$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft File: C8B590D2951C1522B7D14E433BB02A22D081720B.mft (raw, json) Hash identifier: qx31/xtc5DcTzEd2DDIBO/FpxUnVXl8qaCFjMgYLe+Q= Subject key identifier: 55:3E:8F:B9:AF:BB:C6:AC:EE:7E:FE:40:96:1A:EE:87:6D:D1:45:02 Authority key identifier: C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B Certificate issuer: /CN=C8B590D2951C1522B7D14E433BB02A22D081720B Certificate serial: 6D574CA2A119C5D9AAE89166D1D1D14DCD399A37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 14:12:55 +0000 Manifest this update: Fri 25 Sep 2026 14:07:55 +0000 Manifest next update: Sat 26 Sep 2026 17:51:55 +0000 Files and hashes: 1: C8B590D2951C1522B7D14E433BB02A22D081720B.crl (hash: Vk0v2hJCTCSxfRFQTS0HXCCUxvj67enu94EH5qnI+4I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:57:4c:a2:a1:19:c5:d9:aa:e8:91:66:d1:d1:d1:4d:cd:39:9a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B590D2951C1522B7D14E433BB02A22D081720B Validity Not Before: Sep 25 14:07:55 2026 GMT Not After : Sep 26 17:51:55 2026 GMT Subject: CN=553E8FB9AFBBC6ACEE7EFE40961AEE876DD14502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:92:62:e7:80:a2:c3:c9:a8:b8:93:c3:c6:04: 09:91:ea:b1:ff:94:3a:bc:32:c2:85:2e:29:b6:9e: 5c:fa:b6:c6:dd:2f:c9:1d:45:a8:8a:80:f5:d0:29: 82:5f:37:cd:47:71:29:dd:ff:ba:26:1b:51:4b:4a: 0d:e1:ab:15:d9:d4:68:0b:06:cf:55:5c:ff:01:99: 44:74:c4:74:17:e6:7a:55:ae:b8:d9:31:d9:eb:ca: d2:7b:dd:80:b8:68:52:92:b4:73:78:09:8a:85:24: f7:c9:32:c2:6e:21:4a:af:ac:a2:34:76:e1:1f:63: b3:40:f6:15:c6:ef:3e:41:a0:df:57:ce:6c:80:3d: c9:56:e9:d3:5b:dd:f9:8f:e3:ed:e6:95:19:8b:b4: 7b:46:38:9c:11:5b:e4:b9:62:9b:18:37:a9:86:e0: 65:80:c6:1c:79:50:a7:74:8e:50:a5:eb:a4:e0:d1: 19:14:21:ce:d7:8f:6c:c0:2e:33:a5:bd:83:72:4a: 2c:47:e5:bf:d6:c8:fb:5c:9c:53:ec:b1:4f:02:32: d1:62:a7:1c:6a:8d:82:b1:f9:d7:a5:5d:3b:b1:aa: e8:24:cd:6e:ab:34:1d:89:46:20:43:ba:ab:08:9f: 5c:bc:9b:39:00:b6:b4:26:e0:55:74:da:61:ec:c3: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3E:8F:B9:AF:BB:C6:AC:EE:7E:FE:40:96:1A:EE:87:6D:D1:45:02 X509v3 Authority Key Identifier: keyid:C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9d:dd:98:8e:06:47:14:78:ff:83:98:0d:20:61:9a:18:f6: 62:6d:63:cc:95:ec:cf:58:d0:a0:a7:4f:66:49:63:77:7d:43: b7:de:f7:c3:30:5b:91:6e:44:e6:52:14:50:34:f9:2f:06:51: e3:1e:00:53:65:b1:79:94:e0:54:d0:2c:f5:29:91:70:5c:b4: 0f:e4:15:65:79:b2:14:02:47:b0:dd:29:61:a3:f8:7e:37:a0: 4f:0b:44:0e:4f:28:54:ae:2b:35:e3:dd:48:f2:83:32:cb:4f: f8:69:bb:e9:be:13:93:44:b0:8e:1f:cc:0c:c6:4a:2b:17:e4: a7:4a:2c:cc:5e:1d:d6:ba:db:86:e5:5e:ab:24:a9:6f:7c:92: 38:0d:54:5c:16:c8:54:4a:ae:ad:9b:e9:ec:03:b6:38:66:b7: 92:34:0e:43:9e:7a:cc:c0:76:7b:55:e2:7e:2e:70:c7:9d:61: 60:7b:8f:41:26:ed:0b:ca:c4:d6:5c:22:e5:d5:c6:6f:c7:e3: d6:9d:b2:a1:a1:b8:40:32:44:7c:ba:61:54:2a:a7:ea:53:0e: 50:4a:8a:89:15:f5:42:17:f4:1f:9e:fe:bc:68:16:51:f4:d6: 93:2f:dc:0c:d7:a9:ca:4c:85:f8:1d:f6:b4:c5:04:83:84:7b: 28:4a:9c:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbVdMoqEZxdmq6JFm0dHRTc05mjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJE MDgxNzIwQjAeFw0yNjA5MjUxNDA3NTVaFw0yNjA5MjYxNzUxNTVaMDMxMTAvBgNV BAMTKDU1M0U4RkI5QUZCQkM2QUNFRTdFRkU0MDk2MUFFRTg3NkREMTQ1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkmLngKLDyai4k8PGBAmR6rH/ lDq8MsKFLim2nlz6tsbdL8kdRaiKgPXQKYJfN81HcSnd/7omG1FLSg3hqxXZ1GgL Bs9VXP8BmUR0xHQX5npVrrjZMdnrytJ73YC4aFKStHN4CYqFJPfJMsJuIUqvrKI0 duEfY7NA9hXG7z5BoN9XzmyAPclW6dNb3fmP4+3mlRmLtHtGOJwRW+S5YpsYN6mG 4GWAxhx5UKd0jlCl66Tg0RkUIc7Xj2zALjOlvYNySixH5b/WyPtcnFPssU8CMtFi pxxqjYKx+delXTuxqugkzW6rNB2JRiBDuqsIn1y8mzkAtrQm4FV02mHswzYhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVT6Pua+7xqzufv5Alhruh23RRQIwHwYDVR0j BBgwFoAUyLWQ0pUcFSK30U5DO7AqItCBcgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2NmIwMDUtMTcyMS00OTQ1LTg1YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5 NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJEMDgxNzIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEI1OTBEMjk1MUMxNTIyQjdEMTRFNDMzQkIwMkEyMkQwODE3 MjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJB MjJEMDgxNzIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2d3ZiOBkcUeP+DmA0gYZoY9mJtY8yV7M9Y 0KCnT2ZJY3d9Q7fe98MwW5FuROZSFFA0+S8GUeMeAFNlsXmU4FTQLPUpkXBctA/k FWV5shQCR7DdKWGj+H43oE8LRA5PKFSuKzXj3UjygzLLT/hpu+m+E5NEsI4fzAzG SisX5KdKLMxeHda624blXqskqW98kjgNVFwWyFRKrq2b6ewDtjhmt5I0DkOeeszA dntV4n4ucMedYWB7j0Em7QvKxNZcIuXVxm/H49adsqGhuEAyRHy6YVQqp+pTDlBK iokV9UIX9B+e/rxoFlH01pMv3AzXqcpMhfgd9rTFBIOEeyhKnGU= -----END CERTIFICATE-----Generated at Sat Sep 26 07:16:08 2026 by rpki-client