$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft File: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft (raw, json) Hash identifier: 6kaSCdPLZLNEo9IJ6LwpIIUuG4KoARWh+Cll17kArMU= Subject key identifier: 16:30:FD:50:7A:A6:E2:D3:5E:7D:17:3C:0C:BF:B4:62:BE:52:CA:B2 Authority key identifier: 8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B Certificate issuer: /CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B Certificate serial: 35B41E25EFD2242465DA3E7E52CC1DA8B3242F60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 09:12:58 +0000 Manifest this update: Tue 22 Sep 2026 09:07:58 +0000 Manifest next update: Wed 23 Sep 2026 10:58:58 +0000 Files and hashes: 1: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl (hash: 5ZwwIY5Yj5324oY5S63zmAy/rNtx/1gpCfyGqDNxCiE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 10:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b4:1e:25:ef:d2:24:24:65:da:3e:7e:52:cc:1d:a8:b3:24:2f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B Validity Not Before: Sep 22 09:07:58 2026 GMT Not After : Sep 23 10:58:58 2026 GMT Subject: CN=1630FD507AA6E2D35E7D173C0CBFB462BE52CAB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:40:78:21:b7:94:8a:7f:bb:14:17:0e:c4: 13:b9:5c:4d:3f:d5:85:04:2c:c6:4e:b6:9a:ea:36: 77:d1:95:3e:8d:a1:cf:a3:e1:a6:dd:46:01:f5:61: e0:b5:bd:57:c3:e0:18:ec:17:60:87:9a:8d:89:fc: 82:ba:ab:d6:88:70:3e:49:e7:c7:d9:10:9d:84:57: 57:0a:38:f7:41:f7:09:8c:9b:37:c2:0e:d3:af:9c: 52:aa:3d:ea:12:67:a4:ad:06:9c:8b:62:8b:fd:0e: 23:a0:ca:09:56:25:2e:78:26:9d:ef:b0:bf:d9:86: 92:bb:30:41:87:32:08:9c:9a:51:4f:c5:d5:19:ca: 8e:cb:fa:4c:b8:fb:34:16:c3:70:ce:ac:ed:b9:87: c7:e7:c8:33:39:99:e8:28:c8:8e:e6:e7:2b:81:39: c6:c9:ed:e6:73:05:42:18:6e:7c:7b:2a:9e:8c:4a: 0c:40:b1:56:70:f3:65:19:b2:ee:d9:c9:e2:fd:02: 06:0c:49:68:c8:91:0b:71:46:1b:51:17:fb:d5:a0: 91:95:5d:90:66:6b:c7:a8:5b:ff:d3:05:a8:9b:b9: bf:4e:1b:4d:4d:3d:b7:f9:07:42:71:e3:78:a3:ae: 85:1e:51:a3:a1:ee:ab:ad:90:3e:7d:2d:7d:2a:7d: 4b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:30:FD:50:7A:A6:E2:D3:5E:7D:17:3C:0C:BF:B4:62:BE:52:CA:B2 X509v3 Authority Key Identifier: keyid:8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:47:47:21:e7:1d:ac:cb:d5:ab:27:86:92:56:7b:bc:57:99: 2a:a3:3c:7b:65:1b:d8:41:88:00:5d:5f:e2:d9:cb:16:b2:8a: 8d:1f:12:7b:18:f0:4e:ba:69:ca:ed:99:2c:34:32:f5:f9:d5: da:9e:b7:09:50:ab:66:da:0a:5f:99:59:35:b2:c7:24:02:23: 3a:a3:ff:8d:f7:7d:5e:f5:45:6f:dc:60:20:78:07:c8:f7:e8: 4a:f6:06:b4:a7:c8:fa:aa:76:93:6d:2d:2d:62:38:b4:04:d4: db:49:80:12:19:ea:74:1d:e5:55:3b:fb:bb:26:08:e0:0d:dd: 51:bc:17:30:94:2b:90:36:7b:2d:59:ce:0b:ef:d0:99:06:f3: e0:2c:4a:33:98:b4:50:d2:ef:a1:00:75:10:90:25:48:91:e6: 49:01:71:84:83:03:8a:44:82:fb:c9:40:88:b7:bd:98:19:0c: 8e:82:54:fa:c3:8c:ca:08:7e:8a:37:24:1d:96:4a:a9:4b:2b: bb:14:c9:40:b2:67:f0:97:4c:b6:a3:16:cb:98:1d:f3:8c:dc: f6:96:80:42:c3:ee:5d:3d:d7:3d:e6:23:14:9c:20:f5:51:e9: b6:1a:d0:30:bf:a4:02:e9:95:65:34:77:73:c2:45:86:22:31: 55:19:51:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbQeJe/SJCRl2j5+UswdqLMkL2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYwNDlCNDNERDYxMjg1QzZDREM4MTkzODdDQUQwNjUx QjBDRjM4QjAeFw0yNjA5MjIwOTA3NThaFw0yNjA5MjMxMDU4NThaMDMxMTAvBgNV BAMTKDE2MzBGRDUwN0FBNkUyRDM1RTdEMTczQzBDQkZCNDYyQkU1MkNBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCguEB4IbeUin+7FBcOxBO5XE0/ 1YUELMZOtprqNnfRlT6Noc+j4abdRgH1YeC1vVfD4BjsF2CHmo2J/IK6q9aIcD5J 58fZEJ2EV1cKOPdB9wmMmzfCDtOvnFKqPeoSZ6StBpyLYov9DiOgyglWJS54Jp3v sL/ZhpK7MEGHMgicmlFPxdUZyo7L+ky4+zQWw3DOrO25h8fnyDM5megoyI7m5yuB OcbJ7eZzBUIYbnx7Kp6MSgxAsVZw82UZsu7ZyeL9AgYMSWjIkQtxRhtRF/vVoJGV XZBma8eoW//TBaibub9OG01NPbf5B0Jx43ijroUeUaOh7qutkD59LX0qfUtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFjD9UHqm4tNefRc8DL+0Yr5SyrIwHwYDVR0j BBgwFoAUjwSbQ91hKFxs3IGTh8rQZRsM84swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiMjkzNzgtNDVmMC00OWQzLWE2YWYtNTczYmU3ZGNhNmQwLzAvOEYwNDlCNDNE RDYxMjg1QzZDREM4MTkzODdDQUQwNjUxQjBDRjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjA0OUI0M0RENjEyODVDNkNEQzgxOTM4N0NBRDA2NTFCMENG MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvOEYwNDlCNDNERDYxMjg1QzZDREM4MTkzODdDQUQw NjUxQjBDRjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZHRyHnHazL1asnhpJWe7xXmSqjPHtlG9hB iABdX+LZyxayio0fEnsY8E66acrtmSw0MvX51dqetwlQq2baCl+ZWTWyxyQCIzqj /433fV71RW/cYCB4B8j36Er2BrSnyPqqdpNtLS1iOLQE1NtJgBIZ6nQd5VU7+7sm COAN3VG8FzCUK5A2ey1Zzgvv0JkG8+AsSjOYtFDS76EAdRCQJUiR5kkBcYSDA4pE gvvJQIi3vZgZDI6CVPrDjMoIfoo3JB2WSqlLK7sUyUCyZ/CXTLajFsuYHfOM3PaW gELD7l091z3mIxScIPVR6bYa0DC/pALplWU0d3PCRYYiMVUZUQE= -----END CERTIFICATE-----Generated at Tue Sep 22 12:59:59 2026 by rpki-client