$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft File: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft (raw, json) Hash identifier: fACUhBEToyzz9SlfhZt75Rn9L2G8QaPFawI8ITCyuY4= Subject key identifier: AE:8C:A6:AF:F4:43:1B:80:78:96:18:48:76:3B:C8:60:E2:D5:33:98 Authority key identifier: B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 Certificate issuer: /CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Certificate serial: 663C6C70978795B776667ED06277D80F76A6B74B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 18:28:51 +0000 Manifest this update: Wed 23 Sep 2026 18:23:51 +0000 Manifest next update: Thu 24 Sep 2026 21:41:51 +0000 Files and hashes: 1: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: g5c7Nq+6t4kiF6CKiothKoqaQ8v25zT/n7Wj9Q/sxEQ=) 2: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl (hash: wks9meFPr3n5e0tGiQ7CTMMGQVS25tyalsutlbKHnlc=) 3: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: 9VWfd5KMgyw5xyqB55UR/HJrZNws4qzcvTj6ecqQ/Qk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3c:6c:70:97:87:95:b7:76:66:7e:d0:62:77:d8:0f:76:a6:b7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Validity Not Before: Sep 23 18:23:51 2026 GMT Not After : Sep 24 21:41:51 2026 GMT Subject: CN=AE8CA6AFF4431B8078961848763BC860E2D53398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:c2:bf:f7:f4:ce:54:d8:21:e5:34:86:23: 85:54:b1:b0:90:99:a3:d6:04:ef:e6:2e:65:64:a6: 0e:23:df:ac:df:1b:0a:53:b8:49:9d:8a:21:08:45: ef:3d:2e:90:53:24:14:76:e5:54:97:d5:03:57:87: fe:52:38:1c:69:a9:e7:f5:c7:3f:56:47:40:5d:8f: c1:37:03:18:09:1e:a5:81:8b:da:77:69:01:f1:92: 45:a9:a9:f1:2e:31:f7:90:33:44:2a:a8:2f:f2:57: 07:ad:05:f7:09:c1:4f:29:67:ac:60:d0:95:00:7e: 47:4d:c2:18:0e:92:cc:9e:04:68:f8:df:ea:c3:c2: 09:9d:05:93:21:22:ba:2d:d2:8d:dc:cb:28:ee:a6: 3b:9e:f5:a2:7d:8c:fd:b8:31:44:9d:15:1a:30:f2: 6a:e4:23:7c:00:a1:82:36:4c:e3:11:db:01:a2:46: a3:a7:38:e3:0e:1d:0b:2f:a6:a4:2c:a2:3e:ff:5c: f0:96:ba:35:ec:62:be:19:11:7c:c9:17:ff:41:87: 48:c0:d2:9a:36:a2:11:9b:b3:41:4f:70:35:82:94: ff:4e:45:f9:28:46:60:de:bb:f1:31:4c:5b:df:33: 68:f2:b3:73:11:0e:3e:2d:30:e8:2c:5e:4b:33:2c: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8C:A6:AF:F4:43:1B:80:78:96:18:48:76:3B:C8:60:E2:D5:33:98 X509v3 Authority Key Identifier: keyid:B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:bf:a1:16:9b:3e:66:c7:f6:87:88:f1:6e:db:a3:03:bb:85: fd:78:a0:b1:e2:45:7a:3e:61:ea:8a:c4:3d:9e:ea:9c:05:8d: 71:96:3a:cb:c8:53:ef:d4:17:6b:5a:54:7d:09:73:6d:23:42: 35:f6:39:8e:26:23:e0:df:b8:a2:59:36:42:f8:96:63:4f:e5: a4:6b:08:87:6a:91:88:1e:e8:2a:90:27:ef:e2:5f:e2:1f:d5: a6:cb:6f:be:59:3a:39:f7:68:76:f9:5e:d9:1e:36:2e:d8:e2: 42:f5:5d:d4:9a:0d:03:ef:47:d5:be:8e:68:ba:27:95:ce:b4: 73:11:b8:07:91:09:c1:b3:f6:79:03:82:92:ae:c5:a0:ff:12: e0:f7:3c:82:db:8b:ff:fb:09:6e:9f:29:4a:d9:61:d4:32:36: 67:0c:96:91:f8:75:ab:f4:e9:df:71:76:9b:48:b7:0a:df:02: 2f:03:d3:02:4f:1d:5f:ed:ce:72:59:ac:63:59:4b:ff:41:c4: 95:cd:4b:02:e9:62:7e:ab:8d:30:8b:34:71:39:9f:72:65:ac: 6b:c3:ff:0d:40:11:d2:0e:ed:43:65:19:96:83:04:b5:d0:51: 4a:e4:95:c6:7f:fe:49:9d:aa:5f:98:47:37:c1:cb:fd:8b:fa: 8a:6a:ec:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjxscJeHlbd2Zn7QYnfYD3amt0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzExMUJB QjcwOTQwNjAeFw0yNjA5MjMxODIzNTFaFw0yNjA5MjQyMTQxNTFaMDMxMTAvBgNV BAMTKEFFOENBNkFGRjQ0MzFCODA3ODk2MTg0ODc2M0JDODYwRTJENTMzOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwMK/9/TOVNgh5TSGI4VUsbCQ maPWBO/mLmVkpg4j36zfGwpTuEmdiiEIRe89LpBTJBR25VSX1QNXh/5SOBxpqef1 xz9WR0Bdj8E3AxgJHqWBi9p3aQHxkkWpqfEuMfeQM0QqqC/yVwetBfcJwU8pZ6xg 0JUAfkdNwhgOksyeBGj43+rDwgmdBZMhIrot0o3cyyjupjue9aJ9jP24MUSdFRow 8mrkI3wAoYI2TOMR2wGiRqOnOOMOHQsvpqQsoj7/XPCWujXsYr4ZEXzJF/9Bh0jA 0po2ohGbs0FPcDWClP9ORfkoRmDeu/ExTFvfM2jys3MRDj4tMOgsXkszLEHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUroymr/RDG4B4lhhIdjvIYOLVM5gwHwYDVR0j BBgwFoAUuBCMf76kK1mksA20otwRG6twlAYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjNzlmYmUtNDc5MC00NmJlLWI5YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZC RUE0MkI1OUE0QjAwREI0QTJEQzExMUJBQjcwOTQwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODEwOEM3RkJFQTQyQjU5QTRCMDBEQjRBMkRDMTExQkFCNzA5 NDA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzEx MUJBQjcwOTQwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIW/oRabPmbH9oeI8W7bowO7hf14oLHiRXo+ YeqKxD2e6pwFjXGWOsvIU+/UF2taVH0Jc20jQjX2OY4mI+DfuKJZNkL4lmNP5aRr CIdqkYge6CqQJ+/iX+If1abLb75ZOjn3aHb5XtkeNi7Y4kL1XdSaDQPvR9W+jmi6 J5XOtHMRuAeRCcGz9nkDgpKuxaD/EuD3PILbi//7CW6fKUrZYdQyNmcMlpH4dav0 6d9xdptItwrfAi8D0wJPHV/tznJZrGNZS/9BxJXNSwLpYn6rjTCLNHE5n3JlrGvD /w1AEdIO7UNlGZaDBLXQUUrklcZ//kmdql+YRzfBy/2L+opq7F4= -----END CERTIFICATE-----Generated at Thu Sep 24 06:04:02 2026 by rpki-client