$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft File: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft (raw, json) Hash identifier: CFaw5xZ25DzT9l0XBWw6BPoZ80zBjSXRtvwHxBuMn4w= Subject key identifier: 6E:60:04:A4:FA:9F:8B:C5:31:93:E4:4E:F6:E6:40:53:86:80:81:A3 Authority key identifier: 8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C Certificate issuer: /CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Certificate serial: 4016AD7A96E64BF8FBF1B9336BE2184578662055 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft Manifest number: BF Signing time: Mon 21 Sep 2026 11:05:12 +0000 Manifest this update: Mon 21 Sep 2026 11:00:12 +0000 Manifest next update: Tue 22 Sep 2026 12:07:12 +0000 Files and hashes: 1: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 8luvuUZe/inH3n4D6OyQwwD6mGHctkX0bejCwUaYOvA=) 2: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: A0fye72fVewvJEctRltf+2Pc+fB290Pn79WveiWFgaQ=) 3: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl (hash: 8Nc7g/2i17Lltpp8mtLN/9ytOxk1YgoHyrYMh+Rv+tM=) 4: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: feHp+VgvlrJlDWnbvgKdK3q5FY7GJ/3YIOlQqsX2zUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:16:ad:7a:96:e6:4b:f8:fb:f1:b9:33:6b:e2:18:45:78:66:20:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Validity Not Before: Sep 21 11:00:12 2026 GMT Not After : Sep 22 12:07:12 2026 GMT Subject: CN=6E6004A4FA9F8BC53193E44EF6E64053868081A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:8c:df:8d:a0:d6:19:f2:7e:f6:89:75:2a: eb:ed:69:83:67:17:b6:ee:33:02:3c:99:74:f3:21: 32:8e:b6:ab:ac:fe:e1:db:c9:01:d2:ff:62:9b:ae: 8c:e7:a0:46:67:0b:d7:d3:3a:bf:9c:6d:55:cf:da: 15:2e:bd:f9:9c:c2:76:fb:38:aa:c5:24:b5:cf:96: 8e:eb:52:6c:0c:f4:47:6b:1e:1a:4f:f8:3f:f2:83: 42:29:cb:34:7e:34:fb:b0:66:be:5d:66:2c:dc:6c: 37:82:9a:32:00:5d:20:0c:a1:70:84:f0:f8:e4:7e: d7:a2:f8:98:22:12:ae:06:90:d4:3e:7d:e8:59:54: ba:b4:fe:d6:7f:94:f1:8b:ec:19:f1:9e:71:fd:9e: 9d:87:cb:0f:97:03:c6:97:ff:ad:dc:c9:2c:63:13: 15:5b:6d:c2:8e:0d:a9:ea:ca:b8:1c:cd:4a:33:ba: cd:a3:56:01:09:d1:00:4a:b2:b8:34:8e:b8:40:c8: 68:1f:f3:06:b6:fd:73:30:3f:7f:cb:ec:e1:e1:9a: 86:3d:d9:15:7a:cd:02:21:a7:95:9e:6e:75:3c:72: 95:dc:7f:97:ff:fe:d1:1f:52:2b:86:53:31:25:3d: ec:56:de:eb:7b:e9:6e:50:c4:7d:17:d5:31:5e:82: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:60:04:A4:FA:9F:8B:C5:31:93:E4:4E:F6:E6:40:53:86:80:81:A3 X509v3 Authority Key Identifier: keyid:8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fe:ba:95:3a:2d:80:33:d5:15:c0:7d:9a:21:df:94:c3:43: e7:6c:0d:8c:75:29:ef:b3:07:b1:76:3e:59:6b:0c:ee:36:86: b1:56:ee:ed:52:8b:7e:76:77:61:ba:58:3d:d4:e3:f4:53:5e: a0:cc:de:23:e9:a6:2c:2b:75:39:8b:78:c6:65:08:99:6b:e0: 1c:44:d0:ea:fd:a3:0f:68:9c:d4:8a:fd:39:db:1b:69:d2:18: 43:3b:2f:c5:db:6c:f4:49:dc:7a:70:f1:db:2f:55:f6:b8:8a: 3e:ae:9b:79:44:8d:57:b8:16:53:11:aa:ed:5f:94:2a:db:ea: b2:7e:33:ae:3c:59:2a:84:df:37:9d:d0:e3:c4:fa:db:62:53: ae:66:c3:d1:c5:6e:cb:e5:8c:7e:bf:48:0c:5b:00:59:31:3f: 3d:18:90:e5:15:16:1b:64:10:73:61:99:9d:95:e5:98:ea:16: 35:1a:ee:c5:21:d8:2c:7f:a0:9b:d3:45:d2:a4:58:b4:11:32: 62:d8:6b:18:53:6c:0e:4a:2e:a2:06:1c:5c:eb:33:9c:5e:ef: c6:da:ab:6a:4b:c4:fd:82:10:d6:58:c4:d9:88:8b:4b:ae:fb: ac:09:b4:26:7d:af:cc:e1:ad:63:d8:dd:30:d1:80:9f:d0:4b: b8:ec:18:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBatepbmS/j78bkza+IYRXhmIFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0 MUUyQkUxQzAeFw0yNjA5MjExMTAwMTJaFw0yNjA5MjIxMjA3MTJaMDMxMTAvBgNV BAMTKDZFNjAwNEE0RkE5RjhCQzUzMTkzRTQ0RUY2RTY0MDUzODY4MDgxQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxEYzfjaDWGfJ+9ol1KuvtaYNn F7buMwI8mXTzITKOtqus/uHbyQHS/2KbroznoEZnC9fTOr+cbVXP2hUuvfmcwnb7 OKrFJLXPlo7rUmwM9EdrHhpP+D/yg0IpyzR+NPuwZr5dZizcbDeCmjIAXSAMoXCE 8Pjkftei+JgiEq4GkNQ+fehZVLq0/tZ/lPGL7BnxnnH9np2Hyw+XA8aX/63cySxj ExVbbcKODanqyrgczUozus2jVgEJ0QBKsrg0jrhAyGgf8wa2/XMwP3/L7OHhmoY9 2RV6zQIhp5WebnU8cpXcf5f//tEfUiuGUzElPexW3ut76W5QxH0X1TFegnn1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbmAEpPqfi8Uxk+RO9uZAU4aAgaMwHwYDVR0j BBgwFoAUiwz4fyNJ/IeH71LjsK2A4UHivhwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlhNDAwODktNjA0MS00NWVkLThlNDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0Yy MzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0MUUyQkUxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjBDRjg3RjIzNDlGQzg3ODdFRjUyRTNCMEFEODBFMTQxRTJC RTFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgw RTE0MUUyQkUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIz+upU6LYAz1RXAfZoh35TDQ+dsDYx1Ke+z B7F2PllrDO42hrFW7u1Si352d2G6WD3U4/RTXqDM3iPppiwrdTmLeMZlCJlr4BxE 0Or9ow9onNSK/TnbG2nSGEM7L8XbbPRJ3Hpw8dsvVfa4ij6um3lEjVe4FlMRqu1f lCrb6rJ+M648WSqE3zed0OPE+ttiU65mw9HFbsvljH6/SAxbAFkxPz0YkOUVFhtk EHNhmZ2V5ZjqFjUa7sUh2Cx/oJvTRdKkWLQRMmLYaxhTbA5KLqIGHFzrM5xe78ba q2pLxP2CENZYxNmIi0uu+6wJtCZ9r8zhrWPY3TDRgJ/QS7jsGNo= -----END CERTIFICATE-----Generated at Mon Sep 21 19:49:24 2026 by rpki-client