$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft File: 8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft (raw, json) Hash identifier: hW4JYMJ5Euw6p5agxMw3RaCDO4h/KEBP8pRM8QXGJtg= Subject key identifier: B2:41:4A:97:30:9A:1F:E0:70:21:96:DD:C1:7D:8C:82:87:2D:3C:87 Authority key identifier: 8C:22:63:C9:1E:3F:B8:C4:95:75:01:B1:F6:69:A2:06:21:70:F9:E0 Certificate issuer: /CN=8C2263C91E3FB8C4957501B1F669A2062170F9E0 Certificate serial: 7215B05153BF9713A2F4FD8A93DE9ED8A0F37577 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:36:26 +0000 Manifest this update: Wed 23 Sep 2026 20:31:26 +0000 Manifest next update: Thu 24 Sep 2026 21:27:26 +0000 Files and hashes: 1: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: otMHW/iALeuwuRkuqs8HAjMUYbLDHM48rPe1iSU6XuA=) 2: 8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl (hash: SSUHQ8g576i68cqql8VfvtTQOTjzwqeH2CjYdTNQwUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:15:b0:51:53:bf:97:13:a2:f4:fd:8a:93:de:9e:d8:a0:f3:75:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C2263C91E3FB8C4957501B1F669A2062170F9E0 Validity Not Before: Sep 23 20:31:26 2026 GMT Not After : Sep 24 21:27:26 2026 GMT Subject: CN=B2414A97309A1FE0702196DDC17D8C82872D3C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:ea:e7:b3:88:9c:ac:0e:e2:30:85:4b:cc: 3b:9c:6e:87:45:3e:30:44:2b:9b:66:8f:6f:45:8a: b8:13:92:e2:db:5d:ac:94:1c:fc:19:a9:9a:50:de: 84:86:7c:4a:50:66:18:27:f8:93:55:5f:95:99:83: c3:35:a4:8e:d4:17:d1:c1:8c:be:7a:aa:99:be:30: 66:9f:46:9a:1f:c3:18:6e:90:f8:f1:64:38:d3:8e: b7:6e:c7:aa:76:e1:b8:7f:b0:a3:91:1a:dc:b0:a1: d5:d7:01:89:89:78:a1:aa:0a:cf:3c:03:14:aa:84: cd:c1:8c:9f:9c:ed:57:a0:82:83:4b:7b:52:37:29: a1:b3:88:e4:c3:be:e5:c8:0e:58:65:0a:86:7f:97: ad:96:6a:4e:43:0b:bf:01:05:08:79:37:fa:25:a1: d3:8a:ad:a2:37:85:b6:55:d3:9d:95:fd:87:40:97: 5e:e6:bc:e4:4f:59:79:08:02:1f:32:e3:85:f5:b1: 8c:bc:7f:9e:5c:11:cc:fa:09:6b:f0:b4:c1:2f:1b: 59:e2:1b:1f:cf:b4:c1:24:26:4b:e4:52:b9:9b:f3: e9:bf:64:fa:cd:b3:24:ee:2d:66:b5:f9:4a:c2:f8: a3:b5:6e:ce:40:2e:42:47:3d:c8:06:79:57:d2:f8: 2b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:41:4A:97:30:9A:1F:E0:70:21:96:DD:C1:7D:8C:82:87:2D:3C:87 X509v3 Authority Key Identifier: keyid:8C:22:63:C9:1E:3F:B8:C4:95:75:01:B1:F6:69:A2:06:21:70:F9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:63:64:dd:9b:12:cd:33:9a:6c:a8:4d:e4:17:29:48:3d:65: c9:87:15:af:4c:6a:b8:95:48:f5:b0:2d:a2:9b:94:d8:ac:d7: a4:09:67:97:56:5a:42:66:2e:96:94:ce:f1:86:df:90:79:40: 5d:dd:ab:aa:33:50:1b:3a:09:36:b7:2a:aa:e7:1b:64:77:8a: e9:e1:bd:51:ec:d0:e1:f9:8f:d4:c7:e3:5b:2d:7e:3a:16:1a: ae:79:d7:6d:d7:90:2f:49:a9:8e:a2:bc:5a:cc:7f:3a:b3:53: 5d:9f:f7:cd:9b:5d:c3:11:e1:ca:b1:24:6e:c1:ee:8d:80:af: 47:61:97:af:c6:6f:ba:a3:ed:d0:13:83:64:de:7a:0b:e3:91: 14:b0:d4:1f:bd:c9:9e:4f:8b:7c:c3:f3:bd:47:f8:eb:34:57: 73:fc:fe:a9:70:b4:21:e0:5e:02:f4:7d:3c:98:21:e7:6a:03: 48:e8:36:ca:bb:51:03:2e:0a:06:23:4b:b5:f8:f8:10:51:5a: 10:68:fb:07:74:a5:2f:52:ed:a8:94:36:2c:47:75:7f:ed:6c: 73:0b:7a:f2:7e:85:8f:27:1b:12:3c:30:b3:26:85:b4:52:b0: 5b:9b:7c:42:b7:c5:cd:5e:48:52:6b:1c:01:dc:53:80:15:76: e3:5d:8c:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchWwUVO/lxOi9P2Kk96e2KDzdXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMjYzQzkxRTNGQjhDNDk1NzUwMUIxRjY2OUEyMDYy MTcwRjlFMDAeFw0yNjA5MjMyMDMxMjZaFw0yNjA5MjQyMTI3MjZaMDMxMTAvBgNV BAMTKEIyNDE0QTk3MzA5QTFGRTA3MDIxOTZEREMxN0Q4QzgyODcyRDNDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLOrns4icrA7iMIVLzDucbodF PjBEK5tmj29FirgTkuLbXayUHPwZqZpQ3oSGfEpQZhgn+JNVX5WZg8M1pI7UF9HB jL56qpm+MGafRpofwxhukPjxZDjTjrdux6p24bh/sKORGtywodXXAYmJeKGqCs88 AxSqhM3BjJ+c7VeggoNLe1I3KaGziOTDvuXIDlhlCoZ/l62Wak5DC78BBQh5N/ol odOKraI3hbZV052V/YdAl17mvORPWXkIAh8y44X1sYy8f55cEcz6CWvwtMEvG1ni Gx/PtMEkJkvkUrmb8+m/ZPrNsyTuLWa1+UrC+KO1bs5ALkJHPcgGeVfS+CtLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUskFKlzCaH+BwIZbdwX2MgoctPIcwHwYDVR0j BBgwFoAUjCJjyR4/uMSVdQGx9mmiBiFw+eAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFhZTEyZmEtOThmZC00ZTUxLTk4MGUtYWQ1ZjViOTBkN2E2LzAvOEMyMjYzQzkx RTNGQjhDNDk1NzUwMUIxRjY2OUEyMDYyMTcwRjlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QzIyNjNDOTFFM0ZCOEM0OTU3NTAxQjFGNjY5QTIwNjIxNzBG OUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvOEMyMjYzQzkxRTNGQjhDNDk1NzUwMUIxRjY2OUEy MDYyMTcwRjlFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNjZN2bEs0zmmyoTeQXKUg9ZcmHFa9MariV SPWwLaKblNis16QJZ5dWWkJmLpaUzvGG35B5QF3dq6ozUBs6CTa3KqrnG2R3iunh vVHs0OH5j9TH41stfjoWGq55123XkC9JqY6ivFrMfzqzU12f982bXcMR4cqxJG7B 7o2Ar0dhl6/Gb7qj7dATg2TeegvjkRSw1B+9yZ5Pi3zD871H+Os0V3P8/qlwtCHg XgL0fTyYIedqA0joNsq7UQMuCgYjS7X4+BBRWhBo+wd0pS9S7aiUNixHdX/tbHML evJ+hY8nGxI8MLMmhbRSsFubfEK3xc1eSFJrHAHcU4AVduNdjIc= -----END CERTIFICATE-----Generated at Thu Sep 24 10:43:51 2026 by rpki-client