$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft File: 8DD710534DF68AAB08361EE28306B8FDEE71D144.mft (raw, json) Hash identifier: yK9+v8ydOGW9yD0i4J4kJ4jEnnxwR+ns+4zovVjZLT8= Subject key identifier: 21:4F:36:40:C9:84:FB:B1:9A:7F:A1:88:1B:9F:EA:79:DB:8A:0A:FB Authority key identifier: 8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 Certificate issuer: /CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Certificate serial: 4734B0761B3A47F4D37D4210047CE5F63C0F7E03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 08:46:37 +0000 Manifest this update: Thu 24 Sep 2026 08:41:37 +0000 Manifest next update: Fri 25 Sep 2026 12:33:37 +0000 Files and hashes: 1: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: OzarGbzrKygn581G2dCLdzA7C4q7lKqki8T+O4VVozc=) 2: 8DD710534DF68AAB08361EE28306B8FDEE71D144.crl (hash: JgZsSI0SdRnM36elH5GMU0C90wjeD1K4ZvLw9yIQoUQ=) 3: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: mt9y4ArG2gRgvhKLs+xygsf6wYJsNzK3vkSOg2Yasms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:34:b0:76:1b:3a:47:f4:d3:7d:42:10:04:7c:e5:f6:3c:0f:7e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Validity Not Before: Sep 24 08:41:37 2026 GMT Not After : Sep 25 12:33:37 2026 GMT Subject: CN=214F3640C984FBB19A7FA1881B9FEA79DB8A0AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b2:95:de:4f:ba:9b:13:52:a0:91:a5:0b:aa: 7f:3a:55:fc:3a:87:60:e3:3c:d5:22:26:38:32:2c: c2:62:28:47:35:b9:3a:34:60:d9:98:e1:c8:1c:b5: 2e:c8:7a:9a:14:9f:e9:6c:a9:68:5c:a4:3e:fe:39: 33:ab:da:71:6f:1a:08:a7:00:70:fd:c0:0e:60:a4: 0f:f6:00:82:07:80:97:53:44:c6:f5:71:6f:6e:d3: 95:d0:74:d4:e6:06:4b:e4:48:c0:e3:7c:c9:3e:11: ad:0f:75:0a:f7:0f:b4:40:6a:b4:9f:5d:ca:1d:ab: d6:c9:1f:6a:87:e3:5f:d7:b1:3b:e3:8c:1e:a6:94: 53:0a:5f:55:32:e6:db:aa:9d:fb:60:b8:73:a3:0c: 89:32:e5:23:6a:0c:c4:0b:05:4e:28:2c:cd:c1:31: 7d:c1:99:09:b1:d0:b6:15:b4:65:92:ec:4e:66:e1: 8c:2f:cd:05:8d:41:c1:2d:a1:dd:66:2a:73:c6:1b: 2a:1f:9a:58:87:c6:0a:77:dc:06:ac:e2:02:58:64: 10:94:24:44:e1:d6:39:57:69:c3:f8:83:a4:5c:51: 78:1a:75:96:fd:e9:b5:83:c5:4a:84:4a:80:21:b9: 4b:0b:b1:7b:e7:87:f8:8f:0f:eb:65:34:11:c6:d8: cb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4F:36:40:C9:84:FB:B1:9A:7F:A1:88:1B:9F:EA:79:DB:8A:0A:FB X509v3 Authority Key Identifier: keyid:8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d8:45:93:c7:ef:d8:98:dc:34:3b:a6:fa:00:f2:f6:31:86: 6f:8c:9d:f6:e0:e7:d5:4f:a6:61:f8:00:e2:c8:9c:ef:f3:be: b0:82:23:2e:12:bd:ac:2d:77:8f:13:9e:c2:dd:d5:c6:9b:15: 0b:c1:16:a5:8c:db:d0:cb:e8:71:06:07:65:49:b4:6c:08:f4: d5:51:2e:94:13:08:7e:b5:f6:be:b3:db:e6:4b:bb:37:a9:c3: 8f:39:dd:3c:f2:12:cf:31:c8:f7:47:46:f0:35:6d:57:e3:be: a7:5d:34:33:f7:7a:21:25:3d:f7:d5:9b:50:82:d1:45:c6:dc: d4:91:dd:81:30:97:b4:71:50:74:fd:1f:08:27:88:5e:e4:12: 28:bb:c4:ba:a6:14:36:a6:b3:4f:86:6e:2c:df:16:47:c4:8c: 2f:4e:de:00:cf:ce:60:65:d4:df:02:bc:50:ff:0c:db:8e:29: 9c:bc:6d:45:9e:0e:1e:41:c2:74:dd:23:e3:a8:ce:bb:b0:f0: 88:d1:08:30:87:e6:6c:1c:49:7f:ba:80:fd:31:95:04:c7:17: e6:00:56:0e:b7:14:4a:0d:e5:e1:ff:85:0a:ea:15:99:66:a4: e1:0f:30:4c:a2:40:4e:17:f4:2b:94:2e:2f:3d:7c:99:6c:4b: f4:8a:e6:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzSwdhs6R/TTfUIQBHzl9jwPfgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4RkRF RTcxRDE0NDAeFw0yNjA5MjQwODQxMzdaFw0yNjA5MjUxMjMzMzdaMDMxMTAvBgNV BAMTKDIxNEYzNjQwQzk4NEZCQjE5QTdGQTE4ODFCOUZFQTc5REI4QTBBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZspXeT7qbE1KgkaULqn86Vfw6 h2DjPNUiJjgyLMJiKEc1uTo0YNmY4cgctS7IepoUn+lsqWhcpD7+OTOr2nFvGgin AHD9wA5gpA/2AIIHgJdTRMb1cW9u05XQdNTmBkvkSMDjfMk+Ea0PdQr3D7RAarSf Xcodq9bJH2qH41/XsTvjjB6mlFMKX1Uy5tuqnftguHOjDIky5SNqDMQLBU4oLM3B MX3BmQmx0LYVtGWS7E5m4YwvzQWNQcEtod1mKnPGGyofmliHxgp33Aas4gJYZBCU JETh1jlXacP4g6RcUXgadZb96bWDxUqESoAhuUsLsXvnh/iPD+tlNBHG2MstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIU82QMmE+7Gaf6GIG5/qeduKCvswHwYDVR0j BBgwFoAUjdcQU032iqsINh7igwa4/e5x0UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjcyNGU0NWItMjU0Yi00ZmViLWJmOGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0 REY2OEFBQjA4MzYxRUUyODMwNkI4RkRFRTcxRDE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84REQ3MTA1MzRERjY4QUFCMDgzNjFFRTI4MzA2QjhGREVFNzFE MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4 RkRFRTcxRDE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrYRZPH79iY3DQ7pvoA8vYxhm+Mnfbg59VP pmH4AOLInO/zvrCCIy4Svawtd48TnsLd1cabFQvBFqWM29DL6HEGB2VJtGwI9NVR LpQTCH619r6z2+ZLuzepw4853TzyEs8xyPdHRvA1bVfjvqddNDP3eiElPffVm1CC 0UXG3NSR3YEwl7RxUHT9HwgniF7kEii7xLqmFDams0+GbizfFkfEjC9O3gDPzmBl 1N8CvFD/DNuOKZy8bUWeDh5BwnTdI+Oozruw8IjRCDCH5mwcSX+6gP0xlQTHF+YA Vg63FEoN5eH/hQrqFZlmpOEPMEyiQE4X9CuULi89fJlsS/SK5uA= -----END CERTIFICATE-----Generated at Thu Sep 24 15:55:01 2026 by rpki-client