$ rpki-client -vvf rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft File: C8B590D2951C1522B7D14E433BB02A22D081720B.mft (raw, json) Hash identifier: hqKH0LXONhj8kZfMIm7/evadVVfiSeridIJnXZpcOYA= Subject key identifier: B9:77:06:90:D7:E4:B5:73:35:66:C1:BE:06:AA:1C:DF:86:00:54:08 Authority key identifier: C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B Certificate issuer: /CN=C8B590D2951C1522B7D14E433BB02A22D081720B Certificate serial: 5F855AC84FF3A62DE6D50CD65E3B0F9C88DC0FFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 19:43:02 +0000 Manifest this update: Tue 16 Jun 2026 19:38:02 +0000 Manifest next update: Wed 17 Jun 2026 19:51:02 +0000 Files and hashes: 1: C8B590D2951C1522B7D14E433BB02A22D081720B.crl (hash: Ne/KDRKelUGJ9IDhxSte4fBQGM8QU04wzzYsRrnmo2c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:85:5a:c8:4f:f3:a6:2d:e6:d5:0c:d6:5e:3b:0f:9c:88:dc:0f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B590D2951C1522B7D14E433BB02A22D081720B Validity Not Before: Jun 16 19:38:02 2026 GMT Not After : Jun 17 19:51:02 2026 GMT Subject: CN=B9770690D7E4B5733566C1BE06AA1CDF86005408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2e:c5:ac:e8:74:d8:56:66:ad:f2:eb:d1:68: fc:92:6e:c4:9b:da:81:47:45:c6:e5:8f:eb:cf:ac: 08:c8:bd:76:65:81:00:45:dd:f0:1e:9d:77:98:85: bc:3a:cb:53:aa:5d:45:da:e5:22:0c:1c:b9:38:04: 87:57:01:c5:8f:90:1f:01:87:ad:bc:aa:58:70:57: d8:ca:37:a3:6b:ee:9b:49:34:16:31:a0:17:59:d4: c7:43:e4:97:a7:25:96:00:7f:d1:f3:69:33:41:5c: f1:18:3f:68:d5:f2:cf:77:05:05:03:ba:11:f3:a7: e5:1b:f7:50:1c:dd:ab:4f:b1:84:3a:38:af:79:05: 3e:6a:54:dc:8d:db:7d:9f:08:86:ae:03:84:43:77: 36:0d:7a:cd:da:09:c0:da:7a:e2:30:d6:e9:51:ec: aa:02:8b:ce:91:7f:d9:85:7f:50:63:df:19:66:58: b3:77:94:69:fc:39:37:b3:5c:89:cb:b4:a9:74:06: fb:c3:4d:67:13:7b:1e:d0:c4:a6:61:6f:54:1c:49: 42:38:20:96:94:a2:5b:bf:36:80:10:9c:82:6c:cd: fd:2c:01:eb:fa:4a:7a:f0:e0:29:2c:03:c1:ab:ed: 76:78:1c:9a:b4:03:e0:0a:15:37:81:9b:ae:f8:cc: 78:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:77:06:90:D7:E4:B5:73:35:66:C1:BE:06:AA:1C:DF:86:00:54:08 X509v3 Authority Key Identifier: keyid:C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f9:f7:f4:fa:3f:13:e0:fb:79:1d:c4:90:dc:58:e2:75:43: 0c:25:60:ec:be:61:3d:f7:fc:1a:c9:21:d6:09:11:f2:75:a4: 57:dd:cc:9e:30:05:20:28:5a:da:3e:4c:7e:14:e1:97:d0:c4: e7:f5:dd:4a:36:cf:e5:13:de:19:cb:d7:44:82:72:f2:e4:c7: 05:cf:bd:2f:8c:54:a7:f3:b4:8c:9a:bb:ff:35:a6:ca:42:9f: b1:b2:82:65:44:5c:b5:15:26:aa:bc:13:fa:43:a2:69:25:2e: 45:ae:3b:ef:8e:a7:1a:04:7d:b6:c7:df:3e:89:8c:93:ae:31: 1b:33:04:c0:6c:b2:5c:0d:62:6e:f0:5b:16:14:57:f4:e1:52: 86:16:ed:31:9b:67:67:8d:c4:6c:41:44:51:67:b5:e8:d1:e4: b6:37:3e:af:6f:ee:7a:a3:e4:e7:5c:e2:bc:c5:ef:13:51:c1: 20:03:e3:14:39:e3:22:cf:ae:a7:3d:bd:82:7e:34:90:a4:11: f7:91:ca:b8:bf:a7:fc:5a:b4:6d:34:8f:9e:aa:13:d9:2b:10: cf:d6:4b:64:23:cb:5c:62:1b:e9:cb:9c:ed:c8:76:00:e8:4f: a2:8e:0e:5d:14:06:17:e4:4b:10:c9:72:1d:73:3c:7f:1d:a7: 00:05:8b:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4VayE/zpi3m1QzWXjsPnIjcD/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJE MDgxNzIwQjAeFw0yNjA2MTYxOTM4MDJaFw0yNjA2MTcxOTUxMDJaMDMxMTAvBgNV BAMTKEI5NzcwNjkwRDdFNEI1NzMzNTY2QzFCRTA2QUExQ0RGODYwMDU0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLsWs6HTYVmat8uvRaPySbsSb 2oFHRcblj+vPrAjIvXZlgQBF3fAenXeYhbw6y1OqXUXa5SIMHLk4BIdXAcWPkB8B h628qlhwV9jKN6Nr7ptJNBYxoBdZ1MdD5JenJZYAf9HzaTNBXPEYP2jV8s93BQUD uhHzp+Ub91Ac3atPsYQ6OK95BT5qVNyN232fCIauA4RDdzYNes3aCcDaeuIw1ulR 7KoCi86Rf9mFf1Bj3xlmWLN3lGn8OTezXInLtKl0BvvDTWcTex7QxKZhb1QcSUI4 IJaUolu/NoAQnIJszf0sAev6Snrw4CksA8Gr7XZ4HJq0A+AKFTeBm674zHjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuXcGkNfktXM1ZsG+Bqoc34YAVAgwHwYDVR0j BBgwFoAUyLWQ0pUcFSK30U5DO7AqItCBcgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2NmIwMDUtMTcyMS00OTQ1LTg1YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5 NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJEMDgxNzIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEI1OTBEMjk1MUMxNTIyQjdEMTRFNDMzQkIwMkEyMkQwODE3 MjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJB MjJEMDgxNzIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD59/T6PxPg+3kdxJDcWOJ1QwwlYOy+YT33 /BrJIdYJEfJ1pFfdzJ4wBSAoWto+TH4U4ZfQxOf13Uo2z+UT3hnL10SCcvLkxwXP vS+MVKfztIyau/81pspCn7GygmVEXLUVJqq8E/pDomklLkWuO++OpxoEfbbH3z6J jJOuMRszBMBsslwNYm7wWxYUV/ThUoYW7TGbZ2eNxGxBRFFntejR5LY3Pq9v7nqj 5Odc4rzF7xNRwSAD4xQ54yLPrqc9vYJ+NJCkEfeRyri/p/xatG00j56qE9krEM/W S2Qjy1xiG+nLnO3IdgDoT6KODl0UBhfkSxDJch1zPH8dpwAFi4Q= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:38 2026 by rpki-client