$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft File: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft (raw, json) Hash identifier: 6p3CIpMqf6X0c3/tzwbR7HgOSHAmMdAio4To6pbNlac= Subject key identifier: D6:0A:54:27:EE:81:47:92:77:EF:9A:BA:1C:11:78:73:D6:DF:D5:E5 Authority key identifier: 8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 Certificate issuer: /CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Certificate serial: 7C727459931D891262A627ECC59F8F34D36AE2C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:07:19 +0000 Manifest this update: Thu 17 Sep 2026 07:02:19 +0000 Manifest next update: Fri 18 Sep 2026 11:04:19 +0000 Files and hashes: 1: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl (hash: Z0bxOID3DBxB1eIpplZ5eEhfWgdfo521dthz+ZGGKos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:72:74:59:93:1d:89:12:62:a6:27:ec:c5:9f:8f:34:d3:6a:e2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Validity Not Before: Sep 17 07:02:19 2026 GMT Not After : Sep 18 11:04:19 2026 GMT Subject: CN=D60A5427EE81479277EF9ABA1C117873D6DFD5E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:a5:d2:64:8b:8c:e8:1f:99:da:cb:75:f7: 30:9b:ee:d4:6a:48:8f:a4:a3:ca:87:4f:e4:54:d6: 9e:4a:fd:e8:df:c4:3a:a7:9c:87:bf:20:b8:1a:71: b7:1d:4d:9a:88:3a:bd:96:4f:07:a4:41:a3:5c:64: 4b:4a:d6:bf:a3:84:cc:24:c6:80:7e:3b:3b:f8:35: f9:5d:9a:79:0f:5d:31:76:e3:03:e9:47:df:37:5b: a1:f8:43:1e:0b:79:9e:17:dd:bd:65:8c:e2:ed:50: d8:8c:65:17:8d:7d:95:c8:07:89:af:ab:ac:0c:94: 44:41:71:39:9c:b3:35:ae:e9:81:fa:a0:19:9b:85: 6f:f7:58:05:69:c5:6a:7c:9c:33:62:d3:7b:e9:73: 32:2d:54:6f:48:c0:3b:9f:8c:6c:0f:12:d2:3e:dd: 70:09:ac:25:fc:54:79:1f:db:1d:50:a9:ea:7f:86: 88:f4:95:ea:03:9f:4e:b6:a9:2e:a7:00:a4:ad:ef: ca:54:d2:53:f3:22:55:10:20:0b:29:38:13:5b:8a: 96:a3:8b:8a:6d:94:ba:ef:b8:a4:0c:d8:63:d0:f3: c4:e7:66:6d:f2:13:50:f2:e1:df:a6:e8:da:a0:a9: 5b:d9:5f:39:37:c0:0c:d0:fe:6d:40:df:bc:d9:ce: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0A:54:27:EE:81:47:92:77:EF:9A:BA:1C:11:78:73:D6:DF:D5:E5 X509v3 Authority Key Identifier: keyid:8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:97:48:f3:8a:7f:3d:e9:46:91:d4:8d:9e:90:59:7e:34:cb: 00:9e:7c:14:d6:8b:65:7e:0c:44:08:e4:95:91:48:ef:2b:27: 90:c4:d4:88:e3:7a:3a:51:3f:69:26:40:2f:34:7e:d2:c8:ce: 69:33:32:51:81:70:4a:81:02:18:5c:8b:ef:2b:1b:9d:f0:36: 90:5e:4d:70:0e:1f:66:c5:24:04:8a:c4:06:8d:d9:6b:c7:d5: d4:44:4b:bc:7d:ef:d6:84:86:52:bf:f5:79:af:c9:59:a4:d2: 06:2f:37:10:22:38:eb:ec:1c:45:fe:a4:ba:36:51:fd:c2:dc: 9e:ab:ca:7c:63:66:69:fe:5d:13:2a:1e:2e:2b:1b:46:a8:44: d3:d3:30:90:d8:63:db:a5:0c:4f:2e:0a:88:db:7f:9c:fc:d4: 99:61:f1:d5:5f:bc:a2:37:46:30:25:a2:45:a9:a7:36:e8:00: 38:43:17:41:be:f2:1d:8f:d5:30:b1:e9:09:36:d6:40:d4:15: 1b:fb:e3:d5:b9:50:90:10:38:b9:0d:a0:cb:48:a3:b4:2b:07: 8b:c7:90:69:2f:38:96:63:4e:72:1f:84:c3:dd:0b:26:cf:b5: e3:98:2d:ab:d9:2a:72:0c:6c:d4:f6:da:66:03:e8:46:a2:34: aa:1e:12:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfHJ0WZMdiRJipifsxZ+PNNNq4sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI4QjUzNjMwRDRDRURCMUZDODI0QzIwQUU5QURGNDY4 QTdENDNFNzAeFw0yNjA5MTcwNzAyMTlaFw0yNjA5MTgxMTA0MTlaMDMxMTAvBgNV BAMTKEQ2MEE1NDI3RUU4MTQ3OTI3N0VGOUFCQTFDMTE3ODczRDZERkQ1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnCqXSZIuM6B+Z2st19zCb7tRq SI+ko8qHT+RU1p5K/ejfxDqnnIe/ILgacbcdTZqIOr2WTwekQaNcZEtK1r+jhMwk xoB+Ozv4NfldmnkPXTF24wPpR983W6H4Qx4LeZ4X3b1ljOLtUNiMZReNfZXIB4mv q6wMlERBcTmcszWu6YH6oBmbhW/3WAVpxWp8nDNi03vpczItVG9IwDufjGwPEtI+ 3XAJrCX8VHkf2x1Qqep/hoj0leoDn062qS6nAKSt78pU0lPzIlUQIAspOBNbipaj i4ptlLrvuKQM2GPQ88TnZm3yE1Dy4d+m6NqgqVvZXzk3wAzQ/m1A37zZzuyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1gpUJ+6BR5J375q6HBF4c9bf1eUwHwYDVR0j BBgwFoAUi4tTYw1M7bH8gkwgrprfRop9Q+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg2YTEzYmQtYjc5YS00NTBlLTliZTMtM2Q1YTAzYWI5M2IxLzAvOEI4QjUzNjMw RDRDRURCMUZDODI0QzIwQUU5QURGNDY4QTdENDNFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjhCNTM2MzBENENFREIxRkM4MjRDMjBBRTlBREY0NjhBN0Q0 M0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvOEI4QjUzNjMwRDRDRURCMUZDODI0QzIwQUU5QURG NDY4QTdENDNFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmXSPOKfz3pRpHUjZ6QWX40ywCefBTWi2V+ DEQI5JWRSO8rJ5DE1IjjejpRP2kmQC80ftLIzmkzMlGBcEqBAhhci+8rG53wNpBe TXAOH2bFJASKxAaN2WvH1dRES7x979aEhlK/9XmvyVmk0gYvNxAiOOvsHEX+pLo2 Uf3C3J6rynxjZmn+XRMqHi4rG0aoRNPTMJDYY9ulDE8uCojbf5z81Jlh8dVfvKI3 RjAlokWppzboADhDF0G+8h2P1TCx6Qk21kDUFRv749W5UJAQOLkNoMtIo7QrB4vH kGkvOJZjTnIfhMPdCybPteOYLavZKnIMbNT22mYD6EaiNKoeEr4= -----END CERTIFICATE-----Generated at Thu Sep 17 13:48:14 2026 by rpki-client