$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft File: C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft (raw, json) Hash identifier: TSZZjK/oNZSPNsniUBzAGgmlNqt5QA5Baa6JfBYF19c= Subject key identifier: 8A:52:3A:93:A8:88:19:DA:95:4E:29:3F:BE:3E:D7:D6:9D:28:08:52 Authority key identifier: C2:C5:4E:9E:E3:0A:39:6F:CD:B6:D5:5D:F7:02:3A:19:B2:46:DE:8C Certificate issuer: /CN=C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C Certificate serial: 4D784F3AAE0A6790D786B06C58F36CFD96EA91C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 06:35:48 +0000 Manifest this update: Wed 17 Jun 2026 06:30:48 +0000 Manifest next update: Thu 18 Jun 2026 08:42:48 +0000 Files and hashes: 1: C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl (hash: 45TTRNLQGgManQzDeu5Mx6ClODBfT/fXBcT9H0sr7S4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:78:4f:3a:ae:0a:67:90:d7:86:b0:6c:58:f3:6c:fd:96:ea:91:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C Validity Not Before: Jun 17 06:30:48 2026 GMT Not After : Jun 18 08:42:48 2026 GMT Subject: CN=8A523A93A88819DA954E293FBE3ED7D69D280852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6d:e9:ab:3e:64:19:66:c0:09:52:30:08:4d: de:e8:52:fe:26:5e:17:cd:5f:d9:d4:88:4b:d5:30: f0:2c:cf:bc:3d:69:1f:ff:80:5d:93:a1:a9:66:87: 9b:ff:80:b1:e0:5d:2b:51:14:dc:89:74:5f:ad:4f: 95:e2:d5:e0:4f:e9:09:bc:c2:ff:ba:ea:7c:53:63: 4f:0c:12:24:cc:7c:65:d2:84:b4:25:89:26:f6:e8: 13:37:29:f4:4f:e4:36:b5:5b:80:10:0a:d2:80:6f: c8:1b:cd:88:cd:89:ef:73:f7:fd:e5:33:50:df:38: f7:66:24:ac:43:7d:90:cd:63:87:c9:3b:5a:05:58: 10:1c:ef:ec:fe:43:48:56:76:de:a3:40:ba:ce:db: 63:e6:7d:92:af:d9:d0:6e:cd:49:cd:28:4d:66:05: c0:91:ef:4f:7b:aa:35:c8:33:85:05:60:56:e1:1f: 90:1c:39:72:bb:4c:31:e5:c9:9f:d9:77:15:4e:21: 52:48:5b:8c:ac:47:46:70:de:e4:ff:f2:36:9e:fc: ec:c0:3d:9f:d4:33:29:54:6c:71:02:8f:96:49:90: b1:e9:c3:27:9b:ae:06:0a:ed:2d:96:0b:38:b0:63: 19:75:71:48:8b:5f:2b:a0:c2:42:46:f4:51:86:f2: 06:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:52:3A:93:A8:88:19:DA:95:4E:29:3F:BE:3E:D7:D6:9D:28:08:52 X509v3 Authority Key Identifier: keyid:C2:C5:4E:9E:E3:0A:39:6F:CD:B6:D5:5D:F7:02:3A:19:B2:46:DE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:69:99:a0:f7:74:c9:90:9d:b2:90:f2:74:ee:79:70:a7:6b: b6:7c:b7:b0:b6:e2:14:54:02:4e:e6:27:43:c0:25:fb:55:23: 10:5a:58:cb:6e:57:14:d2:b3:c1:69:45:aa:cd:82:fd:05:23: 83:ff:49:9e:34:2f:2f:01:70:0c:a4:58:42:e8:40:53:46:d9: af:60:0e:39:27:1d:48:1f:d9:c3:b2:d7:50:cf:28:6c:53:4f: a3:44:6b:c2:75:2c:0c:6c:20:4e:c7:cc:7c:ce:56:1f:fe:17: c8:96:2f:f8:5e:62:d3:f9:75:e7:83:82:bf:df:e0:1b:dc:ff: e4:75:4a:8a:b5:18:1d:eb:ab:70:44:02:f1:b2:44:cf:39:64: cf:8e:fe:e7:a9:29:63:3e:94:cf:54:02:a4:b7:a7:d7:c1:e2: f7:f3:32:95:53:91:d7:a6:0b:7d:d6:ae:52:11:55:93:71:27: 37:13:cb:87:43:e0:3c:b7:48:84:e0:de:fa:b1:82:e1:cf:95: ae:87:aa:91:52:d4:0c:38:47:bc:34:51:d8:76:6b:3e:cf:58: 2c:b6:a5:09:e5:6b:c7:0f:3f:80:05:1c:fd:30:b2:5f:80:b3: ba:68:5b:c8:10:29:30:fc:bf:87:0b:42:91:78:f5:51:0d:ee: 9c:59:70:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXhPOq4KZ5DXhrBsWPNs/ZbqkccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDNTRFOUVFMzBBMzk2RkNEQjZENTVERjcwMjNBMTlC MjQ2REU4QzAeFw0yNjA2MTcwNjMwNDhaFw0yNjA2MTgwODQyNDhaMDMxMTAvBgNV BAMTKDhBNTIzQTkzQTg4ODE5REE5NTRFMjkzRkJFM0VEN0Q2OUQyODA4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvbemrPmQZZsAJUjAITd7oUv4m XhfNX9nUiEvVMPAsz7w9aR//gF2Toalmh5v/gLHgXStRFNyJdF+tT5Xi1eBP6Qm8 wv+66nxTY08MEiTMfGXShLQliSb26BM3KfRP5Da1W4AQCtKAb8gbzYjNie9z9/3l M1DfOPdmJKxDfZDNY4fJO1oFWBAc7+z+Q0hWdt6jQLrO22PmfZKv2dBuzUnNKE1m BcCR7097qjXIM4UFYFbhH5AcOXK7TDHlyZ/ZdxVOIVJIW4ysR0Zw3uT/8jae/OzA PZ/UMylUbHECj5ZJkLHpwyebrgYK7S2WCziwYxl1cUiLXyugwkJG9FGG8gYxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUilI6k6iIGdqVTik/vj7X1p0oCFIwHwYDVR0j BBgwFoAUwsVOnuMKOW/NttVd9wI6GbJG3owwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNmM2MyMTEtMDY0NS00ODgyLWE0ZjEtNDZiZTg2N2I3OTgzLzAvQzJDNTRFOUVF MzBBMzk2RkNEQjZENTVERjcwMjNBMTlCMjQ2REU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkM1NEU5RUUzMEEzOTZGQ0RCNkQ1NURGNzAyM0ExOUIyNDZE RThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvQzJDNTRFOUVFMzBBMzk2RkNEQjZENTVERjcwMjNB MTlCMjQ2REU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5pmaD3dMmQnbKQ8nTueXCna7Z8t7C24hRU Ak7mJ0PAJftVIxBaWMtuVxTSs8FpRarNgv0FI4P/SZ40Ly8BcAykWELoQFNG2a9g DjknHUgf2cOy11DPKGxTT6NEa8J1LAxsIE7HzHzOVh/+F8iWL/heYtP5deeDgr/f 4Bvc/+R1Soq1GB3rq3BEAvGyRM85ZM+O/uepKWM+lM9UAqS3p9fB4vfzMpVTkdem C33WrlIRVZNxJzcTy4dD4Dy3SITg3vqxguHPla6HqpFS1Aw4R7w0Udh2az7PWCy2 pQnla8cPP4AFHP0wsl+As7poW8gQKTD8v4cLQpF49VEN7pxZcGQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:25 2026 by rpki-client