$ rpki-client -vvvf rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft File: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft (raw, json) Hash identifier: mhA7wCRtgCJ+8CqcATPWaRmFC2NJE2mFxxMDOH9dCPo= Subject key identifier: 2E:28:3C:02:AC:40:AB:BE:E5:52:93:16:73:64:5C:5F:BF:37:53:B3 Authority key identifier: 86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B Certificate issuer: /CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Certificate serial: 56A87FB59BE026897EA8C36BF369D79FD0FD34A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft Manifest number: BC Signing time: Mon 21 Sep 2026 11:30:42 +0000 Manifest this update: Mon 21 Sep 2026 11:25:42 +0000 Manifest next update: Tue 22 Sep 2026 13:49:42 +0000 Files and hashes: 1: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl (hash: qrvNjhYXw+h7Mk39PE0oAya6xKVfVNk+tN4VyqmkBkI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a8:7f:b5:9b:e0:26:89:7e:a8:c3:6b:f3:69:d7:9f:d0:fd:34:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Validity Not Before: Sep 21 11:25:42 2026 GMT Not After : Sep 22 13:49:42 2026 GMT Subject: CN=2E283C02AC40ABBEE552931673645C5FBF3753B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dd:e8:6c:5c:19:50:96:39:c2:32:18:34:2a: 3c:27:a3:58:05:1d:9a:62:b6:1b:13:ab:4f:95:88: 9c:08:bb:a9:2c:a0:b2:2c:04:ac:91:04:aa:f0:28: 48:0b:37:5d:5e:7d:21:30:43:b5:00:8a:5d:4b:cc: 20:e0:9a:06:ca:e7:f0:66:8e:7c:cd:a9:57:6d:da: 9d:97:82:fc:2b:24:45:5b:9c:5a:aa:da:3a:ca:0b: 6e:86:86:a6:29:7e:4e:d4:36:a9:0b:dd:fe:56:f7: 24:a9:33:35:70:d7:f7:57:21:ca:fb:59:e6:62:1b: 56:db:52:f6:ff:81:10:88:f6:89:e0:ec:04:51:74: 22:f8:24:f5:46:2a:4a:eb:3e:3c:11:8d:7c:3a:9b: f4:e3:49:3f:10:9d:b8:7d:b6:e0:98:ce:13:a0:61: 4d:be:7a:5f:98:79:95:58:71:97:3b:f1:a6:48:03: 03:c3:fd:17:06:dc:40:fb:98:28:35:b8:ad:fd:f8: 91:77:72:c7:73:12:15:cc:13:29:1c:99:5d:40:38: b7:f9:8c:b6:4a:94:16:4b:32:ca:c9:46:f1:41:52: 00:f2:03:6b:6f:b3:e3:1e:50:3f:c5:c9:25:a5:b6: d4:53:c4:22:e2:12:e7:a5:1a:b9:a2:a9:5c:46:5d: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:28:3C:02:AC:40:AB:BE:E5:52:93:16:73:64:5C:5F:BF:37:53:B3 X509v3 Authority Key Identifier: keyid:86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:09:84:71:2c:7a:76:df:9f:5c:f3:1c:ba:b7:27:a8:3b:c0: 22:8c:18:97:92:8c:0a:df:2f:dd:de:b2:93:b2:71:8b:80:70: f6:36:ab:b2:05:fd:d1:65:53:fc:16:9b:4c:ac:77:9e:9a:7e: 26:7e:c8:52:f1:f9:15:d3:3a:a6:06:dd:61:26:ab:91:70:c3: 66:f3:09:8b:54:90:01:d0:0b:8f:59:48:ce:b0:50:1a:b3:cc: 94:98:04:7e:4c:e0:80:41:00:bf:f8:d1:7b:af:80:78:cd:84: 91:86:74:01:5d:7d:2c:52:f3:a1:5f:09:41:35:ee:b2:b7:31: 1f:9a:fe:d7:13:10:50:db:13:b2:23:5f:df:cc:78:c6:6e:dd: 86:d6:21:83:07:ac:9c:e5:6e:97:8f:6f:db:1d:74:57:71:5d: 18:35:6b:f0:ec:4d:14:d0:61:50:33:15:e9:4d:cd:78:48:58: 67:0a:3c:92:8c:87:db:94:b2:ca:f9:ca:6a:20:54:24:2f:97: c5:5c:35:38:3f:bc:56:e5:59:f0:46:48:ce:f1:69:ea:e3:dd: 0e:6d:20:2d:2c:2f:0a:d9:aa:ab:5b:02:e9:1f:f0:24:6f:94: 2d:aa:00:9f:48:db:fa:46:44:56:b6:bc:77:13:95:a0:43:51: fd:4e:9f:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqh/tZvgJol+qMNr82nXn9D9NKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTEx RjAzREMxQjAeFw0yNjA5MjExMTI1NDJaFw0yNjA5MjIxMzQ5NDJaMDMxMTAvBgNV BAMTKDJFMjgzQzAyQUM0MEFCQkVFNTUyOTMxNjczNjQ1QzVGQkYzNzUzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV3ehsXBlQljnCMhg0Kjwno1gF HZpithsTq0+ViJwIu6ksoLIsBKyRBKrwKEgLN11efSEwQ7UAil1LzCDgmgbK5/Bm jnzNqVdt2p2XgvwrJEVbnFqq2jrKC26GhqYpfk7UNqkL3f5W9ySpMzVw1/dXIcr7 WeZiG1bbUvb/gRCI9ong7ARRdCL4JPVGKkrrPjwRjXw6m/TjST8Qnbh9tuCYzhOg YU2+el+YeZVYcZc78aZIAwPD/RcG3ED7mCg1uK39+JF3csdzEhXMEykcmV1AOLf5 jLZKlBZLMsrJRvFBUgDyA2tvs+MeUD/FySWlttRTxCLiEuelGrmiqVxGXTtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULig8AqxAq77lUpMWc2RcX783U7MwHwYDVR0j BBgwFoAUhnPiaY/LUromE1kqrPfi4R8D3BswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY5ZjI5ODgtY2FiMy00NWFhLTk3ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4 RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTExRjAzREMxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjczRTI2OThGQ0I1MkJBMjYxMzU5MkFBQ0Y3RTJFMTFGMDNE QzFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0Uy RTExRjAzREMxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUJhHEsenbfn1zzHLq3J6g7wCKMGJeSjArf L93espOycYuAcPY2q7IF/dFlU/wWm0ysd56afiZ+yFLx+RXTOqYG3WEmq5Fww2bz CYtUkAHQC49ZSM6wUBqzzJSYBH5M4IBBAL/40XuvgHjNhJGGdAFdfSxS86FfCUE1 7rK3MR+a/tcTEFDbE7IjX9/MeMZu3YbWIYMHrJzlbpePb9sddFdxXRg1a/DsTRTQ YVAzFelNzXhIWGcKPJKMh9uUssr5ymogVCQvl8VcNTg/vFblWfBGSM7xaerj3Q5t IC0sLwrZqqtbAukf8CRvlC2qAJ9I2/pGRFa2vHcTlaBDUf1Onw4= -----END CERTIFICATE-----Generated at Tue Sep 22 08:34:22 2026 by rpki-client