$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft File: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft (raw, json) Hash identifier: YxGX+R4coUfX+exG2yTb3YmPx4Jp3j9Y/TMnT2Bb5vc= Subject key identifier: 3F:5B:98:2C:B2:58:12:05:23:86:BE:AE:5C:D6:FF:28:5A:04:0E:AE Authority key identifier: 8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C Certificate issuer: /CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Certificate serial: 208E7437D96256CBBE22BDBDF9F18B919DA7FC3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 09:02:19 +0000 Manifest this update: Wed 23 Sep 2026 08:57:19 +0000 Manifest next update: Thu 24 Sep 2026 09:05:19 +0000 Files and hashes: 1: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl (hash: YE7sgc0jQJKVClpSNLjyk4XH9rODf+lQne3emis/XOI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8e:74:37:d9:62:56:cb:be:22:bd:bd:f9:f1:8b:91:9d:a7:fc:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Validity Not Before: Sep 23 08:57:19 2026 GMT Not After : Sep 24 09:05:19 2026 GMT Subject: CN=3F5B982CB25812052386BEAE5CD6FF285A040EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:28:01:98:ea:da:bd:a8:28:68:82:f0:67: a8:93:d2:1d:b9:fa:2b:4d:20:dd:36:3b:20:9a:ff: fc:71:fc:6e:0a:97:f4:f0:55:50:9e:0e:73:d1:41: fa:e8:52:5f:0e:95:36:5a:84:21:b8:c1:09:0d:a4: 4f:6c:99:d1:e3:b5:e1:1f:07:a4:93:46:5c:9e:78: 08:5c:7a:f6:66:69:38:34:6f:30:40:58:f7:37:57: af:fe:7a:d2:a8:ca:56:00:40:0f:7f:18:ad:96:a2: ac:3a:8d:15:a2:e7:84:40:fb:3a:32:d3:02:50:5c: a6:1e:29:e7:4a:13:0c:23:28:50:b6:5f:1a:c0:45: cf:89:72:34:c3:1c:ac:33:cd:0c:63:40:49:97:28: f3:73:7d:bb:ff:2a:0b:df:81:d4:da:18:9a:4c:3c: 2b:e6:b1:0e:b6:27:ca:81:a7:0d:27:16:88:71:62: a2:af:e7:f8:d3:0e:73:8a:bc:c1:9f:2e:ae:1d:ce: c7:71:6a:ff:5d:7c:a0:44:bd:5a:aa:a2:a7:db:c9: 90:a1:cd:39:5a:87:ff:e8:b0:7c:57:3a:fe:80:58: b3:a9:b5:00:54:a0:bd:05:99:d2:d3:9e:30:d8:18: 36:2a:e5:1a:9d:59:55:12:43:33:d0:da:2a:01:5f: b3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5B:98:2C:B2:58:12:05:23:86:BE:AE:5C:D6:FF:28:5A:04:0E:AE X509v3 Authority Key Identifier: keyid:8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:41:07:88:e5:52:4f:24:58:16:a8:8d:10:9e:78:dc:78:ca: 60:a8:5b:22:ce:ed:1b:e2:ae:59:23:2a:96:85:33:27:4d:16: 2c:12:90:13:ff:4a:1b:03:50:e5:20:89:2e:70:cb:a3:fc:ab: 8f:a8:61:33:b1:f3:c4:0a:45:0e:1c:f8:37:ba:e1:ed:7d:20: 14:06:d0:b4:97:7c:f7:c6:d5:2a:43:69:b5:38:f2:64:05:83: c2:c1:75:31:f9:ed:97:cc:d5:27:aa:14:d0:95:a6:b0:db:a0: dd:e6:11:cf:0a:93:d1:dd:05:96:51:28:6b:dc:80:cb:53:42: ad:36:f0:f4:62:5a:e7:23:10:bd:b1:83:03:2e:98:d1:bd:67: 30:fc:20:f3:8f:d4:17:4b:01:a5:d4:41:59:37:3c:f1:34:ac: e6:1c:51:c0:ab:02:a8:c8:ef:42:41:8b:da:98:ae:c5:fe:d6: 93:bd:b4:b9:7f:3f:4a:08:1e:40:5c:90:b0:c6:5b:7f:b0:99: e7:75:c5:79:f4:81:20:1f:88:03:de:a7:fe:7d:23:a5:cc:e3: 22:42:d1:66:d0:45:5d:e4:72:c1:60:a9:c1:4c:44:39:e8:25: a5:85:bf:63:d4:29:ce:2b:7a:6a:82:99:19:9f:a4:89:f0:16: 5a:76:03:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUII50N9liVsu+Ir29+fGLkZ2n/DwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhF RkYwQzEzQzAeFw0yNjA5MjMwODU3MTlaFw0yNjA5MjQwOTA1MTlaMDMxMTAvBgNV BAMTKDNGNUI5ODJDQjI1ODEyMDUyMzg2QkVBRTVDRDZGRjI4NUEwNDBFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rSgBmOravagoaILwZ6iT0h25 +itNIN02OyCa//xx/G4Kl/TwVVCeDnPRQfroUl8OlTZahCG4wQkNpE9smdHjteEf B6STRlyeeAhcevZmaTg0bzBAWPc3V6/+etKoylYAQA9/GK2Woqw6jRWi54RA+zoy 0wJQXKYeKedKEwwjKFC2XxrARc+JcjTDHKwzzQxjQEmXKPNzfbv/KgvfgdTaGJpM PCvmsQ62J8qBpw0nFohxYqKv5/jTDnOKvMGfLq4dzsdxav9dfKBEvVqqoqfbyZCh zTlah//osHxXOv6AWLOptQBUoL0FmdLTnjDYGDYq5RqdWVUSQzPQ2ioBX7OhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP1uYLLJYEgUjhr6uXNb/KFoEDq4wHwYDVR0j BBgwFoAUin8++Fzzr9cmrKMfNecJ2O/wwTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NlNjhiNTAtMGU5ZS00YWU2LTgyNTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1 Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhFRkYwQzEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTdGM0VGODVDRjNBRkQ3MjZBQ0EzMUYzNUU3MDlEOEVGRjBD MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NlNjhiNTAtMGU5ZS00YWU2LTgy NTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5 RDhFRkYwQzEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdBB4jlUk8kWBaojRCeeNx4ymCoWyLO7Rvi rlkjKpaFMydNFiwSkBP/ShsDUOUgiS5wy6P8q4+oYTOx88QKRQ4c+De64e19IBQG 0LSXfPfG1SpDabU48mQFg8LBdTH57ZfM1SeqFNCVprDboN3mEc8Kk9HdBZZRKGvc gMtTQq028PRiWucjEL2xgwMumNG9ZzD8IPOP1BdLAaXUQVk3PPE0rOYcUcCrAqjI 70JBi9qYrsX+1pO9tLl/P0oIHkBckLDGW3+wmed1xXn0gSAfiAPep/59I6XM4yJC 0WbQRV3kcsFgqcFMRDnoJaWFv2PUKc4remqCmRmfpInwFlp2A2k= -----END CERTIFICATE-----Generated at Wed Sep 23 19:35:58 2026 by rpki-client