$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft File: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft (raw, json) Hash identifier: YSwr+sijeoilur43tKyFKcT3gWYzXll/xzlaD4FnWEk= Subject key identifier: 31:02:B7:DB:49:E2:0B:00:61:D7:14:C2:D6:1F:69:A8:93:B4:91:FE Authority key identifier: 8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 Certificate issuer: /CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Certificate serial: 07ACC5C433ED0E440252937161C3EDA4C54D91AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 03:49:56 +0000 Manifest this update: Fri 25 Sep 2026 03:44:56 +0000 Manifest next update: Sat 26 Sep 2026 04:06:56 +0000 Files and hashes: 1: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl (hash: cRiFZLIhgGSzJoI9plXY6aPqi25o6i8pVcv6U3fkRj4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ac:c5:c4:33:ed:0e:44:02:52:93:71:61:c3:ed:a4:c5:4d:91:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Validity Not Before: Sep 25 03:44:56 2026 GMT Not After : Sep 26 04:06:56 2026 GMT Subject: CN=3102B7DB49E20B0061D714C2D61F69A893B491FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:ee:f0:ac:9e:de:ac:66:b7:b2:07:2c:73: 6b:3d:4f:8a:29:8d:9c:d0:d8:2d:de:15:73:bc:62: 6b:f8:c4:81:b9:92:a6:83:99:82:10:d5:b2:da:93: 44:bf:f7:38:c6:49:ee:41:f4:dc:02:73:6b:f6:0f: ec:79:ca:68:86:64:c3:ec:20:60:e8:c6:ef:d6:dc: 71:c6:78:54:21:7b:86:93:6a:52:7e:33:c8:aa:f2: 87:d3:0b:d9:2f:f9:7b:cc:f6:04:8f:69:56:91:7a: 15:47:24:38:55:58:26:52:d5:cb:6b:24:d6:06:d0: 54:62:9c:3a:6a:f9:b2:10:f3:d8:b0:d7:d5:3f:1e: 01:83:6c:28:f4:13:14:13:ec:a5:bc:af:94:4b:3c: 61:60:1a:b2:a2:eb:cf:3e:98:2d:5c:75:16:67:80: e8:8f:35:e2:7c:39:0f:86:9b:6d:13:2a:2f:97:8a: af:58:c6:fd:75:8c:d4:79:75:3a:a7:60:fb:b6:4c: fd:c2:7c:df:45:dc:45:bb:2a:9b:b7:75:12:76:f2: 6a:8e:3f:1d:a3:31:1f:ff:1e:ae:b0:5c:d9:e5:9f: 12:b4:44:4a:e7:01:a1:67:8e:1a:a5:25:01:cc:bc: 94:2b:4e:ca:21:e7:77:20:91:23:94:be:96:b9:d3: c9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:02:B7:DB:49:E2:0B:00:61:D7:14:C2:D6:1F:69:A8:93:B4:91:FE X509v3 Authority Key Identifier: keyid:8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fb:48:c7:a3:52:11:c5:8d:c4:b8:73:da:6f:9f:e0:3b:22: c3:6c:62:15:fa:17:7a:a5:b7:19:28:59:d7:9e:cd:04:46:82: b6:7c:95:51:56:1e:a0:b7:3a:db:7f:96:fc:19:86:a6:b6:63: bc:01:3b:95:1b:c1:01:ec:ba:84:e8:4e:6f:10:73:98:69:a3: 3b:c8:3d:23:45:74:6f:e0:b8:cb:02:00:c2:88:2e:4f:d5:68: 6d:2c:6a:06:c6:27:6a:a1:47:ca:83:db:c9:60:1e:7b:25:55: 50:12:7c:1a:e6:b0:11:65:e7:e0:40:a8:ca:9a:8f:67:69:97: eb:41:15:c4:ec:93:42:00:54:ac:6f:e7:5e:d7:76:69:70:23: df:03:12:dd:e1:b8:68:c8:43:a6:e0:2c:7c:c5:da:08:58:36: 47:d0:41:ad:5a:f6:89:03:46:f5:c5:eb:c4:b9:5c:97:fc:c1: de:ba:b8:17:10:3b:90:ce:d9:73:13:b7:6a:46:53:3c:66:91: 61:43:b8:15:8f:d7:9c:95:07:c7:b5:43:fa:c7:82:c8:96:de: 8c:65:bd:b0:cf:d8:ff:20:65:33:a9:f6:ca:e7:2f:71:33:c6: b8:d0:61:b7:1c:8c:58:65:94:62:f7:b2:33:c1:de:2c:62:2c: f2:f5:5c:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB6zFxDPtDkQCUpNxYcPtpMVNka0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3 RDkxMDAzMTAeFw0yNjA5MjUwMzQ0NTZaFw0yNjA5MjYwNDA2NTZaMDMxMTAvBgNV BAMTKDMxMDJCN0RCNDlFMjBCMDA2MUQ3MTRDMkQ2MUY2OUE4OTNCNDkxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsIu7wrJ7erGa3sgcsc2s9T4op jZzQ2C3eFXO8Ymv4xIG5kqaDmYIQ1bLak0S/9zjGSe5B9NwCc2v2D+x5ymiGZMPs IGDoxu/W3HHGeFQhe4aTalJ+M8iq8ofTC9kv+XvM9gSPaVaRehVHJDhVWCZS1ctr JNYG0FRinDpq+bIQ89iw19U/HgGDbCj0ExQT7KW8r5RLPGFgGrKi688+mC1cdRZn gOiPNeJ8OQ+Gm20TKi+Xiq9Yxv11jNR5dTqnYPu2TP3CfN9F3EW7Kpu3dRJ28mqO Px2jMR//Hq6wXNnlnxK0RErnAaFnjhqlJQHMvJQrTsoh53cgkSOUvpa508lRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMQK320niCwBh1xTC1h9pqJO0kf4wHwYDVR0j BBgwFoAUjJX82S/mBxvh1rJ7eTDv432RADEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjk1NWY1YTYtZjM3OC00MjUyLTgwNGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDky RkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3RDkxMDAzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Qzk1RkNEOTJGRTYwNzFCRTFENkIyN0I3OTMwRUZFMzdEOTEw MDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVG RTM3RDkxMDAzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHT7SMejUhHFjcS4c9pvn+A7IsNsYhX6F3ql txkoWdeezQRGgrZ8lVFWHqC3Ott/lvwZhqa2Y7wBO5UbwQHsuoToTm8Qc5hpozvI PSNFdG/guMsCAMKILk/VaG0sagbGJ2qhR8qD28lgHnslVVASfBrmsBFl5+BAqMqa j2dpl+tBFcTsk0IAVKxv517XdmlwI98DEt3huGjIQ6bgLHzF2ghYNkfQQa1a9okD RvXF68S5XJf8wd66uBcQO5DO2XMTt2pGUzxmkWFDuBWP15yVB8e1Q/rHgsiW3oxl vbDP2P8gZTOp9srnL3EzxrjQYbccjFhllGL3sjPB3ixiLPL1XFQ= -----END CERTIFICATE-----Generated at Fri Sep 25 20:57:59 2026 by rpki-client