$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft File: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft (raw, json) Hash identifier: BVF7SD202nGvMmmiABeWRTN9MEknyHIWus5dHBsItJA= Subject key identifier: 12:C5:70:2F:6D:DB:32:99:BC:19:00:F3:5C:4D:AB:71:39:27:D3:B2 Authority key identifier: 8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 Certificate issuer: /CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Certificate serial: 66D2740A9C165D0F9EAAF866609F675C3D3E2FCA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:30:18 +0000 Manifest this update: Wed 23 Sep 2026 11:25:18 +0000 Manifest next update: Thu 24 Sep 2026 14:22:18 +0000 Files and hashes: 1: 3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa (hash: gMfUFYSPdVxpBBuGIFKR77copbFj1wN/NAnjtAfZ1Zo=) 2: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl (hash: Umf4vlUbci6UR0njio2DypNfHo5ToujaEpYSyMtBF0g=) 3: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 0ts/w6oKmrt+r0C8EDap/FK5Uc/o23APxLZIMW88Oo4=) 4: 3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa (hash: C1r63J+tGfKPbhbl/dI9G1bDePtMsBvnKWbTmvbk0OA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d2:74:0a:9c:16:5d:0f:9e:aa:f8:66:60:9f:67:5c:3d:3e:2f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Validity Not Before: Sep 23 11:25:18 2026 GMT Not After : Sep 24 14:22:18 2026 GMT Subject: CN=12C5702F6DDB3299BC1900F35C4DAB713927D3B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:18:c4:f3:6f:83:b4:62:7b:b4:66:2c:47: a3:f6:6f:80:ce:3a:4d:54:01:7a:80:51:60:b1:e1: b0:79:9c:5a:17:05:f2:70:ff:4d:50:d5:be:c6:5d: 7d:85:7e:ce:38:4c:ad:1a:ad:44:fd:84:24:13:e2: ce:78:c5:c3:b8:86:ca:94:24:76:07:c0:4b:85:26: d8:81:b3:06:97:60:90:02:e4:01:86:62:9b:7d:cc: fd:cb:03:01:a2:3a:3b:53:d2:11:39:f4:d0:c2:23: 98:75:b0:00:6a:a5:82:8d:17:0c:05:33:1b:89:51: 15:10:aa:b0:6a:10:1b:ed:e4:e9:ff:4f:bb:91:18: e3:79:91:87:4e:ba:d7:f3:65:2c:11:41:c8:07:0f: 0c:fb:04:e7:7d:0e:3c:38:41:3b:11:4a:df:97:81: af:db:d2:9c:ba:ff:f8:ab:e6:dd:4f:9a:58:68:dd: b0:2f:80:c7:c7:d8:42:7e:50:e9:0b:36:90:bf:34: aa:23:31:cd:66:65:d9:af:e1:27:42:52:ea:32:b7: 03:54:40:e1:a6:5c:ce:c5:84:64:ac:9a:1c:fa:ab: b2:d4:df:80:86:f2:10:5e:51:ee:1e:61:4d:06:d1: 31:0c:9f:31:03:2e:4b:82:67:1b:12:8d:41:e8:1b: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C5:70:2F:6D:DB:32:99:BC:19:00:F3:5C:4D:AB:71:39:27:D3:B2 X509v3 Authority Key Identifier: keyid:8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:d7:8b:66:cc:b4:32:89:02:42:cb:15:07:87:47:c9:be:92: 1b:54:92:fa:69:c0:4e:81:0b:4b:08:14:f9:cb:5b:cf:9d:b8: 21:d9:c3:8b:a7:08:d7:1e:ae:57:dd:45:aa:f3:56:ca:4e:d2: 54:6d:a9:a7:c9:dd:bb:c7:52:3c:37:c3:52:9e:98:d5:1c:3c: 43:d7:af:7c:71:7b:91:58:96:fc:37:ae:75:fa:55:27:b4:26: b2:45:f9:27:e2:6a:76:78:6e:5c:d0:66:f0:46:bf:2a:13:32: 1c:87:5f:79:f7:d5:7a:11:27:28:61:d5:75:7b:fe:f7:82:fb: 4b:46:b2:ef:b8:6b:86:2a:41:52:d5:a7:42:08:70:76:f0:9d: 2a:6c:4b:05:ad:2d:7a:c4:ba:b5:81:dc:3c:e0:3d:19:56:5c: b1:ad:5b:68:3c:63:6b:12:bd:7b:ee:23:ee:a2:8f:9d:e1:ae: 0c:91:f8:11:11:9d:e6:ff:0c:b7:25:34:2b:3e:e8:7b:a8:f7: 73:15:71:37:62:2e:4a:77:b5:eb:d9:ee:37:70:e6:9b:b7:bb: 84:73:6e:77:86:65:0f:ac:4a:d8:71:25:21:30:76:57:08:f7: 39:86:5d:65:2b:08:a7:6b:ff:ad:13:b0:61:ea:a9:56:40:44: 4b:bb:1a:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtJ0CpwWXQ+eqvhmYJ9nXD0+L8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFCRDQ1NThDOUY5NEZGQzY3MEE1MkRCMzlGMEM5QjBC ODM5ODIyNTAeFw0yNjA5MjMxMTI1MThaFw0yNjA5MjQxNDIyMThaMDMxMTAvBgNV BAMTKDEyQzU3MDJGNkREQjMyOTlCQzE5MDBGMzVDNERBQjcxMzkyN0QzQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5xjE82+DtGJ7tGYsR6P2b4DO Ok1UAXqAUWCx4bB5nFoXBfJw/01Q1b7GXX2Ffs44TK0arUT9hCQT4s54xcO4hsqU JHYHwEuFJtiBswaXYJAC5AGGYpt9zP3LAwGiOjtT0hE59NDCI5h1sABqpYKNFwwF MxuJURUQqrBqEBvt5On/T7uRGON5kYdOutfzZSwRQcgHDwz7BOd9Djw4QTsRSt+X ga/b0py6//ir5t1Pmlho3bAvgMfH2EJ+UOkLNpC/NKojMc1mZdmv4SdCUuoytwNU QOGmXM7FhGSsmhz6q7LU34CG8hBeUe4eYU0G0TEMnzEDLkuCZxsSjUHoG87NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEsVwL23bMpm8GQDzXE2rcTkn07IwHwYDVR0j BBgwFoAUir1FWMn5T/xnClLbOfDJsLg5giUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM4N2U4NWQtYjE4NS00MzM0LTgwMWItNDljOGM4YjkxODQ0LzAvOEFCRDQ1NThD OUY5NEZGQzY3MEE1MkRCMzlGMEM5QjBCODM5ODIyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUJENDU1OEM5Rjk0RkZDNjcwQTUyREIzOUYwQzlCMEI4Mzk4 MjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvOEFCRDQ1NThDOUY5NEZGQzY3MEE1MkRCMzlGMEM5 QjBCODM5ODIyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALjXi2bMtDKJAkLLFQeHR8m+khtUkvppwE6B C0sIFPnLW8+duCHZw4unCNcerlfdRarzVspO0lRtqafJ3bvHUjw3w1KemNUcPEPX r3xxe5FYlvw3rnX6VSe0JrJF+SfianZ4blzQZvBGvyoTMhyHX3n31XoRJyhh1XV7 /veC+0tGsu+4a4YqQVLVp0IIcHbwnSpsSwWtLXrEurWB3DzgPRlWXLGtW2g8Y2sS vXvuI+6ij53hrgyR+BERneb/DLclNCs+6Huo93MVcTdiLkp3tevZ7jdw5pu3u4Rz bneGZQ+sSthxJSEwdlcI9zmGXWUrCKdr/60TsGHqqVZAREu7Gsg= -----END CERTIFICATE-----Generated at Thu Sep 24 03:41:06 2026 by rpki-client