$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft File: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft (raw, json) Hash identifier: dybw05GRzYFZMUfhRgbWshqZdy4aqjlmQVf2+lX1GUA= Subject key identifier: 2E:C0:5C:8F:AD:3C:51:70:24:C0:1E:4C:7B:F9:32:40:D0:70:B9:36 Authority key identifier: 8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB Certificate issuer: /CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Certificate serial: 3BF780E33DB465C1334E8D98BED9752DD3993B45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft Manifest number: FD Signing time: Mon 09 Nov 2026 09:32:38 +0000 Manifest this update: Mon 09 Nov 2026 09:27:38 +0000 Manifest next update: Tue 10 Nov 2026 10:36:38 +0000 Files and hashes: 1: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl (hash: M/yQUKtN1Cd76tvKAZrwyGigTbisbMMjgSCk2gwoMEY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f7:80:e3:3d:b4:65:c1:33:4e:8d:98:be:d9:75:2d:d3:99:3b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Validity Not Before: Nov 9 09:27:38 2026 GMT Not After : Nov 10 10:36:38 2026 GMT Subject: CN=2EC05C8FAD3C517024C01E4C7BF93240D070B936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c6:40:76:19:a1:ad:f9:81:6f:d7:18:48:50: 30:b1:b8:3e:cc:52:3c:55:c6:9e:92:8a:48:d7:c9: df:29:e1:a4:ce:5c:0e:3b:fd:5a:88:10:e7:79:9a: 99:5e:13:48:08:79:63:b4:b4:7a:8a:b5:db:34:05: 78:ba:6a:c9:cf:94:ab:ee:70:8f:91:1f:67:b3:d2: a9:46:a0:ba:b2:d7:f6:36:7d:d8:14:d3:2c:9d:88: 3c:41:1d:b5:2c:24:57:9b:cd:3d:19:48:01:a6:07: aa:31:3f:6d:d4:0e:ff:2c:51:45:b8:0a:f0:9c:c9: bc:07:84:6f:8d:ec:23:0c:3d:e5:31:89:61:7a:3c: 1a:4e:b2:7b:b1:e0:8a:f2:e8:f3:51:b6:03:5d:c3: 98:16:1f:a1:26:df:c4:41:af:b6:3a:66:fc:23:3f: c3:34:12:74:d9:5d:9a:ac:11:8a:07:e7:5d:fc:a1: 49:51:ed:9f:9f:33:97:f5:28:10:55:f4:98:b4:51: 10:c7:e9:0a:e7:b7:a4:12:43:40:ef:2f:66:dc:f8: 6a:70:4e:1e:55:43:63:a4:b6:f0:bf:af:7b:d1:30: 39:d4:6c:f1:71:b1:e7:77:fe:71:ca:97:28:da:22: cc:d7:43:ad:7f:de:ca:96:91:8c:25:be:43:95:18: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C0:5C:8F:AD:3C:51:70:24:C0:1E:4C:7B:F9:32:40:D0:70:B9:36 X509v3 Authority Key Identifier: keyid:8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:dc:5b:90:1b:3a:26:37:8d:7c:c9:9a:04:6b:2a:78:32:bd: 0a:3f:d4:ed:67:f1:a3:d6:43:07:cb:9b:33:29:c2:6d:4c:e1: 77:7f:04:75:a0:57:fb:67:12:a2:02:83:67:93:c5:db:26:94: d2:3a:cb:45:06:8b:13:9e:24:f8:18:93:fa:0c:3d:22:04:fc: 0e:de:00:ee:e0:fd:65:72:80:9f:ee:16:3f:92:ca:0d:73:15: ae:40:aa:82:fe:c2:da:6d:af:d7:92:9f:6a:1f:43:02:e5:06: 07:57:d3:7b:f5:ab:30:7b:97:dc:ab:5b:b7:43:71:98:7c:24: 81:62:8c:7c:75:60:41:58:98:4c:c1:db:75:14:3d:73:45:34: 75:7e:54:0e:d7:4b:f0:da:8a:48:ec:92:06:94:d6:4b:38:d3: 1e:df:11:38:63:fd:e4:5a:9a:3d:2d:95:a6:1a:07:9f:f9:dc: bd:6f:ba:d9:7e:7a:38:36:b3:63:83:22:c6:98:5c:ed:d1:01: ac:93:e6:8e:4e:c9:68:0d:71:ca:08:7d:29:67:6f:11:16:f7: 34:d5:af:fa:6d:71:26:32:0e:2e:1a:04:a7:66:19:da:66:0e: 06:ea:4a:ec:fd:b7:0d:7b:cb:f4:cc:a3:75:cc:f4:6d:ed:60: 81:11:f9:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/eA4z20ZcEzTo2Yvtl1LdOZO0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5 MzREOTlEQjAeFw0yNjExMDkwOTI3MzhaFw0yNjExMTAxMDM2MzhaMDMxMTAvBgNV BAMTKDJFQzA1QzhGQUQzQzUxNzAyNEMwMUU0QzdCRjkzMjQwRDA3MEI5MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSxkB2GaGt+YFv1xhIUDCxuD7M UjxVxp6SikjXyd8p4aTOXA47/VqIEOd5mpleE0gIeWO0tHqKtds0BXi6asnPlKvu cI+RH2ez0qlGoLqy1/Y2fdgU0yydiDxBHbUsJFebzT0ZSAGmB6oxP23UDv8sUUW4 CvCcybwHhG+N7CMMPeUxiWF6PBpOsnux4Iry6PNRtgNdw5gWH6Em38RBr7Y6Zvwj P8M0EnTZXZqsEYoH5138oUlR7Z+fM5f1KBBV9Ji0URDH6Qrnt6QSQ0DvL2bc+Gpw Th5VQ2OktvC/r3vRMDnUbPFxsed3/nHKlyjaIszXQ61/3sqWkYwlvkOVGDG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULsBcj608UXAkwB5Me/kyQNBwuTYwHwYDVR0j BBgwFoAUisGM4zWXeqCpvJrv/vUwyJNNmdswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5Y2NlYjYtYTRlNy00ZTgyLTg4YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMz NTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5MzREOTlEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUMxOENFMzM1OTc3QUEwQTlCQzlBRUZGRUY1MzBDODkzNEQ5 OURCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMw Qzg5MzREOTlEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPcW5AbOiY3jXzJmgRrKngyvQo/1O1n8aPW QwfLmzMpwm1M4Xd/BHWgV/tnEqICg2eTxdsmlNI6y0UGixOeJPgYk/oMPSIE/A7e AO7g/WVygJ/uFj+Syg1zFa5AqoL+wtptr9eSn2ofQwLlBgdX03v1qzB7l9yrW7dD cZh8JIFijHx1YEFYmEzB23UUPXNFNHV+VA7XS/DaikjskgaU1ks40x7fEThj/eRa mj0tlaYaB5/53L1vutl+ejg2s2ODIsaYXO3RAayT5o5OyWgNccoIfSlnbxEW9zTV r/ptcSYyDi4aBKdmGdpmDgbqSuz9tw17y/TMo3XM9G3tYIER+cg= -----END CERTIFICATE-----Generated at Mon Nov 9 21:25:30 2026 by rpki-client