$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft File: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft (raw, json) Hash identifier: FeAuV+uooEf7SrMd7ZfjUGxwDyOlkrWQjGzeaDZPGvk= Subject key identifier: 6C:D8:BE:DD:B5:0E:4B:DC:D7:D6:24:53:CD:AE:90:B8:67:E0:2F:DA Authority key identifier: 8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB Certificate issuer: /CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Certificate serial: 6CA14C227C5C6B1A7ACFA76AA8CB3D225D1DF608 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 19:18:03 +0000 Manifest this update: Wed 16 Sep 2026 19:13:03 +0000 Manifest next update: Thu 17 Sep 2026 21:16:03 +0000 Files and hashes: 1: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl (hash: IamFDflUMhZWhmwbv5a0qNhvriof+DTBcbPHU9Uxk4U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a1:4c:22:7c:5c:6b:1a:7a:cf:a7:6a:a8:cb:3d:22:5d:1d:f6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Validity Not Before: Sep 16 19:13:03 2026 GMT Not After : Sep 17 21:16:03 2026 GMT Subject: CN=6CD8BEDDB50E4BDCD7D62453CDAE90B867E02FDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:39:9b:b6:f7:1e:0b:9b:c7:7d:1c:ca:5b: e9:6e:91:ea:91:c5:52:69:75:32:47:85:29:d4:d3: 57:5e:2a:62:72:13:82:fc:fb:06:24:17:e5:72:55: 1d:f5:f5:b2:c9:86:d3:f0:ee:86:7d:ac:06:9f:d6: 06:06:97:f0:3e:c4:78:bb:92:2e:70:88:65:d8:dc: d7:5b:6d:7e:e9:d6:21:84:45:43:5b:f7:65:e2:d6: d3:5f:20:95:6e:ab:a2:c6:3b:95:27:bc:c1:e6:50: 98:d9:a1:b6:aa:84:ca:a7:4e:58:ca:fd:fe:00:a5: 4c:2b:2e:71:6e:8d:a2:d2:33:a5:66:73:d3:ec:49: 12:1e:27:ee:9f:cd:2d:ce:89:c0:d7:31:af:6e:b3: 2c:63:ff:4c:14:4e:96:82:7d:31:7f:46:c1:70:f8: 48:06:48:2b:be:e3:f8:36:e7:bf:5f:b0:11:21:d4: 9a:4e:63:e7:aa:6c:9f:82:4f:51:49:63:19:d8:9b: cb:4f:94:80:f3:db:e3:b7:12:11:77:15:39:44:22: 93:8f:ac:c4:06:a9:54:f2:7b:ca:c8:d9:cb:2f:03: c1:cb:88:fb:31:68:3b:3f:f4:20:db:9c:3b:b4:6d: 9f:76:3b:72:e0:f5:91:a6:35:94:9d:95:c3:93:cb: 2d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D8:BE:DD:B5:0E:4B:DC:D7:D6:24:53:CD:AE:90:B8:67:E0:2F:DA X509v3 Authority Key Identifier: keyid:8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:9f:66:30:47:39:7b:73:2c:49:fb:8b:8b:f3:ae:21:45:f0: fc:0c:ba:49:8c:89:75:25:e6:1b:c6:63:fb:78:56:ac:2e:50: 5c:88:a5:6e:dd:75:60:87:09:62:06:dc:45:38:07:f1:61:f3: 8e:f3:22:9e:47:f7:cb:bc:dc:bf:51:ad:af:ad:04:ed:ae:b7: 25:a6:ef:1b:f1:0d:1f:52:7b:ce:8c:17:dd:c1:af:83:75:e3: 0b:d6:a1:ab:b5:3e:69:02:e0:c4:4e:8f:96:7a:f0:56:ee:76: a4:d7:8a:80:fb:d9:31:2d:7f:f5:fb:bd:6c:5c:c8:27:59:c0: 97:c5:71:af:21:ab:93:0d:18:e3:36:56:b0:79:a9:d9:ab:57: 0f:ef:83:da:6b:af:d7:b0:14:8f:b5:a5:cc:7a:4d:57:4b:dc: 4f:91:8a:12:f2:3e:04:c9:06:21:ba:d7:b0:ff:44:c8:80:7e: 56:17:d4:64:71:38:5d:ad:6c:43:72:a1:fb:a3:de:ed:13:16: 57:d0:c6:b7:e2:1d:79:b5:98:46:8f:e4:eb:25:1c:bf:eb:48: 5b:bd:8f:19:b5:37:18:a4:d4:3a:e6:d4:d1:a6:4f:94:54:f2: 8c:bd:ad:eb:64:76:c7:40:51:b0:45:61:09:3c:6b:da:09:17: 7a:3f:76:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbKFMInxcaxp6z6dqqMs9Il0d9ggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5 MzREOTlEQjAeFw0yNjA5MTYxOTEzMDNaFw0yNjA5MTcyMTE2MDNaMDMxMTAvBgNV BAMTKDZDRDhCRUREQjUwRTRCRENEN0Q2MjQ1M0NEQUU5MEI4NjdFMDJGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnDmbtvceC5vHfRzKW+lukeqR xVJpdTJHhSnU01deKmJyE4L8+wYkF+VyVR319bLJhtPw7oZ9rAaf1gYGl/A+xHi7 ki5wiGXY3NdbbX7p1iGERUNb92Xi1tNfIJVuq6LGO5UnvMHmUJjZobaqhMqnTljK /f4ApUwrLnFujaLSM6Vmc9PsSRIeJ+6fzS3OicDXMa9usyxj/0wUTpaCfTF/RsFw +EgGSCu+4/g2579fsBEh1JpOY+eqbJ+CT1FJYxnYm8tPlIDz2+O3EhF3FTlEIpOP rMQGqVTye8rI2csvA8HLiPsxaDs/9CDbnDu0bZ92O3Lg9ZGmNZSdlcOTyy3TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbNi+3bUOS9zX1iRTza6QuGfgL9owHwYDVR0j BBgwFoAUisGM4zWXeqCpvJrv/vUwyJNNmdswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5Y2NlYjYtYTRlNy00ZTgyLTg4YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMz NTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5MzREOTlEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUMxOENFMzM1OTc3QUEwQTlCQzlBRUZGRUY1MzBDODkzNEQ5 OURCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMw Qzg5MzREOTlEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSfZjBHOXtzLEn7i4vzriFF8PwMukmMiXUl 5hvGY/t4VqwuUFyIpW7ddWCHCWIG3EU4B/Fh847zIp5H98u83L9Rra+tBO2utyWm 7xvxDR9Se86MF93Br4N14wvWoau1PmkC4MROj5Z68FbudqTXioD72TEtf/X7vWxc yCdZwJfFca8hq5MNGOM2VrB5qdmrVw/vg9prr9ewFI+1pcx6TVdL3E+RihLyPgTJ BiG617D/RMiAflYX1GRxOF2tbENyofuj3u0TFlfQxrfiHXm1mEaP5OslHL/rSFu9 jxm1Nxik1Drm1NGmT5RU8oy9retkdsdAUbBFYQk8a9oJF3o/dqk= -----END CERTIFICATE-----Generated at Thu Sep 17 11:26:33 2026 by rpki-client