$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft File: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft (raw, json) Hash identifier: wSIMvXHZ61+x+hNIxWiAejXNAi7A/066tQ59VGJAmtg= Subject key identifier: A6:C8:2D:76:26:74:BB:B6:B7:F4:23:16:10:D4:0A:F9:64:10:90:A5 Authority key identifier: 8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 Certificate issuer: /CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Certificate serial: 1B40B992995652838FC4CCFF8643E118A662A4FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft Manifest number: BE Signing time: Mon 21 Sep 2026 01:28:20 +0000 Manifest this update: Mon 21 Sep 2026 01:23:20 +0000 Manifest next update: Tue 22 Sep 2026 02:51:20 +0000 Files and hashes: 1: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl (hash: Dym8YxxttVmHkdEyeTIZpR6kM0vHCDDU+/XaS3f1iMg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:40:b9:92:99:56:52:83:8f:c4:cc:ff:86:43:e1:18:a6:62:a4:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Validity Not Before: Sep 21 01:23:20 2026 GMT Not After : Sep 22 02:51:20 2026 GMT Subject: CN=A6C82D762674BBB6B7F4231610D40AF9641090A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:20:f6:27:5b:5d:65:f7:cd:96:14:a4:25: 87:8d:cc:12:19:81:59:0c:f1:cc:3e:d2:d3:5f:84: 8c:48:ae:c9:d8:1a:b6:41:84:d9:cc:23:83:59:fa: 6e:f0:87:8b:06:ef:60:92:29:8b:aa:d1:a6:99:39: d5:00:d0:d4:f7:57:86:43:ef:19:54:28:01:6d:e6: 23:8b:ba:4c:2c:bd:17:b3:9b:98:1b:6c:6e:30:f6: 24:36:8d:6a:49:9b:6e:a5:50:9d:7c:2e:a8:45:81: fc:68:6a:87:99:e8:e1:d6:b7:22:55:ba:4c:3e:46: cc:88:d2:f1:e3:f9:70:3f:09:c0:a6:23:02:00:4e: 75:9f:c7:cb:25:bb:08:1f:7b:54:73:1e:26:4e:52: 51:68:2c:ed:61:2d:a7:96:a4:79:4a:cd:31:cb:05: 17:c3:e9:c9:5a:5d:b6:a9:be:56:f2:f0:b9:f0:18: a4:1a:d8:05:30:47:1c:52:6d:90:a6:cc:c7:24:07: 3f:1a:5e:56:87:0d:0b:8d:9a:63:0b:db:21:8c:bd: be:66:2b:75:15:e4:72:77:6b:3a:5c:11:2e:b1:fb: 16:08:8c:8d:ce:7e:f7:8a:a4:ef:6f:9f:40:e3:7e: 39:fc:9c:f5:8c:54:42:36:89:42:fb:33:8f:3f:11: c5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C8:2D:76:26:74:BB:B6:B7:F4:23:16:10:D4:0A:F9:64:10:90:A5 X509v3 Authority Key Identifier: keyid:8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fd:c2:22:82:28:86:6d:4f:70:46:0e:dd:13:53:22:f8:6f: d5:ce:a6:44:15:53:89:b1:99:15:63:cf:99:19:16:01:40:61: 96:4a:f4:eb:f0:64:2f:23:5a:f8:1a:64:9c:10:fa:7b:47:6c: 78:d3:0a:c3:e9:bd:6a:98:1a:c4:54:b5:ff:35:74:67:e6:03: 22:6d:f5:6f:f5:63:80:37:c6:22:06:6a:c3:6d:7d:90:26:85: 92:46:4e:f6:04:26:cd:e1:47:37:14:4d:09:3d:5c:ce:74:53: 79:97:60:aa:44:25:26:09:ba:8e:c0:30:f4:0d:7f:e9:4b:56: 83:3a:db:ce:45:61:99:9b:2d:93:bf:91:74:cf:88:73:16:ed: 6b:61:87:53:07:d2:2c:2c:1b:b8:67:a5:d6:b2:39:3e:e7:1f: 48:df:aa:a7:c5:86:ea:1f:95:14:d1:ef:f3:85:0d:88:0d:01: 40:c9:f6:d2:dd:26:47:69:34:f8:a0:54:46:b4:e8:55:a6:e9: 1a:8b:f4:15:4f:b4:c4:3c:cd:0a:08:21:e7:66:2b:10:ae:d9: fc:1d:3c:39:86:3f:65:3f:91:f8:52:e1:98:82:93:e4:49:31: 84:06:ae:aa:45:9e:49:f0:e0:d8:2d:ea:da:09:ed:5b:ba:6f: 6e:31:1a:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0C5kplWUoOPxMz/hkPhGKZipP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI4QjUzNjMwRDRDRURCMUZDODI0QzIwQUU5QURGNDY4 QTdENDNFNzAeFw0yNjA5MjEwMTIzMjBaFw0yNjA5MjIwMjUxMjBaMDMxMTAvBgNV BAMTKEE2QzgyRDc2MjY3NEJCQjZCN0Y0MjMxNjEwRDQwQUY5NjQxMDkwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNViD2J1tdZffNlhSkJYeNzBIZ gVkM8cw+0tNfhIxIrsnYGrZBhNnMI4NZ+m7wh4sG72CSKYuq0aaZOdUA0NT3V4ZD 7xlUKAFt5iOLukwsvRezm5gbbG4w9iQ2jWpJm26lUJ18LqhFgfxoaoeZ6OHWtyJV ukw+RsyI0vHj+XA/CcCmIwIATnWfx8sluwgfe1RzHiZOUlFoLO1hLaeWpHlKzTHL BRfD6claXbapvlby8LnwGKQa2AUwRxxSbZCmzMckBz8aXlaHDQuNmmML2yGMvb5m K3UV5HJ3azpcES6x+xYIjI3OfveKpO9vn0Djfjn8nPWMVEI2iUL7M48/EcU/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpsgtdiZ0u7a39CMWENQK+WQQkKUwHwYDVR0j BBgwFoAUi4tTYw1M7bH8gkwgrprfRop9Q+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg2YTEzYmQtYjc5YS00NTBlLTliZTMtM2Q1YTAzYWI5M2IxLzAvOEI4QjUzNjMw RDRDRURCMUZDODI0QzIwQUU5QURGNDY4QTdENDNFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjhCNTM2MzBENENFREIxRkM4MjRDMjBBRTlBREY0NjhBN0Q0 M0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvOEI4QjUzNjMwRDRDRURCMUZDODI0QzIwQUU5QURG NDY4QTdENDNFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEb9wiKCKIZtT3BGDt0TUyL4b9XOpkQVU4mx mRVjz5kZFgFAYZZK9OvwZC8jWvgaZJwQ+ntHbHjTCsPpvWqYGsRUtf81dGfmAyJt 9W/1Y4A3xiIGasNtfZAmhZJGTvYEJs3hRzcUTQk9XM50U3mXYKpEJSYJuo7AMPQN f+lLVoM6285FYZmbLZO/kXTPiHMW7Wthh1MH0iwsG7hnpdayOT7nH0jfqqfFhuof lRTR7/OFDYgNAUDJ9tLdJkdpNPigVEa06FWm6RqL9BVPtMQ8zQoIIedmKxCu2fwd PDmGP2U/kfhS4ZiCk+RJMYQGrqpFnknw4Ngt6toJ7Vu6b24xGto= -----END CERTIFICATE-----Generated at Mon Sep 21 16:59:31 2026 by rpki-client