$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft File: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft (raw, json) Hash identifier: KEP39TUd60zqh2tdAeaMelOnrixKeSQiXkobg1V3evo= Subject key identifier: 70:64:66:41:4F:CC:14:F3:69:42:3D:45:E8:8A:35:54:F9:DC:2F:8C Authority key identifier: 8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 Certificate issuer: /CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Certificate serial: 361EF60FC3CDA67C151675DA3F665791E2607D46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft Manifest number: BE Signing time: Tue 22 Sep 2026 03:46:07 +0000 Manifest this update: Tue 22 Sep 2026 03:41:07 +0000 Manifest next update: Wed 23 Sep 2026 07:40:07 +0000 Files and hashes: 1: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl (hash: HkafSGq3+bxcBYzNReERi8MGsrLfUhBvbylzty/6gNU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1e:f6:0f:c3:cd:a6:7c:15:16:75:da:3f:66:57:91:e2:60:7d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Validity Not Before: Sep 22 03:41:07 2026 GMT Not After : Sep 23 07:40:07 2026 GMT Subject: CN=706466414FCC14F369423D45E88A3554F9DC2F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:7b:ba:1c:18:78:9c:1e:d1:41:6a:91:48: 38:ae:ef:b1:d3:dd:19:88:15:4a:68:d4:a3:5c:df: 83:4f:72:c3:93:f5:a8:a0:09:f1:dc:75:65:f4:ef: 6c:88:9c:2a:05:5b:ff:a8:50:f9:dd:99:a4:af:7d: 3a:a8:35:b8:56:f0:b7:20:c9:20:26:d0:8d:80:e0: 57:52:06:8a:3b:77:83:6c:3a:37:77:37:4b:37:35: 96:84:d7:70:c3:4b:13:67:d3:7b:14:e0:0d:e6:3e: 07:7b:77:69:bd:20:89:2c:c1:a3:14:9a:03:65:6c: c0:2f:eb:d1:dc:c3:f1:f2:70:4e:82:64:14:dc:6f: 28:6b:b7:68:0e:d5:67:28:23:11:c9:c1:7e:bb:4d: 1a:6f:44:fe:53:c1:c2:3b:11:eb:7c:7a:4c:02:7c: 96:76:56:a4:54:3f:58:a1:6a:4b:66:82:0b:f5:44: 13:43:b5:68:1c:67:87:5f:db:85:7f:bb:74:46:0a: 53:e8:e8:1f:cd:b9:de:a9:f0:9a:c4:ab:c9:ce:dd: 0d:fe:f2:9e:67:37:5e:e8:bd:16:bf:f9:37:d4:12: 34:5a:7d:c7:cf:af:75:10:d0:b0:0b:25:8e:de:c4: 90:32:02:99:6e:cf:c8:4b:34:be:9e:90:7d:84:76: 92:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:64:66:41:4F:CC:14:F3:69:42:3D:45:E8:8A:35:54:F9:DC:2F:8C X509v3 Authority Key Identifier: keyid:8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c9:b4:75:d0:fa:59:28:da:34:eb:99:5f:1f:12:af:ba:3d: 3c:d8:00:64:1c:0d:67:85:d2:00:d3:56:ab:09:fc:ec:ff:d2: 28:91:18:3e:76:84:13:fe:2c:38:42:75:c9:96:e2:8c:64:27: 83:e9:fb:38:b7:b7:08:24:ab:5b:d4:11:fb:bb:24:9f:ad:fd: 9b:d5:37:4e:e5:64:ab:c7:7a:24:24:0a:e5:65:4e:b9:c7:ab: 3c:29:1f:44:f0:09:48:38:09:cf:83:59:7a:13:46:5a:fd:22: 60:ec:21:88:47:d0:06:3a:06:ff:41:00:6b:ee:09:36:d5:be: 45:3f:45:d7:5c:87:c6:1f:f8:90:9c:cf:c4:d0:de:f1:40:93: af:f7:92:dd:fd:27:f9:d3:65:29:47:76:c6:eb:f0:e9:4c:83: b1:df:94:f3:15:c9:1d:28:19:0d:c9:5f:b2:e8:f7:ed:24:0a: ff:52:0c:ee:92:5f:52:b6:53:a0:22:6a:1e:c2:df:c4:08:96: b4:8a:bf:76:fa:ed:38:8c:c0:8c:f1:d4:5f:bb:de:a1:0d:18: 0b:04:5f:ff:26:80:aa:64:ab:68:ac:05:ad:67:9d:c0:94:76: e0:eb:2f:f5:08:3a:29:f4:2b:70:a9:bc:d8:91:f4:e2:d0:d2: d1:bc:f1:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNh72D8PNpnwVFnXaP2ZXkeJgfUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3 RDkxMDAzMTAeFw0yNjA5MjIwMzQxMDdaFw0yNjA5MjMwNzQwMDdaMDMxMTAvBgNV BAMTKDcwNjQ2NjQxNEZDQzE0RjM2OTQyM0Q0NUU4OEEzNTU0RjlEQzJGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChu3u6HBh4nB7RQWqRSDiu77HT 3RmIFUpo1KNc34NPcsOT9aigCfHcdWX072yInCoFW/+oUPndmaSvfTqoNbhW8Lcg ySAm0I2A4FdSBoo7d4NsOjd3N0s3NZaE13DDSxNn03sU4A3mPgd7d2m9IIkswaMU mgNlbMAv69Hcw/HycE6CZBTcbyhrt2gO1WcoIxHJwX67TRpvRP5TwcI7Eet8ekwC fJZ2VqRUP1ihaktmggv1RBNDtWgcZ4df24V/u3RGClPo6B/Nud6p8JrEq8nO3Q3+ 8p5nN17ovRa/+TfUEjRafcfPr3UQ0LALJY7exJAyApluz8hLNL6ekH2EdpIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcGRmQU/MFPNpQj1F6Io1VPncL4wwHwYDVR0j BBgwFoAUjJX82S/mBxvh1rJ7eTDv432RADEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjk1NWY1YTYtZjM3OC00MjUyLTgwNGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDky RkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3RDkxMDAzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Qzk1RkNEOTJGRTYwNzFCRTFENkIyN0I3OTMwRUZFMzdEOTEw MDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVG RTM3RDkxMDAzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/JtHXQ+lko2jTrmV8fEq+6PTzYAGQcDWeF 0gDTVqsJ/Oz/0iiRGD52hBP+LDhCdcmW4oxkJ4Pp+zi3twgkq1vUEfu7JJ+t/ZvV N07lZKvHeiQkCuVlTrnHqzwpH0TwCUg4Cc+DWXoTRlr9ImDsIYhH0AY6Bv9BAGvu CTbVvkU/Rddch8Yf+JCcz8TQ3vFAk6/3kt39J/nTZSlHdsbr8OlMg7HflPMVyR0o GQ3JX7Lo9+0kCv9SDO6SX1K2U6Aiah7C38QIlrSKv3b67TiMwIzx1F+73qENGAsE X/8mgKpkq2isBa1nncCUduDrL/UIOin0K3CpvNiR9OLQ0tG88cM= -----END CERTIFICATE-----Generated at Tue Sep 22 23:06:53 2026 by rpki-client