$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft File: 8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft (raw, json) Hash identifier: KcSTZ/MxLVkveObIF9JuFk8g9ki9mCQwicKe5T6csQQ= Subject key identifier: AA:D3:96:ED:B4:23:DE:50:31:1C:18:46:39:A1:66:E1:08:61:72:D9 Authority key identifier: 8C:22:63:C9:1E:3F:B8:C4:95:75:01:B1:F6:69:A2:06:21:70:F9:E0 Certificate issuer: /CN=8C2263C91E3FB8C4957501B1F669A2062170F9E0 Certificate serial: 2A002B7FE8975ABAFF3B1E2E7B1BB099FA0B2173 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:12:20 +0000 Manifest this update: Thu 17 Sep 2026 07:07:20 +0000 Manifest next update: Fri 18 Sep 2026 08:18:20 +0000 Files and hashes: 1: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: otMHW/iALeuwuRkuqs8HAjMUYbLDHM48rPe1iSU6XuA=) 2: 8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl (hash: UKu14GGEnJY1E4puw1RO2y4ncTNWTU0H6ojTf+a9nHM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:00:2b:7f:e8:97:5a:ba:ff:3b:1e:2e:7b:1b:b0:99:fa:0b:21:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C2263C91E3FB8C4957501B1F669A2062170F9E0 Validity Not Before: Sep 17 07:07:20 2026 GMT Not After : Sep 18 08:18:20 2026 GMT Subject: CN=AAD396EDB423DE50311C184639A166E1086172D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:fe:7f:a4:54:a2:01:81:94:f7:a8:0b:da: 9c:94:b0:c1:19:a3:d6:3f:1e:a3:ba:80:fa:8d:35: c0:d0:2f:70:35:79:e0:58:66:b6:17:c4:d8:60:8d: 77:4e:fb:99:13:b6:6b:90:12:87:b5:b2:09:9d:ab: dd:5b:ef:59:12:52:9f:6d:ba:37:b5:ce:84:f4:fb: df:6c:e9:a1:a4:7a:6d:38:c7:51:26:0a:d2:7d:f9: 9c:e7:d6:d0:40:2c:05:62:f7:c6:33:64:24:89:a6: df:46:f0:e5:78:8b:2a:ca:3c:ac:8d:ca:de:93:73: c7:f4:b4:44:40:13:d8:64:cd:03:9f:76:f5:4b:90: 1f:24:62:c5:95:b5:67:20:47:e0:2d:39:9f:3a:39: ee:fc:79:2c:d4:68:e2:f5:3b:f7:8e:4b:b8:05:16: 37:eb:47:c2:50:cf:a8:0b:fa:1c:03:ad:31:9f:5e: 81:a8:27:93:0b:c8:7b:63:a5:74:f0:8f:1e:8a:7c: 42:b5:96:4d:83:3a:5b:86:66:16:90:91:b2:84:08: 66:c3:8e:c3:c9:cb:09:15:f9:0b:a5:79:0e:20:9b: 79:4a:58:1a:87:e4:fc:d7:fc:d3:4a:47:73:81:e6: 50:4d:2e:63:74:64:36:cd:fc:ad:c0:81:00:9c:6d: a6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D3:96:ED:B4:23:DE:50:31:1C:18:46:39:A1:66:E1:08:61:72:D9 X509v3 Authority Key Identifier: keyid:8C:22:63:C9:1E:3F:B8:C4:95:75:01:B1:F6:69:A2:06:21:70:F9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C2263C91E3FB8C4957501B1F669A2062170F9E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/8C2263C91E3FB8C4957501B1F669A2062170F9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cd:27:61:6a:be:28:34:90:6a:67:ae:25:34:44:51:86:c4: c1:52:3e:4d:a1:9b:5c:78:b3:0b:b4:37:c8:92:b0:2d:89:d0: ff:67:da:09:9d:d7:b1:a9:66:bf:d9:14:b7:66:2d:79:d6:d8: 9b:b5:f7:63:61:3e:04:23:3b:fd:05:c9:3b:b3:7d:f8:aa:af: 7c:61:2b:eb:52:74:6a:bf:a2:a0:31:c4:51:f9:95:0a:d6:be: 38:18:c0:83:e6:78:9a:9d:2f:10:56:1a:fa:00:46:2f:e2:55: d9:43:af:3c:b5:f6:e1:36:48:d9:17:6c:31:61:7b:33:34:2c: 2c:39:34:3d:81:83:dd:89:ec:63:c6:4b:15:4e:e4:79:5b:78: ad:08:b0:67:5c:fb:e7:84:93:1a:fd:13:d6:e6:bb:4d:f9:41: 35:31:d1:67:aa:e6:4f:ac:68:05:ee:a2:c9:3a:ab:11:7c:09: cc:31:28:a9:1c:7b:28:fa:60:b2:ba:3a:24:3b:3b:43:c2:95: db:b6:61:40:3c:2c:e7:9e:f8:11:e7:bc:31:14:24:21:aa:c5: 62:dd:c9:91:72:0f:28:b2:91:b7:9b:ec:0f:89:f4:7e:9e:e1: bb:fb:d8:b2:4e:42:28:d3:5b:04:36:2d:f0:8b:8b:d1:c3:96: fd:a0:57:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgArf+iXWrr/Ox4uexuwmfoLIXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMjYzQzkxRTNGQjhDNDk1NzUwMUIxRjY2OUEyMDYy MTcwRjlFMDAeFw0yNjA5MTcwNzA3MjBaFw0yNjA5MTgwODE4MjBaMDMxMTAvBgNV BAMTKEFBRDM5NkVEQjQyM0RFNTAzMTFDMTg0NjM5QTE2NkUxMDg2MTcyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCozP5/pFSiAYGU96gL2pyUsMEZ o9Y/HqO6gPqNNcDQL3A1eeBYZrYXxNhgjXdO+5kTtmuQEoe1sgmdq91b71kSUp9t uje1zoT0+99s6aGkem04x1EmCtJ9+Zzn1tBALAVi98YzZCSJpt9G8OV4iyrKPKyN yt6Tc8f0tERAE9hkzQOfdvVLkB8kYsWVtWcgR+AtOZ86Oe78eSzUaOL1O/eOS7gF FjfrR8JQz6gL+hwDrTGfXoGoJ5MLyHtjpXTwjx6KfEK1lk2DOluGZhaQkbKECGbD jsPJywkV+QuleQ4gm3lKWBqH5PzX/NNKR3OB5lBNLmN0ZDbN/K3AgQCcbaYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqtOW7bQj3lAxHBhGOaFm4QhhctkwHwYDVR0j BBgwFoAUjCJjyR4/uMSVdQGx9mmiBiFw+eAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFhZTEyZmEtOThmZC00ZTUxLTk4MGUtYWQ1ZjViOTBkN2E2LzAvOEMyMjYzQzkx RTNGQjhDNDk1NzUwMUIxRjY2OUEyMDYyMTcwRjlFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QzIyNjNDOTFFM0ZCOEM0OTU3NTAxQjFGNjY5QTIwNjIxNzBG OUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvOEMyMjYzQzkxRTNGQjhDNDk1NzUwMUIxRjY2OUEy MDYyMTcwRjlFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7NJ2Fqvig0kGpnriU0RFGGxMFSPk2hm1x4 swu0N8iSsC2J0P9n2gmd17GpZr/ZFLdmLXnW2Ju192NhPgQjO/0FyTuzffiqr3xh K+tSdGq/oqAxxFH5lQrWvjgYwIPmeJqdLxBWGvoARi/iVdlDrzy19uE2SNkXbDFh ezM0LCw5ND2Bg92J7GPGSxVO5HlbeK0IsGdc++eEkxr9E9bmu035QTUx0Weq5k+s aAXuosk6qxF8CcwxKKkceyj6YLK6OiQ7O0PCldu2YUA8LOee+BHnvDEUJCGqxWLd yZFyDyiykbeb7A+J9H6e4bv72LJOQijTWwQ2LfCLi9HDlv2gV5A= -----END CERTIFICATE-----Generated at Thu Sep 17 15:25:29 2026 by rpki-client