$ rpki-client -vvvf rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft File: 8CDF206FDB99524CD59E5141686928A6FF94305F.mft (raw, json) Hash identifier: yvohm98aB1Fm95BPl+blEe56oPicT23ojqaYBa1GMMY= Subject key identifier: B8:C9:50:4A:AA:AF:0A:02:34:A7:F3:81:61:B4:0E:6D:D7:4A:38:16 Authority key identifier: 8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F Certificate issuer: /CN=8CDF206FDB99524CD59E5141686928A6FF94305F Certificate serial: 0DE516399A29A0B14911F3833F30C4967A462BA6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 17:00:09 +0000 Manifest this update: Wed 16 Sep 2026 16:55:09 +0000 Manifest next update: Thu 17 Sep 2026 20:33:09 +0000 Files and hashes: 1: 8CDF206FDB99524CD59E5141686928A6FF94305F.crl (hash: 60V+paz6w8SWgOUNAZxwcI+3Q5u/vu0vNk97omCIkxI=) 2: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: AtW3qZZhBOBkSL0i4aoVF1GR5f7KIfCN2XApbUwdv2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e5:16:39:9a:29:a0:b1:49:11:f3:83:3f:30:c4:96:7a:46:2b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF206FDB99524CD59E5141686928A6FF94305F Validity Not Before: Sep 16 16:55:09 2026 GMT Not After : Sep 17 20:33:09 2026 GMT Subject: CN=B8C9504AAAAF0A0234A7F38161B40E6DD74A3816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:ca:59:01:4e:b1:5e:a4:fa:dc:a1:78:e9: 08:45:78:91:d9:8d:51:3e:33:92:2c:d0:08:eb:c2: 45:b3:12:bb:69:cf:1d:de:88:d5:b7:5e:ae:e4:ff: 82:36:11:cb:e3:1d:b3:38:68:b1:ac:2b:cd:dc:83: 23:67:02:f5:c7:54:8d:f7:18:ff:82:b8:57:a8:eb: 86:83:21:2d:69:44:ab:04:a5:7e:35:dd:e5:8d:a2: 85:bd:76:fa:6c:50:3b:9f:c1:a9:8e:d4:37:67:4b: a8:74:56:41:c3:32:81:8b:44:06:ae:d2:02:d4:9d: f8:3a:0c:3e:85:4a:8d:84:37:86:9e:5e:9b:ae:d6: 1b:51:a1:5f:d0:86:7b:4c:65:56:fc:ac:68:56:d7: 82:bb:a5:b4:06:64:10:71:e4:6f:5a:87:ad:f8:8e: ea:8e:f4:6a:34:e7:7e:ce:cb:09:6b:ad:0c:45:64: 8a:29:19:59:22:47:25:a9:b3:b2:68:c9:34:9e:63: c3:74:f7:f8:19:79:39:2e:ab:69:67:33:5c:1b:c0: 97:51:ad:6f:dd:8f:fd:65:ec:9a:a4:cb:f9:aa:2c: 5a:4c:39:67:72:45:d0:66:ae:b3:d2:51:87:7d:58: c7:04:0d:ac:8f:45:18:b1:d2:d6:e2:91:2e:35:71: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C9:50:4A:AA:AF:0A:02:34:A7:F3:81:61:B4:0E:6D:D7:4A:38:16 X509v3 Authority Key Identifier: keyid:8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2e:35:93:89:fe:08:fb:fe:1d:e6:26:34:bc:95:53:8f:96: 04:6d:84:25:2b:27:b6:e7:bf:fb:e7:db:4d:1f:d1:b9:8c:3d: 74:5a:7e:d3:b1:9e:1c:dd:87:e4:85:42:18:1a:82:24:14:af: 84:4d:59:e0:22:2d:d7:cf:19:32:36:4c:f3:26:90:0e:85:15: cc:a4:cc:dd:f6:64:a9:83:a2:9a:a0:21:01:fb:e5:fc:fb:2b: f1:ce:ed:d6:16:9c:2a:e5:f3:00:ec:f6:16:5c:81:8b:ea:2c: e1:13:a9:41:4f:7b:2b:67:e5:6c:62:3c:94:69:09:32:0b:75: a1:b5:cc:26:10:ab:e5:f9:15:24:b0:4f:60:c5:01:49:82:b5: 2c:62:fd:89:75:57:fd:59:02:0c:09:93:fb:b5:77:d1:b4:e5: 9b:54:99:ba:cd:43:96:d6:5e:9b:6f:24:bd:23:eb:10:94:64: 86:d7:2a:af:0c:55:f3:74:86:39:26:7e:93:f1:c2:a6:90:cb: c9:87:76:7d:db:46:bf:95:b4:23:63:b3:f1:10:d9:0c:17:82: d0:ab:6c:8f:f5:3e:04:97:d3:36:47:a1:f8:af:b6:51:42:07: b9:1f:1c:ce:3c:b0:c6:40:85:82:99:e7:7b:56:e3:7b:6f:cf: b7:43:6a:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDeUWOZopoLFJEfODPzDElnpGK6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZG Rjk0MzA1RjAeFw0yNjA5MTYxNjU1MDlaFw0yNjA5MTcyMDMzMDlaMDMxMTAvBgNV BAMTKEI4Qzk1MDRBQUFBRjBBMDIzNEE3RjM4MTYxQjQwRTZERDc0QTM4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb7spZAU6xXqT63KF46QhFeJHZ jVE+M5Is0AjrwkWzErtpzx3eiNW3Xq7k/4I2EcvjHbM4aLGsK83cgyNnAvXHVI33 GP+CuFeo64aDIS1pRKsEpX413eWNooW9dvpsUDufwamO1DdnS6h0VkHDMoGLRAau 0gLUnfg6DD6FSo2EN4aeXpuu1htRoV/QhntMZVb8rGhW14K7pbQGZBBx5G9ah634 juqO9Go0537OywlrrQxFZIopGVkiRyWps7JoyTSeY8N09/gZeTkuq2lnM1wbwJdR rW/dj/1l7Jqky/mqLFpMOWdyRdBmrrPSUYd9WMcEDayPRRix0tbikS41cbbpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuMlQSqqvCgI0p/OBYbQObddKOBYwHwYDVR0j BBgwFoAUjN8gb9uZUkzVnlFBaGkopv+UMF8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjMzOTc4ZjgtYWVhYi00MjdhLWJkNzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZE Qjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZGRjk0MzA1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0RGMjA2RkRCOTk1MjRDRDU5RTUxNDE2ODY5MjhBNkZGOTQz MDVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjMzOTc4ZjgtYWVhYi00MjdhLWJk NzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4 QTZGRjk0MzA1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwuNZOJ/gj7/h3mJjS8lVOPlgRthCUrJ7bn v/vn200f0bmMPXRaftOxnhzdh+SFQhgagiQUr4RNWeAiLdfPGTI2TPMmkA6FFcyk zN32ZKmDopqgIQH75fz7K/HO7dYWnCrl8wDs9hZcgYvqLOETqUFPeytn5WxiPJRp CTILdaG1zCYQq+X5FSSwT2DFAUmCtSxi/Yl1V/1ZAgwJk/u1d9G05ZtUmbrNQ5bW XptvJL0j6xCUZIbXKq8MVfN0hjkmfpPxwqaQy8mHdn3bRr+VtCNjs/EQ2QwXgtCr bI/1PgSX0zZHofivtlFCB7kfHM48sMZAhYKZ53tW43tvz7dDau8= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:25 2026 by rpki-client