$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft File: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft (raw, json) Hash identifier: IeM/IunGXA7OiaxfWVIn99zOeLXn7UzFML4L4s2uEgE= Subject key identifier: F7:A7:E5:03:9A:F5:B6:8D:9A:2E:7C:20:36:B5:62:61:49:19:C9:68 Authority key identifier: 8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB Certificate issuer: /CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Certificate serial: 3679F6C435A09B7E5B19C98B4C89340D6A185554 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft Manifest number: BF Signing time: Wed 23 Sep 2026 09:33:02 +0000 Manifest this update: Wed 23 Sep 2026 09:28:02 +0000 Manifest next update: Thu 24 Sep 2026 11:13:02 +0000 Files and hashes: 1: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl (hash: pT/YFeeE96cw9uHL04CTTb+oZ/IQ1XBWs5npnIN8e2Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:79:f6:c4:35:a0:9b:7e:5b:19:c9:8b:4c:89:34:0d:6a:18:55:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Validity Not Before: Sep 23 09:28:02 2026 GMT Not After : Sep 24 11:13:02 2026 GMT Subject: CN=F7A7E5039AF5B68D9A2E7C2036B562614919C968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:1f:41:43:e3:fe:f4:9f:2d:a9:c1:11:6a: 2b:89:21:1f:d6:77:4f:9c:35:15:6b:71:8e:12:96: 69:72:a1:42:63:89:6e:63:dd:8d:5f:03:26:22:f9: 2c:4f:10:e1:09:7e:14:99:b1:7e:9e:78:66:ad:1a: 96:c7:1d:0e:40:63:8c:c6:2e:8c:10:13:84:02:78: 2d:70:54:fd:2b:09:57:fd:70:8e:7c:b7:9f:24:c7: 24:a6:e7:78:6c:bb:2c:3a:78:7b:98:b1:0c:34:37: 12:b5:76:a1:30:21:02:8d:8e:c1:9a:2e:48:7c:b0: c0:fe:4b:e4:ec:de:0e:84:86:a6:6e:1e:56:89:bf: 0f:12:86:59:a5:b3:ab:83:5e:da:a1:b2:a0:c6:4a: 51:97:b8:66:16:a7:23:8b:a2:be:79:ed:c9:50:74: 25:7d:8c:a1:d5:77:21:f5:82:67:e6:34:c0:b8:1d: d6:a1:80:79:fc:22:1e:e1:d7:23:7b:1c:db:cb:0e: 83:f7:ee:ea:a3:f4:6d:60:ac:58:9d:8c:42:20:fa: 5a:0a:c9:84:29:8f:4b:0e:8e:fa:12:1b:37:ef:c9: 30:82:5c:f3:3a:82:4f:f6:5c:35:c4:9c:4c:ce:ff: 43:65:77:97:bf:b9:84:c3:fd:e8:96:85:5e:0a:26: 49:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A7:E5:03:9A:F5:B6:8D:9A:2E:7C:20:36:B5:62:61:49:19:C9:68 X509v3 Authority Key Identifier: keyid:8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:62:aa:97:61:a7:95:93:bc:71:a4:0b:44:ff:cb:1c:15:46: 13:d6:7b:46:05:ea:3b:61:b1:93:a2:48:51:15:8b:52:b2:0f: fc:8c:3b:43:ff:c1:fb:eb:88:0a:85:81:7e:04:3c:28:a3:30: 1c:8a:17:b2:14:0f:2e:1d:63:a9:0c:4b:59:94:19:14:68:ca: a2:34:6f:75:51:07:33:64:c7:34:23:d9:88:77:1f:28:77:98: 30:85:e7:a1:6f:1a:72:e3:ab:1e:e9:0b:6d:50:49:79:64:a6: aa:8f:0f:eb:2f:9c:65:c8:83:82:96:4d:34:25:04:c3:24:8c: aa:da:02:f3:a7:41:1c:df:06:d4:85:55:97:e3:02:6b:49:13: 97:9d:d9:31:1c:91:d1:47:b5:b9:0b:ff:2e:c4:d1:87:5e:92: 64:b2:b3:66:12:e3:83:41:e0:c1:9a:9b:b4:f7:5e:79:29:22: 1a:43:f5:a2:8c:0e:3c:93:40:0c:38:e2:bd:89:f4:ca:75:b9: f1:2d:d7:3a:50:a7:64:27:94:f9:89:dc:bc:bb:9c:5c:19:4a: 8c:de:18:92:69:c4:86:56:20:4c:60:f6:fa:4d:62:9c:12:fc: 55:a7:79:87:a0:49:6f:48:49:23:46:9b:46:c9:fb:31:71:3e: 51:5f:a4:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnn2xDWgm35bGcmLTIk0DWoYVVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5 MzREOTlEQjAeFw0yNjA5MjMwOTI4MDJaFw0yNjA5MjQxMTEzMDJaMDMxMTAvBgNV BAMTKEY3QTdFNTAzOUFGNUI2OEQ5QTJFN0MyMDM2QjU2MjYxNDkxOUM5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7R9BQ+P+9J8tqcERaiuJIR/W d0+cNRVrcY4SlmlyoUJjiW5j3Y1fAyYi+SxPEOEJfhSZsX6eeGatGpbHHQ5AY4zG LowQE4QCeC1wVP0rCVf9cI58t58kxySm53hsuyw6eHuYsQw0NxK1dqEwIQKNjsGa Lkh8sMD+S+Ts3g6EhqZuHlaJvw8Shlmls6uDXtqhsqDGSlGXuGYWpyOLor557clQ dCV9jKHVdyH1gmfmNMC4HdahgHn8Ih7h1yN7HNvLDoP37uqj9G1grFidjEIg+loK yYQpj0sOjvoSGzfvyTCCXPM6gk/2XDXEnEzO/0Nld5e/uYTD/eiWhV4KJkkdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU96flA5r1to2aLnwgNrViYUkZyWgwHwYDVR0j BBgwFoAUisGM4zWXeqCpvJrv/vUwyJNNmdswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5Y2NlYjYtYTRlNy00ZTgyLTg4YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMz NTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5MzREOTlEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUMxOENFMzM1OTc3QUEwQTlCQzlBRUZGRUY1MzBDODkzNEQ5 OURCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMw Qzg5MzREOTlEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZiqpdhp5WTvHGkC0T/yxwVRhPWe0YF6jth sZOiSFEVi1KyD/yMO0P/wfvriAqFgX4EPCijMByKF7IUDy4dY6kMS1mUGRRoyqI0 b3VRBzNkxzQj2Yh3Hyh3mDCF56FvGnLjqx7pC21QSXlkpqqPD+svnGXIg4KWTTQl BMMkjKraAvOnQRzfBtSFVZfjAmtJE5ed2TEckdFHtbkL/y7E0YdekmSys2YS44NB 4MGam7T3XnkpIhpD9aKMDjyTQAw44r2J9Mp1ufEt1zpQp2QnlPmJ3Ly7nFwZSoze GJJpxIZWIExg9vpNYpwS/FWneYegSW9ISSNGm0bJ+zFxPlFfpJY= -----END CERTIFICATE-----Generated at Thu Sep 24 03:38:09 2026 by rpki-client