$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft File: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft (raw, json) Hash identifier: y15AA2YURm+2VDla/g+4XhFFyLl+pX3PRStc3h5BkoY= Subject key identifier: A4:71:92:AD:9C:E6:D0:A7:BD:66:D4:FB:04:B8:5D:FB:EA:1A:6E:3E Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 3AB1AADDF23270C4D79ADFD1DA3880635F74D12B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 19:19:27 +0000 Manifest this update: Fri 25 Sep 2026 19:14:27 +0000 Manifest next update: Sat 26 Sep 2026 20:48:27 +0000 Files and hashes: 1: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: FdEj2/miSrHrif/CfoOvLE1OV+PuSrA43YH+LmHuPRM=) 2: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: icfsfhUwquzTy2StQKBYwmmyOmAVCsssAYK5CyA5iDI=) 3: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=) 4: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl (hash: jjzE+bJhL+MaSX4g0faq1aJ+Q589WGKtAomWZN6npVM=) 5: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: JuQ4cvsB/3E/np6OBFHLGq+Nt4mQQ/GxzLV4MrmhfZo=) 6: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk=) 7: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 0WsKsDzY8LPfrJ1pgXZgjbVmTWXixBFTK8YpHb3DNxU=) 8: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: rkn+DI7lNxqSqCTlwACNzV0qOshNnDXKFLIZsdocYhE=) 9: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b1:aa:dd:f2:32:70:c4:d7:9a:df:d1:da:38:80:63:5f:74:d1:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: Sep 25 19:14:27 2026 GMT Not After : Sep 26 20:48:27 2026 GMT Subject: CN=A47192AD9CE6D0A7BD66D4FB04B85DFBEA1A6E3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:d5:f8:07:f5:14:f7:1c:21:2f:ba:5e:07: 58:6b:76:3a:98:c0:ed:46:02:14:41:4c:d7:b1:94: 52:0e:f2:e6:c3:a1:02:c3:61:2f:b7:12:9d:bc:02: ef:8a:4e:0f:8c:d8:da:29:f2:88:2d:4a:35:71:34: 96:a2:f2:10:b2:8f:6c:6d:ed:6f:6c:ed:97:e2:c2: 1a:e8:fa:6d:e7:9b:44:68:b6:d8:17:77:97:a7:c4: 1a:49:04:b5:d6:bb:b2:67:a8:df:44:74:1a:3b:d2: d3:c6:d1:ed:0f:3c:f2:3d:bd:f9:e6:3b:fa:a6:4b: 0f:19:72:50:a7:76:ac:64:4d:28:48:6c:1f:68:f7: 0e:c7:20:3e:f3:51:df:f1:3b:a6:f9:ef:20:5a:0b: 57:dc:26:a0:dd:b2:89:d2:52:e6:d7:79:26:fb:fc: be:b9:74:2d:e2:38:b9:2b:3c:8c:58:f8:74:83:df: d9:f4:fc:12:43:41:53:58:f8:59:91:83:ef:54:54: 87:31:f8:35:4e:ee:41:c9:7c:e3:11:30:58:fb:0b: cb:06:9b:53:87:8b:ff:93:0e:68:4d:de:ce:ff:18: 18:12:aa:c8:c2:58:7b:99:c4:3d:ca:16:e3:c5:55: 13:b4:04:da:05:e4:69:e6:15:b5:06:48:6e:07:8b: a1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:71:92:AD:9C:E6:D0:A7:BD:66:D4:FB:04:B8:5D:FB:EA:1A:6E:3E X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:87:07:b5:fc:6a:61:bc:c4:8e:59:e0:54:40:69:b7:6f:6d: c5:31:af:8f:f5:57:af:3f:19:9f:51:c1:c6:bf:1d:6a:44:3f: 17:15:2b:4f:00:43:4e:c3:99:ee:20:76:f5:d0:fd:f9:e9:9f: e7:db:33:6b:5a:d1:db:3b:e2:a8:c2:36:7f:71:79:7c:88:d1: 08:89:cd:77:84:7f:e1:e2:6a:17:a2:16:c6:78:8c:d4:ee:ee: 2d:da:a1:69:9c:9f:9d:27:31:b5:9b:33:d5:87:bb:fc:87:b0: 9c:2d:b3:2c:db:aa:3f:2a:8e:9a:ff:65:0e:6f:da:db:31:a0: a2:69:6a:02:8f:1f:a3:99:e5:c7:9e:ca:96:17:b9:06:a2:ad: e2:1b:1e:5e:68:83:03:53:d5:30:f6:1d:ad:75:7f:86:f3:f9: 7a:78:50:3a:12:3f:a5:c9:2d:58:1f:86:75:d1:78:01:bd:90: 25:ce:f3:32:29:10:d9:10:a6:89:4a:45:09:2b:2e:1e:19:0c: 87:38:6e:f3:27:7b:21:59:7d:28:64:4c:15:8c:1a:f9:f0:37: 42:26:27:55:4b:46:b9:c4:b0:b3:e7:44:61:cc:9b:9f:ed:85: 81:e6:16:72:b2:90:54:f5:25:45:1a:1a:51:13:e7:b4:94:4a: 62:51:92:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrGq3fIycMTXmt/R2jiAY1900SswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjA5MjUxOTE0MjdaFw0yNjA5MjYyMDQ4MjdaMDMxMTAvBgNV BAMTKEE0NzE5MkFEOUNFNkQwQTdCRDY2RDRGQjA0Qjg1REZCRUExQTZFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzp9X4B/UU9xwhL7peB1hrdjqY wO1GAhRBTNexlFIO8ubDoQLDYS+3Ep28Au+KTg+M2Nop8ogtSjVxNJai8hCyj2xt 7W9s7Zfiwhro+m3nm0RottgXd5enxBpJBLXWu7JnqN9EdBo70tPG0e0PPPI9vfnm O/qmSw8ZclCndqxkTShIbB9o9w7HID7zUd/xO6b57yBaC1fcJqDdsonSUubXeSb7 /L65dC3iOLkrPIxY+HSD39n0/BJDQVNY+FmRg+9UVIcx+DVO7kHJfOMRMFj7C8sG m1OHi/+TDmhN3s7/GBgSqsjCWHuZxD3KFuPFVRO0BNoF5GnmFbUGSG4Hi6ErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHGSrZzm0Ke9ZtT7BLhd++oabj4wHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUw NDI0RThDRUM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6HB7X8amG8xI5Z4FRAabdvbcUxr4/1V68/ GZ9Rwca/HWpEPxcVK08AQ07Dme4gdvXQ/fnpn+fbM2ta0ds74qjCNn9xeXyI0QiJ zXeEf+HiaheiFsZ4jNTu7i3aoWmcn50nMbWbM9WHu/yHsJwtsyzbqj8qjpr/ZQ5v 2tsxoKJpagKPH6OZ5ceeypYXuQaireIbHl5ogwNT1TD2Ha11f4bz+Xp4UDoSP6XJ LVgfhnXReAG9kCXO8zIpENkQpolKRQkrLh4ZDIc4bvMneyFZfShkTBWMGvnwN0Im J1VLRrnEsLPnRGHMm5/thYHmFnKykFT1JUUaGlET57SUSmJRkhk= -----END CERTIFICATE-----Generated at Sat Sep 26 03:09:10 2026 by rpki-client