$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft File: 8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft (raw, json) Hash identifier: 6F+5Amv1NCd23DAwTkxC5P9ynI/87wmgrsJb2o3MNzE= Subject key identifier: 17:06:BC:AE:C0:8C:3C:04:EC:75:A8:02:8A:57:A0:E9:DC:E6:65:9F Authority key identifier: 8C:22:63:C9:1E:3F:B8:C4:95:75:01:B1:F6:69:A2:06:21:70:F9:E0 Certificate issuer: /CN=8C2263C91E3FB8C4957501B1F669A2062170F9E0 Certificate serial: 11B9D398BBB285A4296B88DAA32B885EDF881D04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 03:09:56 +0000 Manifest this update: Wed 23 Sep 2026 03:04:56 +0000 Manifest next update: Thu 24 Sep 2026 04:31:56 +0000 Files and hashes: 1: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: otMHW/iALeuwuRkuqs8HAjMUYbLDHM48rPe1iSU6XuA=) 2: 8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl (hash: M8eDBIJXEC1JsTPsz3o7rBLCWg9YaUWPdJpfEy9paD0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b9:d3:98:bb:b2:85:a4:29:6b:88:da:a3:2b:88:5e:df:88:1d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C2263C91E3FB8C4957501B1F669A2062170F9E0 Validity Not Before: Sep 23 03:04:56 2026 GMT Not After : Sep 24 04:31:56 2026 GMT Subject: CN=1706BCAEC08C3C04EC75A8028A57A0E9DCE6659F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:99:bd:5e:0e:d4:b2:8b:a3:52:c1:61:e2:fd: 41:12:e9:9f:8f:50:b1:cd:46:26:71:94:f3:e1:8a: 6f:f9:a5:3c:5a:5a:2a:08:ff:7f:b2:44:97:8f:fc: ed:02:92:b0:6a:25:31:54:15:c1:27:08:94:09:9b: 47:ea:6c:bf:65:43:18:39:07:9e:e2:33:13:29:0a: 87:f9:5d:a8:42:c0:41:0f:c5:7a:61:16:20:39:c6: 8d:19:17:9f:39:58:06:fa:bb:bd:81:92:6c:7f:80: 10:5c:5c:93:28:c3:09:15:6b:e8:dd:1c:c4:db:ab: 74:9b:fd:1b:cc:de:aa:8c:b6:14:11:0a:8b:a4:9a: 1f:a5:1f:b4:71:74:d3:bc:e4:e8:44:6c:42:cc:bc: 03:a2:91:d4:39:d5:d5:a2:ae:b8:c6:a2:9c:a3:3c: 98:fa:bb:9c:e3:0c:d3:74:a2:52:a9:2c:f6:d1:4a: 45:c2:16:26:2c:4c:6c:4a:33:44:0b:cd:58:c8:04: fd:a0:0c:b3:1b:69:84:65:b2:a6:44:1e:e0:e5:1f: 5c:bc:3c:f5:8b:8f:b7:c8:d6:58:28:5b:ac:2c:1b: 1c:8c:e5:0e:c4:c2:37:a0:2f:eb:63:9c:b7:6d:c8: 55:38:b2:18:94:e1:95:06:6f:6f:65:1f:43:47:90: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:06:BC:AE:C0:8C:3C:04:EC:75:A8:02:8A:57:A0:E9:DC:E6:65:9F X509v3 Authority Key Identifier: keyid:8C:22:63:C9:1E:3F:B8:C4:95:75:01:B1:F6:69:A2:06:21:70:F9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ab:8d:14:92:a9:4a:72:cd:2e:1e:88:9d:c8:a7:b3:26:06: 19:10:0c:c3:0d:ad:c8:38:25:a3:69:24:37:48:85:4d:bb:14: 6c:f4:a5:06:27:d2:b9:bb:f8:c9:80:cb:59:7d:ee:44:c2:bc: aa:c8:e6:a9:2f:bf:f5:0f:4e:b4:63:a6:8b:af:84:fc:30:da: 0b:8e:77:fb:45:30:19:2a:93:6d:bf:d1:8f:69:63:d9:b8:d0: 01:6d:ad:58:ec:f0:a3:f2:02:f9:6b:05:38:c3:1c:9a:dc:76: 67:f0:68:dd:6d:d4:af:82:d0:69:d4:85:81:e9:aa:9d:17:e3: 76:8b:7a:55:6e:0a:06:85:57:6a:90:a2:f0:ec:f5:c1:ba:91: ba:0f:c7:f9:c9:1a:95:88:27:80:1f:01:99:53:ed:a7:a2:73: dd:34:c8:23:50:16:57:4c:44:46:6e:31:51:8a:97:28:c0:1f: 4d:56:ea:eb:fc:fa:b7:a5:b6:ab:c5:ba:41:7e:14:f2:ac:45: 4a:5c:9b:cb:75:7d:11:c8:f8:04:4c:16:51:d6:65:80:17:85: 5f:86:d8:df:b4:63:7a:8d:ff:da:05:e5:ca:8d:32:70:c4:09: c3:65:98:d9:91:ba:33:68:fa:fe:fe:e4:52:81:d4:07:4c:d2: 0f:7b:8b:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbnTmLuyhaQpa4jaoyuIXt+IHQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMjYzQzkxRTNGQjhDNDk1NzUwMUIxRjY2OUEyMDYy MTcwRjlFMDAeFw0yNjA5MjMwMzA0NTZaFw0yNjA5MjQwNDMxNTZaMDMxMTAvBgNV BAMTKDE3MDZCQ0FFQzA4QzNDMDRFQzc1QTgwMjhBNTdBMEU5RENFNjY1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUmb1eDtSyi6NSwWHi/UES6Z+P ULHNRiZxlPPhim/5pTxaWioI/3+yRJeP/O0CkrBqJTFUFcEnCJQJm0fqbL9lQxg5 B57iMxMpCof5XahCwEEPxXphFiA5xo0ZF585WAb6u72Bkmx/gBBcXJMowwkVa+jd HMTbq3Sb/RvM3qqMthQRCoukmh+lH7RxdNO85OhEbELMvAOikdQ51dWirrjGopyj PJj6u5zjDNN0olKpLPbRSkXCFiYsTGxKM0QLzVjIBP2gDLMbaYRlsqZEHuDlH1y8 PPWLj7fI1lgoW6wsGxyM5Q7EwjegL+tjnLdtyFU4shiU4ZUGb29lH0NHkB45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFwa8rsCMPATsdagCileg6dzmZZ8wHwYDVR0j BBgwFoAUjCJjyR4/uMSVdQGx9mmiBiFw+eAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFhZTEyZmEtOThmZC00ZTUxLTk4MGUtYWQ1ZjViOTBkN2E2LzAvOEMyMjYzQzkx RTNGQjhDNDk1NzUwMUIxRjY2OUEyMDYyMTcwRjlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QzIyNjNDOTFFM0ZCOEM0OTU3NTAxQjFGNjY5QTIwNjIxNzBG OUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvOEMyMjYzQzkxRTNGQjhDNDk1NzUwMUIxRjY2OUEy MDYyMTcwRjlFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyrjRSSqUpyzS4eiJ3Ip7MmBhkQDMMNrcg4 JaNpJDdIhU27FGz0pQYn0rm7+MmAy1l97kTCvKrI5qkvv/UPTrRjpouvhPww2guO d/tFMBkqk22/0Y9pY9m40AFtrVjs8KPyAvlrBTjDHJrcdmfwaN1t1K+C0GnUhYHp qp0X43aLelVuCgaFV2qQovDs9cG6kboPx/nJGpWIJ4AfAZlT7aeic900yCNQFldM REZuMVGKlyjAH01W6uv8+reltqvFukF+FPKsRUpcm8t1fRHI+ARMFlHWZYAXhV+G 2N+0Y3qN/9oF5cqNMnDECcNlmNmRujNo+v7+5FKB1AdM0g97ixY= -----END CERTIFICATE-----Generated at Wed Sep 23 21:41:03 2026 by rpki-client