$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft File: 8BBABE3D733222C2B6A217449635616F4F2C9625.mft (raw, json) Hash identifier: N+TKdzgVVcPXvvRj9+8O49AEykA24NNiJb2r30XppGQ= Subject key identifier: 87:BE:30:71:98:A7:EE:83:F0:4C:29:7D:DD:01:21:A0:AA:9B:34:5B Authority key identifier: 8B:BA:BE:3D:73:32:22:C2:B6:A2:17:44:96:35:61:6F:4F:2C:96:25 Certificate issuer: /CN=8BBABE3D733222C2B6A217449635616F4F2C9625 Certificate serial: 6F7C1C55BF5E6F7BB537A4EDB9FA57E426D35E6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 10:03:39 +0000 Manifest this update: Wed 23 Sep 2026 09:58:39 +0000 Manifest next update: Thu 24 Sep 2026 11:10:39 +0000 Files and hashes: 1: 8BBABE3D733222C2B6A217449635616F4F2C9625.crl (hash: z+p45c8F/908JHQ4rH4YIllZbafd9Q6Nb8eV9oupCug=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: 3IjI2krzhLJYlKJkWyMM6q/EfNey4aUG89WZvwYr9zI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.crl rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7c:1c:55:bf:5e:6f:7b:b5:37:a4:ed:b9:fa:57:e4:26:d3:5e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BBABE3D733222C2B6A217449635616F4F2C9625 Validity Not Before: Sep 23 09:58:39 2026 GMT Not After : Sep 24 11:10:39 2026 GMT Subject: CN=87BE307198A7EE83F04C297DDD0121A0AA9B345B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:7d:bf:94:37:0e:11:76:72:88:8f:a9:30: e3:8d:2e:63:c2:37:5e:af:7d:6b:f8:76:4f:f9:69: e5:af:07:a9:d9:43:47:1c:1c:d8:f2:c0:48:a0:41: af:1c:fc:d9:60:0a:49:9a:a0:44:88:07:5b:36:3f: 7c:aa:a7:a6:53:7e:ce:40:43:20:d9:f0:d0:77:01: 87:85:31:7d:a7:d9:e6:44:a3:08:fa:82:33:37:c2: 17:94:70:98:1d:3e:67:d5:9d:8b:34:84:83:7b:a4: fa:41:a6:c9:95:f8:f3:a8:bf:a9:97:f5:3d:02:44: 8e:a7:e0:d3:b7:f9:0f:75:6a:9b:e7:62:e0:38:69: 99:53:20:41:7b:0b:e6:d1:8b:f1:20:d6:39:ff:1c: 30:7d:2b:33:40:f3:c4:c6:87:87:3d:88:e3:59:a0: f9:e0:db:37:15:40:d8:0d:3a:65:0f:a7:90:5a:1f: 7e:c9:2f:d2:f8:d4:75:9f:9b:0e:98:82:8c:d7:27: e1:4d:b7:71:c1:bc:d6:31:2d:75:82:4b:ae:db:43: 6c:51:e8:0d:f8:9e:e6:0f:46:01:1e:19:06:33:cd: cc:40:71:ca:85:08:59:cc:33:8a:00:d9:ca:9e:65: 40:5f:47:57:c0:83:77:64:5c:49:18:ad:21:92:89: 65:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BE:30:71:98:A7:EE:83:F0:4C:29:7D:DD:01:21:A0:AA:9B:34:5B X509v3 Authority Key Identifier: keyid:8B:BA:BE:3D:73:32:22:C2:B6:A2:17:44:96:35:61:6F:4F:2C:96:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b3:84:3c:69:86:45:e7:92:af:ba:61:2e:a6:63:c0:73:75: 9b:62:bd:27:04:ea:ca:02:0a:ba:db:c0:81:14:df:c8:6c:4a: dc:69:59:f7:24:17:26:b8:00:3f:75:5c:62:a4:e2:73:f4:9f: d9:98:bd:72:5a:b1:21:c1:07:06:aa:50:6a:94:1b:27:01:23: ac:33:14:49:2f:3e:a6:86:0e:0e:22:3c:23:90:56:d7:3b:2c: a0:c3:7f:b6:6c:8c:5d:23:05:57:61:b2:b9:1d:06:a7:44:55: fe:30:ab:64:35:12:5c:b4:70:c7:4a:a3:ed:bc:0f:4b:40:ef: 63:96:23:6c:48:e5:6c:18:82:80:46:e8:32:a9:78:48:c1:ff: ca:1e:6a:c0:58:0c:c6:d9:58:22:44:1d:5d:54:d2:ed:5b:5e: 5d:97:bc:65:eb:c7:3c:36:b5:57:7b:85:e3:cb:fe:0a:e5:d4: 86:78:9e:66:58:de:2f:f2:23:c4:d6:13:36:e0:65:76:b6:a1: 89:2c:b9:56:71:3a:3d:e2:d0:21:84:31:c3:79:87:b7:61:d6: 01:09:0c:48:f7:35:ca:89:e2:d4:89:00:26:85:6f:da:5e:b4: 70:26:e8:a1:aa:4a:64:d3:2f:68:6e:61:2b:39:4c:7c:6c:76: f8:9f:0e:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb3wcVb9eb3u1N6TtufpX5CbTXmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCQUJFM0Q3MzMyMjJDMkI2QTIxNzQ0OTYzNTYxNkY0 RjJDOTYyNTAeFw0yNjA5MjMwOTU4MzlaFw0yNjA5MjQxMTEwMzlaMDMxMTAvBgNV BAMTKDg3QkUzMDcxOThBN0VFODNGMDRDMjk3REREMDEyMUEwQUE5QjM0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChF32/lDcOEXZyiI+pMOONLmPC N16vfWv4dk/5aeWvB6nZQ0ccHNjywEigQa8c/NlgCkmaoESIB1s2P3yqp6ZTfs5A QyDZ8NB3AYeFMX2n2eZEowj6gjM3wheUcJgdPmfVnYs0hIN7pPpBpsmV+POov6mX 9T0CRI6n4NO3+Q91apvnYuA4aZlTIEF7C+bRi/Eg1jn/HDB9KzNA88TGh4c9iONZ oPng2zcVQNgNOmUPp5BaH37JL9L41HWfmw6YgozXJ+FNt3HBvNYxLXWCS67bQ2xR 6A34nuYPRgEeGQYzzcxAccqFCFnMM4oA2cqeZUBfR1fAg3dkXEkYrSGSiWWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh74wcZin7oPwTCl93QEhoKqbNFswHwYDVR0j BBgwFoAUi7q+PXMyIsK2ohdEljVhb08sliUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFmMDAzMWUtMmE5ZS00N2NhLTkyODMtNDBlOTI3ZTM1OTkzLzAvOEJCQUJFM0Q3 MzMyMjJDMkI2QTIxNzQ0OTYzNTYxNkY0RjJDOTYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkJBQkUzRDczMzIyMkMyQjZBMjE3NDQ5NjM1NjE2RjRGMkM5 NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvOEJCQUJFM0Q3MzMyMjJDMkI2QTIxNzQ0OTYzNTYx NkY0RjJDOTYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuzhDxphkXnkq+6YS6mY8BzdZtivScE6soC CrrbwIEU38hsStxpWfckFya4AD91XGKk4nP0n9mYvXJasSHBBwaqUGqUGycBI6wz FEkvPqaGDg4iPCOQVtc7LKDDf7ZsjF0jBVdhsrkdBqdEVf4wq2Q1Ely0cMdKo+28 D0tA72OWI2xI5WwYgoBG6DKpeEjB/8oeasBYDMbZWCJEHV1U0u1bXl2XvGXrxzw2 tVd7hePL/grl1IZ4nmZY3i/yI8TWEzbgZXa2oYksuVZxOj3i0CGEMcN5h7dh1gEJ DEj3NcqJ4tSJACaFb9petHAm6KGqSmTTL2huYSs5THxsdvifDgg= -----END CERTIFICATE-----Generated at Thu Sep 24 04:02:41 2026 by rpki-client