$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft File: 8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft (raw, json) Hash identifier: 4FHuXyJc1sB9UuBxNlG7BbTv86m0LOIcEVYUNCATiJc= Subject key identifier: 79:23:64:81:15:EA:2F:DC:70:60:34:8E:3F:87:C1:13:86:62:0A:9C Authority key identifier: 8F:C6:CD:0E:7E:E1:3F:AE:7E:B8:F7:4C:BF:3D:39:8E:E3:4F:03:BB Certificate issuer: /CN=8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB Certificate serial: 25066A35B8DC778133B6A229B2D932CDC7EAC8A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft Manifest number: BF Signing time: Mon 21 Sep 2026 08:37:12 +0000 Manifest this update: Mon 21 Sep 2026 08:32:12 +0000 Manifest next update: Tue 22 Sep 2026 09:40:12 +0000 Files and hashes: 1: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: 3eBDLV5ffWUDrJGtZH95s4QphGUZB6+B7Vc+acd6df4=) 2: 8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl (hash: G6/cXgnvmDmUr/rElFDEohqyGHUK68CfAmCborZGmio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:06:6a:35:b8:dc:77:81:33:b6:a2:29:b2:d9:32:cd:c7:ea:c8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB Validity Not Before: Sep 21 08:32:12 2026 GMT Not After : Sep 22 09:40:12 2026 GMT Subject: CN=7923648115EA2FDC7060348E3F87C11386620A9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:0c:88:b3:f5:61:b9:4e:87:56:46:aa:b7: 1f:40:66:3f:fa:24:71:3d:d5:9c:72:f1:cb:eb:54: f7:c6:b7:05:f7:fd:b2:30:c2:65:f8:ae:3d:d0:b1: c9:11:b3:fa:6f:f6:01:71:e5:ef:df:cd:5e:0d:bb: ef:d9:57:55:54:8c:e0:95:7b:a9:0e:79:64:3a:8f: 0e:a3:97:9b:6d:7b:ee:ab:7c:5c:aa:83:dc:11:a0: 8a:06:25:2f:16:11:71:e6:b2:68:d0:66:98:ae:43: d2:39:34:cc:70:c4:26:cc:b6:b7:e5:9b:15:61:90: ae:a9:37:80:ad:e4:46:b2:15:7d:69:5b:10:d5:e6: 9b:1f:27:54:0a:68:a6:59:6e:74:9e:07:23:a5:ed: 56:d0:ba:1b:bd:4e:a1:64:aa:4a:07:bb:fa:7e:96: 39:41:ca:33:ba:6f:21:4f:85:c8:0f:e2:b5:f0:71: 95:a6:dd:2b:7e:42:c8:a1:f2:76:5a:c2:3d:36:ce: 28:ae:f4:8a:ba:55:e8:20:a6:f7:dd:39:58:90:c8: bc:f9:ac:07:d2:d7:8a:f7:b6:39:2d:a1:d1:f3:03: dc:86:f5:a6:a9:cc:29:b4:7c:7a:44:91:0f:6c:57: ff:c2:11:04:f4:90:c8:44:13:38:0e:02:f4:6b:25: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:23:64:81:15:EA:2F:DC:70:60:34:8E:3F:87:C1:13:86:62:0A:9C X509v3 Authority Key Identifier: keyid:8F:C6:CD:0E:7E:E1:3F:AE:7E:B8:F7:4C:BF:3D:39:8E:E3:4F:03:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:91:26:2b:7c:92:5c:ac:a5:df:ad:35:c5:ca:e6:15:bc:d7: a3:ed:de:dc:16:7b:30:78:95:09:60:20:6e:d8:42:b6:ab:f7: 5f:07:d7:53:58:42:ff:67:2a:6a:d1:2c:45:02:6e:a9:d7:ec: 57:95:ab:8a:c1:37:8d:97:c2:b9:4b:c2:0a:9b:f3:92:a8:39: a8:86:0d:16:83:c1:bf:56:bf:80:6c:33:bd:82:b1:0f:26:88: 79:fc:13:b1:4d:ce:82:76:0f:1e:0e:87:dd:88:cf:e6:36:c6: 19:02:39:db:87:89:7c:a9:cb:a8:d8:53:0b:82:1a:ea:50:2c: 77:4a:7b:d6:f0:d4:d1:f1:31:7e:30:8d:2f:2a:f9:f9:33:0c: e0:4d:b9:39:ab:d7:f7:06:9c:2d:51:e5:0f:83:d5:42:49:f2: d2:fa:0b:fa:8e:c8:94:2e:8b:7e:f4:e4:33:67:ac:a7:cd:fe: f4:c1:1a:66:e2:6c:73:33:28:b5:17:ee:f2:2c:d0:48:95:12: e9:24:ef:28:2f:07:24:da:65:ed:c7:14:71:ea:e3:fc:08:26: 5b:cb:8e:2c:9e:f1:ef:d9:94:29:a0:f9:cc:5e:8b:ff:35:c9: 70:16:02:0a:bc:7d:0b:bc:d1:22:b2:95:2a:c6:4e:10:98:d2: 25:da:e7:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJQZqNbjcd4EztqIpstkyzcfqyKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNkNEMEU3RUUxM0ZBRTdFQjhGNzRDQkYzRDM5OEVF MzRGMDNCQjAeFw0yNjA5MjEwODMyMTJaFw0yNjA5MjIwOTQwMTJaMDMxMTAvBgNV BAMTKDc5MjM2NDgxMTVFQTJGREM3MDYwMzQ4RTNGODdDMTEzODY2MjBBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdQyIs/VhuU6HVkaqtx9AZj/6 JHE91Zxy8cvrVPfGtwX3/bIwwmX4rj3QsckRs/pv9gFx5e/fzV4Nu+/ZV1VUjOCV e6kOeWQ6jw6jl5tte+6rfFyqg9wRoIoGJS8WEXHmsmjQZpiuQ9I5NMxwxCbMtrfl mxVhkK6pN4Ct5EayFX1pWxDV5psfJ1QKaKZZbnSeByOl7VbQuhu9TqFkqkoHu/p+ ljlByjO6byFPhcgP4rXwcZWm3St+Qsih8nZawj02ziiu9Iq6VeggpvfdOViQyLz5 rAfS14r3tjktodHzA9yG9aapzCm0fHpEkQ9sV//CEQT0kMhEEzgOAvRrJdiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeSNkgRXqL9xwYDSOP4fBE4ZiCpwwHwYDVR0j BBgwFoAUj8bNDn7hP65+uPdMvz05juNPA7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFmMjlhYmEtNmQ3Yy00NDM1LTk1M2MtNjA0OTg4NzMxNTk2LzAvOEZDNkNEMEU3 RUUxM0ZBRTdFQjhGNzRDQkYzRDM5OEVFMzRGMDNCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkM2Q0QwRTdFRTEzRkFFN0VCOEY3NENCRjNEMzk4RUUzNEYw M0JCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmMjlhYmEtNmQ3Yy00NDM1LTk1 M2MtNjA0OTg4NzMxNTk2LzAvOEZDNkNEMEU3RUUxM0ZBRTdFQjhGNzRDQkYzRDM5 OEVFMzRGMDNCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWRJit8klyspd+tNcXK5hW816Pt3twWezB4 lQlgIG7YQrar918H11NYQv9nKmrRLEUCbqnX7FeVq4rBN42XwrlLwgqb85KoOaiG DRaDwb9Wv4BsM72CsQ8miHn8E7FNzoJ2Dx4Oh92Iz+Y2xhkCOduHiXypy6jYUwuC GupQLHdKe9bw1NHxMX4wjS8q+fkzDOBNuTmr1/cGnC1R5Q+D1UJJ8tL6C/qOyJQu i3705DNnrKfN/vTBGmbibHMzKLUX7vIs0EiVEukk7ygvByTaZe3HFHHq4/wIJlvL jiye8e/ZlCmg+cxei/81yXAWAgq8fQu80SKylSrGThCY0iXa5+k= -----END CERTIFICATE-----Generated at Mon Sep 21 15:45:39 2026 by rpki-client