$ rpki-client -vvvf rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft File: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft (raw, json) Hash identifier: UWept+qLNa/pJxvxurZR/qdVjIaVrl+NVInFIT/Aci4= Subject key identifier: 2D:AA:2A:EF:08:30:98:1A:65:11:13:F9:90:27:9D:36:D1:E6:ED:06 Authority key identifier: 86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B Certificate issuer: /CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Certificate serial: 289592A5DCD649FB16ECB718E62D3CE1229DACAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft Manifest number: BF Signing time: Wed 23 Sep 2026 19:04:38 +0000 Manifest this update: Wed 23 Sep 2026 18:59:38 +0000 Manifest next update: Thu 24 Sep 2026 21:03:38 +0000 Files and hashes: 1: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl (hash: T7wKjcLJQrhoXs6lqte3d/zXYjXPfT2PWOmsrqOCqx4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:95:92:a5:dc:d6:49:fb:16:ec:b7:18:e6:2d:3c:e1:22:9d:ac:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Validity Not Before: Sep 23 18:59:38 2026 GMT Not After : Sep 24 21:03:38 2026 GMT Subject: CN=2DAA2AEF0830981A651113F990279D36D1E6ED06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:20:54:06:c7:fa:0c:c5:65:60:ff:f5:74:c8: 91:8a:a5:0e:1f:9b:b9:4c:f0:48:1a:bb:21:a8:eb: 0c:ae:1f:d6:66:6d:0d:0d:7e:89:e9:b5:66:f4:56: 54:6f:d5:ad:39:ae:1b:62:49:7b:07:28:2c:7e:b1: 1e:5d:62:41:ab:7c:8e:b2:9d:03:aa:9b:90:93:fc: 0c:2f:d7:c1:46:3b:d0:16:ba:46:2e:76:c5:a9:ca: 39:c3:9f:be:c6:c3:30:bd:82:d5:34:9f:2f:95:a8: 06:8e:4c:a9:3e:d1:b7:66:61:8b:35:85:0e:02:b4: a7:bf:d3:70:04:1a:6a:91:33:f0:84:0c:97:6b:f8: 7c:01:96:fa:da:eb:13:b8:a7:bf:7b:31:0a:ab:3e: 65:bf:bf:d4:f9:b5:80:1a:a7:f3:0a:52:64:44:3b: 78:86:23:ac:62:3c:7e:81:4b:ef:96:eb:89:7c:10: 44:ba:bb:c5:14:67:65:d6:0b:ff:b2:2e:08:08:81: e2:fc:3f:b8:63:f5:75:a1:a1:b2:f1:8e:39:c1:da: 7a:e6:5a:32:ec:b2:d7:0a:6f:6e:83:14:e6:3e:98: 98:0e:f2:3e:2b:e3:63:54:0b:48:50:33:88:f5:00: c1:01:9a:cf:5e:d7:da:05:15:e7:b4:0e:51:02:06: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AA:2A:EF:08:30:98:1A:65:11:13:F9:90:27:9D:36:D1:E6:ED:06 X509v3 Authority Key Identifier: keyid:86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:10:2d:bb:5e:f2:c3:85:25:89:1c:bb:85:fd:76:2c:84:0c: 61:42:4a:e6:a5:3d:77:49:6d:1b:88:9d:47:33:1b:b3:d6:b4: 8d:7d:98:33:d7:6d:44:51:82:94:4f:77:7d:9b:25:e2:f7:03: ee:ac:9e:14:b4:06:85:8a:00:4b:e3:19:c6:6c:3c:11:da:86: 31:53:81:eb:59:3f:b5:e5:b1:3f:ad:b5:f9:5f:42:b1:5c:77: 48:98:da:fb:d5:65:aa:24:09:df:d7:ca:a6:c0:29:f0:56:4c: 96:81:10:af:9c:cc:7b:e7:52:9a:a9:6d:ed:45:22:05:5e:5e: 2f:ed:10:50:42:56:24:6a:c3:28:9f:66:36:9e:1d:c2:1f:4a: 37:ca:c9:65:59:65:94:94:d7:1b:4d:91:8c:56:ad:28:03:4d: 69:bc:71:fe:51:07:13:a3:54:e6:52:d5:7c:0d:03:16:a5:87: 56:05:e4:f1:88:9e:8c:32:8b:6e:9a:01:92:c9:da:80:41:5b: 3b:a1:cc:b2:ef:15:d5:56:fb:55:fc:7d:25:c5:1a:5c:a0:5b: 31:16:6a:a4:20:12:bc:7d:98:a9:c1:54:36:70:12:d2:1e:85: b2:69:89:a5:59:c6:b2:e9:8a:29:08:a5:d6:74:30:9a:95:0e: 20:85:02:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJWSpdzWSfsW7LcY5i084SKdrKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTEx RjAzREMxQjAeFw0yNjA5MjMxODU5MzhaFw0yNjA5MjQyMTAzMzhaMDMxMTAvBgNV BAMTKDJEQUEyQUVGMDgzMDk4MUE2NTExMTNGOTkwMjc5RDM2RDFFNkVEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwIFQGx/oMxWVg//V0yJGKpQ4f m7lM8EgauyGo6wyuH9ZmbQ0NfonptWb0VlRv1a05rhtiSXsHKCx+sR5dYkGrfI6y nQOqm5CT/Awv18FGO9AWukYudsWpyjnDn77GwzC9gtU0ny+VqAaOTKk+0bdmYYs1 hQ4CtKe/03AEGmqRM/CEDJdr+HwBlvra6xO4p797MQqrPmW/v9T5tYAap/MKUmRE O3iGI6xiPH6BS++W64l8EES6u8UUZ2XWC/+yLggIgeL8P7hj9XWhobLxjjnB2nrm WjLsstcKb26DFOY+mJgO8j4r42NUC0hQM4j1AMEBms9e19oFFee0DlECBs6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULaoq7wgwmBplERP5kCedNtHm7QYwHwYDVR0j BBgwFoAUhnPiaY/LUromE1kqrPfi4R8D3BswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY5ZjI5ODgtY2FiMy00NWFhLTk3ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4 RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTExRjAzREMxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjczRTI2OThGQ0I1MkJBMjYxMzU5MkFBQ0Y3RTJFMTFGMDNE QzFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0Uy RTExRjAzREMxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcQLbte8sOFJYkcu4X9diyEDGFCSualPXdJ bRuInUczG7PWtI19mDPXbURRgpRPd32bJeL3A+6snhS0BoWKAEvjGcZsPBHahjFT getZP7XlsT+ttflfQrFcd0iY2vvVZaokCd/XyqbAKfBWTJaBEK+czHvnUpqpbe1F IgVeXi/tEFBCViRqwyifZjaeHcIfSjfKyWVZZZSU1xtNkYxWrSgDTWm8cf5RBxOj VOZS1XwNAxalh1YF5PGInowyi26aAZLJ2oBBWzuhzLLvFdVW+1X8fSXFGlygWzEW aqQgErx9mKnBVDZwEtIehbJpiaVZxrLpiikIpdZ0MJqVDiCFAqE= -----END CERTIFICATE-----Generated at Thu Sep 24 10:54:11 2026 by rpki-client