$ rpki-client -vvvf rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft File: 8CDF206FDB99524CD59E5141686928A6FF94305F.mft (raw, json) Hash identifier: b/p9Qslz3lqYdXD0KBzafSYuSAfl70JvNZoAfll3RbI= Subject key identifier: 25:AF:D2:DB:B0:00:9A:BB:F2:67:AB:1F:F4:70:50:35:B9:BB:58:E1 Authority key identifier: 8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F Certificate issuer: /CN=8CDF206FDB99524CD59E5141686928A6FF94305F Certificate serial: 78B72EAB2B58A54D9C719F51D32240D785BC2D55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 07:55:23 +0000 Manifest this update: Thu 24 Sep 2026 07:50:23 +0000 Manifest next update: Fri 25 Sep 2026 08:40:23 +0000 Files and hashes: 1: 8CDF206FDB99524CD59E5141686928A6FF94305F.crl (hash: kpVyF900SUfP8wvtt8OBP3w3RGG0I/CYbfMC4FGbLQ4=) 2: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: AtW3qZZhBOBkSL0i4aoVF1GR5f7KIfCN2XApbUwdv2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b7:2e:ab:2b:58:a5:4d:9c:71:9f:51:d3:22:40:d7:85:bc:2d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF206FDB99524CD59E5141686928A6FF94305F Validity Not Before: Sep 24 07:50:23 2026 GMT Not After : Sep 25 08:40:23 2026 GMT Subject: CN=25AFD2DBB0009ABBF267AB1FF4705035B9BB58E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:3f:11:99:7c:71:3d:f5:d9:9b:f9:77:6f: 4a:cc:c5:46:91:f3:38:83:4e:1d:9f:c0:53:59:df: e0:d1:85:a0:22:91:e3:27:ad:8d:fc:11:02:05:cb: 37:73:d4:f1:a5:6c:b6:d9:2d:6f:49:4d:72:ca:83: b3:d5:d8:15:8a:a1:b8:b3:41:26:61:fe:11:3b:17: b2:45:97:a7:c1:62:fe:6d:6e:bb:c9:17:07:a6:0c: 1e:78:af:7b:b8:f0:e2:eb:eb:82:41:b5:1e:81:50: a4:39:b3:98:83:ed:57:6c:d3:8a:b6:9d:20:3c:90: 49:40:7e:45:a6:9a:b1:ec:21:5b:e4:1f:47:19:00: 5b:63:6f:7f:15:de:e8:54:4a:12:59:b2:d4:c9:79: 7d:2c:be:28:a6:84:e3:4d:ea:8c:bc:b9:aa:b4:96: 26:80:af:61:02:35:a5:ab:93:0a:3b:81:66:85:a5: dd:53:8e:15:8f:1b:52:66:7d:8a:d7:f4:2a:1e:c1: eb:75:7a:6b:84:75:52:9f:ae:57:5a:fd:91:35:aa: 02:44:ed:cf:a7:65:b3:8e:82:fe:a7:13:b7:4d:17: bb:03:e2:4e:c6:cd:fc:2f:fe:48:65:48:12:e8:f9: 27:05:26:99:31:cf:f7:14:50:9e:e0:b4:ab:f1:96: 94:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AF:D2:DB:B0:00:9A:BB:F2:67:AB:1F:F4:70:50:35:B9:BB:58:E1 X509v3 Authority Key Identifier: keyid:8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e7:07:2a:bd:31:f8:60:bf:22:0f:68:a7:1f:3d:37:e9:5e: a5:ba:56:ea:09:7c:db:e8:cf:fc:8d:76:2d:bc:d3:c4:10:8a: 1b:4b:13:30:b7:cd:79:67:15:76:64:42:b0:3b:33:d6:e6:84: c0:bc:55:e5:de:8a:78:9a:d8:c4:ec:23:8c:b8:c3:ad:8a:3d: 33:d0:98:d7:87:b9:95:05:6e:8a:9d:ea:3e:99:51:cb:c0:2a: 16:d8:7e:0f:82:87:06:96:df:b5:1c:32:9c:de:83:90:37:01: 77:b2:84:3b:aa:5d:1a:27:57:8e:15:7e:56:dc:d3:d0:b8:37: 32:92:09:bb:4d:36:0f:3c:59:d9:b9:66:cc:41:75:a9:a7:90: ff:6d:69:0f:82:7b:84:a9:53:c5:1a:d3:21:57:ee:d6:4f:c7: c3:98:ef:7a:d4:d1:e0:d9:32:31:ea:00:96:14:52:72:6e:32: 0f:0a:64:cc:c3:fa:87:67:54:cb:8b:ef:c7:48:94:b5:d0:b0: 36:4e:50:0f:dd:da:d6:41:f1:d2:75:f9:da:2c:05:a7:0f:26: 2b:10:44:5b:f5:44:2d:5a:a2:19:db:e9:de:0d:a7:bf:34:d1: eb:43:bb:8d:ad:f6:a9:4f:07:c7:fd:e5:d6:22:e6:01:67:56: c3:44:d6:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLcuqytYpU2ccZ9R0yJA14W8LVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZG Rjk0MzA1RjAeFw0yNjA5MjQwNzUwMjNaFw0yNjA5MjUwODQwMjNaMDMxMTAvBgNV BAMTKDI1QUZEMkRCQjAwMDlBQkJGMjY3QUIxRkY0NzA1MDM1QjlCQjU4RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8D8RmXxxPfXZm/l3b0rMxUaR 8ziDTh2fwFNZ3+DRhaAikeMnrY38EQIFyzdz1PGlbLbZLW9JTXLKg7PV2BWKobiz QSZh/hE7F7JFl6fBYv5tbrvJFwemDB54r3u48OLr64JBtR6BUKQ5s5iD7Vds04q2 nSA8kElAfkWmmrHsIVvkH0cZAFtjb38V3uhUShJZstTJeX0sviimhONN6oy8uaq0 liaAr2ECNaWrkwo7gWaFpd1TjhWPG1JmfYrX9Coewet1emuEdVKfrlda/ZE1qgJE 7c+nZbOOgv6nE7dNF7sD4k7Gzfwv/khlSBLo+ScFJpkxz/cUUJ7gtKvxlpQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJa/S27AAmrvyZ6sf9HBQNbm7WOEwHwYDVR0j BBgwFoAUjN8gb9uZUkzVnlFBaGkopv+UMF8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjMzOTc4ZjgtYWVhYi00MjdhLWJkNzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZE Qjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZGRjk0MzA1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0RGMjA2RkRCOTk1MjRDRDU5RTUxNDE2ODY5MjhBNkZGOTQz MDVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjMzOTc4ZjgtYWVhYi00MjdhLWJk NzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4 QTZGRjk0MzA1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPnByq9MfhgvyIPaKcfPTfpXqW6VuoJfNvo z/yNdi2808QQihtLEzC3zXlnFXZkQrA7M9bmhMC8VeXeinia2MTsI4y4w62KPTPQ mNeHuZUFboqd6j6ZUcvAKhbYfg+ChwaW37UcMpzeg5A3AXeyhDuqXRonV44Vflbc 09C4NzKSCbtNNg88Wdm5ZsxBdamnkP9taQ+Ce4SpU8Ua0yFX7tZPx8OY73rU0eDZ MjHqAJYUUnJuMg8KZMzD+odnVMuL78dIlLXQsDZOUA/d2tZB8dJ1+dosBacPJisQ RFv1RC1aohnb6d4Np7800etDu42t9qlPB8f95dYi5gFnVsNE1o4= -----END CERTIFICATE-----Generated at Thu Sep 24 12:54:28 2026 by rpki-client