$ rpki-client -vvvf rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft File: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft (raw, json) Hash identifier: ttZIRNKRPEySVZREoY2Qppg4M1wzF2/Ztz3HXoGRnmE= Subject key identifier: 9C:6A:D9:E9:26:86:43:13:7C:CA:AA:24:A6:CB:C0:BC:00:22:30:72 Authority key identifier: 86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B Certificate issuer: /CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Certificate serial: 56138F31B8BD747C4CFEC1B22D0597C27B35F584 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 23:38:14 +0000 Manifest this update: Wed 16 Sep 2026 23:33:14 +0000 Manifest next update: Fri 18 Sep 2026 02:13:14 +0000 Files and hashes: 1: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl (hash: cXEkqdCq98689DdqXy5Lm9PgyzhT86NMTQhtWykg5XA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:13:8f:31:b8:bd:74:7c:4c:fe:c1:b2:2d:05:97:c2:7b:35:f5:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Validity Not Before: Sep 16 23:33:14 2026 GMT Not After : Sep 18 02:13:14 2026 GMT Subject: CN=9C6AD9E9268643137CCAAA24A6CBC0BC00223072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:ad:6c:de:8c:34:07:27:f8:00:b8:92:63: 6c:78:57:48:7b:05:cc:a7:5d:de:a1:72:57:62:2b: 5d:51:9a:83:ed:b2:5d:ce:60:4d:47:9b:dd:26:36: 18:ff:ae:02:29:e6:61:81:bd:86:b9:f2:4c:18:8d: ee:1b:6d:07:92:b0:6e:bc:ef:ca:85:12:00:38:c6: 17:ad:52:e3:0a:2a:d3:fe:52:61:96:45:fc:20:5f: 7a:77:c4:ca:1b:92:c9:d9:36:20:33:2b:7d:bb:f2: 97:f6:f5:75:fb:d1:be:f6:4c:3c:84:c9:b5:99:a4: 99:2c:14:2a:d5:2f:fa:b1:b0:d0:61:5d:9a:47:eb: 6d:07:74:24:6e:8e:1c:6c:ee:24:10:9d:a3:9c:2f: 32:4f:e8:5c:19:54:66:a2:52:f5:a4:a8:09:0f:b1: d9:1c:24:24:af:02:17:a9:d9:6f:38:c4:54:ea:95: a4:94:96:19:55:3b:54:40:6a:28:a9:a6:a9:f8:37: 58:58:c3:7a:56:2d:df:3c:e6:2d:89:b5:1e:40:21: cf:26:0b:04:fe:4a:4c:48:06:a2:15:b4:b5:8d:05: 9d:1e:21:35:a7:1e:f4:3d:a7:e6:91:03:b2:8b:e5: 27:6d:c5:0d:77:7a:88:f1:2d:46:88:c2:79:56:a6: e4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6A:D9:E9:26:86:43:13:7C:CA:AA:24:A6:CB:C0:BC:00:22:30:72 X509v3 Authority Key Identifier: keyid:86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:66:5c:f1:af:1f:01:3d:0e:bb:72:22:eb:b0:b0:37:5f:95: de:1c:71:ab:32:13:45:0c:da:b9:f4:e3:68:58:b8:6b:78:79: 41:2c:47:b1:2b:4f:83:e8:af:4c:7f:b9:3f:81:f0:01:e4:b4: 97:11:da:69:fb:22:9c:3e:f7:4e:45:ed:66:a7:ae:a8:b2:43: 1d:86:14:b5:c3:5b:cf:44:b2:08:2f:a9:b6:c2:61:e8:be:fc: 84:a7:42:bf:38:77:1e:0b:5a:f1:83:5e:4c:07:0f:d6:1f:df: 26:29:3a:70:9d:f4:f5:10:e4:83:26:df:63:f3:1e:0e:23:e5: 85:13:46:88:08:97:19:7e:8f:68:a0:d1:13:73:eb:fe:cd:47: 8b:ef:f3:56:a1:46:3f:50:c6:d6:4c:72:d0:36:34:60:b1:49: 51:07:7c:0a:24:12:fe:2f:1f:ef:f7:cd:42:e9:63:24:c5:64: ec:8b:be:7a:fb:21:77:44:fd:57:7b:6b:61:a6:23:88:12:fb: 68:75:26:d2:ed:c4:7c:81:04:3d:5d:72:8f:10:9d:dc:e9:8a: 1d:4f:fc:f4:0a:82:05:f7:cd:52:6c:ef:29:1f:f5:73:82:3b: 10:0d:4b:0b:16:1d:0b:9a:25:91:a8:c2:3e:5a:6b:29:6f:77: 0d:20:9d:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhOPMbi9dHxM/sGyLQWXwns19YQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTEx RjAzREMxQjAeFw0yNjA5MTYyMzMzMTRaFw0yNjA5MTgwMjEzMTRaMDMxMTAvBgNV BAMTKDlDNkFEOUU5MjY4NjQzMTM3Q0NBQUEyNEE2Q0JDMEJDMDAyMjMwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4K1s3ow0Byf4ALiSY2x4V0h7 BcynXd6hcldiK11RmoPtsl3OYE1Hm90mNhj/rgIp5mGBvYa58kwYje4bbQeSsG68 78qFEgA4xhetUuMKKtP+UmGWRfwgX3p3xMobksnZNiAzK3278pf29XX70b72TDyE ybWZpJksFCrVL/qxsNBhXZpH620HdCRujhxs7iQQnaOcLzJP6FwZVGaiUvWkqAkP sdkcJCSvAhep2W84xFTqlaSUlhlVO1RAaiippqn4N1hYw3pWLd885i2JtR5AIc8m CwT+SkxIBqIVtLWNBZ0eITWnHvQ9p+aRA7KL5SdtxQ13eojxLUaIwnlWpuSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnGrZ6SaGQxN8yqokpsvAvAAiMHIwHwYDVR0j BBgwFoAUhnPiaY/LUromE1kqrPfi4R8D3BswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY5ZjI5ODgtY2FiMy00NWFhLTk3ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4 RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTExRjAzREMxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjczRTI2OThGQ0I1MkJBMjYxMzU5MkFBQ0Y3RTJFMTFGMDNE QzFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0Uy RTExRjAzREMxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlmXPGvHwE9DrtyIuuwsDdfld4ccasyE0UM 2rn042hYuGt4eUEsR7ErT4Por0x/uT+B8AHktJcR2mn7Ipw+905F7WanrqiyQx2G FLXDW89EsggvqbbCYei+/ISnQr84dx4LWvGDXkwHD9Yf3yYpOnCd9PUQ5IMm32Pz Hg4j5YUTRogIlxl+j2ig0RNz6/7NR4vv81ahRj9QxtZMctA2NGCxSVEHfAokEv4v H+/3zULpYyTFZOyLvnr7IXdE/Vd7a2GmI4gS+2h1JtLtxHyBBD1dco8Qndzpih1P /PQKggX3zVJs7ykf9XOCOxANSwsWHQuaJZGowj5aaylvdw0gnTg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:02 2026 by rpki-client