$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft File: 8EE74284879D5768C14DFF59F408307443024F52.mft (raw, json) Hash identifier: NTuD/3RYr+ApwFqhypOfpm61ir10HrlS3m67EBj5zuQ= Subject key identifier: 24:DA:D3:7F:5A:E4:87:41:0A:00:02:02:4A:C5:29:82:3D:C7:76:6B Authority key identifier: 8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52 Certificate issuer: /CN=8EE74284879D5768C14DFF59F408307443024F52 Certificate serial: 0E46A0EBE833F4D18414D998CBB5151E07920BE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 16:26:19 +0000 Manifest this update: Wed 23 Sep 2026 16:21:19 +0000 Manifest next update: Thu 24 Sep 2026 19:59:19 +0000 Files and hashes: 1: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: qVGDGNhc8J+1zH3v5gLnqpqbccQ37nMtlVBvAtU2Qic=) 2: 8EE74284879D5768C14DFF59F408307443024F52.crl (hash: CA3wSHKvOXEkPFWH6XFJADlJDOwNJZiTaep/A8ZWPGY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:46:a0:eb:e8:33:f4:d1:84:14:d9:98:cb:b5:15:1e:07:92:0b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE74284879D5768C14DFF59F408307443024F52 Validity Not Before: Sep 23 16:21:19 2026 GMT Not After : Sep 24 19:59:19 2026 GMT Subject: CN=24DAD37F5AE487410A0002024AC529823DC7766B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:ac:f0:f3:25:36:e9:b4:55:13:dc:8d:b2: 20:01:96:2a:90:03:96:b1:82:22:50:e7:2f:ca:3a: 91:7e:a0:4a:05:a6:cc:41:4c:d1:db:c8:90:83:0d: 15:f7:74:80:05:67:3e:9f:b5:3c:df:8e:93:54:de: f9:36:b3:55:88:f8:5a:1e:ed:cc:a9:04:fa:e8:cb: 48:73:4f:e4:d8:55:c6:9b:cd:fd:01:49:52:68:fa: 6f:cc:50:65:9e:49:0e:8a:98:ed:d6:34:d8:ef:43: ba:cf:f0:2c:12:00:a0:81:0c:c1:1c:0e:07:7d:e3: 9b:38:0d:ef:8e:a1:d8:c7:37:b6:84:73:61:6d:8b: 43:dc:72:d6:c9:c4:ff:d6:91:3c:d0:36:29:1e:b3: 10:44:ac:47:b1:81:2c:41:a1:58:bb:ec:b6:76:e4: 07:4e:51:f5:f0:f3:ad:36:41:02:70:25:5d:aa:d1: c3:37:c0:df:e2:d9:c4:b7:71:b2:0d:98:4a:41:ab: 98:f6:a5:54:e5:b1:d6:10:95:13:33:9e:3d:13:d7: 8f:0e:4d:60:48:1c:c3:bf:32:96:40:bd:06:12:9b: 2f:9b:1b:50:f2:da:d2:91:31:96:14:c3:82:ff:c0: c7:e3:8d:99:a6:93:ce:4b:e2:2a:c0:53:6a:0d:0f: 26:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DA:D3:7F:5A:E4:87:41:0A:00:02:02:4A:C5:29:82:3D:C7:76:6B X509v3 Authority Key Identifier: keyid:8E:E7:42:84:87:9D:57:68:C1:4D:FF:59:F4:08:30:74:43:02:4F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE74284879D5768C14DFF59F408307443024F52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/8EE74284879D5768C14DFF59F408307443024F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a0:7f:36:13:4a:f4:07:80:c3:d2:92:23:95:4b:8a:18:17: 17:8c:b2:cd:54:70:41:74:53:a8:37:0f:a0:30:98:cf:42:b6: d9:06:8f:6e:18:11:f1:d8:c4:3a:0b:0e:70:5c:cf:2c:4a:79: 52:ac:af:4b:f2:49:82:81:5b:90:7c:5f:83:65:20:31:ce:bc: 33:1b:f9:3c:ad:00:2a:8a:77:c1:3a:ba:19:b1:6a:b9:10:c9: d2:c1:6d:fc:42:d4:e0:97:03:30:c8:7f:15:c0:ce:b4:e3:04: c3:16:37:f6:98:ff:ed:e3:60:f9:36:71:6e:75:82:96:6d:4a: cb:c0:b9:d0:2f:93:f6:cb:91:ab:6f:9f:51:2d:47:2c:e9:47: 9c:80:9a:29:03:ba:03:0d:f7:42:bf:32:ac:14:22:cf:18:37: 76:56:16:09:f5:68:76:b2:26:a5:c8:96:5c:c6:43:38:9e:2b: 1a:58:18:f2:55:e9:7d:f1:01:31:e4:3c:c7:d7:3d:84:d0:86: 4e:fa:a0:fa:8f:c9:f0:3c:c5:42:9a:a6:eb:cd:ff:7b:f7:67: 54:36:32:62:36:18:88:8f:70:38:cb:d6:88:40:d1:f2:91:d5: 19:38:76:cd:0b:be:bb:eb:5f:58:eb:7c:e9:dc:30:8d:0d:f9: b2:5d:a2:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDkag6+gz9NGEFNmYy7UVHgeSC+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0 MzAyNEY1MjAeFw0yNjA5MjMxNjIxMTlaFw0yNjA5MjQxOTU5MTlaMDMxMTAvBgNV BAMTKDI0REFEMzdGNUFFNDg3NDEwQTAwMDIwMjRBQzUyOTgyM0RDNzc2NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0L6zw8yU26bRVE9yNsiABliqQ A5axgiJQ5y/KOpF+oEoFpsxBTNHbyJCDDRX3dIAFZz6ftTzfjpNU3vk2s1WI+Foe 7cypBProy0hzT+TYVcabzf0BSVJo+m/MUGWeSQ6KmO3WNNjvQ7rP8CwSAKCBDMEc Dgd945s4De+OodjHN7aEc2Fti0PcctbJxP/WkTzQNikesxBErEexgSxBoVi77LZ2 5AdOUfXw8602QQJwJV2q0cM3wN/i2cS3cbINmEpBq5j2pVTlsdYQlRMznj0T148O TWBIHMO/MpZAvQYSmy+bG1Dy2tKRMZYUw4L/wMfjjZmmk85L4irAU2oNDyZPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJNrTf1rkh0EKAAICSsUpgj3HdmswHwYDVR0j BBgwFoAUjudChIedV2jBTf9Z9AgwdEMCT1IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjMyZTk0NWMtZWQzZC00ODlhLTgzZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4 NzlENTc2OEMxNERGRjU5RjQwODMwNzQ0MzAyNEY1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUU3NDI4NDg3OUQ1NzY4QzE0REZGNTlGNDA4MzA3NDQzMDI0 RjUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvOEVFNzQyODQ4NzlENTc2OEMxNERGRjU5RjQwODMw NzQ0MzAyNEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFygfzYTSvQHgMPSkiOVS4oYFxeMss1UcEF0 U6g3D6AwmM9CttkGj24YEfHYxDoLDnBczyxKeVKsr0vySYKBW5B8X4NlIDHOvDMb +TytACqKd8E6uhmxarkQydLBbfxC1OCXAzDIfxXAzrTjBMMWN/aY/+3jYPk2cW51 gpZtSsvAudAvk/bLkatvn1EtRyzpR5yAmikDugMN90K/MqwUIs8YN3ZWFgn1aHay JqXIllzGQzieKxpYGPJV6X3xATHkPMfXPYTQhk76oPqPyfA8xUKapuvN/3v3Z1Q2 MmI2GIiPcDjL1ohA0fKR1Rk4ds0LvrvrX1jrfOncMI0N+bJdokw= -----END CERTIFICATE-----Generated at Thu Sep 24 07:03:19 2026 by rpki-client