$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft File: 8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft (raw, json) Hash identifier: ga1ACgf1heq4mph8Sn/gkiqe1iL6dXvtbzojta0iGT0= Subject key identifier: 1B:15:AE:ED:34:7F:E6:EF:6A:C1:0C:36:36:27:DB:E4:6E:FC:9A:A7 Authority key identifier: 8F:C6:CD:0E:7E:E1:3F:AE:7E:B8:F7:4C:BF:3D:39:8E:E3:4F:03:BB Certificate issuer: /CN=8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB Certificate serial: 6E0F5BD075FEBEB016BB8BDECC169C9B8C157DEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 14:55:09 +0000 Manifest this update: Thu 03 Sep 2026 14:50:09 +0000 Manifest next update: Fri 04 Sep 2026 17:25:09 +0000 Files and hashes: 1: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: 3eBDLV5ffWUDrJGtZH95s4QphGUZB6+B7Vc+acd6df4=) 2: 8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl (hash: P5zl3AjZMqV2cChknYlMLwA5og03HQeiG1ryBfX0KBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0f:5b:d0:75:fe:be:b0:16:bb:8b:de:cc:16:9c:9b:8c:15:7d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB Validity Not Before: Sep 3 14:50:09 2026 GMT Not After : Sep 4 17:25:09 2026 GMT Subject: CN=1B15AEED347FE6EF6AC10C363627DBE46EFC9AA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:dc:05:6c:38:f3:4e:66:c5:a1:28:36:d1: 49:ba:e0:a0:cc:21:98:77:40:18:c1:ad:be:14:37: 44:be:53:7f:cd:14:a8:58:b0:88:bc:e3:36:74:81: d6:e9:19:9e:db:a8:7a:5d:5f:ac:cb:a4:e8:fd:bd: 14:08:64:04:d5:42:a6:e4:92:8f:34:da:70:8a:6c: 0a:0e:7e:79:e4:b3:a4:31:35:98:50:00:11:26:4e: 9b:4b:e2:24:b8:be:fa:58:42:b9:99:5d:c0:dc:08: d8:07:f3:32:33:86:70:84:71:bb:22:17:ca:71:e2: 36:11:d5:40:ac:e9:67:ad:9a:7a:a2:5a:51:b5:0a: 47:8e:52:df:c8:12:34:20:ed:0a:c9:6e:9f:a1:e9: c1:03:8d:5e:42:0d:89:e7:10:fb:5e:db:06:ab:a9: 6c:50:38:dd:53:8e:af:b9:5e:21:e7:cb:b3:d2:81: a7:0d:92:06:97:20:82:6c:9d:2b:19:fa:09:1a:f2: e7:f6:cb:c2:5c:11:7e:82:b0:4c:0e:10:99:07:05: d5:17:e3:f1:32:dc:da:39:ee:e4:15:fc:21:42:66: e4:6e:c2:a6:5c:91:fc:f6:2f:68:93:a9:d8:5c:55: f9:25:8e:ba:47:34:8c:80:2a:e3:e9:1d:7b:d3:97: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:15:AE:ED:34:7F:E6:EF:6A:C1:0C:36:36:27:DB:E4:6E:FC:9A:A7 X509v3 Authority Key Identifier: keyid:8F:C6:CD:0E:7E:E1:3F:AE:7E:B8:F7:4C:BF:3D:39:8E:E3:4F:03:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5b:34:17:63:58:a3:1b:dd:e5:39:2b:f8:9d:70:63:fc:5b: d9:58:f1:10:03:f4:3b:f8:c8:b0:06:4c:fb:13:84:c6:4b:6d: e2:4e:aa:77:9a:35:cb:55:d3:1d:66:be:df:7d:c4:ce:6b:ad: 85:5c:ea:e6:cb:0e:a0:93:eb:6e:9b:a0:f5:64:90:c1:fa:a8: da:8f:2e:6f:f2:4d:dc:11:19:21:60:88:68:e4:a7:54:70:16: 6b:6f:37:58:98:82:2b:70:f9:32:66:c3:15:04:71:6a:62:d7: be:d7:1a:92:f3:13:21:37:e7:d2:9a:17:ae:16:46:1e:ea:d6: f5:a8:a2:44:07:ac:75:51:ab:cb:2e:dc:45:52:e5:e7:f6:46: 68:f8:1a:56:d7:55:25:e3:2b:00:cb:c3:87:84:5f:d0:26:f9: 3b:7f:c2:03:b9:be:95:cb:f3:08:a3:69:16:1c:44:5e:7e:8d: b1:f2:c3:76:e0:79:05:18:b5:8d:6a:32:d7:59:8f:60:0c:79: d9:c5:26:ca:6f:e8:2b:da:8d:6f:f4:f5:95:70:90:9f:a1:cb: d9:50:ed:5e:c8:e8:47:37:3d:d1:4e:79:5e:ae:11:48:ab:30: 6f:37:5c:2b:4a:f8:b5:23:32:57:ef:9f:0f:ce:6b:56:96:4a: 21:08:5b:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbg9b0HX+vrAWu4vezBacm4wVfewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNkNEMEU3RUUxM0ZBRTdFQjhGNzRDQkYzRDM5OEVF MzRGMDNCQjAeFw0yNjA5MDMxNDUwMDlaFw0yNjA5MDQxNzI1MDlaMDMxMTAvBgNV BAMTKDFCMTVBRUVEMzQ3RkU2RUY2QUMxMEMzNjM2MjdEQkU0NkVGQzlBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBV9wFbDjzTmbFoSg20Um64KDM IZh3QBjBrb4UN0S+U3/NFKhYsIi84zZ0gdbpGZ7bqHpdX6zLpOj9vRQIZATVQqbk ko802nCKbAoOfnnks6QxNZhQABEmTptL4iS4vvpYQrmZXcDcCNgH8zIzhnCEcbsi F8px4jYR1UCs6WetmnqiWlG1CkeOUt/IEjQg7QrJbp+h6cEDjV5CDYnnEPte2war qWxQON1Tjq+5XiHny7PSgacNkgaXIIJsnSsZ+gka8uf2y8JcEX6CsEwOEJkHBdUX 4/Ey3No57uQV/CFCZuRuwqZckfz2L2iTqdhcVfkljrpHNIyAKuPpHXvTl/FvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGxWu7TR/5u9qwQw2Nifb5G78mqcwHwYDVR0j BBgwFoAUj8bNDn7hP65+uPdMvz05juNPA7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFmMjlhYmEtNmQ3Yy00NDM1LTk1M2MtNjA0OTg4NzMxNTk2LzAvOEZDNkNEMEU3 RUUxM0ZBRTdFQjhGNzRDQkYzRDM5OEVFMzRGMDNCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkM2Q0QwRTdFRTEzRkFFN0VCOEY3NENCRjNEMzk4RUUzNEYw M0JCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmMjlhYmEtNmQ3Yy00NDM1LTk1 M2MtNjA0OTg4NzMxNTk2LzAvOEZDNkNEMEU3RUUxM0ZBRTdFQjhGNzRDQkYzRDM5 OEVFMzRGMDNCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtbNBdjWKMb3eU5K/idcGP8W9lY8RAD9Dv4 yLAGTPsThMZLbeJOqneaNctV0x1mvt99xM5rrYVc6ubLDqCT626boPVkkMH6qNqP Lm/yTdwRGSFgiGjkp1RwFmtvN1iYgitw+TJmwxUEcWpi177XGpLzEyE359KaF64W Rh7q1vWookQHrHVRq8su3EVS5ef2Rmj4GlbXVSXjKwDLw4eEX9Am+Tt/wgO5vpXL 8wijaRYcRF5+jbHyw3bgeQUYtY1qMtdZj2AMednFJspv6CvajW/09ZVwkJ+hy9lQ 7V7I6Ec3PdFOeV6uEUirMG83XCtK+LUjMlfvnw/Oa1aWSiEIW4M= -----END CERTIFICATE-----Generated at Thu Sep 3 20:06:30 2026 by rpki-client