$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft File: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft (raw, json) Hash identifier: f83g57lsyLwDcAiLyn3WLdwplw3vBPEJka+TWKBlU1Y= Subject key identifier: 9A:4B:CE:41:EC:AA:B5:F1:4D:AF:65:6C:BA:63:94:A0:74:B9:1A:A1 Authority key identifier: 8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 Certificate issuer: /CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Certificate serial: 087885D2E73446D83DFF283569C6B67A8AD05AF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 12:29:09 +0000 Manifest this update: Thu 17 Sep 2026 12:24:09 +0000 Manifest next update: Fri 18 Sep 2026 15:52:09 +0000 Files and hashes: 1: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl (hash: bvpSeT1MarMFd639tYl3XdR7kW5jNhvkO+aljGg1XIY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:78:85:d2:e7:34:46:d8:3d:ff:28:35:69:c6:b6:7a:8a:d0:5a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Validity Not Before: Sep 17 12:24:09 2026 GMT Not After : Sep 18 15:52:09 2026 GMT Subject: CN=9A4BCE41ECAAB5F14DAF656CBA6394A074B91AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:76:65:c9:11:3e:38:94:a0:15:a2:e1:53: 39:89:c3:53:16:e6:4d:34:d6:90:64:40:1b:66:8d: 4a:3a:35:d8:50:bc:ba:f0:40:bb:6c:a8:70:c4:8d: cc:e4:11:65:eb:3b:ed:33:1b:d8:f4:34:96:b9:61: ce:85:11:44:b9:a0:53:86:3f:2e:c7:22:bb:d4:de: 1c:2e:71:fd:d6:2d:e1:2e:c2:b4:fe:85:a2:ba:ee: 90:65:2a:35:f1:f0:b9:95:60:88:7e:00:58:65:f7: 58:e0:3c:95:d2:f1:ed:f9:65:ba:d6:8f:96:f3:47: cb:b4:82:45:a2:e5:04:c6:24:6c:5b:f6:a0:21:6d: 21:6a:59:f9:f0:97:f4:cd:02:e7:59:90:a6:88:00: a8:90:dc:66:dd:1e:fe:8e:b2:7f:09:f6:ad:32:3e: f7:a9:33:20:ab:9e:13:d5:42:bd:77:90:9e:88:78: 1d:a9:e8:51:1f:70:e1:da:c0:01:18:1e:66:86:e8: 7b:01:7e:2b:f9:72:68:f4:a7:69:20:3e:fa:0f:79: 73:2d:ac:f3:f9:69:d3:46:a4:2e:41:d2:5b:63:8a: 00:ab:9f:99:dd:e6:e0:b6:c5:00:18:53:4c:6d:a1: 7e:39:a0:f9:ed:e8:df:b6:f2:8f:5f:2f:51:c3:69: c1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4B:CE:41:EC:AA:B5:F1:4D:AF:65:6C:BA:63:94:A0:74:B9:1A:A1 X509v3 Authority Key Identifier: keyid:8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:fa:db:86:9a:de:d5:cf:7f:7a:1e:72:5b:e8:d3:de:4c:e5: fa:e3:13:1a:fb:64:c0:02:88:cb:d8:5a:0f:fc:d6:a4:ab:b6: 21:74:39:41:71:55:d6:8f:94:fb:73:e3:02:aa:8a:3c:97:50: 2e:7f:1c:df:02:7a:27:b8:e6:b1:f6:38:01:a4:1e:03:ea:b9: 73:75:b6:ca:f2:3e:2c:d6:ee:96:03:5d:be:ad:ef:e4:1b:5e: e2:7c:ec:e0:e5:15:4c:8f:b6:15:fb:c9:ca:f6:3f:52:a3:57: 02:74:74:9c:7b:9b:4a:84:25:d5:43:a5:fe:93:61:3c:35:5b: ad:f4:97:c7:0d:e2:b5:4a:e3:fc:ab:97:3f:99:b1:eb:68:01: bc:74:8f:d4:bb:a1:2c:50:bf:10:55:ea:92:6b:dc:31:26:ea: 38:6b:03:6b:c2:9a:90:3d:fd:01:6f:01:ff:16:a7:98:c6:09: a0:b2:71:b1:fb:6a:cc:00:19:16:5e:5e:10:79:94:b1:e3:0c: 03:26:f3:bf:be:af:6c:3b:a4:de:39:9a:17:8d:aa:bb:e6:43: ef:d8:3c:98:f4:80:c9:76:33:c4:87:39:ae:e3:84:b2:9e:0e: dd:14:6b:5b:3e:4f:86:4a:1c:de:83:81:c1:7e:dd:1d:fd:f2: e3:3f:c5:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHiF0uc0Rtg9/yg1aca2eorQWvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3 RDkxMDAzMTAeFw0yNjA5MTcxMjI0MDlaFw0yNjA5MTgxNTUyMDlaMDMxMTAvBgNV BAMTKDlBNEJDRTQxRUNBQUI1RjE0REFGNjU2Q0JBNjM5NEEwNzRCOTFBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEWnZlyRE+OJSgFaLhUzmJw1MW 5k001pBkQBtmjUo6NdhQvLrwQLtsqHDEjczkEWXrO+0zG9j0NJa5Yc6FEUS5oFOG Py7HIrvU3hwucf3WLeEuwrT+haK67pBlKjXx8LmVYIh+AFhl91jgPJXS8e35ZbrW j5bzR8u0gkWi5QTGJGxb9qAhbSFqWfnwl/TNAudZkKaIAKiQ3GbdHv6Osn8J9q0y PvepMyCrnhPVQr13kJ6IeB2p6FEfcOHawAEYHmaG6HsBfiv5cmj0p2kgPvoPeXMt rPP5adNGpC5B0ltjigCrn5nd5uC2xQAYU0xtoX45oPnt6N+28o9fL1HDacFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmkvOQeyqtfFNr2VsumOUoHS5GqEwHwYDVR0j BBgwFoAUjJX82S/mBxvh1rJ7eTDv432RADEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjk1NWY1YTYtZjM3OC00MjUyLTgwNGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDky RkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3RDkxMDAzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Qzk1RkNEOTJGRTYwNzFCRTFENkIyN0I3OTMwRUZFMzdEOTEw MDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVG RTM3RDkxMDAzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABD624aa3tXPf3oeclvo095M5frjExr7ZMAC iMvYWg/81qSrtiF0OUFxVdaPlPtz4wKqijyXUC5/HN8Ceie45rH2OAGkHgPquXN1 tsryPizW7pYDXb6t7+QbXuJ87ODlFUyPthX7ycr2P1KjVwJ0dJx7m0qEJdVDpf6T YTw1W630l8cN4rVK4/yrlz+ZsetoAbx0j9S7oSxQvxBV6pJr3DEm6jhrA2vCmpA9 /QFvAf8Wp5jGCaCycbH7aswAGRZeXhB5lLHjDAMm87++r2w7pN45mheNqrvmQ+/Y PJj0gMl2M8SHOa7jhLKeDt0Ua1s+T4ZKHN6DgcF+3R398uM/xec= -----END CERTIFICATE-----Generated at Thu Sep 17 15:10:57 2026 by rpki-client