFO QzQ7kto8Xrgur5EB8G2bq9eHcwUmst0nxvFBYGC5iCLfrOS23nteSfZCOvdWZglM IhnW798Tqngo2MVOuhA8vTnOPdy95Rc3wAcz04qMgqfoKbxZ2bjkqorXhfaAL2d+ fUETFQzOXaCyNV0lIhcO2Sk28RvO3u+qjUK6nO4mC0RyTwy4N0Czott8aXOHZGnI F6IWUQtSd1Du4E0ZF+yS3Bj78R///07cqn0ke/UphO9vvxfZgKI= -----END CERTIFICATE-----Generated at Thu Sep 24 11:28:52 2026 by rpki-client