$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft File: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft (raw, json) Hash identifier: KZbAcSlK/8495EHnZKmhMoMT/TI+XI8HOe6b3nV8GC4= Subject key identifier: 3F:2A:4D:3B:7F:2D:A6:87:D1:7F:78:2B:EC:39:B9:DD:19:6A:17:A1 Authority key identifier: 8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C Certificate issuer: /CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Certificate serial: 576245EBA6724D14AF7974CC729EB3A57011409A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 09:17:17 +0000 Manifest this update: Thu 24 Sep 2026 09:12:17 +0000 Manifest next update: Fri 25 Sep 2026 10:03:17 +0000 Files and hashes: 1: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl (hash: nRR5mV7VxdmisxhoyMokUfSP+5feJDv773lDuasvj+M=) 2: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: A0fye72fVewvJEctRltf+2Pc+fB290Pn79WveiWFgaQ=) 3: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: feHp+VgvlrJlDWnbvgKdK3q5FY7GJ/3YIOlQqsX2zUs=) 4: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 8luvuUZe/inH3n4D6OyQwwD6mGHctkX0bejCwUaYOvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:62:45:eb:a6:72:4d:14:af:79:74:cc:72:9e:b3:a5:70:11:40:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Validity Not Before: Sep 24 09:12:17 2026 GMT Not After : Sep 25 10:03:17 2026 GMT Subject: CN=3F2A4D3B7F2DA687D17F782BEC39B9DD196A17A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:76:48:c4:a7:3b:86:5a:28:54:87:88:32: 75:36:11:fb:dc:8b:d6:7f:73:74:ec:e8:3b:05:c9: ce:b6:a2:06:8e:cc:97:17:4e:8d:c0:7d:30:76:e0: 77:f4:83:0d:10:9c:29:34:86:f6:1b:5d:1a:e1:9f: 6b:41:e0:59:60:02:f4:58:78:d3:09:2b:af:a1:cc: 9c:a0:20:e2:ff:b4:9c:73:c9:5c:fd:f7:2b:f6:dc: 53:22:af:ac:c8:6c:77:54:d6:af:90:0e:f5:b4:c7: 45:e3:c0:c8:56:ae:fb:b9:c5:2d:01:28:b0:e0:a2: c2:05:39:63:49:d4:a7:4b:6c:89:47:17:94:06:eb: 85:f1:68:50:8a:7b:0b:3c:cf:67:52:33:41:ce:64: 53:0a:02:5a:7d:78:cc:61:74:83:51:24:14:97:f3: 27:63:a9:e3:0c:73:96:2d:10:26:92:4b:4f:89:6c: 82:48:8f:eb:42:b7:24:87:55:e6:95:e4:f0:bf:7b: b1:21:e8:ce:b3:22:4d:b7:89:40:c4:da:a0:ac:15: ac:ec:be:9b:60:aa:e5:00:d6:f7:ba:ad:d1:b3:ef: f8:9a:d8:a6:85:27:f1:83:21:86:0d:a1:7d:09:90: 08:49:90:d8:c9:5a:82:6a:48:2f:d5:3f:d1:21:9e: 4e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2A:4D:3B:7F:2D:A6:87:D1:7F:78:2B:EC:39:B9:DD:19:6A:17:A1 X509v3 Authority Key Identifier: keyid:8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:61:32:53:ef:ac:8c:34:6b:0f:f0:68:fb:0a:2f:b3:14:5d: fa:8b:e5:b0:a1:cf:21:d2:52:bd:d0:01:d9:e3:0c:58:71:81: 92:f2:38:c8:8a:85:31:4f:68:65:85:e1:71:a1:8f:c5:93:56: f5:bb:12:ba:07:5a:ab:45:bf:31:0d:94:49:d5:c1:c0:17:86: fe:a6:2b:10:cb:3b:07:1a:75:fa:7c:91:fd:c6:ff:60:15:65: e5:8a:03:d3:fe:97:fc:11:d4:e6:8b:29:f4:11:b8:b5:76:73: 05:67:bf:ec:d4:ae:f3:f5:cb:6a:6f:7d:6b:49:72:1d:11:f1: c4:03:2f:06:a9:ae:33:1e:4f:8e:c4:c1:fe:48:f1:3d:bc:18: d8:ea:c3:c1:35:78:70:0c:b9:af:6f:42:90:5b:11:6d:87:50: 0e:72:95:e6:60:6c:34:a0:8c:6c:be:f2:22:91:06:47:ef:9e: ab:a6:de:0f:96:45:44:e7:31:d8:0b:75:16:9c:cd:87:d2:0e: 2f:ab:02:a9:ee:50:d5:d1:f5:fc:a5:de:58:d1:6a:7c:6a:e9: 15:26:b5:dd:a1:6e:b8:ec:73:52:09:01:6c:60:4f:cc:98:93: 76:24:16:8d:41:b4:f4:44:9b:bc:7e:e9:1b:d5:34:a0:56:77: cb:69:85:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2JF66ZyTRSveXTMcp6zpXARQJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0 MUUyQkUxQzAeFw0yNjA5MjQwOTEyMTdaFw0yNjA5MjUxMDAzMTdaMDMxMTAvBgNV BAMTKDNGMkE0RDNCN0YyREE2ODdEMTdGNzgyQkVDMzlCOUREMTk2QTE3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjXZIxKc7hlooVIeIMnU2Efvc i9Z/c3Ts6DsFyc62ogaOzJcXTo3AfTB24Hf0gw0QnCk0hvYbXRrhn2tB4FlgAvRY eNMJK6+hzJygIOL/tJxzyVz99yv23FMir6zIbHdU1q+QDvW0x0XjwMhWrvu5xS0B KLDgosIFOWNJ1KdLbIlHF5QG64XxaFCKews8z2dSM0HOZFMKAlp9eMxhdINRJBSX 8ydjqeMMc5YtECaSS0+JbIJIj+tCtySHVeaV5PC/e7Eh6M6zIk23iUDE2qCsFazs vptgquUA1ve6rdGz7/ia2KaFJ/GDIYYNoX0JkAhJkNjJWoJqSC/VP9Ehnk4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPypNO38tpofRf3gr7Dm53RlqF6EwHwYDVR0j BBgwFoAUiwz4fyNJ/IeH71LjsK2A4UHivhwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlhNDAwODktNjA0MS00NWVkLThlNDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0Yy MzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0MUUyQkUxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjBDRjg3RjIzNDlGQzg3ODdFRjUyRTNCMEFEODBFMTQxRTJC RTFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgw RTE0MUUyQkUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9hMlPvrIw0aw/waPsKL7MUXfqL5bChzyHS Ur3QAdnjDFhxgZLyOMiKhTFPaGWF4XGhj8WTVvW7EroHWqtFvzENlEnVwcAXhv6m KxDLOwcadfp8kf3G/2AVZeWKA9P+l/wR1OaLKfQRuLV2cwVnv+zUrvP1y2pvfWtJ ch0R8cQDLwaprjMeT47Ewf5I8T28GNjqw8E1eHAMua9vQpBbEW2HUA5yleZgbDSg jGy+8iKRBkfvnqum3g+WRUTnMdgLdRaczYfSDi+rAqnuUNXR9fyl3ljRanxq6RUm td2hbrjsc1IJAWxgT8yYk3YkFo1BtPREm7x+6RvVNKBWd8tphck= -----END CERTIFICATE-----Generated at Thu Sep 24 17:21:32 2026 by rpki-client