$ rpki-client -vvvf rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft File: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft (raw, json) Hash identifier: F8z/qVugcCq/L7ygvRvuIi7xs64s4l1WhIZzpXBrH1Y= Subject key identifier: FF:47:5D:0C:7E:96:A4:80:7C:68:E1:B5:BE:7C:30:1C:C5:72:D2:87 Authority key identifier: 8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC Certificate issuer: /CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Certificate serial: 5E11239D3385DD940567CEE8C1B9E4141CF8A43E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:24:00 +0000 Manifest this update: Thu 17 Sep 2026 08:19:00 +0000 Manifest next update: Fri 18 Sep 2026 12:19:00 +0000 Files and hashes: 1: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl (hash: rhcTpCj9a8GcnbBKeiTqKK1p/eJM4t3JWH99hhYWI90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:11:23:9d:33:85:dd:94:05:67:ce:e8:c1:b9:e4:14:1c:f8:a4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Validity Not Before: Sep 17 08:19:00 2026 GMT Not After : Sep 18 12:19:00 2026 GMT Subject: CN=FF475D0C7E96A4807C68E1B5BE7C301CC572D287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ef:bf:07:3d:1e:49:34:48:d1:c9:7a:75:dc: 41:87:d9:8e:c7:6b:76:3d:d2:e5:c4:bf:9f:67:9f: 2a:01:d4:18:a6:f6:69:f4:6a:25:1a:9c:9e:23:f9: eb:65:e6:7d:85:f8:35:fb:83:ac:7b:6c:cd:a5:50: 60:bb:3f:4f:8b:f6:f1:17:34:69:72:20:0f:f1:9c: b4:ac:5b:f6:99:75:7f:85:00:94:c9:04:98:cb:5f: 1d:dc:6a:31:9d:39:e6:da:b9:ac:3d:5f:a9:9d:06: f9:29:67:ca:03:8d:69:94:42:67:14:28:21:e8:62: cf:78:03:e3:7f:8a:5e:7f:fb:0d:bc:ad:fc:6e:0d: f3:b1:a3:f3:07:92:f8:84:f3:2d:4e:a3:cd:e2:f1: b8:4c:90:3b:c2:78:f7:8b:d2:8d:37:17:b2:c6:75: 44:cf:8c:b6:dd:28:22:61:f7:dd:35:f9:61:b2:41: 7b:67:3a:e9:ad:5d:cb:e9:f4:9b:95:c7:c3:a6:c6: 12:cb:51:47:98:9d:e5:64:26:aa:76:cd:1a:35:0e: 2a:3c:13:e3:8c:79:25:89:19:42:c3:d8:64:9b:88: 52:a8:2e:36:a4:1d:64:98:4e:4e:46:fd:10:b8:9b: 88:20:9b:3b:f4:45:73:97:fb:06:b0:92:09:c3:71: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:47:5D:0C:7E:96:A4:80:7C:68:E1:B5:BE:7C:30:1C:C5:72:D2:87 X509v3 Authority Key Identifier: keyid:8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ba:ad:a1:74:9b:49:ad:c4:7d:a1:41:7b:66:35:4f:7a:bc: 46:9d:6a:08:0b:37:78:0e:d0:0a:81:da:9f:d8:45:f6:09:b2: a7:05:8c:7c:de:1f:62:ef:7b:15:d3:9a:ce:af:f0:22:f3:75: f4:19:b2:b9:6a:65:f6:f5:24:db:fc:55:1e:c0:1c:46:f8:55: c3:29:4d:c3:ed:7d:5b:56:54:f6:ed:b6:87:ec:8b:03:ec:9a: b5:ba:ed:31:53:71:f8:b0:11:cb:eb:4a:2a:88:c4:4c:24:e5: 83:5a:ba:84:95:c2:76:3f:95:b5:65:c4:7f:45:00:e3:30:c8: bc:50:23:0c:92:8c:eb:74:3a:df:c6:8b:a2:b5:a8:1d:ef:26: fe:76:59:47:12:91:8c:c5:86:5a:18:56:e5:88:30:1a:af:b0: 30:8c:89:b1:d0:a9:b0:fb:45:c6:ce:e5:30:58:af:aa:38:d1: 88:b0:22:45:8c:69:5d:3f:40:be:ee:26:dd:37:17:08:63:8f: 75:4c:ff:02:bc:22:90:39:16:e7:91:7c:f3:91:fc:7e:51:ee: 64:9d:32:0d:55:3b:95:0c:28:26:81:8f:6c:07:7e:b4:74:b2: d0:c5:fa:be:f9:25:a7:82:92:d2:e1:ed:f2:06:e2:10:ed:d0: cc:72:f4:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXhEjnTOF3ZQFZ87owbnkFBz4pD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhCNEMy MUEyQzJEQzAeFw0yNjA5MTcwODE5MDBaFw0yNjA5MTgxMjE5MDBaMDMxMTAvBgNV BAMTKEZGNDc1RDBDN0U5NkE0ODA3QzY4RTFCNUJFN0MzMDFDQzU3MkQyODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa778HPR5JNEjRyXp13EGH2Y7H a3Y90uXEv59nnyoB1Bim9mn0aiUanJ4j+etl5n2F+DX7g6x7bM2lUGC7P0+L9vEX NGlyIA/xnLSsW/aZdX+FAJTJBJjLXx3cajGdOebauaw9X6mdBvkpZ8oDjWmUQmcU KCHoYs94A+N/il5/+w28rfxuDfOxo/MHkviE8y1Oo83i8bhMkDvCePeL0o03F7LG dUTPjLbdKCJh9901+WGyQXtnOumtXcvp9JuVx8OmxhLLUUeYneVkJqp2zRo1Dio8 E+OMeSWJGULD2GSbiFKoLjakHWSYTk5G/RC4m4ggmzv0RXOX+wawkgnDcWOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/0ddDH6WpIB8aOG1vnwwHMVy0ocwHwYDVR0j BBgwFoAUi3yU5dr2a7lW3568N+SLTCGiwtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDE4YzY4MzEtOGY0MC00YTIwLTgxM2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVE QUY2NkJCOTU2REY5RUJDMzdFNDhCNEMyMUEyQzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjdDOTRFNURBRjY2QkI5NTZERjlFQkMzN0U0OEI0QzIxQTJD MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhC NEMyMUEyQzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFm6raF0m0mtxH2hQXtmNU96vEadaggLN3gO 0AqB2p/YRfYJsqcFjHzeH2LvexXTms6v8CLzdfQZsrlqZfb1JNv8VR7AHEb4VcMp TcPtfVtWVPbttofsiwPsmrW67TFTcfiwEcvrSiqIxEwk5YNauoSVwnY/lbVlxH9F AOMwyLxQIwySjOt0Ot/Gi6K1qB3vJv52WUcSkYzFhloYVuWIMBqvsDCMibHQqbD7 RcbO5TBYr6o40YiwIkWMaV0/QL7uJt03Fwhjj3VM/wK8IpA5FueRfPOR/H5R7mSd Mg1VO5UMKCaBj2wHfrR0stDF+r75JaeCktLh7fIG4hDt0Mxy9Gs= -----END CERTIFICATE-----Generated at Thu Sep 17 15:10:40 2026 by rpki-client