$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft File: 8EE74284879D5768C14DFF59F408307443024F52.mft (raw, json) Hash identifier: aBDEjO/ivFLCR37w3k+l1jtWjbfTN+z6BKynrlEk3ok= Subject key identifier: 8E:4D:BC:E7:20:1D:1E:57:2F:EA:1D:5B:74:C8:7F:D6:8A:84:04:68 Authority key identifier: 8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52 Certificate issuer: /CN=8EE74284879D5768C14DFF59F408307443024F52 Certificate serial: 61A7B8CB9A1B3473D58769186152AFC927C9890F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 05:22:01 +0000 Manifest this update: Fri 25 Sep 2026 05:17:01 +0000 Manifest next update: Sat 26 Sep 2026 05:57:01 +0000 Files and hashes: 1: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: qVGDGNhc8J+1zH3v5gLnqpqbccQ37nMtlVBvAtU2Qic=) 2: 8EE74284879D5768C14DFF59F408307443024F52.crl (hash: UcIIYvCZJQBs6oyTdwPamaFhqkAfAXQu6XNXjMKTOZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a7:b8:cb:9a:1b:34:73:d5:87:69:18:61:52:af:c9:27:c9:89:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE74284879D5768C14DFF59F408307443024F52 Validity Not Before: Sep 25 05:17:01 2026 GMT Not After : Sep 26 05:57:01 2026 GMT Subject: CN=8E4DBCE7201D1E572FEA1D5B74C87FD68A840468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:2a:f8:4d:0e:b7:b8:94:d1:4e:05:e0:87: 9e:e6:ba:18:c1:61:f9:76:5c:d5:ae:44:b0:59:2e: 62:35:62:6a:ca:cd:80:77:c9:7e:f7:33:ef:4c:e5: 69:b1:be:07:2c:6a:36:24:8f:77:bc:3c:18:ae:01: eb:1a:1f:f2:f5:b0:46:70:de:c2:37:b1:5d:0d:42: e7:09:31:22:1d:97:f2:17:f6:66:19:65:b2:e4:62: fa:15:84:36:17:4e:f7:50:96:80:f0:56:d0:4a:02: ff:d3:5c:b8:89:eb:b5:79:0e:d9:6e:23:75:51:70: 10:a7:45:c4:64:a6:8c:dd:68:11:a2:a8:35:25:96: 6a:47:69:39:7e:22:93:e5:6f:c4:19:75:d2:43:91: 64:88:33:b8:c0:71:2b:72:8d:50:46:13:29:6c:7b: 1a:fb:73:b9:4e:1a:2c:28:f7:8e:af:65:1e:02:18: 83:e4:d7:6f:57:09:36:30:cb:5a:01:d4:a3:da:69: f6:5d:c9:30:6b:79:e4:ad:89:c1:c1:8f:48:c0:e9: f5:28:42:8b:45:08:1a:8d:78:21:a3:45:78:44:89: 03:83:87:63:6b:09:37:b1:f8:a4:90:40:4f:f2:c6: 46:47:f8:1a:71:26:94:de:85:d5:67:49:64:b2:ca: 6b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4D:BC:E7:20:1D:1E:57:2F:EA:1D:5B:74:C8:7F:D6:8A:84:04:68 X509v3 Authority Key Identifier: keyid:8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9a:50:71:d0:60:de:63:4c:8a:bb:61:ad:eb:a5:44:b6:80: 7d:e8:dc:1f:59:2e:92:03:f0:6d:d7:51:17:7c:32:6c:17:f1: 86:0c:77:41:19:08:08:7c:a0:15:26:0b:c8:98:b4:15:fb:fa: 47:07:d5:55:1a:90:8a:a3:bf:f5:fe:23:10:3a:02:72:81:e2: 6f:0a:7b:33:8f:cd:69:5d:cc:03:46:26:42:9c:8c:af:4b:3b: 94:f5:60:f5:f4:e5:6d:f0:83:b0:c6:a8:57:4f:33:70:5e:52: 27:fa:a7:14:40:02:91:ef:3a:b8:a7:23:67:ca:2e:28:7e:da: 3f:48:5e:dd:52:e6:49:61:e0:be:b5:d4:f4:a5:3c:18:fb:12: 67:19:9e:1d:82:15:99:54:f3:01:f9:76:c6:4d:fe:69:f7:26: 48:96:ce:c3:73:dc:14:51:c1:9c:ee:53:dd:25:20:48:be:64: 4b:9a:84:e6:f1:5a:47:9d:f9:8e:0e:f9:2c:73:72:4f:58:43: 81:86:cd:b3:df:11:94:94:a8:f5:08:f2:6b:4d:75:eb:a9:0c: 63:3f:46:99:f9:34:3d:58:99:95:e2:f9:2e:7a:4b:b7:2b:83: 93:e6:31:18:73:15:5d:b4:61:7d:b6:14:1d:51:46:48:cb:1b: 13:28:e2:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYae4y5obNHPVh2kYYVKvySfJiQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0 MzAyNEY1MjAeFw0yNjA5MjUwNTE3MDFaFw0yNjA5MjYwNTU3MDFaMDMxMTAvBgNV BAMTKDhFNERCQ0U3MjAxRDFFNTcyRkVBMUQ1Qjc0Qzg3RkQ2OEE4NDA0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRDir4TQ63uJTRTgXgh57muhjB Yfl2XNWuRLBZLmI1YmrKzYB3yX73M+9M5WmxvgcsajYkj3e8PBiuAesaH/L1sEZw 3sI3sV0NQucJMSIdl/IX9mYZZbLkYvoVhDYXTvdQloDwVtBKAv/TXLiJ67V5Dtlu I3VRcBCnRcRkpozdaBGiqDUllmpHaTl+IpPlb8QZddJDkWSIM7jAcStyjVBGEyls exr7c7lOGiwo946vZR4CGIPk129XCTYwy1oB1KPaafZdyTBreeSticHBj0jA6fUo QotFCBqNeCGjRXhEiQODh2NrCTex+KSQQE/yxkZH+BpxJpTehdVnSWSyymtFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjk285yAdHlcv6h1bdMh/1oqEBGgwHwYDVR0j BBgwFoAUjudChIedV2jBTf9Z9AgwdEMCT1IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMyZTk0NWMtZWQzZC00ODlhLTgzZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4 NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0MzAyNEY1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUU3NDI4NDg3OUQ1NzY4QzE0REZGNTlGNDA4MzA3NDQzMDI0 RjUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMw NzQ0MzAyNEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeaUHHQYN5jTIq7Ya3rpUS2gH3o3B9ZLpID 8G3XURd8MmwX8YYMd0EZCAh8oBUmC8iYtBX7+kcH1VUakIqjv/X+IxA6AnKB4m8K ezOPzWldzANGJkKcjK9LO5T1YPX05W3wg7DGqFdPM3BeUif6pxRAApHvOrinI2fK Lih+2j9IXt1S5klh4L611PSlPBj7EmcZnh2CFZlU8wH5dsZN/mn3JkiWzsNz3BRR wZzuU90lIEi+ZEuahObxWked+Y4O+Sxzck9YQ4GGzbPfEZSUqPUI8mtNdeupDGM/ Rpn5ND1YmZXi+S56S7crg5PmMRhzFV20YX22FB1RRkjLGxMo4s8= -----END CERTIFICATE-----Generated at Fri Sep 25 23:49:53 2026 by rpki-client