$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft File: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft (raw, json) Hash identifier: On0fecCggamcTasbxo14c6YFku5GV70AmmK95M/6z3s= Subject key identifier: 9D:CE:DE:9C:BE:99:90:26:9C:54:74:76:5F:A5:05:08:AE:F9:6A:52 Authority key identifier: 8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 Certificate issuer: /CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Certificate serial: 13233BE1C41A5C4985C38634505D964B5E900703 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:31:14 +0000 Manifest this update: Thu 24 Sep 2026 04:26:14 +0000 Manifest next update: Fri 25 Sep 2026 07:40:14 +0000 Files and hashes: 1: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl (hash: h5/GcF6mHxCW7If0EkARaCLE9+JayOg1NdvE1EPq3Lk=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: WXHF3ztWLcHGSe6MPgiYVl8CmUEe+OPjuifFRIwvCro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:23:3b:e1:c4:1a:5c:49:85:c3:86:34:50:5d:96:4b:5e:90:07:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Validity Not Before: Sep 24 04:26:14 2026 GMT Not After : Sep 25 07:40:14 2026 GMT Subject: CN=9DCEDE9CBE9990269C5474765FA50508AEF96A52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:a3:ba:e8:0f:4f:66:3e:0c:24:c2:90:5b: 7b:4c:40:b5:6f:79:6d:15:73:fa:a8:ac:14:66:14: b8:21:87:b7:58:71:11:d3:c7:1a:40:dd:5b:b6:2e: a1:e8:0b:18:d4:bc:26:04:60:82:d9:ab:a0:4d:27: 89:97:df:7a:b3:d2:6d:d5:87:b2:09:c1:b7:df:fe: 2d:14:7b:c0:c9:2c:d7:77:0e:16:cf:a2:55:39:5f: 54:61:b3:9e:53:15:49:22:f8:60:af:ae:d1:83:14: 05:49:7c:d6:00:d1:d7:e3:de:90:af:91:6c:42:c9: 74:cc:5d:bf:61:72:8f:14:0f:74:42:e9:dc:08:e8: 81:4d:10:c3:ea:c5:83:8c:0d:e6:ca:60:1f:ad:29: 2a:5e:90:1f:d7:c6:d3:5d:8e:09:7c:c8:d7:cb:74: bb:cf:a9:22:ac:f2:35:00:98:8d:09:a6:e5:67:e7: 2f:ff:7f:b9:04:97:7f:f4:9c:b6:c2:14:05:a2:98: 1c:9c:c2:02:50:df:97:29:be:8e:9c:37:c5:0b:86: f1:45:63:ae:3a:f1:d5:39:43:8e:d1:1b:ee:e3:1d: b5:08:64:86:5f:49:6f:d8:ab:6e:c2:81:42:cd:35: a9:dc:13:82:b9:2c:aa:cc:05:dd:e4:03:d4:37:1d: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CE:DE:9C:BE:99:90:26:9C:54:74:76:5F:A5:05:08:AE:F9:6A:52 X509v3 Authority Key Identifier: keyid:8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:5d:0f:3c:5e:b6:f9:92:e3:f9:9c:fc:fc:ce:0f:b1:43:7f: b3:33:96:27:e6:42:c7:be:c5:73:68:02:46:a8:90:3e:af:94: 57:76:e0:8a:71:d7:db:05:b7:ec:4a:7f:f8:b8:f8:fa:7c:7b: a0:ba:64:4b:15:30:5f:52:bb:ca:a2:34:6f:d9:90:ea:e8:6c: 9c:d9:69:5e:56:a0:08:0a:5d:f6:5f:38:de:9b:90:aa:c5:82: 99:e9:d4:2f:a6:7c:64:d1:38:03:38:34:18:a2:11:f1:16:7a: aa:11:21:57:d3:f7:cc:6f:04:0b:ed:d6:2c:fc:1a:d2:a4:ea: ec:f8:bf:ed:5b:ab:b4:6a:48:53:9e:e0:90:70:30:5a:e2:84: 25:a1:12:41:53:98:f6:e9:9c:f8:d1:0a:1c:75:cd:71:12:e9: ac:de:68:cf:1f:d5:3d:7e:5e:15:c6:b2:f4:cd:89:11:34:4d: d8:db:92:35:46:ea:e1:d2:86:b8:4b:31:98:5c:55:99:b3:a1: 68:d3:83:1f:0f:54:41:0f:8b:4c:bc:8c:d1:aa:66:96:3a:e1: a5:6d:cf:f0:4e:a4:a1:fe:06:b5:21:28:2d:3a:a0:38:c3:cb: 01:13:00:a2:c8:80:92:23:40:05:3d:7e:7d:7b:9e:ec:95:37: 77:a0:e4:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEyM74cQaXEmFw4Y0UF2WS16QBwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2 MURCNzhBNjAeFw0yNjA5MjQwNDI2MTRaFw0yNjA5MjUwNzQwMTRaMDMxMTAvBgNV BAMTKDlEQ0VERTlDQkU5OTkwMjY5QzU0NzQ3NjVGQTUwNTA4QUVGOTZBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgmKO66A9PZj4MJMKQW3tMQLVv eW0Vc/qorBRmFLghh7dYcRHTxxpA3Vu2LqHoCxjUvCYEYILZq6BNJ4mX33qz0m3V h7IJwbff/i0Ue8DJLNd3DhbPolU5X1Rhs55TFUki+GCvrtGDFAVJfNYA0dfj3pCv kWxCyXTMXb9hco8UD3RC6dwI6IFNEMPqxYOMDebKYB+tKSpekB/XxtNdjgl8yNfL dLvPqSKs8jUAmI0JpuVn5y//f7kEl3/0nLbCFAWimBycwgJQ35cpvo6cN8ULhvFF Y6468dU5Q47RG+7jHbUIZIZfSW/Yq27CgULNNancE4K5LKrMBd3kA9Q3HVhfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnc7enL6ZkCacVHR2X6UFCK75alIwHwYDVR0j BBgwFoAUiqUttdtx9jjpQSVKawzmg2HbeKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmUxY2JkNzktOGYyNi00YjBlLThiM2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVE QjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2MURCNzhBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUE1MkRCNURCNzFGNjM4RTk0MTI1NEE2QjBDRTY4MzYxREI3 OEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2 ODM2MURCNzhBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFdDzxetvmS4/mc/PzOD7FDf7MzlifmQse+ xXNoAkaokD6vlFd24Ipx19sFt+xKf/i4+Pp8e6C6ZEsVMF9Su8qiNG/ZkOrobJzZ aV5WoAgKXfZfON6bkKrFgpnp1C+mfGTROAM4NBiiEfEWeqoRIVfT98xvBAvt1iz8 GtKk6uz4v+1bq7RqSFOe4JBwMFrihCWhEkFTmPbpnPjRChx1zXES6azeaM8f1T1+ XhXGsvTNiRE0TdjbkjVG6uHShrhLMZhcVZmzoWjTgx8PVEEPi0y8jNGqZpY64aVt z/BOpKH+BrUhKC06oDjDywETAKLIgJIjQAU9fn17nuyVN3eg5Ps= -----END CERTIFICATE-----Generated at Thu Sep 24 20:33:37 2026 by rpki-client