$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft File: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft (raw, json) Hash identifier: RkEp6JobebEB+7pKKMz7ff/BTfJ6BA6+W6pWF8RIQ94= Subject key identifier: E8:6C:49:1B:09:0B:D0:28:8E:FE:EA:72:BF:F3:21:83:83:2B:DA:27 Authority key identifier: 8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B Certificate issuer: /CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B Certificate serial: 1EF3727F02478E6CDB5C744A0ED6F96E0BF13E21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 22:23:47 +0000 Manifest this update: Wed 23 Sep 2026 22:18:47 +0000 Manifest next update: Fri 25 Sep 2026 01:35:47 +0000 Files and hashes: 1: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl (hash: ZGWGyS7l5P6ifg/z8NmJOD/8iKwGGn1mCM62NBElz9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f3:72:7f:02:47:8e:6c:db:5c:74:4a:0e:d6:f9:6e:0b:f1:3e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B Validity Not Before: Sep 23 22:18:47 2026 GMT Not After : Sep 25 01:35:47 2026 GMT Subject: CN=E86C491B090BD0288EFEEA72BFF32183832BDA27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:78:c7:ef:b5:61:dd:9c:83:08:45:55:df: 10:4a:d3:0a:6d:af:2f:e5:3b:29:4c:2b:aa:36:aa: ab:6f:30:9f:a7:78:6c:83:e2:57:26:ec:9f:86:43: 65:09:f8:8e:5b:04:f8:3c:93:f0:9e:9d:90:5d:c7: 40:00:8b:2f:79:28:2c:30:85:f2:89:6b:93:92:1b: ad:6e:d3:de:10:7c:f8:a5:a4:57:b5:5e:22:68:1a: 41:4c:a1:c3:5c:92:db:83:06:00:1c:93:16:f7:e6: 16:f3:14:41:b1:38:7c:26:35:88:26:d0:b3:ab:19: e7:15:ee:de:a1:b5:31:9e:c7:c1:9d:1b:26:06:b6: 57:b5:87:5c:aa:e8:bd:ea:0d:a3:66:a7:3b:c7:d7: bc:78:66:96:c2:da:fb:ba:59:44:46:a5:a2:16:16: 38:fb:80:e8:19:88:5f:3f:7e:b9:c1:57:27:94:d4: 16:1f:2d:2d:e1:f2:e4:7a:a0:f6:88:06:3d:2f:58: de:3c:67:2d:58:00:db:35:1c:45:62:3f:ae:36:6c: e8:20:a9:69:c5:8b:ec:c5:0a:bd:15:b3:aa:e9:9e: 84:f5:7c:be:18:b4:01:59:65:0e:fa:b1:77:d8:59: 7e:9a:34:19:41:0c:7a:b7:3a:a2:e6:bb:40:93:cf: d4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6C:49:1B:09:0B:D0:28:8E:FE:EA:72:BF:F3:21:83:83:2B:DA:27 X509v3 Authority Key Identifier: keyid:8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:09:6d:4c:e3:01:4e:01:57:b7:e2:41:ee:bf:c1:0b:ca:bd: a2:72:fc:1f:06:25:ce:e8:24:e6:aa:1f:0f:2b:19:4b:78:e3: 73:14:da:7d:9a:81:9a:d0:13:6b:7e:8e:88:53:df:bb:33:f8: 8e:a8:26:c6:87:08:dc:0e:98:a7:bd:6f:58:c3:1b:2a:4f:de: 69:79:a6:03:f0:6f:d9:58:7a:ac:9e:1a:a3:82:88:0b:55:a4: 93:b2:be:e6:9a:2b:71:73:f2:32:0a:b1:32:ad:da:58:9d:ba: dd:c7:b0:df:89:4d:ff:1d:0e:24:ac:f3:e0:c6:55:1b:d2:c9: 0a:f2:f4:d1:48:10:60:22:81:83:0e:f1:dd:69:83:7f:9d:9f: 53:e6:15:7a:16:e0:ed:aa:27:6c:ba:fa:a3:46:1e:fc:29:61: e6:0c:7a:4f:d0:ca:cb:18:ae:42:ab:03:25:1e:8d:3b:f2:a4: c5:03:65:64:0b:e2:75:20:c1:42:dc:36:ac:03:cc:12:d3:84: 3c:be:43:fd:ea:9a:ab:d7:9b:cf:26:17:d8:fa:bf:07:ee:b1: 7e:ed:ea:04:12:ca:0b:95:29:50:7e:b6:5a:5d:b8:2f:90:59: a4:3e:6d:00:34:db:e6:9b:41:bc:dd:68:17:e5:30:a7:07:c7: 97:31:85:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvNyfwJHjmzbXHRKDtb5bgvxPiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYwNDlCNDNERDYxMjg1QzZDREM4MTkzODdDQUQwNjUx QjBDRjM4QjAeFw0yNjA5MjMyMjE4NDdaFw0yNjA5MjUwMTM1NDdaMDMxMTAvBgNV BAMTKEU4NkM0OTFCMDkwQkQwMjg4RUZFRUE3MkJGRjMyMTgzODMyQkRBMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1GnjH77Vh3ZyDCEVV3xBK0wpt ry/lOylMK6o2qqtvMJ+neGyD4lcm7J+GQ2UJ+I5bBPg8k/CenZBdx0AAiy95KCww hfKJa5OSG61u094QfPilpFe1XiJoGkFMocNcktuDBgAckxb35hbzFEGxOHwmNYgm 0LOrGecV7t6htTGex8GdGyYGtle1h1yq6L3qDaNmpzvH17x4ZpbC2vu6WURGpaIW Fjj7gOgZiF8/frnBVyeU1BYfLS3h8uR6oPaIBj0vWN48Zy1YANs1HEViP642bOgg qWnFi+zFCr0Vs6rpnoT1fL4YtAFZZQ76sXfYWX6aNBlBDHq3OqLmu0CTz9SnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6GxJGwkL0CiO/upyv/Mhg4Mr2icwHwYDVR0j BBgwFoAUjwSbQ91hKFxs3IGTh8rQZRsM84swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiMjkzNzgtNDVmMC00OWQzLWE2YWYtNTczYmU3ZGNhNmQwLzAvOEYwNDlCNDNE RDYxMjg1QzZDREM4MTkzODdDQUQwNjUxQjBDRjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjA0OUI0M0RENjEyODVDNkNEQzgxOTM4N0NBRDA2NTFCMENG MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvOEYwNDlCNDNERDYxMjg1QzZDREM4MTkzODdDQUQw NjUxQjBDRjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUJbUzjAU4BV7fiQe6/wQvKvaJy/B8GJc7o JOaqHw8rGUt443MU2n2agZrQE2t+johT37sz+I6oJsaHCNwOmKe9b1jDGypP3ml5 pgPwb9lYeqyeGqOCiAtVpJOyvuaaK3Fz8jIKsTKt2lidut3HsN+JTf8dDiSs8+DG VRvSyQry9NFIEGAigYMO8d1pg3+dn1PmFXoW4O2qJ2y6+qNGHvwpYeYMek/QyssY rkKrAyUejTvypMUDZWQL4nUgwULcNqwDzBLThDy+Q/3qmqvXm88mF9j6vwfusX7t 6gQSyguVKVB+tlpduC+QWaQ+bQA02+abQbzdaBflMKcHx5cxhbY= -----END CERTIFICATE-----Generated at Thu Sep 24 12:42:38 2026 by rpki-client