$ rpki-client -vvf rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft File: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft (raw, json) Hash identifier: fm12fnemQ10zm/7M7Y1iVCt/naoRaPv1i8tQb9kF7xA= Subject key identifier: CB:58:8D:DD:D4:0F:C5:F1:86:6E:A5:20:88:01:E8:7A:C9:81:C4:66 Authority key identifier: 8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC Certificate issuer: /CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Certificate serial: 2BB61DC7D5B0844D5424F4B04C44E4A64C4B3AE6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:23:55 +0000 Manifest this update: Tue 16 Jun 2026 20:18:55 +0000 Manifest next update: Wed 17 Jun 2026 22:10:55 +0000 Files and hashes: 1: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl (hash: mgxYKyLw19fNdPVFq+gdcO7hoSvv+erR1Sft/DZPvlg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b6:1d:c7:d5:b0:84:4d:54:24:f4:b0:4c:44:e4:a6:4c:4b:3a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Validity Not Before: Jun 16 20:18:55 2026 GMT Not After : Jun 17 22:10:55 2026 GMT Subject: CN=CB588DDDD40FC5F1866EA5208801E87AC981C466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:d9:25:70:3a:13:99:2b:2b:51:33:8e:71: e7:8a:03:1f:2f:11:ce:32:69:60:d0:20:02:63:d7: 34:6b:c6:3c:f3:65:b2:2d:d2:ba:ef:03:23:9e:ac: 9c:af:22:2d:eb:5d:a2:22:ea:9e:f8:c9:32:8f:85: 5e:30:e9:bc:54:e6:62:e8:01:c9:7d:e2:70:27:06: a7:e6:d7:a2:18:41:21:ad:58:cf:9f:13:a3:36:49: cf:9e:9a:5b:76:93:91:58:de:77:dc:61:a2:af:79: a7:62:2c:d3:1a:08:c1:4c:48:98:10:0f:1f:00:07: 78:bc:df:a0:63:19:8a:49:c6:84:2c:e4:85:0a:f8: e0:03:42:f0:c0:2f:66:74:71:d9:03:dc:16:bf:5a: 2a:07:ad:e3:a9:28:89:ef:b4:e0:3e:10:36:2a:7f: 1a:f6:a6:61:84:1e:ed:63:b5:07:70:c6:43:da:fb: f5:cb:69:1e:c3:c7:52:1f:7b:b7:fb:b7:4c:4a:6c: db:1f:25:28:0e:1a:93:ed:9f:6c:40:32:5e:7b:34: 52:3d:90:59:9f:35:63:de:3f:02:4b:0c:73:d7:b0: f4:64:25:96:a6:3f:ae:e8:64:f4:15:5c:1a:38:d4: f7:b2:85:f3:3b:c8:ae:53:b3:34:88:6d:1c:0e:40: d3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:58:8D:DD:D4:0F:C5:F1:86:6E:A5:20:88:01:E8:7A:C9:81:C4:66 X509v3 Authority Key Identifier: keyid:8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:cb:ef:5b:94:53:e0:a8:8f:86:98:f1:92:eb:40:ab:81:9a: 02:af:62:d4:f2:bd:ed:6e:f7:70:4b:a1:2a:b0:05:44:7a:b5: 1c:a4:c1:86:b2:50:da:46:5d:29:40:c1:76:c0:a6:3b:7c:d9: 6d:46:7d:7b:7c:c7:4b:51:1d:88:25:8a:ec:16:e0:3e:e4:27: fa:0c:ae:60:4b:65:23:fb:51:ad:f1:6d:b5:5e:e7:94:c5:09: 85:56:a3:80:ec:10:32:b0:80:3d:ec:a3:1a:cb:06:56:d9:85: 64:fe:b2:8b:99:9d:5a:8b:d9:11:58:72:3c:7d:74:e6:ec:78: eb:72:c1:67:10:9b:32:e5:3a:bf:14:d2:70:8e:5c:00:b8:ef: e6:84:83:ce:30:50:7b:37:95:9c:4d:eb:7f:f5:97:f3:12:d7: 1a:2a:81:02:5d:c3:16:a3:f8:ff:30:5b:1d:e1:2e:4a:a1:0c: 62:28:ee:51:bc:69:50:45:4d:c9:3e:e5:a6:81:69:fd:2f:fc: 04:75:a0:34:08:20:f5:00:a5:1d:83:96:c9:d5:6f:0d:10:d4: f7:c5:cd:dd:0e:84:a0:64:9b:74:2f:5d:59:6a:7f:df:f6:1a: 3a:d3:0a:c6:b6:87:d0:8f:e5:98:61:6f:db:6b:82:71:89:07: 5a:38:c6:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7Ydx9WwhE1UJPSwTETkpkxLOuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhCNEMy MUEyQzJEQzAeFw0yNjA2MTYyMDE4NTVaFw0yNjA2MTcyMjEwNTVaMDMxMTAvBgNV BAMTKENCNTg4RERERDQwRkM1RjE4NjZFQTUyMDg4MDFFODdBQzk4MUM0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yNklcDoTmSsrUTOOceeKAx8v Ec4yaWDQIAJj1zRrxjzzZbIt0rrvAyOerJyvIi3rXaIi6p74yTKPhV4w6bxU5mLo Acl94nAnBqfm16IYQSGtWM+fE6M2Sc+emlt2k5FY3nfcYaKveadiLNMaCMFMSJgQ Dx8AB3i836BjGYpJxoQs5IUK+OADQvDAL2Z0cdkD3Ba/WioHreOpKInvtOA+EDYq fxr2pmGEHu1jtQdwxkPa+/XLaR7Dx1Ife7f7t0xKbNsfJSgOGpPtn2xAMl57NFI9 kFmfNWPePwJLDHPXsPRkJZamP67oZPQVXBo41PeyhfM7yK5TszSIbRwOQNMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy1iN3dQPxfGGbqUgiAHoesmBxGYwHwYDVR0j BBgwFoAUi3yU5dr2a7lW3568N+SLTCGiwtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDE4YzY4MzEtOGY0MC00YTIwLTgxM2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVE QUY2NkJCOTU2REY5RUJDMzdFNDhCNEMyMUEyQzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjdDOTRFNURBRjY2QkI5NTZERjlFQkMzN0U0OEI0QzIxQTJD MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhC NEMyMUEyQzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7L71uUU+Coj4aY8ZLrQKuBmgKvYtTyve1u 93BLoSqwBUR6tRykwYayUNpGXSlAwXbApjt82W1GfXt8x0tRHYgliuwW4D7kJ/oM rmBLZSP7Ua3xbbVe55TFCYVWo4DsEDKwgD3soxrLBlbZhWT+souZnVqL2RFYcjx9 dObseOtywWcQmzLlOr8U0nCOXAC47+aEg84wUHs3lZxN63/1l/MS1xoqgQJdwxaj +P8wWx3hLkqhDGIo7lG8aVBFTck+5aaBaf0v/AR1oDQIIPUApR2DlsnVbw0Q1PfF zd0OhKBkm3QvXVlqf9/2GjrTCsa2h9CP5Zhhb9trgnGJB1o4xm0= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:12 2026 by rpki-client