$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft File: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft (raw, json) Hash identifier: BAkdB6EQZgDhspXHEczKU6iOkFvbytaswLdPCuUXt+g= Subject key identifier: B9:F6:E2:99:F0:31:F8:AA:43:93:89:B0:DC:FC:2A:85:D4:A9:BB:C2 Authority key identifier: 8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 Certificate issuer: /CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Certificate serial: 24779C34208C21017116538A1E9BC535D4609BC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft Manifest number: BE Signing time: Mon 21 Sep 2026 17:33:21 +0000 Manifest this update: Mon 21 Sep 2026 17:28:21 +0000 Manifest next update: Tue 22 Sep 2026 17:55:21 +0000 Files and hashes: 1: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl (hash: V1lJEFcSlMz49iJT//ksZgwxid6T/gAbw4zcnKrefrQ=) 2: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: +9zDigXxWl0KHwFSHRJ8vK8jloGtZKIEVRmfMrusxTQ=) 3: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5uR0k9um/4xZDeF/1OtaEeN9gAbE1nIuTIkh38U5XcA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:77:9c:34:20:8c:21:01:71:16:53:8a:1e:9b:c5:35:d4:60:9b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Validity Not Before: Sep 21 17:28:21 2026 GMT Not After : Sep 22 17:55:21 2026 GMT Subject: CN=B9F6E299F031F8AA439389B0DCFC2A85D4A9BBC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:3f:7e:8e:bb:67:24:a5:39:c4:f5:ff:4f: 78:8d:3c:3d:50:65:51:4a:3e:52:af:6d:02:21:e7: db:a7:a7:b8:3e:fa:4b:95:b2:fc:3d:ca:93:52:eb: 28:7e:40:a1:3c:82:d8:fe:c0:96:56:b2:82:a5:45: ac:ea:c2:0b:d1:c6:71:01:ef:43:11:a4:00:84:fe: 4c:3d:1b:8e:ef:a7:0b:a1:b2:75:38:d4:2f:1b:ef: cc:2e:b3:e4:19:e7:4a:16:fd:6a:44:03:7b:a2:55: 77:5d:83:d6:87:00:34:d4:38:89:fc:57:fa:9a:fd: 17:b6:20:6d:25:33:9a:d3:31:fd:49:fe:cf:e5:e7: d5:3c:ea:d8:fe:80:b1:28:92:b4:86:f9:9b:9e:b2: a2:10:a2:a1:3e:02:19:0e:77:15:0b:92:a1:06:cd: 2c:2e:af:19:5e:c0:7f:13:4e:3a:7b:fe:46:ba:e3: 60:bc:8f:4a:37:b1:15:7b:9c:61:8a:33:65:0e:c0: 68:24:4f:9f:9d:cb:39:49:59:01:40:88:2c:ce:b8: ef:48:25:74:32:60:0f:ab:ae:a5:6e:25:b1:0f:0f: ce:1e:e1:f0:b9:f1:b8:e9:7a:9d:01:35:70:28:e3: 12:07:c0:e6:b7:39:13:91:f7:b9:99:0b:0d:c2:85: 95:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F6:E2:99:F0:31:F8:AA:43:93:89:B0:DC:FC:2A:85:D4:A9:BB:C2 X509v3 Authority Key Identifier: keyid:8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8e:8e:b4:7f:74:c7:52:29:ca:52:0c:30:15:0a:b6:02:32: 56:51:53:27:5d:f2:81:43:89:57:33:88:b8:f8:99:09:b1:35: 2d:d8:77:0e:a8:5d:e2:1b:8a:ce:41:65:0b:53:36:6b:40:13: 9e:2a:85:ed:3f:4a:21:71:5f:8c:2e:42:5c:59:a0:ae:94:74: f5:bc:ca:7e:05:8f:cb:15:02:69:a4:5d:d6:ca:0b:d2:f8:24: e6:60:00:95:ff:bc:2a:82:d2:65:b4:18:d4:75:f8:9c:bd:29: 2f:2e:4b:00:c5:1d:ca:db:2b:16:9a:db:7a:63:19:ce:07:79: 23:5e:39:e8:77:86:e5:eb:49:ec:a8:6c:29:ca:df:7f:16:0e: 36:d5:eb:3f:8b:4f:54:3f:08:97:b8:8b:cf:4c:e4:cf:86:25: 73:1d:f1:0a:1f:0b:26:5b:64:d7:f9:c5:ce:61:12:a3:96:c8: 21:9a:a8:8a:57:a1:36:32:d9:3c:dd:c2:d2:10:9c:81:9f:ad: ab:12:2e:22:a0:51:56:c3:7b:ef:4e:b7:b1:a6:a9:97:26:24: 85:58:80:ce:b3:bf:74:a3:dc:03:04:78:d9:15:04:3f:5c:df: 1f:e5:8d:72:1e:11:08:91:0d:61:aa:c6:df:e3:fc:1c:9d:c8: 8a:0c:a3:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHecNCCMIQFxFlOKHpvFNdRgm8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1 NjZEMDA2MDAeFw0yNjA5MjExNzI4MjFaFw0yNjA5MjIxNzU1MjFaMDMxMTAvBgNV BAMTKEI5RjZFMjk5RjAzMUY4QUE0MzkzODlCMERDRkMyQTg1RDRBOUJCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUD9+jrtnJKU5xPX/T3iNPD1Q ZVFKPlKvbQIh59unp7g++kuVsvw9ypNS6yh+QKE8gtj+wJZWsoKlRazqwgvRxnEB 70MRpACE/kw9G47vpwuhsnU41C8b78wus+QZ50oW/WpEA3uiVXddg9aHADTUOIn8 V/qa/Re2IG0lM5rTMf1J/s/l59U86tj+gLEokrSG+ZuesqIQoqE+AhkOdxULkqEG zSwurxlewH8TTjp7/ka642C8j0o3sRV7nGGKM2UOwGgkT5+dyzlJWQFAiCzOuO9I JXQyYA+rrqVuJbEPD84e4fC58bjpep0BNXAo4xIHwOa3OROR97mZCw3ChZX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUufbimfAx+KpDk4mw3PwqhdSpu8IwHwYDVR0j BBgwFoAUjx9Sxju4dITUxenYVRrnZ1ZtAGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWE4ZjY5ZjctOTMzMi00Y2Q0LWIzZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYz QkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1NjZEMDA2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjFGNTJDNjNCQjg3NDg0RDRDNUU5RDg1NTFBRTc2NzU2NkQw MDYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3 Njc1NjZEMDA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+OjrR/dMdSKcpSDDAVCrYCMlZRUydd8oFD iVcziLj4mQmxNS3Ydw6oXeIbis5BZQtTNmtAE54qhe0/SiFxX4wuQlxZoK6UdPW8 yn4Fj8sVAmmkXdbKC9L4JOZgAJX/vCqC0mW0GNR1+Jy9KS8uSwDFHcrbKxaa23pj Gc4HeSNeOeh3huXrSeyobCnK338WDjbV6z+LT1Q/CJe4i89M5M+GJXMd8QofCyZb ZNf5xc5hEqOWyCGaqIpXoTYy2TzdwtIQnIGfrasSLiKgUVbDe+9Ot7GmqZcmJIVY gM6zv3Sj3AMEeNkVBD9c3x/ljXIeEQiRDWGqxt/j/BydyIoMo/4= -----END CERTIFICATE-----Generated at Tue Sep 22 10:51:39 2026 by rpki-client