$ rpki-client -vvf rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft File: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft (raw, json) Hash identifier: PU9BHc7iewjQl4Y8Eyr4e+Cvd4l1SUksfUHnki22eEk= Subject key identifier: 20:4C:33:E0:B0:4E:C1:5D:2F:B4:F9:4C:22:56:C3:BD:09:26:0C:84 Authority key identifier: 86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B Certificate issuer: /CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Certificate serial: 1859816510EC617A6FC7E0C5381B90280A196E1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:21:18 +0000 Manifest this update: Tue 16 Jun 2026 22:16:18 +0000 Manifest next update: Thu 18 Jun 2026 02:01:18 +0000 Files and hashes: 1: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl (hash: xi59VU1tTYGeYsXpges6AmLNovHMgbIN++jGxarSGzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:59:81:65:10:ec:61:7a:6f:c7:e0:c5:38:1b:90:28:0a:19:6e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Validity Not Before: Jun 16 22:16:18 2026 GMT Not After : Jun 18 02:01:18 2026 GMT Subject: CN=204C33E0B04EC15D2FB4F94C2256C3BD09260C84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:5e:f5:05:38:fc:b7:6c:aa:ed:22:f7:10: 26:c9:69:59:64:19:0d:b8:30:b1:30:9e:fa:a0:2e: e2:0c:d8:4f:be:6a:7f:47:c8:0f:ac:66:50:33:a0: 03:3b:b7:33:ac:fc:93:64:c3:d5:6d:ad:00:45:a9: af:65:3a:3a:a1:0c:e0:b1:da:cd:5f:79:59:b9:18: af:8a:fe:e4:21:6b:9c:78:99:f2:4b:29:28:55:3a: 58:8e:68:16:25:3e:1f:7c:06:b1:d9:92:87:05:90: 44:19:86:26:c2:d5:e7:3b:dc:22:0f:53:53:3e:05: 2b:44:1e:f7:77:63:75:8a:36:9c:b2:e6:ed:dd:9a: 44:cf:21:dc:db:31:ae:d9:9a:ab:40:d6:a8:83:77: cd:bf:cd:4f:43:e7:68:0e:68:3a:b5:91:05:50:3d: 2a:96:ef:01:a1:08:0c:b0:12:a1:77:5b:3c:76:25: 44:df:ce:a1:c8:e6:b2:fc:c1:c9:20:5d:df:4d:04: 3e:1e:f3:92:6f:5a:72:75:6d:7c:a1:42:65:d5:c2: b4:83:20:c0:a6:19:58:db:ed:4f:9a:2b:be:66:f1: 5a:cd:0e:00:3e:7e:e0:93:3c:69:d2:01:96:d2:85: e0:f5:76:05:fd:e0:0f:03:08:fa:81:4d:62:26:f9: b4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4C:33:E0:B0:4E:C1:5D:2F:B4:F9:4C:22:56:C3:BD:09:26:0C:84 X509v3 Authority Key Identifier: keyid:86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:59:0d:44:4e:aa:e1:4a:ea:ea:34:d9:88:fc:57:db:31:09: 08:86:e3:0f:57:9a:85:c2:9a:1d:5b:ec:4d:0a:74:1a:42:35: f3:23:02:98:76:05:7c:bf:bf:b2:d3:47:fe:2c:62:f2:2c:f8: 79:93:25:b6:3e:c8:6f:cb:d3:05:8b:16:db:7f:c9:a1:30:6d: ac:40:00:29:83:73:a1:f4:bb:9f:29:ed:61:28:ed:a4:b8:85: 0e:a6:7b:f1:dd:d9:fe:e5:94:7a:c8:b1:ce:83:d3:de:f2:27: 14:f7:4b:18:34:38:75:1a:59:63:a5:6e:5f:83:8e:ec:62:5c: 43:22:0b:d5:73:3e:ca:1b:1b:38:9e:0d:38:93:b6:48:0a:4a: a0:33:d4:02:b4:76:ec:46:93:d3:38:f4:7c:dc:c7:c9:c3:5d: b3:a3:c0:98:17:9b:0f:e6:cd:8a:4d:6e:1e:4a:ab:08:9c:24: 7a:28:d9:ca:11:d8:c0:b3:7e:41:26:7f:86:72:bd:3c:29:66: ce:b6:a1:15:e9:bb:32:1f:55:de:33:0b:eb:f1:02:87:45:bd: 44:f6:25:c6:25:e2:6e:fd:ff:46:be:5a:f3:8a:1b:3f:1d:51: c1:9d:b9:b7:c8:32:96:a2:93:2b:4d:5d:4d:66:b4:bf:9b:24: aa:02:a3:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFmBZRDsYXpvx+DFOBuQKAoZbhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTEx RjAzREMxQjAeFw0yNjA2MTYyMjE2MThaFw0yNjA2MTgwMjAxMThaMDMxMTAvBgNV BAMTKDIwNEMzM0UwQjA0RUMxNUQyRkI0Rjk0QzIyNTZDM0JEMDkyNjBDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjel71BTj8t2yq7SL3ECbJaVlk GQ24MLEwnvqgLuIM2E++an9HyA+sZlAzoAM7tzOs/JNkw9VtrQBFqa9lOjqhDOCx 2s1feVm5GK+K/uQha5x4mfJLKShVOliOaBYlPh98BrHZkocFkEQZhibC1ec73CIP U1M+BStEHvd3Y3WKNpyy5u3dmkTPIdzbMa7ZmqtA1qiDd82/zU9D52gOaDq1kQVQ PSqW7wGhCAywEqF3Wzx2JUTfzqHI5rL8wckgXd9NBD4e85JvWnJ1bXyhQmXVwrSD IMCmGVjb7U+aK75m8VrNDgA+fuCTPGnSAZbSheD1dgX94A8DCPqBTWIm+bR/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIEwz4LBOwV0vtPlMIlbDvQkmDIQwHwYDVR0j BBgwFoAUhnPiaY/LUromE1kqrPfi4R8D3BswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY5ZjI5ODgtY2FiMy00NWFhLTk3ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4 RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTExRjAzREMxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjczRTI2OThGQ0I1MkJBMjYxMzU5MkFBQ0Y3RTJFMTFGMDNE QzFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0Uy RTExRjAzREMxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFZDUROquFK6uo02Yj8V9sxCQiG4w9XmoXC mh1b7E0KdBpCNfMjAph2BXy/v7LTR/4sYvIs+HmTJbY+yG/L0wWLFtt/yaEwbaxA ACmDc6H0u58p7WEo7aS4hQ6me/Hd2f7llHrIsc6D097yJxT3Sxg0OHUaWWOlbl+D juxiXEMiC9VzPsobGzieDTiTtkgKSqAz1AK0duxGk9M49Hzcx8nDXbOjwJgXmw/m zYpNbh5KqwicJHoo2coR2MCzfkEmf4ZyvTwpZs62oRXpuzIfVd4zC+vxAodFvUT2 JcYl4m79/0a+WvOKGz8dUcGdubfIMpaikytNXU1mtL+bJKoCow4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:04:37 2026 by rpki-client