$ rpki-client -vvvf rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft File: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft (raw, json) Hash identifier: x0H2NRNY3i48jWEptTYGIOruKpQh34H8aFVXyf2S09Q= Subject key identifier: 38:F6:2F:4B:6A:32:81:52:34:89:04:B1:01:88:A0:07:8E:26:19:FD Authority key identifier: 8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC Certificate issuer: /CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Certificate serial: 4FB475261F7FFE41CD7FE7A48660883FBBFB957C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 13:47:25 +0000 Manifest this update: Fri 25 Sep 2026 13:42:25 +0000 Manifest next update: Sat 26 Sep 2026 16:59:25 +0000 Files and hashes: 1: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl (hash: o5ORu7j2cCU7D4sWqZlGHqc01u+UYJVtIygN+xVI0C8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b4:75:26:1f:7f:fe:41:cd:7f:e7:a4:86:60:88:3f:bb:fb:95:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Validity Not Before: Sep 25 13:42:25 2026 GMT Not After : Sep 26 16:59:25 2026 GMT Subject: CN=38F62F4B6A328152348904B10188A0078E2619FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:18:83:fd:ef:e5:5d:07:16:5a:d2:2e:25:f1: 6b:fe:02:e5:ec:c0:b2:83:bc:16:30:b7:34:72:e5: 7b:fd:6e:36:00:c9:7a:48:aa:f1:a5:d7:4e:eb:31: f8:f7:a0:4e:78:ab:05:5d:e4:b3:f1:c4:8a:4f:83: 1d:d6:db:af:13:22:5c:49:f2:06:83:28:0f:a4:47: 0d:69:54:58:21:59:90:46:6b:55:9a:89:52:65:e3: b9:39:94:34:ee:05:f6:13:46:50:57:cd:81:8c:ae: c4:93:6d:47:2e:0b:ae:43:64:fa:f0:d2:d7:04:56: 54:4a:d1:96:ba:67:4e:5c:8d:57:76:72:b9:2a:61: 67:29:6c:67:73:ed:c2:22:fa:df:53:80:14:24:a9: 0e:88:12:55:0d:60:45:6f:7f:74:f3:db:30:59:3f: 91:f7:42:db:67:c9:a9:b3:c4:9f:0c:77:19:31:a6: 7a:da:b1:b2:15:af:a1:6e:b5:90:39:1c:be:67:64: a6:e2:84:79:53:39:d7:e5:f8:1b:69:40:ff:db:d7: 2c:ec:6e:e1:e4:53:73:61:12:ee:eb:ce:83:47:6a: 66:03:84:fe:8d:97:76:7a:5f:25:c9:54:30:05:f2: e0:b6:c2:e5:45:30:d4:bb:29:46:74:e5:37:c7:38: 9a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F6:2F:4B:6A:32:81:52:34:89:04:B1:01:88:A0:07:8E:26:19:FD X509v3 Authority Key Identifier: keyid:8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:aa:41:b1:ed:15:21:eb:14:68:8c:c6:be:91:44:f7:7c:55: 84:97:9c:d3:49:a8:af:81:74:58:57:11:8b:0b:cd:b7:6d:c8: bc:a3:35:58:f6:40:06:65:43:d9:76:cf:e5:a7:8a:3a:09:8f: 3c:f6:b2:4d:6c:8a:37:a8:43:81:e6:6f:36:4a:5a:46:d5:81: 39:4b:b7:f7:2a:31:88:46:89:08:bc:63:12:1f:4c:80:ee:d0: ab:5d:1d:30:c6:55:1c:65:13:d3:54:8a:0e:00:de:4e:bf:9d: c8:66:19:62:8e:01:a3:bf:d9:f7:36:9b:dd:e6:35:77:4f:a9: c4:cf:19:53:a2:f2:42:16:06:2d:db:0f:74:56:5c:08:5c:de: cd:d0:da:c6:32:d2:da:43:f1:f1:99:dc:8a:29:fd:ff:a6:6e: 9f:2d:23:ea:72:3e:45:db:f9:db:bf:67:54:05:1f:92:8b:25: 0b:9a:2d:8f:74:0b:34:c3:f4:d7:ae:78:00:43:71:ea:74:09: 07:36:7e:19:2e:3d:59:2c:18:01:42:28:83:10:4e:a5:1b:9f: ef:21:09:8c:e5:d4:c7:7f:f4:8a:ad:18:ab:8e:15:2c:aa:27: b5:41:a1:39:83:6d:11:99:84:70:10:3b:d6:7f:49:e7:4c:0a: f2:64:82:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7R1Jh9//kHNf+ekhmCIP7v7lXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhCNEMy MUEyQzJEQzAeFw0yNjA5MjUxMzQyMjVaFw0yNjA5MjYxNjU5MjVaMDMxMTAvBgNV BAMTKDM4RjYyRjRCNkEzMjgxNTIzNDg5MDRCMTAxODhBMDA3OEUyNjE5RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXGIP97+VdBxZa0i4l8Wv+AuXs wLKDvBYwtzRy5Xv9bjYAyXpIqvGl107rMfj3oE54qwVd5LPxxIpPgx3W268TIlxJ 8gaDKA+kRw1pVFghWZBGa1WaiVJl47k5lDTuBfYTRlBXzYGMrsSTbUcuC65DZPrw 0tcEVlRK0Za6Z05cjVd2crkqYWcpbGdz7cIi+t9TgBQkqQ6IElUNYEVvf3Tz2zBZ P5H3QttnyamzxJ8MdxkxpnrasbIVr6FutZA5HL5nZKbihHlTOdfl+BtpQP/b1yzs buHkU3NhEu7rzoNHamYDhP6Nl3Z6XyXJVDAF8uC2wuVFMNS7KUZ05TfHOJrbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOPYvS2oygVI0iQSxAYigB44mGf0wHwYDVR0j BBgwFoAUi3yU5dr2a7lW3568N+SLTCGiwtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDE4YzY4MzEtOGY0MC00YTIwLTgxM2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVE QUY2NkJCOTU2REY5RUJDMzdFNDhCNEMyMUEyQzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjdDOTRFNURBRjY2QkI5NTZERjlFQkMzN0U0OEI0QzIxQTJD MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhC NEMyMUEyQzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKqQbHtFSHrFGiMxr6RRPd8VYSXnNNJqK+B dFhXEYsLzbdtyLyjNVj2QAZlQ9l2z+WnijoJjzz2sk1sijeoQ4HmbzZKWkbVgTlL t/cqMYhGiQi8YxIfTIDu0KtdHTDGVRxlE9NUig4A3k6/nchmGWKOAaO/2fc2m93m NXdPqcTPGVOi8kIWBi3bD3RWXAhc3s3Q2sYy0tpD8fGZ3Iop/f+mbp8tI+pyPkXb +du/Z1QFH5KLJQuaLY90CzTD9NeueABDcep0CQc2fhkuPVksGAFCKIMQTqUbn+8h CYzl1Md/9IqtGKuOFSyqJ7VBoTmDbRGZhHAQO9Z/SedMCvJkgsg= -----END CERTIFICATE-----Generated at Sat Sep 26 03:01:10 2026 by rpki-client