$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft File: 8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft (raw, json) Hash identifier: BbQvfSXOcqBzHNxVEuHyJlm3CHg62UujMSlxLXkBGDI= Subject key identifier: AC:DE:9E:0B:0D:5D:9E:12:B3:A6:F4:D1:2F:DA:30:63:AF:0C:01:F7 Authority key identifier: 87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC Certificate issuer: /CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC Certificate serial: 19EEF7D813AACEA711902CC440D1E4324B93D72E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:23:39 +0000 Manifest this update: Thu 24 Sep 2026 06:18:39 +0000 Manifest next update: Fri 25 Sep 2026 06:49:39 +0000 Files and hashes: 1: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: ILEPt3NLdu2PTg7IxG5hw5UfVvO4+tHzRcaeRjRDOH8=) 2: 8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl (hash: Q2VFr+ZPqPASABSYoQlemZTTP0BnkJlEtQ0tl7F3Pzc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ee:f7:d8:13:aa:ce:a7:11:90:2c:c4:40:d1:e4:32:4b:93:d7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC Validity Not Before: Sep 24 06:18:39 2026 GMT Not After : Sep 25 06:49:39 2026 GMT Subject: CN=ACDE9E0B0D5D9E12B3A6F4D12FDA3063AF0C01F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:75:a5:75:d8:e4:dd:ad:29:19:67:71:b6: 37:a8:6d:cf:02:dd:c1:c5:e1:79:a8:00:cc:64:2e: a2:c3:5c:94:00:a5:2a:4b:99:7d:19:ac:79:b0:58: fd:a5:86:b6:98:e8:f0:27:0d:df:9d:d3:74:5c:81: 83:2c:b8:80:63:ea:f0:5c:d2:0f:44:27:11:e2:49: b7:49:52:5c:77:8e:ec:21:28:70:fd:17:01:d3:d0: 13:36:d2:04:34:7d:d3:ef:a3:6f:06:5c:41:5d:9d: cd:50:5f:73:ec:6b:10:f4:d8:49:d4:7a:15:b5:2f: 3e:10:9d:30:c2:75:a1:57:b4:f6:17:24:70:24:fe: b3:8f:b4:75:b3:88:89:20:92:30:d4:aa:aa:4e:b3: 83:79:c4:2d:03:7e:0a:61:d6:e4:04:f6:fb:8b:d1: 20:31:c3:b4:fe:81:68:46:34:02:f6:02:d0:40:f3: 10:07:2e:ca:b3:e2:66:e4:1a:cf:35:48:c7:c8:85: a9:e6:87:5a:b2:9e:dd:fd:a2:31:9a:78:e2:17:c2: ea:77:6e:2a:6e:98:3f:cf:5a:cc:e3:58:0c:e3:c0: 64:00:df:0c:7f:32:75:d4:ea:2d:a2:00:bf:fd:ba: e1:b5:92:7d:9e:03:e1:61:ff:6f:ab:c1:28:57:97: 3c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DE:9E:0B:0D:5D:9E:12:B3:A6:F4:D1:2F:DA:30:63:AF:0C:01:F7 X509v3 Authority Key Identifier: keyid:87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f0:32:c7:e8:09:7f:27:32:67:27:ee:ee:b6:b2:b2:b4:cd: bd:18:51:ec:07:bf:2b:f8:d0:f7:11:82:e2:d5:a7:52:ab:f6: 5f:7c:f1:07:64:4b:5b:71:e6:0f:5f:5f:ab:c5:98:d9:90:b1: b7:a0:58:ea:60:71:03:05:46:d9:36:9d:09:15:9b:4f:17:39: 72:ce:af:be:2b:3c:4f:cb:ac:91:e3:db:1b:a7:6d:8c:40:ec: f4:0e:69:15:6c:08:e4:2c:82:b3:ae:36:8c:d3:e0:c8:83:65: 5a:68:fa:cf:f4:4d:da:fb:d3:0d:ad:6e:c9:26:5b:0c:58:bf: 50:67:04:f4:98:52:29:6f:dc:46:8c:e0:fb:76:59:04:d3:c1: a0:28:36:15:16:3b:81:0a:aa:91:7a:0a:42:12:42:39:1e:b4: ee:90:c6:92:be:86:7f:20:eb:82:d1:40:17:f2:45:7b:ac:6d: 75:c2:46:f5:bc:81:fd:4f:0e:81:10:56:dc:7c:96:97:40:20: 2e:4c:f6:62:64:02:f8:00:80:87:5c:af:15:27:2a:87:1f:cb: f5:8b:f6:c7:22:6c:2e:35:e8:10:3b:94:68:6b:f0:bc:22:7b: 93:6a:aa:00:68:1b:0e:2b:00:19:13:44:95:b4:d8:91:3b:b8: a0:e6:79:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGe732BOqzqcRkCzEQNHkMkuT1y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcwNUI1QjdGRDk3RUIyMDg5MkU4REI1QTdGN0JEMjNC RTgyNjhDQzAeFw0yNjA5MjQwNjE4MzlaFw0yNjA5MjUwNjQ5MzlaMDMxMTAvBgNV BAMTKEFDREU5RTBCMEQ1RDlFMTJCM0E2RjREMTJGREEzMDYzQUYwQzAxRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpXWlddjk3a0pGWdxtjeobc8C 3cHF4XmoAMxkLqLDXJQApSpLmX0ZrHmwWP2lhraY6PAnDd+d03RcgYMsuIBj6vBc 0g9EJxHiSbdJUlx3juwhKHD9FwHT0BM20gQ0fdPvo28GXEFdnc1QX3PsaxD02EnU ehW1Lz4QnTDCdaFXtPYXJHAk/rOPtHWziIkgkjDUqqpOs4N5xC0Dfgph1uQE9vuL 0SAxw7T+gWhGNAL2AtBA8xAHLsqz4mbkGs81SMfIhanmh1qynt39ojGaeOIXwup3 bipumD/PWszjWAzjwGQA3wx/MnXU6i2iAL/9uuG1kn2eA+Fh/2+rwShXlzx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrN6eCw1dnhKzpvTRL9owY68MAfcwHwYDVR0j BBgwFoAUhwW1t/2X6yCJLo21p/e9I76CaMwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWI3NGVjZTYtODgwYy00Y2VmLWFkZDItNzc3MTllYmVkZWM5LzAvODcwNUI1QjdG RDk3RUIyMDg5MkU4REI1QTdGN0JEMjNCRTgyNjhDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzA1QjVCN0ZEOTdFQjIwODkyRThEQjVBN0Y3QkQyM0JFODI2 OENDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvODcwNUI1QjdGRDk3RUIyMDg5MkU4REI1QTdGN0JE MjNCRTgyNjhDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnwMsfoCX8nMmcn7u62srK0zb0YUewHvyv4 0PcRguLVp1Kr9l988QdkS1tx5g9fX6vFmNmQsbegWOpgcQMFRtk2nQkVm08XOXLO r74rPE/LrJHj2xunbYxA7PQOaRVsCOQsgrOuNozT4MiDZVpo+s/0Tdr70w2tbskm WwxYv1BnBPSYUilv3EaM4Pt2WQTTwaAoNhUWO4EKqpF6CkISQjketO6QxpK+hn8g 64LRQBfyRXusbXXCRvW8gf1PDoEQVtx8lpdAIC5M9mJkAvgAgIdcrxUnKocfy/WL 9scibC416BA7lGhr8Lwie5NqqgBoGw4rABkTRJW02JE7uKDmebM= -----END CERTIFICATE-----Generated at Thu Sep 24 20:51:37 2026 by rpki-client