$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft File: 8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft (raw, json) Hash identifier: sxttIT3OpnQGVNP63htaFPfMirFpgUZ5edChvXJBSmQ= Subject key identifier: 97:B3:76:BA:1E:FF:E2:EB:D5:D8:16:23:5D:7B:12:4F:4C:A9:1B:80 Authority key identifier: 8F:C6:CD:0E:7E:E1:3F:AE:7E:B8:F7:4C:BF:3D:39:8E:E3:4F:03:BB Certificate issuer: /CN=8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB Certificate serial: 2562B0E94D23F8A5A34B36740C94A0ED7C4F660F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 18:18:02 +0000 Manifest this update: Fri 25 Sep 2026 18:13:02 +0000 Manifest next update: Sat 26 Sep 2026 20:10:02 +0000 Files and hashes: 1: 8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl (hash: 5MueCmqWUS+nDVtYEVPEMNunL6ZJge0zU1hoEo0APMA=) 2: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: 3eBDLV5ffWUDrJGtZH95s4QphGUZB6+B7Vc+acd6df4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:62:b0:e9:4d:23:f8:a5:a3:4b:36:74:0c:94:a0:ed:7c:4f:66:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB Validity Not Before: Sep 25 18:13:02 2026 GMT Not After : Sep 26 20:10:02 2026 GMT Subject: CN=97B376BA1EFFE2EBD5D816235D7B124F4CA91B80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:ed:66:13:fc:5d:ab:46:58:0f:c0:d9:04: ea:d8:59:cf:8a:4a:cc:c2:88:69:31:81:a0:98:8c: ac:6f:ac:4b:02:b9:b8:20:a1:ef:f5:69:77:55:e2: fc:54:46:e5:7d:fd:e9:c9:3d:0d:cc:2f:fc:e5:b0: 47:75:54:59:0b:c8:c0:c5:39:f2:ea:5d:cd:44:7c: e6:9c:02:b5:b6:b3:44:f1:9e:41:cf:18:80:23:b8: 05:f4:8f:a3:11:6d:c6:1f:6d:2f:84:e5:75:f8:a3: 22:b8:a5:41:1f:1e:53:98:b0:10:95:41:88:75:e9: 46:18:6d:4e:de:39:e2:72:a2:48:d9:75:83:e2:af: 48:2c:df:07:03:76:b5:41:66:50:4f:34:f8:e2:de: 2e:f4:a3:96:79:6b:82:1a:3f:ac:0a:d4:7d:9b:9c: 7b:f4:d9:ac:5e:e5:dc:c5:c0:e0:47:d4:25:6e:93: f6:4c:5d:da:fe:4f:ec:78:06:59:a0:fc:53:0c:dd: b8:9a:5e:63:6a:4a:cb:2b:ca:76:a5:e7:8a:6a:a2: 88:7c:ec:c8:d5:ca:eb:28:21:e4:35:79:5c:df:40: 33:53:1f:69:22:28:cf:64:c7:86:a1:b6:b7:8f:33: d4:e9:67:ea:ce:e6:14:50:6f:ed:c5:21:bb:43:91: b3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B3:76:BA:1E:FF:E2:EB:D5:D8:16:23:5D:7B:12:4F:4C:A9:1B:80 X509v3 Authority Key Identifier: keyid:8F:C6:CD:0E:7E:E1:3F:AE:7E:B8:F7:4C:BF:3D:39:8E:E3:4F:03:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9b:87:b5:70:bb:74:71:66:42:02:25:bf:fd:a6:83:27:85: e5:13:d9:bb:87:f9:f3:be:bc:b7:3a:d7:5b:52:57:a3:09:eb: 13:97:38:bd:f0:bb:e7:e8:34:9d:d6:c2:ca:93:d6:fa:5b:8a: 7a:ec:82:27:be:ae:7d:cd:36:f1:49:f1:6c:d3:10:6f:f9:99: 50:0e:e7:92:65:37:e2:a6:32:c3:44:53:dc:f4:fc:c5:ae:45: 5f:e1:50:e2:44:d9:65:dd:da:58:a8:bb:7f:43:da:e6:01:46: 8a:0f:95:c2:c0:a2:61:6c:10:02:be:c1:59:86:4f:f1:6a:c1: dd:b2:71:69:c0:12:93:80:d3:51:f2:d4:2f:80:a6:31:b9:72: 10:af:4d:9e:5c:51:09:e0:0f:6d:6b:22:ce:2f:53:92:72:f2: 23:b5:4b:cf:87:4e:1a:3d:a8:bb:24:0d:cd:36:f5:ed:dc:74: 2d:dc:a9:be:63:e6:d8:aa:13:d6:45:0e:83:39:ff:33:f9:17: b5:fb:ed:a4:78:83:06:9d:86:09:a2:44:57:16:a1:f3:6d:d9: 95:99:f7:ff:29:38:40:20:b5:d2:65:66:26:2a:ea:c4:0b:ae: da:28:9a:0e:63:6f:dc:1e:7e:ca:8c:1c:74:84:f4:0c:57:dc: 38:f2:25:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWKw6U0j+KWjSzZ0DJSg7XxPZg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNkNEMEU3RUUxM0ZBRTdFQjhGNzRDQkYzRDM5OEVF MzRGMDNCQjAeFw0yNjA5MjUxODEzMDJaFw0yNjA5MjYyMDEwMDJaMDMxMTAvBgNV BAMTKDk3QjM3NkJBMUVGRkUyRUJENUQ4MTYyMzVEN0IxMjRGNENBOTFCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClee1mE/xdq0ZYD8DZBOrYWc+K SszCiGkxgaCYjKxvrEsCubggoe/1aXdV4vxURuV9/enJPQ3ML/zlsEd1VFkLyMDF OfLqXc1EfOacArW2s0TxnkHPGIAjuAX0j6MRbcYfbS+E5XX4oyK4pUEfHlOYsBCV QYh16UYYbU7eOeJyokjZdYPir0gs3wcDdrVBZlBPNPji3i70o5Z5a4IaP6wK1H2b nHv02axe5dzFwOBH1CVuk/ZMXdr+T+x4Blmg/FMM3biaXmNqSssrynal54pqooh8 7MjVyusoIeQ1eVzfQDNTH2kiKM9kx4ahtrePM9TpZ+rO5hRQb+3FIbtDkbPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl7N2uh7/4uvV2BYjXXsST0ypG4AwHwYDVR0j BBgwFoAUj8bNDn7hP65+uPdMvz05juNPA7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFmMjlhYmEtNmQ3Yy00NDM1LTk1M2MtNjA0OTg4NzMxNTk2LzAvOEZDNkNEMEU3 RUUxM0ZBRTdFQjhGNzRDQkYzRDM5OEVFMzRGMDNCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkM2Q0QwRTdFRTEzRkFFN0VCOEY3NENCRjNEMzk4RUUzNEYw M0JCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmMjlhYmEtNmQ3Yy00NDM1LTk1 M2MtNjA0OTg4NzMxNTk2LzAvOEZDNkNEMEU3RUUxM0ZBRTdFQjhGNzRDQkYzRDM5 OEVFMzRGMDNCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAubh7Vwu3RxZkICJb/9poMnheUT2buH+fO+ vLc611tSV6MJ6xOXOL3wu+foNJ3WwsqT1vpbinrsgie+rn3NNvFJ8WzTEG/5mVAO 55JlN+KmMsNEU9z0/MWuRV/hUOJE2WXd2liou39D2uYBRooPlcLAomFsEAK+wVmG T/Fqwd2ycWnAEpOA01Hy1C+ApjG5chCvTZ5cUQngD21rIs4vU5Jy8iO1S8+HTho9 qLskDc029e3cdC3cqb5j5tiqE9ZFDoM5/zP5F7X77aR4gwadhgmiRFcWofNt2ZWZ 9/8pOEAgtdJlZiYq6sQLrtoomg5jb9wefsqMHHSE9AxX3DjyJYU= -----END CERTIFICATE-----Generated at Sat Sep 26 04:09:58 2026 by rpki-client