$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft File: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft (raw, json) Hash identifier: qvMWM/R+0x9gxEUH/jbIkJ7a9m8JvoM1iZtDp2M2XVU= Subject key identifier: FF:A0:06:CE:67:66:19:CA:7D:80:8C:F9:15:C6:A8:C1:2A:AE:6D:3C Authority key identifier: 8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 Certificate issuer: /CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Certificate serial: 6FDFADA961C841346FB33851C267761DCAFF0EBB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 12:36:07 +0000 Manifest this update: Fri 25 Sep 2026 12:31:07 +0000 Manifest next update: Sat 26 Sep 2026 12:57:07 +0000 Files and hashes: 1: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl (hash: 9WO6308vTeZKpkvy41ZBlYaujCRShpq4FUT7OQwHOEA=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: NR10Bfbwh6SYopHFVcr7fLYC1ZrjLqSPhi8hfWEGSfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 12:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:df:ad:a9:61:c8:41:34:6f:b3:38:51:c2:67:76:1d:ca:ff:0e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Validity Not Before: Sep 25 12:31:07 2026 GMT Not After : Sep 26 12:57:07 2026 GMT Subject: CN=FFA006CE676619CA7D808CF915C6A8C12AAE6D3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:21:da:11:0b:3c:a4:ad:f2:47:1f:c3:ae:05: d9:0b:05:d6:e5:3c:06:c1:39:c2:59:91:25:15:d7: 35:8d:26:b5:12:22:4d:8e:ce:eb:af:18:30:18:06: 20:c7:c7:8d:a1:c5:49:ac:21:5d:d2:f5:7a:9e:3c: 37:0a:f1:25:87:46:ad:d3:c3:ae:41:53:1b:1e:50: 91:e5:c2:30:46:d4:00:74:fe:28:32:8a:7b:d4:50: 06:e9:b6:2c:05:a0:0d:60:22:81:ed:57:08:6a:88: 82:95:f5:fb:cf:07:05:55:e5:6e:c6:0b:56:5e:20: 0c:f8:b8:f9:42:5e:11:b5:37:05:d1:a4:33:39:14: 05:bc:31:7f:7c:5b:5d:0e:d1:53:81:11:87:3c:29: 9c:d2:72:2c:f9:80:b5:5e:96:cf:e1:2a:59:41:1a: a8:f7:2c:59:2e:43:ba:33:7f:d3:95:66:90:8b:c3: af:c8:e2:97:47:59:84:d5:36:1e:e4:5a:99:59:eb: 58:ec:77:65:04:28:ba:52:94:3f:c6:68:21:8a:b9: 16:96:d6:a2:68:ad:03:3e:7a:98:c3:d3:13:b1:d3: cf:16:36:4a:76:02:b9:25:34:19:2e:fb:33:cf:6e: c2:4b:78:e4:0a:0d:d8:6f:27:d7:c7:cb:e5:0c:fd: 19:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A0:06:CE:67:66:19:CA:7D:80:8C:F9:15:C6:A8:C1:2A:AE:6D:3C X509v3 Authority Key Identifier: keyid:8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fb:f6:c3:3d:c1:8c:44:3b:e1:65:b2:5b:e9:f2:b2:56:c7: fe:dc:b1:b4:86:2f:fc:8a:0a:c2:e4:ae:d9:be:23:e2:ea:ff: a9:43:99:3e:2e:19:3d:67:3c:2e:56:6a:15:5c:5b:3e:a8:ad: 5e:5a:13:d6:d2:0d:e5:05:6a:b7:67:01:eb:6c:65:a2:5a:99: d8:71:60:28:0d:66:f7:62:34:9a:ed:c9:59:ab:74:e1:31:b1: 07:34:b5:34:50:67:e2:1b:2b:11:6c:9b:5b:41:4e:75:e1:f0: 69:c6:f7:cc:db:17:15:26:cd:b5:83:62:84:59:7f:5b:fd:4b: 59:62:a0:2e:6c:d1:91:cd:f9:2d:8f:62:1b:ca:d4:50:a1:c5: be:32:1d:31:f4:aa:eb:a0:a2:4e:d9:69:4e:6c:29:f1:5b:6c: e0:bf:19:58:4b:50:62:c6:fd:9a:dd:5e:a7:cf:07:62:87:ed: 5c:b3:47:fe:b0:e7:ad:37:63:0c:83:b3:01:43:7a:b4:16:b6: 36:20:ed:e8:6d:ca:34:ee:e4:70:87:97:81:65:40:6f:80:e6: 30:e3:89:e0:64:3f:76:92:37:1a:fd:4a:a8:c6:fb:e8:a8:49: f7:75:22:cf:dc:92:ec:9c:cb:2d:90:4c:d5:8e:69:e7:c1:82: 75:99:81:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb9+tqWHIQTRvszhRwmd2Hcr/DrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5 QjFCNDU3MzAeFw0yNjA5MjUxMjMxMDdaFw0yNjA5MjYxMjU3MDdaMDMxMTAvBgNV BAMTKEZGQTAwNkNFNjc2NjE5Q0E3RDgwOENGOTE1QzZBOEMxMkFBRTZEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzIdoRCzykrfJHH8OuBdkLBdbl PAbBOcJZkSUV1zWNJrUSIk2OzuuvGDAYBiDHx42hxUmsIV3S9XqePDcK8SWHRq3T w65BUxseUJHlwjBG1AB0/igyinvUUAbptiwFoA1gIoHtVwhqiIKV9fvPBwVV5W7G C1ZeIAz4uPlCXhG1NwXRpDM5FAW8MX98W10O0VOBEYc8KZzSciz5gLVels/hKllB Gqj3LFkuQ7ozf9OVZpCLw6/I4pdHWYTVNh7kWplZ61jsd2UEKLpSlD/GaCGKuRaW 1qJorQM+epjD0xOx088WNkp2ArklNBku+zPPbsJLeOQKDdhvJ9fHy+UM/RlHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/6AGzmdmGcp9gIz5FcaowSqubTwwHwYDVR0j BBgwFoAUjRqU6g+f1RSOCcrgowe9yZsbRXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2MjExMWQtMGExMy00NDA3LWFmMzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEw RjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5QjFCNDU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDFBOTRFQTBGOUZENTE0OEUwOUNBRTBBMzA3QkRDOTlCMUI0 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JE Qzk5QjFCNDU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ379sM9wYxEO+Flslvp8rJWx/7csbSGL/yK CsLkrtm+I+Lq/6lDmT4uGT1nPC5WahVcWz6orV5aE9bSDeUFardnAetsZaJamdhx YCgNZvdiNJrtyVmrdOExsQc0tTRQZ+IbKxFsm1tBTnXh8GnG98zbFxUmzbWDYoRZ f1v9S1lioC5s0ZHN+S2PYhvK1FChxb4yHTH0quugok7ZaU5sKfFbbOC/GVhLUGLG /ZrdXqfPB2KH7VyzR/6w5603YwyDswFDerQWtjYg7ehtyjTu5HCHl4FlQG+A5jDj ieBkP3aSNxr9SqjG++ioSfd1Is/ckuycyy2QTNWOaefBgnWZgTE= -----END CERTIFICATE-----Generated at Sat Sep 26 03:26:22 2026 by rpki-client