$ rpki-client -vvvf rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft File: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft (raw, json) Hash identifier: D9XRct0cPzSUHxm4tzIzQNXA9StE3ilzu4eOxd6TFgo= Subject key identifier: E2:81:8E:C8:FC:7B:01:12:92:DC:BD:C7:83:9A:25:0D:DA:65:EB:CD Authority key identifier: 8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC Certificate issuer: /CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Certificate serial: 60FDB2410902ADAD0D53D7F30533806D1BD9779D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:39:48 +0000 Manifest this update: Mon 21 Sep 2026 02:34:48 +0000 Manifest next update: Tue 22 Sep 2026 04:57:48 +0000 Files and hashes: 1: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl (hash: YFF0eGDDzWDb3HRVJffinpsCEbEMdTLjM5QSI7IxeSY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fd:b2:41:09:02:ad:ad:0d:53:d7:f3:05:33:80:6d:1b:d9:77:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Validity Not Before: Sep 21 02:34:48 2026 GMT Not After : Sep 22 04:57:48 2026 GMT Subject: CN=E2818EC8FC7B011292DCBDC7839A250DDA65EBCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:46:a4:e7:5c:e3:6d:34:09:1b:0d:e1:1f: f1:4b:dc:26:e4:d9:46:f3:20:d1:dd:e7:fc:31:3c: c7:be:11:15:0f:f7:22:1b:1b:7e:96:c4:39:1c:71: 97:94:21:50:65:4a:83:86:96:3c:d6:ae:cd:94:ae: 9c:81:68:90:6d:38:a4:40:18:7b:72:ea:13:c4:8e: d9:ee:12:24:d4:84:96:55:2c:70:88:9b:1d:62:0b: aa:2a:d5:38:42:10:1a:91:cd:39:6c:0a:4a:57:e4: 00:9e:c5:ff:51:ab:cd:66:58:3b:00:9b:97:3d:11: 42:0f:9d:c4:15:2b:e0:0c:22:4c:0d:ba:5e:2b:0a: 52:06:9e:57:33:ff:96:28:75:c0:78:82:0c:f6:fc: 65:b0:6e:72:02:8b:dc:46:d8:51:2a:18:19:2d:d3: 7c:66:c0:d9:1b:19:d6:05:d1:a1:d5:e2:9b:e1:22: 3c:7d:cc:f9:5d:d3:60:d9:1b:22:68:a8:72:ff:53: fe:21:f6:5f:a4:f9:b3:6c:b6:1b:8d:96:19:63:e8: 36:8c:64:41:31:a8:5c:85:cb:75:c9:32:1e:42:2b: e8:76:cd:c0:5c:be:8d:70:23:46:23:b6:ef:7b:f8: 6c:6b:40:47:04:f2:39:e2:60:48:06:d7:fa:dd:07: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:81:8E:C8:FC:7B:01:12:92:DC:BD:C7:83:9A:25:0D:DA:65:EB:CD X509v3 Authority Key Identifier: keyid:8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d3:5f:0e:89:8e:5c:6a:03:36:2c:02:69:f0:5c:3a:23:e5: c9:fb:01:1e:10:ac:f8:ec:3d:9b:bf:3c:0b:6a:71:3d:19:f3: 48:bb:04:ad:57:02:d1:8d:3f:2e:73:76:1c:92:0e:ac:97:55: 96:38:43:2d:6e:ec:65:a1:b0:da:03:49:06:e1:be:5a:2f:70: 4a:21:c7:e3:07:ec:73:29:5f:49:b8:5e:34:d3:ae:a9:b3:d6: b4:af:5f:30:d7:a1:2a:b0:8a:55:fb:66:7a:28:8d:8c:b9:5c: 0c:3e:5a:94:59:25:b8:6c:1b:18:9d:2d:c6:77:72:ed:28:d3: 30:a1:6e:93:dd:11:38:ab:da:1b:4e:85:c6:fb:dc:8a:46:d1: 0c:ee:90:7b:7b:db:37:f9:2c:61:eb:52:00:70:8f:31:03:d7: b3:b8:39:0d:d9:db:0b:a8:9a:8a:42:85:bc:99:88:59:d5:56: eb:9b:2f:e5:7d:10:e6:f7:99:59:fc:76:0a:9f:1e:82:42:f1: 7c:40:73:f9:78:30:17:ef:7f:5b:93:f1:9e:d0:38:f7:59:24: ac:d5:f2:db:19:21:e8:d2:ff:5f:09:3f:0c:a0:b4:68:70:0c: 03:36:4d:7f:1a:f8:c6:6b:22:9a:1f:a7:15:70:68:70:88:dc: 72:ee:97:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYP2yQQkCra0NU9fzBTOAbRvZd50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhCNEMy MUEyQzJEQzAeFw0yNjA5MjEwMjM0NDhaFw0yNjA5MjIwNDU3NDhaMDMxMTAvBgNV BAMTKEUyODE4RUM4RkM3QjAxMTI5MkRDQkRDNzgzOUEyNTBEREE2NUVCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzyEak51zjbTQJGw3hH/FL3Cbk 2UbzINHd5/wxPMe+ERUP9yIbG36WxDkccZeUIVBlSoOGljzWrs2UrpyBaJBtOKRA GHty6hPEjtnuEiTUhJZVLHCImx1iC6oq1ThCEBqRzTlsCkpX5ACexf9Rq81mWDsA m5c9EUIPncQVK+AMIkwNul4rClIGnlcz/5YodcB4ggz2/GWwbnICi9xG2FEqGBkt 03xmwNkbGdYF0aHV4pvhIjx9zPld02DZGyJoqHL/U/4h9l+k+bNsthuNlhlj6DaM ZEExqFyFy3XJMh5CK+h2zcBcvo1wI0Yjtu97+GxrQEcE8jniYEgG1/rdB0szAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4oGOyPx7ARKS3L3Hg5olDdpl680wHwYDVR0j BBgwFoAUi3yU5dr2a7lW3568N+SLTCGiwtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDE4YzY4MzEtOGY0MC00YTIwLTgxM2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVE QUY2NkJCOTU2REY5RUJDMzdFNDhCNEMyMUEyQzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjdDOTRFNURBRjY2QkI5NTZERjlFQkMzN0U0OEI0QzIxQTJD MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhC NEMyMUEyQzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPTXw6JjlxqAzYsAmnwXDoj5cn7AR4QrPjs PZu/PAtqcT0Z80i7BK1XAtGNPy5zdhySDqyXVZY4Qy1u7GWhsNoDSQbhvlovcEoh x+MH7HMpX0m4XjTTrqmz1rSvXzDXoSqwilX7ZnoojYy5XAw+WpRZJbhsGxidLcZ3 cu0o0zChbpPdETir2htOhcb73IpG0QzukHt72zf5LGHrUgBwjzED17O4OQ3Z2wuo mopChbyZiFnVVuubL+V9EOb3mVn8dgqfHoJC8XxAc/l4MBfvf1uT8Z7QOPdZJKzV 8tsZIejS/18JPwygtGhwDAM2TX8a+MZrIpofpxVwaHCI3HLulzc= -----END CERTIFICATE-----Generated at Mon Sep 21 18:58:41 2026 by rpki-client