$ rpki-client -vvf rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft File: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft (raw, json) Hash identifier: xpOSa+cfbibvGGxcwvPBBF+ULRvmE/vaAXVcOSopx2I= Subject key identifier: 25:8E:99:14:81:76:FE:AB:48:3C:DC:67:7A:0C:36:1A:B9:A1:38:3E Authority key identifier: 8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 Certificate issuer: /CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Certificate serial: 7BA1C95CC89B7CCCB0B59CBCC4DBF52B3B1F4D4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 06:46:00 +0000 Manifest this update: Wed 17 Jun 2026 06:41:00 +0000 Manifest next update: Thu 18 Jun 2026 08:39:00 +0000 Files and hashes: 1: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl (hash: 6PAZinU2Rv2+ueO9LHSjy1tkY3oFvSGh5o5/OetgO5g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a1:c9:5c:c8:9b:7c:cc:b0:b5:9c:bc:c4:db:f5:2b:3b:1f:4d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Validity Not Before: Jun 17 06:41:00 2026 GMT Not After : Jun 18 08:39:00 2026 GMT Subject: CN=258E99148176FEAB483CDC677A0C361AB9A1383E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:55:19:a0:b5:01:99:4e:2c:c4:1e:90:90:2a: ad:c6:5f:08:a5:da:87:f2:7f:34:31:a4:c2:b0:b0: 92:86:ac:0b:b7:1b:a2:01:bd:e9:11:1f:8e:c4:55: c3:2b:e4:ec:54:47:2b:f5:95:a3:b2:42:6d:fb:0d: fd:32:dd:77:b3:b5:1f:b8:08:c6:7e:59:1f:5c:df: 45:cf:6d:e7:1a:e2:dc:57:e2:5b:8b:17:50:a2:df: 25:53:16:d7:4c:94:d4:78:2a:f5:f5:ef:d5:dc:10: 15:d3:25:c7:ef:ed:da:44:7f:56:ed:98:87:93:cd: 94:7a:a8:01:5d:aa:24:b0:83:21:f8:b1:35:cf:df: 58:35:4d:91:ff:c5:76:43:03:4b:10:a0:5a:30:da: 12:92:29:4c:9d:56:f9:92:98:0a:09:12:d8:4b:af: 54:3c:8a:85:cc:c8:16:6f:73:da:44:e9:8b:36:06: d9:89:d0:2f:7b:12:03:a9:96:a1:de:06:44:8f:a5: e7:55:1d:63:c4:26:82:c2:ee:d8:36:98:07:20:a1: d9:e3:60:d4:31:00:0c:05:78:e6:d7:4f:b1:38:76: df:b8:6d:c4:9c:f0:98:9f:bc:77:ce:1a:a7:ab:51: bc:d0:51:af:f8:c8:58:04:88:72:76:18:65:41:ed: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8E:99:14:81:76:FE:AB:48:3C:DC:67:7A:0C:36:1A:B9:A1:38:3E X509v3 Authority Key Identifier: keyid:8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:51:54:2e:e9:a9:c5:1c:47:15:1c:4f:fa:3c:e1:1a:2b:3b: 69:21:7e:48:e9:0c:67:48:0a:df:7c:01:e8:90:58:5f:38:75: 2b:48:74:1a:bb:0d:25:2b:4b:fe:03:af:94:a9:47:26:d0:45: ae:4b:aa:a4:90:01:6a:df:fc:ef:01:a6:e8:26:e8:c8:06:c1: 44:85:93:cb:20:e7:d2:41:ef:e4:92:55:f7:8d:e6:53:b8:5e: 91:63:ce:75:b1:95:6d:21:20:25:d1:2a:56:a6:3d:0c:98:e5: ce:31:7a:fd:09:68:8f:81:6a:f8:a2:3b:66:fe:61:61:38:89: cd:31:d8:b9:25:df:40:95:fe:a9:21:cd:fa:b0:b2:40:b4:11: bc:1a:00:56:e0:0d:03:3d:37:ea:3b:cd:56:5e:ba:f2:d3:23: 5c:74:49:df:d1:eb:37:67:61:51:10:96:55:c2:60:7b:a3:86: 82:9a:01:11:a1:9c:51:72:26:52:3b:0b:ec:b1:1b:a1:5d:59: a0:9d:19:af:2c:0f:f9:5b:3b:0f:2c:45:ce:c0:a6:e4:ed:1c: 9a:3c:ca:9c:ad:32:63:7f:e6:53:dd:a0:a0:31:f9:33:d1:2f: 3a:b5:f6:f6:2c:9c:06:a6:48:6a:aa:34:12:f9:d2:95:6d:e2: 04:c0:3a:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6HJXMibfMywtZy8xNv1KzsfTUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3 RDkxMDAzMTAeFw0yNjA2MTcwNjQxMDBaFw0yNjA2MTgwODM5MDBaMDMxMTAvBgNV BAMTKDI1OEU5OTE0ODE3NkZFQUI0ODNDREM2NzdBMEMzNjFBQjlBMTM4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVRmgtQGZTizEHpCQKq3GXwil 2ofyfzQxpMKwsJKGrAu3G6IBvekRH47EVcMr5OxURyv1laOyQm37Df0y3XeztR+4 CMZ+WR9c30XPbeca4txX4luLF1Ci3yVTFtdMlNR4KvX179XcEBXTJcfv7dpEf1bt mIeTzZR6qAFdqiSwgyH4sTXP31g1TZH/xXZDA0sQoFow2hKSKUydVvmSmAoJEthL r1Q8ioXMyBZvc9pE6Ys2BtmJ0C97EgOplqHeBkSPpedVHWPEJoLC7tg2mAcgodnj YNQxAAwFeObXT7E4dt+4bcSc8JifvHfOGqerUbzQUa/4yFgEiHJ2GGVB7dWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJY6ZFIF2/qtIPNxnegw2GrmhOD4wHwYDVR0j BBgwFoAUjJX82S/mBxvh1rJ7eTDv432RADEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjk1NWY1YTYtZjM3OC00MjUyLTgwNGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDky RkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3RDkxMDAzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Qzk1RkNEOTJGRTYwNzFCRTFENkIyN0I3OTMwRUZFMzdEOTEw MDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVG RTM3RDkxMDAzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9RVC7pqcUcRxUcT/o84RorO2khfkjpDGdI Ct98AeiQWF84dStIdBq7DSUrS/4Dr5SpRybQRa5LqqSQAWrf/O8Bpugm6MgGwUSF k8sg59JB7+SSVfeN5lO4XpFjznWxlW0hICXRKlamPQyY5c4xev0JaI+BaviiO2b+ YWE4ic0x2Lkl30CV/qkhzfqwskC0EbwaAFbgDQM9N+o7zVZeuvLTI1x0Sd/R6zdn YVEQllXCYHujhoKaARGhnFFyJlI7C+yxG6FdWaCdGa8sD/lbOw8sRc7ApuTtHJo8 ypytMmN/5lPdoKAx+TPRLzq19vYsnAamSGqqNBL50pVt4gTAOpg= -----END CERTIFICATE-----Generated at Wed Jun 17 10:15:35 2026 by rpki-client