$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft File: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft (raw, json) Hash identifier: vL+iFEoBlmEzKoR3cdvfGtY2NWxgnjax/RoFhZFK6BU= Subject key identifier: E3:8D:16:22:4C:70:32:24:43:DE:02:B7:F9:78:67:52:0D:B7:7C:81 Authority key identifier: 8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92 Certificate issuer: /CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92 Certificate serial: 6F79D1C7BABB722C7E9D90D50B6E304FAF605237 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 07:23:56 +0000 Manifest this update: Sat 26 Sep 2026 07:18:56 +0000 Manifest next update: Sun 27 Sep 2026 10:53:56 +0000 Files and hashes: 1: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: LMawcFvlyGAFjmzGIPIL0Pb1GIlo75+QClOxIhDqopY=) 2: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl (hash: yd1uicPliqjX82fOMwxwHnZWuZyeo+SYH1UKEjduyFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:79:d1:c7:ba:bb:72:2c:7e:9d:90:d5:0b:6e:30:4f:af:60:52:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92 Validity Not Before: Sep 26 07:18:56 2026 GMT Not After : Sep 27 10:53:56 2026 GMT Subject: CN=E38D16224C70322443DE02B7F97867520DB77C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:b6:e6:b2:4e:1f:2a:21:9f:15:a5:2e:0e: f9:7f:20:e5:40:4f:7a:03:8e:c3:6e:20:c1:fb:fe: 49:4e:bb:48:1c:70:50:73:c4:6c:cf:79:c9:7d:08: e7:63:ed:c2:61:07:bb:cb:46:0d:8b:75:c4:86:ab: 56:25:2c:92:97:d2:83:e9:9b:92:24:83:f4:2f:00: e8:85:70:31:9a:f6:05:b8:55:1f:4a:ce:3b:b7:04: cb:f9:ad:50:37:fe:fa:24:69:f6:89:43:f6:de:a3: 8e:d5:ea:ec:09:47:3f:d0:12:22:16:e6:79:8a:f0: 37:e0:e3:84:c0:9a:b3:2b:ae:33:a7:dc:6d:a6:0a: 13:ef:a8:1c:99:f1:b8:11:8a:d9:ea:da:51:df:69: 90:08:5d:e3:ee:eb:dd:75:a1:71:bf:fc:8f:e2:4d: 32:e6:58:2b:c5:24:de:5e:f0:88:72:8e:e3:43:b4: 49:5a:3a:59:01:8c:d7:2e:7e:43:45:28:cc:4a:60: 59:ec:a1:3b:ab:bb:b8:e6:42:89:ba:39:41:20:49: e9:36:5c:90:ac:d0:88:d0:93:9a:36:68:f4:52:69: b9:c1:f8:21:f2:c5:97:4a:54:9d:ba:ae:91:dc:c5: 75:59:a4:f5:fc:16:9e:03:b5:03:2e:67:fd:93:ed: f1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8D:16:22:4C:70:32:24:43:DE:02:B7:F9:78:67:52:0D:B7:7C:81 X509v3 Authority Key Identifier: keyid:8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:26:28:ed:cf:21:5a:89:b4:35:89:84:7e:a0:37:ba:d6:02: d2:2d:76:b4:f6:e2:e3:e8:0e:17:d2:16:71:de:46:b7:9a:41: 5b:59:d8:b3:26:80:82:69:b4:cb:9e:8e:e6:4a:53:1a:4f:58: e7:26:b8:08:94:74:0d:75:2f:c7:5a:c0:69:30:5f:94:98:f3: d3:72:7f:48:c9:40:8f:a3:9c:72:f4:aa:63:68:88:0e:a3:a9: bd:3b:25:8c:c8:30:e3:b2:5f:56:61:f8:88:eb:f1:e6:76:06: b3:ca:70:8d:4e:cb:8c:e6:ef:4f:00:94:61:4f:16:2b:4c:94: 91:9a:b0:10:74:99:dc:af:a6:d6:5f:8b:87:d1:04:fe:ab:6a: c3:a3:48:bb:4b:0c:43:0c:a5:5e:cd:97:33:c7:4a:7e:1e:db: 69:fa:90:fe:5f:c0:fc:18:03:19:e2:64:30:d0:8f:7a:ef:24: fa:5f:d3:6a:15:30:39:29:d3:43:d9:a0:40:15:f1:e4:18:b8: d4:2e:c8:fe:21:69:d7:00:71:ec:86:53:72:3c:30:6a:9e:5d: 06:dc:4f:8d:11:dc:07:e7:cf:c3:e8:54:35:f0:0e:8d:61:9a: 2c:a9:0f:06:4b:cb:59:c3:a8:88:3a:1f:56:12:d3:3d:12:25: c4:6f:f2:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb3nRx7q7cix+nZDVC24wT69gUjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4QjE1NUU4MzM1QzAyODU0OUQyQkY2QjU0QzI1RTRB NzhCOEM5MjAeFw0yNjA5MjYwNzE4NTZaFw0yNjA5MjcxMDUzNTZaMDMxMTAvBgNV BAMTKEUzOEQxNjIyNEM3MDMyMjQ0M0RFMDJCN0Y5Nzg2NzUyMERCNzdDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWo7bmsk4fKiGfFaUuDvl/IOVA T3oDjsNuIMH7/klOu0gccFBzxGzPecl9COdj7cJhB7vLRg2LdcSGq1YlLJKX0oPp m5Ikg/QvAOiFcDGa9gW4VR9Kzju3BMv5rVA3/vokafaJQ/beo47V6uwJRz/QEiIW 5nmK8Dfg44TAmrMrrjOn3G2mChPvqByZ8bgRitnq2lHfaZAIXePu6911oXG//I/i TTLmWCvFJN5e8IhyjuNDtElaOlkBjNcufkNFKMxKYFnsoTuru7jmQom6OUEgSek2 XJCs0IjQk5o2aPRSabnB+CHyxZdKVJ26rpHcxXVZpPX8Fp4DtQMuZ/2T7fGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU440WIkxwMiRD3gK3+XhnUg23fIEwHwYDVR0j BBgwFoAUiosVXoM1wChUnSv2tUwl5KeLjJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA1MjBiNTQtM2JhNy00NjMxLWFmMGItNTU5ODRiMGJhN2YyLzAvOEE4QjE1NUU4 MzM1QzAyODU0OUQyQkY2QjU0QzI1RTRBNzhCOEM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QThCMTU1RTgzMzVDMDI4NTQ5RDJCRjZCNTRDMjVFNEE3OEI4 QzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOEE4QjE1NUU4MzM1QzAyODU0OUQyQkY2QjU0QzI1 RTRBNzhCOEM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMmKO3PIVqJtDWJhH6gN7rWAtItdrT24uPo DhfSFnHeRreaQVtZ2LMmgIJptMuejuZKUxpPWOcmuAiUdA11L8dawGkwX5SY89Ny f0jJQI+jnHL0qmNoiA6jqb07JYzIMOOyX1Zh+Ijr8eZ2BrPKcI1Oy4zm708AlGFP FitMlJGasBB0mdyvptZfi4fRBP6rasOjSLtLDEMMpV7NlzPHSn4e22n6kP5fwPwY AxniZDDQj3rvJPpf02oVMDkp00PZoEAV8eQYuNQuyP4hadcAceyGU3I8MGqeXQbc T40R3Afnz8PoVDXwDo1hmiypDwZLy1nDqIg6H1YS0z0SJcRv8r4= -----END CERTIFICATE-----Generated at Sat Sep 26 12:38:41 2026 by rpki-client