$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft File: 8638D28E3BD2280125963C7B30C34A226398A39F.mft (raw, json) Hash identifier: tj5PiS+TwHl6+hlVN3UPeIj+ReJ/hfpzJVLgdNXS1d4= Subject key identifier: 13:46:4B:CE:48:40:E9:F5:C0:B4:61:32:3E:E8:1F:97:47:2E:1A:84 Authority key identifier: 86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F Certificate issuer: /CN=8638D28E3BD2280125963C7B30C34A226398A39F Certificate serial: 7E5F8E2B4FECD57D2809212BA760D03FA862F74D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 20:09:58 +0000 Manifest this update: Sat 26 Sep 2026 20:04:58 +0000 Manifest next update: Sun 27 Sep 2026 22:14:58 +0000 Files and hashes: 1: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: K8RuD4iVWNDoq5/nKnK+l+BvrNOPQLNp6COtNPtCMfY=) 2: 8638D28E3BD2280125963C7B30C34A226398A39F.crl (hash: dY71LKlzAUubDh4hBfxx7XkF6N21NlqKN4M0X/C894w=) 3: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: 7CUUFxXBF00bkdoTMxFKQ2ao9fNDKa33JZ3nwQoI/v0=) 4: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 9/PIsC2XMlKZxB7OIm0Zr26jWW2WY5JodvXs3A+orYA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5f:8e:2b:4f:ec:d5:7d:28:09:21:2b:a7:60:d0:3f:a8:62:f7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8638D28E3BD2280125963C7B30C34A226398A39F Validity Not Before: Sep 26 20:04:58 2026 GMT Not After : Sep 27 22:14:58 2026 GMT Subject: CN=13464BCE4840E9F5C0B461323EE81F97472E1A84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:5b:21:39:99:b4:c9:3d:be:b1:46:78:01: fc:0a:52:db:e6:4c:33:a0:62:05:0d:ae:55:c4:89: 29:b3:34:54:fe:1e:16:8c:d8:df:45:b4:52:19:01: 33:d6:c9:f7:27:13:23:4b:6d:c4:b6:95:8d:c3:4c: 88:ef:90:11:0f:92:09:75:be:a7:22:00:bc:49:eb: 73:c4:ec:05:e6:48:3c:67:37:40:5d:b0:43:1c:08: 00:4e:b6:9d:e0:0d:8c:eb:1b:3d:5b:00:56:9e:99: bd:50:d7:6e:75:d6:9c:a5:5d:0b:f8:95:27:9a:1f: cc:3c:88:fa:47:e8:41:62:14:1e:2d:3e:e2:d5:8e: b7:9c:f8:b0:b4:29:8c:31:9f:41:11:80:9a:9f:64: 5e:39:b0:78:a1:2b:c1:65:a5:15:5c:9d:6e:e7:3f: 21:fb:dd:3b:f7:29:cb:79:c7:6b:7c:49:92:ab:33: 45:00:84:ae:2b:17:5b:89:2d:f4:24:b9:08:53:ef: 8d:f3:a0:d5:ad:76:2d:98:21:06:20:2f:32:57:e2: f2:18:38:af:51:c0:16:23:2b:d7:fa:93:fd:09:d5: 40:d7:9e:36:6b:2f:d5:3b:a9:41:93:2b:ee:24:7e: a3:2f:d7:fa:a6:63:2c:57:4c:06:5b:f9:b4:a3:69: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:46:4B:CE:48:40:E9:F5:C0:B4:61:32:3E:E8:1F:97:47:2E:1A:84 X509v3 Authority Key Identifier: keyid:86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ab:33:21:f2:64:ba:d9:e4:13:e6:0b:11:71:07:cf:38:d1: e7:20:f3:46:9d:8c:2b:53:cb:d7:38:0f:db:05:bc:85:6a:4e: 32:05:e9:2c:2f:bd:46:f0:51:11:ef:31:60:e0:db:75:75:49: 07:51:90:cb:38:75:fa:e1:ca:00:7d:1f:56:79:f5:db:d6:e9: 67:6e:ba:45:b4:c5:18:69:b2:71:19:47:d1:19:1b:9f:b8:fc: e8:c9:ae:e8:24:50:f9:6e:a5:36:12:e4:75:73:26:4f:d8:50: 6a:cf:58:44:3e:cf:37:31:fb:9e:e0:ca:61:79:75:44:25:3b: 87:87:8d:8c:39:7c:2c:56:dd:3b:62:f9:fc:d3:d1:6d:24:fc: eb:44:ed:f6:c2:64:9b:72:2e:71:d3:e4:49:c3:db:ef:53:69: 1c:7b:e1:a6:ad:f0:fe:7d:d0:f5:6f:62:9f:f9:8b:42:0d:c9: f5:e1:32:84:39:2f:d3:44:b8:45:43:23:26:28:34:a0:db:b7: 8d:3b:a1:60:a9:6a:e1:2f:19:3e:ea:3f:8f:72:ff:b3:c9:9a: 29:cf:ce:fe:33:c8:b1:13:58:0f:9f:ca:ec:f2:b6:2a:4c:2a: 47:5f:95:9a:4c:16:c1:78:d6:00:b0:48:39:57:a0:5e:58:6a: 7e:3d:1c:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfl+OK0/s1X0oCSErp2DQP6hi900wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2 Mzk4QTM5RjAeFw0yNjA5MjYyMDA0NThaFw0yNjA5MjcyMjE0NThaMDMxMTAvBgNV BAMTKDEzNDY0QkNFNDg0MEU5RjVDMEI0NjEzMjNFRTgxRjk3NDcyRTFBODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr31shOZm0yT2+sUZ4AfwKUtvm TDOgYgUNrlXEiSmzNFT+HhaM2N9FtFIZATPWyfcnEyNLbcS2lY3DTIjvkBEPkgl1 vqciALxJ63PE7AXmSDxnN0BdsEMcCABOtp3gDYzrGz1bAFaemb1Q12511pylXQv4 lSeaH8w8iPpH6EFiFB4tPuLVjrec+LC0KYwxn0ERgJqfZF45sHihK8FlpRVcnW7n PyH73Tv3Kct5x2t8SZKrM0UAhK4rF1uJLfQkuQhT743zoNWtdi2YIQYgLzJX4vIY OK9RwBYjK9f6k/0J1UDXnjZrL9U7qUGTK+4kfqMv1/qmYyxXTAZb+bSjaU3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE0ZLzkhA6fXAtGEyPugfl0cuGoQwHwYDVR0j BBgwFoAUhjjSjjvSKAElljx7MMNKImOYo58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdmZjAxZDAtMjZmOS00YjIwLWEzMTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUz QkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2Mzk4QTM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjM4RDI4RTNCRDIyODAxMjU5NjNDN0IzMEMzNEEyMjYzOThB MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRB MjI2Mzk4QTM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmrMyHyZLrZ5BPmCxFxB8840ecg80adjCtT y9c4D9sFvIVqTjIF6SwvvUbwURHvMWDg23V1SQdRkMs4dfrhygB9H1Z59dvW6Wdu ukW0xRhpsnEZR9EZG5+4/OjJrugkUPlupTYS5HVzJk/YUGrPWEQ+zzcx+57gymF5 dUQlO4eHjYw5fCxW3Tti+fzT0W0k/OtE7fbCZJtyLnHT5EnD2+9TaRx74aat8P59 0PVvYp/5i0INyfXhMoQ5L9NEuEVDIyYoNKDbt407oWCpauEvGT7qP49y/7PJminP zv4zyLETWA+fyuzytipMKkdflZpMFsF41gCwSDlXoF5Yan49HP8= -----END CERTIFICATE-----Generated at Sun Sep 27 12:33:09 2026 by rpki-client