$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft File: 8FB017F8558B134E65670C5E56417CAA2FC460F1.mft (raw, json) Hash identifier: l+4k7zvNR7GhQJpITMfjm2yaEr+tCiHVyjRZFcKfHwU= Subject key identifier: 94:BA:FB:D8:EB:5E:26:17:10:31:82:F4:3C:1D:3E:0E:FA:18:49:AB Authority key identifier: 8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 Certificate issuer: /CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Certificate serial: 41DC08DCF5B367728520CD2213E6CA2B8D178D19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 04:41:31 +0000 Manifest this update: Thu 24 Sep 2026 04:36:31 +0000 Manifest next update: Fri 25 Sep 2026 05:54:31 +0000 Files and hashes: 1: 8FB017F8558B134E65670C5E56417CAA2FC460F1.crl (hash: FRbjgLig+W6EzjSGAdt9hoaXUE3b0BOoK3ifJ3a0w0g=) 2: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: toXJPhNtOXf98GJBbdqi9mllMSbcAgrmezktdUtueZ4=) 3: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: DZWl5mWmmx3C6HZfgC0P5GgRxbzQDenyir2DbhS+/vY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:dc:08:dc:f5:b3:67:72:85:20:cd:22:13:e6:ca:2b:8d:17:8d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Validity Not Before: Sep 24 04:36:31 2026 GMT Not After : Sep 25 05:54:31 2026 GMT Subject: CN=94BAFBD8EB5E2617103182F43C1D3E0EFA1849AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:7a:63:7f:40:e1:45:4c:c2:5c:e4:09:2c: 5b:be:5d:52:96:89:b4:ff:9d:a6:58:32:b0:72:8e: f3:23:73:98:b2:83:2e:3d:ed:bf:1e:30:80:7f:88: fc:a6:66:0d:21:79:cb:08:e4:50:0f:09:fa:9c:11: d1:c5:27:a1:4c:ff:da:5f:7b:7b:a9:61:ab:3a:54: 54:6c:a6:71:17:a0:99:a0:68:66:22:e0:25:19:19: b5:79:1a:e1:76:1d:57:fc:1b:0a:2e:7c:0e:92:85: ca:82:59:b1:ac:4a:a9:fa:ef:62:b0:d8:d6:94:29: c3:b9:2e:e3:87:9b:8c:7b:0e:83:7c:29:d2:1c:dd: 9a:d0:ac:86:26:1a:73:4b:a8:da:75:cd:d0:6e:24: ff:b0:9c:b2:ef:fb:98:3a:92:0c:1d:d2:12:cc:53: 44:6a:d4:5a:cd:0c:c6:43:b7:31:94:97:55:d0:87: 10:10:3b:6a:c3:d1:ac:91:62:0e:18:70:5f:4e:f4: 4a:5f:38:62:90:c5:5d:52:2c:a4:9b:15:6d:47:97: 71:e8:26:1d:03:51:06:d5:97:78:03:e3:25:df:1b: bd:0a:0d:fe:d8:67:0d:0a:c2:da:e7:2f:15:c2:1b: fd:af:13:04:05:5f:f4:81:23:6c:74:b3:8f:07:a8: 56:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BA:FB:D8:EB:5E:26:17:10:31:82:F4:3C:1D:3E:0E:FA:18:49:AB X509v3 Authority Key Identifier: keyid:8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:44:a4:0f:db:f2:ec:cb:21:cd:0a:d5:86:72:5b:32:8b:80: ed:36:78:e7:b2:b8:71:fd:06:29:60:ca:fb:ef:bd:60:74:45: fc:58:e4:ba:d3:37:c4:87:2d:ac:52:7a:22:b3:20:4e:2d:2c: ae:ff:70:3f:1f:0f:f2:df:32:6d:53:2a:90:3c:8e:0b:e7:d7: 95:bd:2d:ff:78:e5:50:c0:ef:31:2b:15:9f:2c:d8:ad:6c:ac: 9e:0e:be:19:16:c7:68:f7:5c:d8:7b:51:ae:9c:47:40:bd:13: 59:c7:f6:40:80:84:22:bf:ec:e9:21:a8:0c:bf:f7:23:68:72: d0:0e:b9:28:ec:69:88:38:f0:9c:4a:85:bb:e0:eb:18:f6:9a: a7:e5:01:7e:82:ee:47:90:9b:2a:f5:70:30:4d:21:69:98:08: 09:8d:87:36:e3:ec:e8:58:ec:a8:d6:c6:68:de:a6:a1:e5:83: 57:f6:25:3d:bf:a9:3f:d7:f5:9a:32:1d:35:80:de:4c:d9:b0: de:89:f3:11:54:c9:21:83:04:7c:f6:8b:94:15:1f:07:0b:66: cc:b0:fe:52:61:7d:b6:77:04:6d:74:54:1a:98:4b:65:2f:d4: 13:3c:de:2f:81:11:cf:42:7c:f2:a0:40:94:4f:de:6f:fa:59: 1f:8d:2f:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQdwI3PWzZ3KFIM0iE+bKK40XjRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEy RkM0NjBGMTAeFw0yNjA5MjQwNDM2MzFaFw0yNjA5MjUwNTU0MzFaMDMxMTAvBgNV BAMTKDk0QkFGQkQ4RUI1RTI2MTcxMDMxODJGNDNDMUQzRTBFRkExODQ5QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkRXpjf0DhRUzCXOQJLFu+XVKW ibT/naZYMrByjvMjc5iygy497b8eMIB/iPymZg0hecsI5FAPCfqcEdHFJ6FM/9pf e3upYas6VFRspnEXoJmgaGYi4CUZGbV5GuF2HVf8GwoufA6ShcqCWbGsSqn672Kw 2NaUKcO5LuOHm4x7DoN8KdIc3ZrQrIYmGnNLqNp1zdBuJP+wnLLv+5g6kgwd0hLM U0Rq1FrNDMZDtzGUl1XQhxAQO2rD0ayRYg4YcF9O9EpfOGKQxV1SLKSbFW1Hl3Ho Jh0DUQbVl3gD4yXfG70KDf7YZw0KwtrnLxXCG/2vEwQFX/SBI2x0s48HqFa7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlLr72OteJhcQMYL0PB0+DvoYSaswHwYDVR0j BBgwFoAUj7AX+FWLE05lZwxeVkF8qi/EYPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOGFhYzMtMDA5NC00MjFmLWEyMDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1 NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEyRkM0NjBGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkIwMTdGODU1OEIxMzRFNjU2NzBDNUU1NjQxN0NBQTJGQzQ2 MEYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdD QUEyRkM0NjBGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpEpA/b8uzLIc0K1YZyWzKLgO02eOeyuHH9 BilgyvvvvWB0RfxY5LrTN8SHLaxSeiKzIE4tLK7/cD8fD/LfMm1TKpA8jgvn15W9 Lf945VDA7zErFZ8s2K1srJ4OvhkWx2j3XNh7Ua6cR0C9E1nH9kCAhCK/7OkhqAy/ 9yNoctAOuSjsaYg48JxKhbvg6xj2mqflAX6C7keQmyr1cDBNIWmYCAmNhzbj7OhY 7KjWxmjepqHlg1f2JT2/qT/X9ZoyHTWA3kzZsN6J8xFUySGDBHz2i5QVHwcLZsyw /lJhfbZ3BG10VBqYS2Uv1BM83i+BEc9CfPKgQJRP3m/6WR+NL9Q= -----END CERTIFICATE-----Generated at Thu Sep 24 13:24:48 2026 by rpki-client