$ rpki-client -vvvf rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft File: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft (raw, json) Hash identifier: IgBpbTq8UeytP+yFnqTDRHeKAr/568awo8AoXtFH1xo= Subject key identifier: 96:7D:53:AF:F0:EC:49:4A:ED:A3:17:12:0A:5F:44:5E:DD:E3:62:93 Authority key identifier: 8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D Certificate issuer: /CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Certificate serial: 1167912ED2B203012266BBC532BBA7B8BFCD41DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft Manifest number: C6 Signing time: Fri 25 Sep 2026 02:48:45 +0000 Manifest this update: Fri 25 Sep 2026 02:43:45 +0000 Manifest next update: Sat 26 Sep 2026 05:53:45 +0000 Files and hashes: 1: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl (hash: irnq/AZWbREQScxBdfD+VE8F6Ix4ukQmS1QYeTDW/Bg=) 2: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: xeD49NnJaETxYZ89zZqsZvQW0lQqtHHDYp/1/JjzAG8=) 3: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: Iad4oKdG+cP+QGtzN+0DsTs9ponKGFoBE7JkBGARiyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:67:91:2e:d2:b2:03:01:22:66:bb:c5:32:bb:a7:b8:bf:cd:41:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Validity Not Before: Sep 25 02:43:45 2026 GMT Not After : Sep 26 05:53:45 2026 GMT Subject: CN=967D53AFF0EC494AEDA317120A5F445EDDE36293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:83:33:85:16:f2:af:2f:3c:95:3e:40:f5: 08:58:62:ef:e5:9d:66:24:be:61:87:6f:cd:2f:fe: 8c:d6:f9:9a:3f:7e:5a:ee:c3:b9:4d:92:32:30:0f: d1:5a:26:57:06:86:e1:31:e8:20:5b:c4:1f:4f:f4: 7d:c3:9b:0a:60:ea:6c:ad:59:52:6b:c2:6f:87:34: d7:05:6d:17:6f:d4:00:b3:2b:15:c0:67:58:69:58: 3f:28:96:9c:b9:ee:41:55:f2:45:ca:c3:62:32:43: 64:64:cb:a6:2b:ff:de:37:34:97:23:90:5b:02:d0: 72:9d:f6:0f:6f:0d:be:84:b9:71:34:65:70:51:04: a7:64:c6:7c:66:23:61:1d:ba:0d:1c:29:6e:e6:e8: 8e:76:d2:f0:a0:07:cf:3a:d7:07:ff:ec:1c:f8:02: b3:6c:d5:e8:df:68:28:d6:b3:89:5f:09:76:c5:44: 1f:08:5e:51:28:55:b5:c9:ba:e0:24:b9:a3:4b:fb: 4b:ba:18:6b:d3:bc:0a:e5:06:32:cb:8f:08:d5:ce: a4:d9:61:d5:10:b4:ea:06:8d:43:ac:5d:2b:38:a1: b7:c8:7e:ba:80:88:f2:9c:47:bf:ca:de:1e:31:4b: 53:1a:a0:db:6f:8f:ba:e9:74:bd:86:28:d3:66:d0: ef:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7D:53:AF:F0:EC:49:4A:ED:A3:17:12:0A:5F:44:5E:DD:E3:62:93 X509v3 Authority Key Identifier: keyid:8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:61:f2:74:90:49:a9:ab:77:53:76:54:e6:8e:e8:d1:ed:3c: eb:df:39:4a:3f:36:d2:ff:25:19:69:a0:c5:bf:68:d2:6f:d0: 8c:c3:95:58:07:55:5c:aa:67:70:22:bb:c0:f9:f8:f9:ba:95: bd:c0:37:ba:0e:97:28:b7:29:c5:ce:c5:ee:3a:fa:2b:3e:2c: 05:ee:db:45:a0:7b:7f:17:a8:78:68:fb:d0:c5:ef:4c:ca:d5: 20:df:2a:84:06:45:9e:9a:d1:99:5c:98:73:63:24:97:3b:02: 24:f6:4a:31:b1:de:13:0b:b1:1d:dd:6c:da:60:f9:c8:91:8e: 1f:44:e7:3e:1b:32:e6:6d:5c:d9:c3:0e:48:2d:1a:7b:b9:22: 9e:3c:71:2a:35:0a:14:35:6c:eb:0a:9b:f8:40:07:19:d5:22: 0d:4b:43:56:22:91:e4:45:24:f0:54:5f:16:c2:53:c5:ff:28: 7f:a7:82:cc:f0:d1:0e:b5:2e:0c:f1:0f:c4:f2:9d:86:64:88: f2:f0:e8:21:e0:b5:49:0b:3e:d3:34:9c:28:6b:69:63:30:30: f6:0f:4f:8d:c5:9b:be:ce:15:9c:18:24:10:4c:18:38:f1:01: 8d:0b:f8:71:f9:cb:6d:70:a3:81:ef:10:19:95:80:16:51:cc: b3:6f:62:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWeRLtKyAwEiZrvFMrunuL/NQd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3MTcx RUEzRDk2RDAeFw0yNjA5MjUwMjQzNDVaFw0yNjA5MjYwNTUzNDVaMDMxMTAvBgNV BAMTKDk2N0Q1M0FGRjBFQzQ5NEFFREEzMTcxMjBBNUY0NDVFRERFMzYyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSI4MzhRbyry88lT5A9QhYYu/l nWYkvmGHb80v/ozW+Zo/flruw7lNkjIwD9FaJlcGhuEx6CBbxB9P9H3Dmwpg6myt WVJrwm+HNNcFbRdv1ACzKxXAZ1hpWD8olpy57kFV8kXKw2IyQ2Rky6Yr/943NJcj kFsC0HKd9g9vDb6EuXE0ZXBRBKdkxnxmI2Edug0cKW7m6I520vCgB8861wf/7Bz4 ArNs1ejfaCjWs4lfCXbFRB8IXlEoVbXJuuAkuaNL+0u6GGvTvArlBjLLjwjVzqTZ YdUQtOoGjUOsXSs4obfIfrqAiPKcR7/K3h4xS1MaoNtvj7rpdL2GKNNm0O/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUln1Tr/DsSUrtoxcSCl9EXt3jYpMwHwYDVR0j BBgwFoAUjNhuNOGiG+hzt63MjSrnFx6j2W0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njg0NjY4ODktYzFlZi00NDEwLWFkOWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRF MUEyMUJFODczQjdBRENDOEQyQUU3MTcxRUEzRDk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q4NkUzNEUxQTIxQkU4NzNCN0FEQ0M4RDJBRTcxNzFFQTNE OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3 MTcxRUEzRDk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFh8nSQSamrd1N2VOaO6NHtPOvfOUo/NtL/ JRlpoMW/aNJv0IzDlVgHVVyqZ3Aiu8D5+Pm6lb3AN7oOlyi3KcXOxe46+is+LAXu 20Wge38XqHho+9DF70zK1SDfKoQGRZ6a0ZlcmHNjJJc7AiT2SjGx3hMLsR3dbNpg +ciRjh9E5z4bMuZtXNnDDkgtGnu5Ip48cSo1ChQ1bOsKm/hABxnVIg1LQ1YikeRF JPBUXxbCU8X/KH+ngszw0Q61LgzxD8TynYZkiPLw6CHgtUkLPtM0nChraWMwMPYP T43Fm77OFZwYJBBMGDjxAY0L+HH5y21wo4HvEBmVgBZRzLNvYsw= -----END CERTIFICATE-----Generated at Fri Sep 25 21:49:36 2026 by rpki-client