$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft File: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft (raw, json) Hash identifier: CDtCwLiIFR43GQB8FTysrRe7fDvjVkV3Vag0QB/qJ60= Subject key identifier: E8:7E:AC:FD:54:CF:C2:4C:2C:17:97:00:45:55:9B:77:10:5C:2D:CF Authority key identifier: 8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB Certificate issuer: /CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Certificate serial: 2457BE3AE5608253BC5053A2A85F261280211908 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft Manifest number: BC Signing time: Mon 21 Sep 2026 04:42:31 +0000 Manifest this update: Mon 21 Sep 2026 04:37:31 +0000 Manifest next update: Tue 22 Sep 2026 04:57:31 +0000 Files and hashes: 1: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl (hash: fIo8y9HKVFZ2+6e6s2b61MuUOXH+KM2kKLwV9zdJC14=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:57:be:3a:e5:60:82:53:bc:50:53:a2:a8:5f:26:12:80:21:19:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Validity Not Before: Sep 21 04:37:31 2026 GMT Not After : Sep 22 04:57:31 2026 GMT Subject: CN=E87EACFD54CFC24C2C17970045559B77105C2DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:bc:c7:11:89:9f:ab:b3:dc:b6:ae:06:34: 58:73:c8:25:ad:f3:67:49:34:8e:4f:70:98:21:4e: 8b:be:fa:cb:d0:07:cf:0e:78:6a:6b:66:b6:30:54: 66:b9:dd:42:0b:7b:69:55:85:84:56:24:d6:f7:e3: 99:5b:89:91:c6:bd:31:a5:2e:5e:23:90:d5:c3:1a: 89:cb:d7:8a:08:9d:8e:ae:aa:ad:4b:6e:30:63:93: 1e:96:a3:ec:d6:74:17:26:e9:60:bb:31:97:9d:91: 85:c0:47:1b:4c:d7:4c:64:18:cf:11:92:36:82:50: fc:2d:9b:48:48:b8:03:43:24:1f:df:22:d8:4b:9d: f0:4b:c0:47:d4:ba:8f:a1:d8:18:d5:ff:9b:ce:a1: 24:82:d3:43:2d:70:68:01:b1:06:42:3c:9b:0f:df: b9:85:ee:81:97:50:5a:c7:b5:69:41:e3:47:aa:84: 5e:0a:7b:f6:04:b2:cd:35:2a:a5:f7:6f:ef:ac:b3: da:18:ed:82:0e:26:2b:e2:db:c4:20:ca:12:59:06: 85:da:2a:a0:0b:e2:55:66:1c:a8:c5:31:ce:16:b8: 6e:d1:f0:5d:fa:e8:d0:83:be:de:aa:e2:09:af:5d: 9d:b2:b3:ee:fd:15:54:62:39:6f:dd:12:16:7a:85: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7E:AC:FD:54:CF:C2:4C:2C:17:97:00:45:55:9B:77:10:5C:2D:CF X509v3 Authority Key Identifier: keyid:8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:34:34:62:14:75:d0:69:b1:ac:96:a4:78:76:ee:69:61:01: 1b:7e:b5:5c:11:96:3f:87:62:b4:ea:24:4d:99:75:c8:08:7f: 9f:dd:6c:a5:c0:7d:ce:b0:29:30:52:cd:d3:78:c5:97:a6:e7: 37:16:ba:9d:8f:24:3f:c6:3a:99:04:16:76:5a:d8:a5:43:00: 96:79:6e:69:ad:6f:c4:5a:40:05:2f:46:d7:fb:ed:58:fd:70: 52:21:81:b4:12:ef:a5:8c:08:3b:fe:80:25:d0:fb:d1:35:9c: a9:fa:b1:7e:a2:c2:63:a7:40:b3:b6:7f:fd:c2:ca:fb:63:89: 80:6c:03:7f:b8:5c:cc:6d:ee:5c:1c:3f:97:64:4d:71:47:f9: 06:7b:b2:ab:f6:c2:5f:46:d1:28:be:91:0b:b0:7b:50:5c:5e: 6a:7a:89:1b:dc:3b:69:3d:48:46:61:15:d1:ff:6f:d3:d2:5b: 17:6b:bb:0e:b2:37:05:83:fb:5d:5c:34:d9:45:1a:4b:b8:71: 80:48:5e:cd:c6:c6:2f:c9:86:c3:9a:13:0e:ae:fa:c0:10:8a: da:08:65:d9:3a:00:49:78:73:d5:02:38:d9:43:0e:1e:eb:e7: 23:ce:7d:44:4b:52:0b:b9:3e:2a:86:25:10:4c:6f:89:6f:b4: d6:33:9d:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJFe+OuVgglO8UFOiqF8mEoAhGQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5 MzREOTlEQjAeFw0yNjA5MjEwNDM3MzFaFw0yNjA5MjIwNDU3MzFaMDMxMTAvBgNV BAMTKEU4N0VBQ0ZENTRDRkMyNEMyQzE3OTcwMDQ1NTU5Qjc3MTA1QzJEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ZrzHEYmfq7Pctq4GNFhzyCWt 82dJNI5PcJghTou++svQB88OeGprZrYwVGa53UILe2lVhYRWJNb345lbiZHGvTGl Ll4jkNXDGonL14oInY6uqq1LbjBjkx6Wo+zWdBcm6WC7MZedkYXARxtM10xkGM8R kjaCUPwtm0hIuANDJB/fIthLnfBLwEfUuo+h2BjV/5vOoSSC00MtcGgBsQZCPJsP 37mF7oGXUFrHtWlB40eqhF4Ke/YEss01KqX3b++ss9oY7YIOJivi28QgyhJZBoXa KqAL4lVmHKjFMc4WuG7R8F366NCDvt6q4gmvXZ2ys+79FVRiOW/dEhZ6heGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6H6s/VTPwkwsF5cARVWbdxBcLc8wHwYDVR0j BBgwFoAUisGM4zWXeqCpvJrv/vUwyJNNmdswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5Y2NlYjYtYTRlNy00ZTgyLTg4YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMz NTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5MzREOTlEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUMxOENFMzM1OTc3QUEwQTlCQzlBRUZGRUY1MzBDODkzNEQ5 OURCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMw Qzg5MzREOTlEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFk0NGIUddBpsayWpHh27mlhARt+tVwRlj+H YrTqJE2ZdcgIf5/dbKXAfc6wKTBSzdN4xZem5zcWup2PJD/GOpkEFnZa2KVDAJZ5 bmmtb8RaQAUvRtf77Vj9cFIhgbQS76WMCDv+gCXQ+9E1nKn6sX6iwmOnQLO2f/3C yvtjiYBsA3+4XMxt7lwcP5dkTXFH+QZ7sqv2wl9G0Si+kQuwe1BcXmp6iRvcO2k9 SEZhFdH/b9PSWxdruw6yNwWD+11cNNlFGku4cYBIXs3Gxi/JhsOaEw6u+sAQitoI Zdk6AEl4c9UCONlDDh7r5yPOfURLUgu5PiqGJRBMb4lvtNYzna0= -----END CERTIFICATE-----Generated at Mon Sep 21 08:24:06 2026 by rpki-client