$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft File: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft (raw, json) Hash identifier: Px+xaL0m/h78ocydQkLGBxoTvDfJpbSwqnjZy97pdug= Subject key identifier: 1B:5A:19:B9:75:9F:D7:E0:98:35:55:20:CB:C2:0D:FB:4A:F3:7B:48 Authority key identifier: 8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C Certificate issuer: /CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Certificate serial: 763A3376E722D238B75D257306613B7F0E42A902 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 13:25:45 +0000 Manifest this update: Wed 16 Sep 2026 13:20:45 +0000 Manifest next update: Thu 17 Sep 2026 15:40:45 +0000 Files and hashes: 1: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl (hash: nHfKvTLJiyTSLtQq3zYhIBkWHiyufKGL9Rq65b6lv4E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:3a:33:76:e7:22:d2:38:b7:5d:25:73:06:61:3b:7f:0e:42:a9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Validity Not Before: Sep 16 13:20:45 2026 GMT Not After : Sep 17 15:40:45 2026 GMT Subject: CN=1B5A19B9759FD7E098355520CBC20DFB4AF37B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:91:b1:57:b2:6f:53:46:a4:05:9e:b9:9c: 98:43:2e:d7:19:c1:54:06:92:35:e7:12:56:8a:d9: da:e7:e0:38:f1:cf:eb:cc:99:f6:05:0a:78:6f:1e: 95:a0:9d:7f:9c:c3:d3:11:b1:0a:d9:60:08:c8:58: bb:9e:d5:9a:5d:a0:e9:d9:4f:8b:61:00:6f:30:b7: f9:bf:f9:d3:f3:e7:3e:1d:27:e6:e7:3b:05:7a:a6: 3a:91:3a:b2:a1:c8:29:fd:16:de:9a:e8:70:07:6f: 0d:82:af:f1:3e:f4:83:2e:de:7d:0f:0d:70:84:67: 88:2e:64:29:37:fb:57:b3:39:07:4e:6c:10:53:a1: 11:a8:90:13:a4:cb:e5:8b:f0:00:1e:29:4f:46:d7: ad:02:da:59:a4:01:32:9c:64:bf:7f:76:d7:5c:29: 7a:ce:bf:2e:e4:e5:c9:2e:7c:62:e7:1c:fd:a8:2a: 48:b8:db:3d:e0:49:d5:24:f2:50:ae:99:c8:2c:4e: d6:cd:95:19:cf:3b:ed:65:6c:1e:75:bc:4c:07:80: 5d:f0:a2:18:df:1a:70:7d:6e:c3:fd:99:95:f9:f2: 10:ff:2e:43:a9:9b:2e:bc:37:a8:14:7b:62:b0:2f: fb:52:52:4d:56:37:44:99:10:4f:c4:9f:5f:68:b4: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5A:19:B9:75:9F:D7:E0:98:35:55:20:CB:C2:0D:FB:4A:F3:7B:48 X509v3 Authority Key Identifier: keyid:8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cc:85:23:a9:19:5b:2b:7f:2d:c6:bd:81:95:94:9e:a6:30: 16:bc:52:08:fd:c9:e4:d2:7e:33:a7:bc:d3:c1:a2:86:73:65: 99:53:26:dd:47:35:9a:f7:7e:3f:4c:df:54:8e:3b:fd:dd:ee: 4c:f2:93:35:66:74:51:c4:04:2c:b2:10:06:a4:92:4a:95:ca: 4e:93:14:5d:4f:b2:eb:a6:ab:2f:78:16:77:2c:f2:f7:61:ac: 0d:6c:cb:4c:a2:f4:aa:6b:c7:41:b6:0c:8d:52:5a:9b:8d:ff: f8:0d:5b:7e:8c:fe:32:07:0f:f7:c9:0a:9a:92:56:21:e0:05: ff:ed:0f:1a:33:96:75:ac:a0:f6:4a:62:e7:56:55:c3:87:24: 92:4c:5f:93:43:03:53:72:d8:06:d1:79:e6:e1:8c:3e:f1:bf: bb:cd:9b:66:06:da:d6:d9:41:5a:57:f1:b4:3e:72:2b:98:32: 39:fe:9a:1c:c7:9f:95:04:35:99:66:c9:c7:0d:7b:a6:e4:5d: a1:2f:d6:d9:30:4e:72:99:05:16:92:09:30:cf:e3:49:d4:b4: 7e:33:20:c3:54:4b:eb:aa:dc:47:b6:fa:3c:1d:3f:dc:ae:6a: 4b:ec:88:89:1e:62:1a:60:8c:8b:be:07:90:c9:45:98:44:6e: 88:87:62:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdjozduci0ji3XSVzBmE7fw5CqQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhF RkYwQzEzQzAeFw0yNjA5MTYxMzIwNDVaFw0yNjA5MTcxNTQwNDVaMDMxMTAvBgNV BAMTKDFCNUExOUI5NzU5RkQ3RTA5ODM1NTUyMENCQzIwREZCNEFGMzdCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6p5GxV7JvU0akBZ65nJhDLtcZ wVQGkjXnElaK2drn4Djxz+vMmfYFCnhvHpWgnX+cw9MRsQrZYAjIWLue1ZpdoOnZ T4thAG8wt/m/+dPz5z4dJ+bnOwV6pjqROrKhyCn9Ft6a6HAHbw2Cr/E+9IMu3n0P DXCEZ4guZCk3+1ezOQdObBBToRGokBOky+WL8AAeKU9G160C2lmkATKcZL9/dtdc KXrOvy7k5ckufGLnHP2oKki42z3gSdUk8lCumcgsTtbNlRnPO+1lbB51vEwHgF3w ohjfGnB9bsP9mZX58hD/LkOpmy68N6gUe2KwL/tSUk1WN0SZEE/En19otLchAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG1oZuXWf1+CYNVUgy8IN+0rze0gwHwYDVR0j BBgwFoAUin8++Fzzr9cmrKMfNecJ2O/wwTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NlNjhiNTAtMGU5ZS00YWU2LTgyNTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1 Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhFRkYwQzEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTdGM0VGODVDRjNBRkQ3MjZBQ0EzMUYzNUU3MDlEOEVGRjBD MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NlNjhiNTAtMGU5ZS00YWU2LTgy NTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5 RDhFRkYwQzEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrMhSOpGVsrfy3GvYGVlJ6mMBa8Ugj9yeTS fjOnvNPBooZzZZlTJt1HNZr3fj9M31SOO/3d7kzykzVmdFHEBCyyEAakkkqVyk6T FF1Psuumqy94Fncs8vdhrA1sy0yi9Kprx0G2DI1SWpuN//gNW36M/jIHD/fJCpqS ViHgBf/tDxozlnWsoPZKYudWVcOHJJJMX5NDA1Ny2AbReebhjD7xv7vNm2YG2tbZ QVpX8bQ+ciuYMjn+mhzHn5UENZlmyccNe6bkXaEv1tkwTnKZBRaSCTDP40nUtH4z IMNUS+uq3Ee2+jwdP9yuakvsiIkeYhpgjIu+B5DJRZhEboiHYk4= -----END CERTIFICATE-----Generated at Thu Sep 17 09:16:15 2026 by rpki-client