$ rpki-client -vvvf rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft File: 8CDF206FDB99524CD59E5141686928A6FF94305F.mft (raw, json) Hash identifier: YCHQRNe7m4mfEWYLvYojpP5JmLcMEV89tPKrQv6eni0= Subject key identifier: 74:93:DF:E2:CA:79:C8:15:D8:90:68:66:A8:8C:4F:FF:4F:E0:1E:3C Authority key identifier: 8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F Certificate issuer: /CN=8CDF206FDB99524CD59E5141686928A6FF94305F Certificate serial: 20101833D3B9F6B3E1443690C95B60FE21E4412E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft Manifest number: BE Signing time: Tue 22 Sep 2026 02:55:10 +0000 Manifest this update: Tue 22 Sep 2026 02:50:10 +0000 Manifest next update: Wed 23 Sep 2026 06:47:10 +0000 Files and hashes: 1: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: AtW3qZZhBOBkSL0i4aoVF1GR5f7KIfCN2XApbUwdv2U=) 2: 8CDF206FDB99524CD59E5141686928A6FF94305F.crl (hash: tQKbBuufulfpZ2QCki+MGekRbU3gFNh/6HfjtXHiUeA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:10:18:33:d3:b9:f6:b3:e1:44:36:90:c9:5b:60:fe:21:e4:41:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF206FDB99524CD59E5141686928A6FF94305F Validity Not Before: Sep 22 02:50:10 2026 GMT Not After : Sep 23 06:47:10 2026 GMT Subject: CN=7493DFE2CA79C815D8906866A88C4FFF4FE01E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7f:ee:44:ae:b0:c8:8b:6e:02:ee:c5:ee:68: a8:30:b3:90:64:d4:86:cd:3e:38:0b:7a:4e:bd:23: 32:66:07:21:6f:87:16:58:f6:9a:95:16:b8:39:72: 15:2c:eb:a3:44:8c:ea:ab:50:fd:2e:8a:b6:f3:d9: 63:f4:d6:e4:c2:a6:8e:68:79:d8:99:38:a5:75:06: 81:14:54:ef:8a:90:4a:d8:33:6f:42:b6:d5:ec:2a: 09:5d:f8:ff:f6:35:08:41:a5:5a:24:0a:c8:06:74: 20:c8:40:06:60:6f:6f:75:d2:19:47:62:53:55:54: bd:81:d8:46:b7:61:c7:a5:b4:f5:cd:fd:84:21:97: 1c:b5:a3:82:cc:59:c5:52:ed:ee:6d:88:28:cf:54: 6c:d4:47:e3:74:bd:d5:86:cc:c7:de:1b:30:6d:26: 3c:ba:0f:91:3b:d2:19:92:25:a9:ae:ca:da:15:72: 99:67:0e:01:4d:94:28:49:36:d1:dd:44:a0:e6:2c: c0:b9:93:c5:90:e2:80:ca:83:ad:1f:22:05:f2:6c: e6:18:76:65:05:ab:ed:eb:0c:34:05:ea:6e:fc:4a: 9e:8c:6a:6a:31:3a:7d:ad:66:e7:3f:16:6f:ca:22: fd:fb:c5:fa:93:23:83:c6:d9:fc:81:d5:e6:1e:f1: f4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:93:DF:E2:CA:79:C8:15:D8:90:68:66:A8:8C:4F:FF:4F:E0:1E:3C X509v3 Authority Key Identifier: keyid:8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:30:f9:4e:b2:6c:cc:b7:76:94:f7:df:f2:a1:72:3d:03:48: d2:85:3d:ae:f8:8f:fb:42:bb:03:94:aa:75:87:40:28:d9:bf: d4:c4:fe:e8:a9:43:99:e7:e8:e5:03:86:61:d1:1c:48:80:e4: 15:fa:ae:22:0f:47:9a:b7:47:74:16:d1:f6:03:66:4e:9d:60: 68:96:48:06:4f:65:6a:e6:8f:1a:31:de:ec:70:21:8b:33:06: 37:bd:30:8c:34:f0:bf:57:b9:f8:c4:4c:d7:ca:d4:92:fa:f0: b8:74:63:68:92:af:f2:6a:a1:d2:c3:44:00:d9:c2:b2:cb:e7: 72:2d:4f:b4:55:ac:f4:a8:6e:46:aa:a4:fb:b8:d9:cc:4a:f2: b1:f1:92:b8:ae:f9:a5:19:14:74:7a:3a:4a:e7:e0:c2:40:e2: 60:b3:01:fc:93:09:17:9f:58:7f:bb:b3:06:be:dd:6a:8f:53: 35:52:8b:74:12:67:81:bc:fa:d9:3d:16:0a:c8:33:43:73:6d: e2:cd:b7:9b:6e:c8:3b:50:3e:73:b4:81:50:f1:55:f1:5c:39: d4:1f:7e:cb:c3:80:82:0f:cf:ce:e1:9e:14:19:ce:24:d2:50: f9:52:81:23:46:39:68:ca:b1:c8:71:b6:d7:68:b9:2a:c4:de: 82:cb:89:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBAYM9O59rPhRDaQyVtg/iHkQS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZG Rjk0MzA1RjAeFw0yNjA5MjIwMjUwMTBaFw0yNjA5MjMwNjQ3MTBaMDMxMTAvBgNV BAMTKDc0OTNERkUyQ0E3OUM4MTVEODkwNjg2NkE4OEM0RkZGNEZFMDFFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqf+5ErrDIi24C7sXuaKgws5Bk 1IbNPjgLek69IzJmByFvhxZY9pqVFrg5chUs66NEjOqrUP0uirbz2WP01uTCpo5o ediZOKV1BoEUVO+KkErYM29CttXsKgld+P/2NQhBpVokCsgGdCDIQAZgb2910hlH YlNVVL2B2Ea3YceltPXN/YQhlxy1o4LMWcVS7e5tiCjPVGzUR+N0vdWGzMfeGzBt Jjy6D5E70hmSJamuytoVcplnDgFNlChJNtHdRKDmLMC5k8WQ4oDKg60fIgXybOYY dmUFq+3rDDQF6m78Sp6MamoxOn2tZuc/Fm/KIv37xfqTI4PG2fyB1eYe8fR5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdJPf4sp5yBXYkGhmqIxP/0/gHjwwHwYDVR0j BBgwFoAUjN8gb9uZUkzVnlFBaGkopv+UMF8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjMzOTc4ZjgtYWVhYi00MjdhLWJkNzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZE Qjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZGRjk0MzA1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0RGMjA2RkRCOTk1MjRDRDU5RTUxNDE2ODY5MjhBNkZGOTQz MDVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjMzOTc4ZjgtYWVhYi00MjdhLWJk NzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4 QTZGRjk0MzA1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEw+U6ybMy3dpT33/Khcj0DSNKFPa74j/tC uwOUqnWHQCjZv9TE/uipQ5nn6OUDhmHRHEiA5BX6riIPR5q3R3QW0fYDZk6dYGiW SAZPZWrmjxox3uxwIYszBje9MIw08L9XufjETNfK1JL68Lh0Y2iSr/JqodLDRADZ wrLL53ItT7RVrPSobkaqpPu42cxK8rHxkriu+aUZFHR6Okrn4MJA4mCzAfyTCRef WH+7swa+3WqPUzVSi3QSZ4G8+tk9FgrIM0NzbeLNt5tuyDtQPnO0gVDxVfFcOdQf fsvDgIIPz87hnhQZziTSUPlSgSNGOWjKschxttdouSrE3oLLiek= -----END CERTIFICATE-----Generated at Tue Sep 22 20:59:54 2026 by rpki-client