$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft File: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft (raw, json) Hash identifier: wW/ExPXzC8hgm05szEbb5T1q+RVCkPFZM4PGBvI/sjQ= Subject key identifier: 06:1B:D2:10:AF:66:00:F2:02:85:63:18:38:FE:0E:82:CF:CF:DA:30 Authority key identifier: 8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 Certificate issuer: /CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Certificate serial: 33A36DA60A9C3D7B5EFD03D4A4989A45E447C203 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 01:12:19 +0000 Manifest this update: Thu 24 Sep 2026 01:07:19 +0000 Manifest next update: Fri 25 Sep 2026 02:24:19 +0000 Files and hashes: 1: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl (hash: uyepxclR9UPWjGAg2sd7IKxQRstbUHBU8xrneuDCXko=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: NR10Bfbwh6SYopHFVcr7fLYC1ZrjLqSPhi8hfWEGSfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a3:6d:a6:0a:9c:3d:7b:5e:fd:03:d4:a4:98:9a:45:e4:47:c2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Validity Not Before: Sep 24 01:07:19 2026 GMT Not After : Sep 25 02:24:19 2026 GMT Subject: CN=061BD210AF6600F20285631838FE0E82CFCFDA30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:f8:08:ff:78:db:a6:3d:a1:01:02:3a:61: 01:90:c9:19:31:41:cf:56:65:f1:c7:e8:86:1a:43: 36:27:98:fc:e1:f1:b2:87:1a:71:c4:2b:30:4c:7c: 2a:3b:77:ee:ae:53:21:23:cb:52:cc:36:0e:1b:a4: b5:e8:7e:8b:70:6b:f9:05:a7:a6:dc:80:f4:97:45: bf:36:49:5d:06:6a:78:0f:ed:e4:0a:c0:b0:57:62: a4:d7:e7:69:18:23:3c:69:89:4c:db:18:4c:60:a6: 77:1c:40:33:ba:6d:98:25:9a:62:0a:55:ca:71:0c: 39:b6:92:c1:f3:83:c7:05:88:4f:99:c4:98:db:62: 27:ae:b9:bb:63:f0:0d:9a:83:71:ab:5a:c5:bb:f0: 14:3c:36:2e:96:d1:43:d3:ab:16:99:2e:60:bb:6e: 16:e3:66:53:dc:e5:52:be:54:11:dc:77:d7:5f:1a: 1a:39:e3:13:4b:5e:b4:41:fb:49:48:1c:fd:92:fe: 63:2e:7d:5b:7a:d8:cd:02:e6:e2:2a:be:85:ca:ed: 46:56:0a:61:13:3e:ee:a3:58:be:69:7e:d0:7a:0a: ca:c4:4b:bc:da:94:7b:f4:01:29:5a:42:13:4e:48: ae:91:e9:69:06:47:d2:e6:61:07:7f:b2:32:03:9f: e9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1B:D2:10:AF:66:00:F2:02:85:63:18:38:FE:0E:82:CF:CF:DA:30 X509v3 Authority Key Identifier: keyid:8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:aa:65:25:ff:70:5a:10:bd:f9:22:18:eb:ff:f6:32:0a:18: 9c:ef:41:39:81:5f:c4:6a:d5:03:34:50:fc:23:d5:2e:90:62: 10:a6:8b:98:8b:3f:1f:f9:74:d5:0f:92:37:8d:73:59:e2:bf: 98:f7:be:fb:e0:0b:9e:68:80:d7:70:e5:8e:72:50:46:1a:be: 07:1c:3f:30:82:f8:4d:18:71:f5:95:0d:0a:4f:3e:67:5e:39: d8:07:51:60:44:88:13:e4:d7:54:15:8f:df:a3:59:b0:a8:b0: 1c:ce:03:c2:41:fb:b6:2b:8e:1b:9a:cb:87:ca:fd:95:47:90: 40:61:26:50:c0:20:a3:01:f1:15:90:fa:94:02:9d:90:81:14: c7:84:fc:fb:48:07:db:12:b9:d9:c5:c2:9a:f4:15:c5:69:0b: 7a:ca:b2:bb:9d:1c:67:ac:ce:d3:3b:47:3d:67:13:35:a0:dc: 5b:9c:62:ec:8c:00:ed:56:fa:cd:4a:d0:91:fb:28:47:57:a1: c5:d0:eb:f4:21:d7:63:08:b4:f1:fd:93:2d:e6:01:ca:f7:c4: 03:49:ab:75:26:e7:4e:d5:84:5c:8e:7c:41:11:23:7e:06:67: d3:4e:dd:4b:c1:b5:14:1c:b3:15:86:7d:70:97:6d:74:f9:83: 74:7e:fc:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6NtpgqcPXte/QPUpJiaReRHwgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5 QjFCNDU3MzAeFw0yNjA5MjQwMTA3MTlaFw0yNjA5MjUwMjI0MTlaMDMxMTAvBgNV BAMTKDA2MUJEMjEwQUY2NjAwRjIwMjg1NjMxODM4RkUwRTgyQ0ZDRkRBMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCop/gI/3jbpj2hAQI6YQGQyRkx Qc9WZfHH6IYaQzYnmPzh8bKHGnHEKzBMfCo7d+6uUyEjy1LMNg4bpLXofotwa/kF p6bcgPSXRb82SV0GangP7eQKwLBXYqTX52kYIzxpiUzbGExgpnccQDO6bZglmmIK VcpxDDm2ksHzg8cFiE+ZxJjbYieuubtj8A2ag3GrWsW78BQ8Ni6W0UPTqxaZLmC7 bhbjZlPc5VK+VBHcd9dfGho54xNLXrRB+0lIHP2S/mMufVt62M0C5uIqvoXK7UZW CmETPu6jWL5pftB6CsrES7zalHv0ASlaQhNOSK6R6WkGR9LmYQd/sjIDn+lFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBhvSEK9mAPIChWMYOP4Ogs/P2jAwHwYDVR0j BBgwFoAUjRqU6g+f1RSOCcrgowe9yZsbRXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2MjExMWQtMGExMy00NDA3LWFmMzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEw RjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5QjFCNDU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDFBOTRFQTBGOUZENTE0OEUwOUNBRTBBMzA3QkRDOTlCMUI0 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JE Qzk5QjFCNDU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqqZSX/cFoQvfkiGOv/9jIKGJzvQTmBX8Rq 1QM0UPwj1S6QYhCmi5iLPx/5dNUPkjeNc1niv5j3vvvgC55ogNdw5Y5yUEYavgcc PzCC+E0YcfWVDQpPPmdeOdgHUWBEiBPk11QVj9+jWbCosBzOA8JB+7Yrjhuay4fK /ZVHkEBhJlDAIKMB8RWQ+pQCnZCBFMeE/PtIB9sSudnFwpr0FcVpC3rKsrudHGes ztM7Rz1nEzWg3FucYuyMAO1W+s1K0JH7KEdXocXQ6/Qh12MItPH9ky3mAcr3xANJ q3Um507VhFyOfEERI34GZ9NO3UvBtRQcsxWGfXCXbXT5g3R+/LQ= -----END CERTIFICATE-----Generated at Thu Sep 24 09:27:43 2026 by rpki-client