$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft File: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft (raw, json) Hash identifier: 9wZqKUo4MCc+5soh6uE22Xl5Mt2IEgButi7aYWEBNnM= Subject key identifier: 36:63:21:78:A2:D9:4F:25:2C:FD:F0:DB:C8:08:11:8C:4F:74:81:71 Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 2B3F059052F3246E5CD88A2B01BAA052E10CAA0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 14:54:34 +0000 Manifest this update: Wed 23 Sep 2026 14:49:34 +0000 Manifest next update: Thu 24 Sep 2026 16:52:34 +0000 Files and hashes: 1: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: FdEj2/miSrHrif/CfoOvLE1OV+PuSrA43YH+LmHuPRM=) 2: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 0WsKsDzY8LPfrJ1pgXZgjbVmTWXixBFTK8YpHb3DNxU=) 3: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl (hash: pltnYZop48FNxRLoY1kKr63U7HnS5SdeO9ytSCfu208=) 4: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: rkn+DI7lNxqSqCTlwACNzV0qOshNnDXKFLIZsdocYhE=) 5: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: JuQ4cvsB/3E/np6OBFHLGq+Nt4mQQ/GxzLV4MrmhfZo=) 6: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=) 7: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E=) 8: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: icfsfhUwquzTy2StQKBYwmmyOmAVCsssAYK5CyA5iDI=) 9: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3f:05:90:52:f3:24:6e:5c:d8:8a:2b:01:ba:a0:52:e1:0c:aa:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: Sep 23 14:49:34 2026 GMT Not After : Sep 24 16:52:34 2026 GMT Subject: CN=36632178A2D94F252CFDF0DBC808118C4F748171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:32:2b:5c:6c:5c:04:a1:9a:56:e7:a4:98: 2a:92:b5:50:03:05:aa:25:76:2e:07:55:7d:d5:20: 1b:86:72:47:0c:6a:40:6a:45:b3:94:d5:34:73:fa: 76:e4:79:43:39:7a:06:5c:6d:a4:54:85:8a:df:ab: b5:61:77:50:7f:3d:9e:f1:f8:d6:cb:ef:24:a0:aa: 80:2e:c8:ea:50:9d:09:8c:a6:e7:4d:8a:48:a2:c1: 55:8c:00:28:63:4a:05:a3:4f:1b:58:a0:66:43:3f: 6a:b3:e4:78:da:92:d6:35:69:0d:1b:85:89:44:97: de:a6:bf:0b:71:91:30:51:48:a7:b2:f0:d1:32:e4: cf:45:73:d5:86:4d:d2:93:f5:f0:fa:3d:0a:7e:71: d4:ba:11:db:38:37:23:23:8e:40:10:04:e6:15:99: cf:58:4e:a2:fd:91:0d:a1:ed:70:06:c4:fd:36:76: 69:95:39:c2:ab:f1:d5:9b:3a:ef:ef:49:18:e9:6d: f0:45:85:90:58:b9:82:05:8b:33:01:b6:74:3a:6a: 2f:80:3d:f7:b1:98:53:a9:ea:5c:0a:27:29:ed:d4: eb:98:2e:12:08:83:e5:ed:ed:89:8f:a1:93:10:4e: 06:ce:f4:0a:d8:2c:f0:98:52:e8:9d:0a:87:5b:e1: b9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:63:21:78:A2:D9:4F:25:2C:FD:F0:DB:C8:08:11:8C:4F:74:81:71 X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:4e:88:69:b7:99:15:13:4c:28:4d:5e:c0:ab:86:ae:44:7b: 66:35:b5:dd:46:ab:be:23:42:69:62:92:98:ab:fb:60:37:52: 24:e2:9c:ca:ca:73:3f:84:d9:84:81:4b:85:e6:1c:fe:b8:16: 93:93:f8:52:91:14:82:95:cb:1d:d5:11:57:e4:94:d3:a5:6b: df:b2:57:d7:7e:1a:19:b7:82:39:0e:2d:4f:ff:d7:70:42:49: 01:1e:2e:48:c2:ff:f9:26:76:97:d8:52:a4:8d:2d:34:d3:53: 16:62:59:8b:a2:a2:55:49:8c:d0:20:fd:b9:e6:b4:b4:43:10: cd:c7:29:84:12:e7:ba:16:42:9f:75:5e:3a:a8:40:86:bc:b6: a3:34:2c:6f:37:34:a8:9a:69:f2:8e:df:c3:22:ba:80:49:53: 11:16:7a:8f:a3:bd:fe:e7:01:a0:74:ec:fe:5f:02:3a:4d:ab: 71:89:d9:5c:56:89:90:28:0c:6f:af:20:12:a8:81:63:ac:09: 60:f0:87:ae:06:9a:de:4f:bb:dd:be:68:b5:55:b8:11:47:d0: 56:09:a3:c3:5f:46:fb:72:71:a4:2c:fc:51:54:30:37:64:1d: 7a:cf:9d:92:1e:ec:99:57:02:ce:87:e6:49:9f:46:ac:f9:c3: 1e:a2:5f:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKz8FkFLzJG5c2IorAbqgUuEMqgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjA5MjMxNDQ5MzRaFw0yNjA5MjQxNjUyMzRaMDMxMTAvBgNV BAMTKDM2NjMyMTc4QTJEOTRGMjUyQ0ZERjBEQkM4MDgxMThDNEY3NDgxNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtlDIrXGxcBKGaVuekmCqStVAD Baoldi4HVX3VIBuGckcMakBqRbOU1TRz+nbkeUM5egZcbaRUhYrfq7Vhd1B/PZ7x +NbL7ySgqoAuyOpQnQmMpudNikiiwVWMAChjSgWjTxtYoGZDP2qz5HjaktY1aQ0b hYlEl96mvwtxkTBRSKey8NEy5M9Fc9WGTdKT9fD6PQp+cdS6Eds4NyMjjkAQBOYV mc9YTqL9kQ2h7XAGxP02dmmVOcKr8dWbOu/vSRjpbfBFhZBYuYIFizMBtnQ6ai+A PfexmFOp6lwKJynt1OuYLhIIg+Xt7YmPoZMQTgbO9ArYLPCYUuidCodb4bmjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNmMheKLZTyUs/fDbyAgRjE90gXEwHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUw NDI0RThDRUM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9OiGm3mRUTTChNXsCrhq5Ee2Y1td1Gq74j Qmlikpir+2A3UiTinMrKcz+E2YSBS4XmHP64FpOT+FKRFIKVyx3VEVfklNOla9+y V9d+Ghm3gjkOLU//13BCSQEeLkjC//kmdpfYUqSNLTTTUxZiWYuiolVJjNAg/bnm tLRDEM3HKYQS57oWQp91XjqoQIa8tqM0LG83NKiaafKO38MiuoBJUxEWeo+jvf7n AaB07P5fAjpNq3GJ2VxWiZAoDG+vIBKogWOsCWDwh64Gmt5Pu92+aLVVuBFH0FYJ o8NfRvtycaQs/FFUMDdkHXrPnZIe7JlXAs6H5kmfRqz5wx6iX1g= -----END CERTIFICATE-----Generated at Thu Sep 24 08:57:10 2026 by rpki-client