$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft File: 8D7E0574648D2E037D2147F409FC002E56E42A23.mft (raw, json) Hash identifier: mcKmLee2Q1arrbwaqfXL/EZpN2NzB7OvRRnjdpCPSt4= Subject key identifier: 64:2B:F6:08:9C:2D:53:9A:4C:3C:9D:71:16:07:69:B1:91:9F:48:3D Authority key identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 Certificate issuer: /CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Certificate serial: 69B650F2DECEAE1A87564331E7A5101271A6A67C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 09:22:41 +0000 Manifest this update: Wed 23 Sep 2026 09:17:41 +0000 Manifest next update: Thu 24 Sep 2026 12:19:41 +0000 Files and hashes: 1: 8D7E0574648D2E037D2147F409FC002E56E42A23.crl (hash: F+86zWeqPiz/lfgXbeNf+G+pHO+I58J4v+RaLXaWMXs=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: Wh9jPiaMLmpVJg4WJmhSTDv7ObmHyLTAXzkGZmow5b0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b6:50:f2:de:ce:ae:1a:87:56:43:31:e7:a5:10:12:71:a6:a6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Validity Not Before: Sep 23 09:17:41 2026 GMT Not After : Sep 24 12:19:41 2026 GMT Subject: CN=642BF6089C2D539A4C3C9D71160769B1919F483D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:67:45:aa:e8:90:05:5d:8d:20:a9:4f:d5:e4: 88:54:0f:97:a1:0e:c9:d3:92:28:88:dc:93:33:25: 61:fd:c8:40:eb:2a:d9:af:87:37:40:64:92:cd:d1: cb:22:97:50:ee:09:3b:9f:d9:00:1d:08:22:d6:0f: f1:6f:fa:a7:d0:90:0c:d1:15:6f:6b:44:68:7f:57: 84:e9:30:bc:14:a9:0a:0d:40:ed:15:9a:08:25:14: 2d:90:77:1a:d9:37:20:99:e1:b3:20:5d:8d:dd:83: 8f:f5:33:70:f3:a9:74:55:5a:e8:23:da:b0:b9:23: ae:90:6c:73:2d:e8:8e:b9:92:5d:fd:7d:a3:3c:80: 5b:42:13:dc:ea:57:57:fd:f6:50:f1:2f:b9:62:eb: 38:7e:b2:a2:2f:4e:c0:0d:9b:fb:38:64:ca:f7:7c: 31:51:59:9e:84:ae:d0:8f:d5:c5:95:99:5e:c6:f8: 82:5c:2f:ae:49:c5:7c:58:f3:dd:2f:2f:0c:c7:50: 07:f3:ce:02:8f:bc:60:9c:a3:79:b2:8f:72:35:f8: 10:3a:c7:38:13:0c:3a:a2:23:38:3d:85:f2:dc:0b: 2b:2a:69:40:a8:25:33:96:23:75:17:25:e4:b5:f2: a0:f8:43:be:94:6b:74:91:b8:fb:d4:1f:bd:3b:aa: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2B:F6:08:9C:2D:53:9A:4C:3C:9D:71:16:07:69:B1:91:9F:48:3D X509v3 Authority Key Identifier: keyid:8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e7:68:55:07:12:06:42:01:ba:23:b2:00:ea:9f:49:33:82: 64:6d:b9:7b:44:7c:e9:12:36:04:d2:2b:f8:59:65:a9:a9:12: 38:c4:2f:0a:92:58:d1:b2:4f:c2:7d:8a:bb:74:9f:4f:13:61: 4f:ae:ed:98:63:fc:9c:6e:ff:f0:b2:cb:46:d0:05:ac:7d:fa: 1f:06:73:1c:a5:66:b1:51:34:00:41:b9:e6:d2:47:7c:a7:0f: 1b:9f:f3:4f:c3:68:a6:d7:bb:8a:28:1b:c8:cb:02:14:0a:22: 0f:4f:f1:5a:af:3f:f0:1b:f8:f9:b3:e4:6e:00:6d:d5:66:2d: db:82:ac:ea:ad:0f:0d:1b:ea:f7:c4:96:91:ad:de:2f:1a:77: d9:6d:21:60:59:16:d4:9b:30:50:11:fc:1a:3b:42:bf:ef:6a: b4:68:0f:ea:f2:51:c2:8e:dd:be:bd:8c:fb:22:16:2d:a8:6b: 66:d6:7d:41:0d:26:45:1a:72:f0:1d:05:8c:e1:9c:fd:28:15: fa:de:57:6a:a4:4d:d3:4c:7a:c9:76:96:9b:f4:8a:1a:ff:78: 27:ab:5a:5c:40:18:08:8f:eb:c3:df:91:c3:91:39:01:c1:59: 81:6c:a4:b0:14:f3:25:dd:fb:08:e0:e5:88:5d:9d:f8:c4:11: ed:f4:84:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabZQ8t7OrhqHVkMx56UQEnGmpnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1 NkU0MkEyMzAeFw0yNjA5MjMwOTE3NDFaFw0yNjA5MjQxMjE5NDFaMDMxMTAvBgNV BAMTKDY0MkJGNjA4OUMyRDUzOUE0QzNDOUQ3MTE2MDc2OUIxOTE5RjQ4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhZ0Wq6JAFXY0gqU/V5IhUD5eh DsnTkiiI3JMzJWH9yEDrKtmvhzdAZJLN0csil1DuCTuf2QAdCCLWD/Fv+qfQkAzR FW9rRGh/V4TpMLwUqQoNQO0VmgglFC2QdxrZNyCZ4bMgXY3dg4/1M3DzqXRVWugj 2rC5I66QbHMt6I65kl39faM8gFtCE9zqV1f99lDxL7li6zh+sqIvTsANm/s4ZMr3 fDFRWZ6ErtCP1cWVmV7G+IJcL65JxXxY890vLwzHUAfzzgKPvGCco3myj3I1+BA6 xzgTDDqiIzg9hfLcCysqaUCoJTOWI3UXJeS18qD4Q76Ua3SRuPvUH707qnvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZCv2CJwtU5pMPJ1xFgdpsZGfSD0wHwYDVR0j BBgwFoAUjX4FdGSNLgN9IUf0CfwALlbkKiMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2 NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1NkU0MkEyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDdFMDU3NDY0OEQyRTAzN0QyMTQ3RjQwOUZDMDAyRTU2RTQy QTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAw MkU1NkU0MkEyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjnaFUHEgZCAbojsgDqn0kzgmRtuXtEfOkS NgTSK/hZZampEjjELwqSWNGyT8J9irt0n08TYU+u7Zhj/Jxu//Cyy0bQBax9+h8G cxylZrFRNABBuebSR3ynDxuf80/DaKbXu4ooG8jLAhQKIg9P8VqvP/Ab+Pmz5G4A bdVmLduCrOqtDw0b6vfElpGt3i8ad9ltIWBZFtSbMFAR/Bo7Qr/varRoD+ryUcKO 3b69jPsiFi2oa2bWfUENJkUacvAdBYzhnP0oFfreV2qkTdNMesl2lpv0ihr/eCer WlxAGAiP68PfkcOROQHBWYFspLAU8yXd+wjg5YhdnfjEEe30hJw= -----END CERTIFICATE-----Generated at Thu Sep 24 05:31:46 2026 by rpki-client