$ rpki-client -vvf rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft File: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft (raw, json) Hash identifier: E5hrQVpDNH12864NrxZR81+NSSmidbzaJmpMIP0LTWU= Subject key identifier: DA:C3:15:F5:4E:10:D9:28:0A:33:1E:5D:A7:B0:1F:DA:39:00:DC:C7 Authority key identifier: 8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB Certificate issuer: /CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Certificate serial: 0C9B0221DC6024830D6A8207D4D42B97C9364D5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 04:58:58 +0000 Manifest this update: Wed 17 Jun 2026 04:53:58 +0000 Manifest next update: Thu 18 Jun 2026 07:19:58 +0000 Files and hashes: 1: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl (hash: D2AgDV0L6WrZ+UqfUVnTgY9Ossk0NRUYI7MuXJRFPfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9b:02:21:dc:60:24:83:0d:6a:82:07:d4:d4:2b:97:c9:36:4d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Validity Not Before: Jun 17 04:53:58 2026 GMT Not After : Jun 18 07:19:58 2026 GMT Subject: CN=DAC315F54E10D9280A331E5DA7B01FDA3900DCC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5d:bd:df:54:c7:20:be:53:0d:56:cd:74:ad: 82:df:b3:5a:df:5e:ac:1e:e1:5d:5f:64:13:7d:6f: 75:6e:81:8f:eb:56:4e:68:4a:2c:d2:13:1b:c1:02: 46:30:0c:13:6c:b6:21:a3:25:42:07:69:a6:bd:62: aa:8b:df:a3:12:0e:c5:a8:01:c1:6c:82:88:5e:a9: 7f:76:04:4b:1f:69:d7:3a:a0:08:31:aa:01:d5:b6: 1f:79:03:8d:3f:16:ed:5d:71:ea:2c:94:1b:b7:b5: 43:fe:04:5e:62:25:4f:ba:1e:a0:45:10:31:97:5a: b8:b3:e7:80:5d:41:d6:aa:06:aa:a5:6b:60:08:40: 09:74:c6:ff:07:61:9a:4c:d5:b6:ff:14:61:90:04: d4:aa:e9:be:3f:ac:54:77:be:99:be:5c:9c:db:d0: 3c:9f:a1:8d:88:ca:28:01:77:b8:0d:85:15:1d:b3: ed:3e:05:a3:33:46:96:d7:13:b3:4f:93:dc:b1:6e: e6:82:d7:5e:14:41:7f:c2:7d:86:1a:ae:2b:c3:0d: 0b:ec:d1:38:60:e9:e1:da:6f:4e:1c:22:0e:13:c4: 0d:45:7a:12:79:a8:6b:34:9a:69:75:cd:2d:2f:62: ca:48:2f:90:34:45:13:b9:7a:a8:22:d3:53:97:3c: 59:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C3:15:F5:4E:10:D9:28:0A:33:1E:5D:A7:B0:1F:DA:39:00:DC:C7 X509v3 Authority Key Identifier: keyid:8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:a8:ec:03:cd:1c:63:7e:a8:c8:a2:25:0d:18:a1:4b:50:ee: 17:03:8a:9f:1f:6a:e3:58:cb:ee:18:ce:13:93:37:c9:ae:ca: 6b:9f:76:58:97:54:75:c1:5c:93:a5:90:ef:b0:c2:47:b9:7d: d7:2e:3b:ed:d8:bc:e2:65:c3:27:b1:5e:82:f8:aa:79:4f:e1: c5:f0:7e:8c:a6:3f:2d:bd:d3:93:88:0e:ec:c0:26:6e:32:d9: da:50:55:17:f1:3e:cb:72:85:64:bd:96:97:68:4c:b9:41:51: 8d:ac:13:18:65:50:fd:76:7b:22:4d:6a:70:b2:13:7c:88:72: 55:64:c3:92:e6:69:ff:75:66:64:a3:8a:1d:08:6c:f5:cd:5f: 37:1c:c9:72:74:48:47:92:91:36:f8:93:80:c7:77:c5:b6:ce: f8:e5:69:25:50:c8:8c:7d:57:83:7a:3b:92:c7:e1:55:85:8b: e8:2e:b3:00:46:23:8b:3d:c0:81:4b:da:8b:75:94:f8:b8:c1: 9b:64:64:7a:d8:6c:e6:67:a7:26:93:b8:5b:3a:88:92:2f:c6: b4:c9:a6:3e:35:47:24:42:c0:84:06:54:00:08:3b:8b:2d:32: 45:60:c3:9c:c1:05:9f:20:12:50:b3:af:05:54:d8:94:fa:65: 35:a4:49:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJsCIdxgJIMNaoIH1NQrl8k2TVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5 MzREOTlEQjAeFw0yNjA2MTcwNDUzNThaFw0yNjA2MTgwNzE5NThaMDMxMTAvBgNV BAMTKERBQzMxNUY1NEUxMEQ5MjgwQTMzMUU1REE3QjAxRkRBMzkwMERDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbXb3fVMcgvlMNVs10rYLfs1rf Xqwe4V1fZBN9b3VugY/rVk5oSizSExvBAkYwDBNstiGjJUIHaaa9YqqL36MSDsWo AcFsgoheqX92BEsfadc6oAgxqgHVth95A40/Fu1dceoslBu3tUP+BF5iJU+6HqBF EDGXWriz54BdQdaqBqqla2AIQAl0xv8HYZpM1bb/FGGQBNSq6b4/rFR3vpm+XJzb 0DyfoY2IyigBd7gNhRUds+0+BaMzRpbXE7NPk9yxbuaC114UQX/CfYYarivDDQvs 0Thg6eHab04cIg4TxA1FehJ5qGs0mml1zS0vYspIL5A0RRO5eqgi01OXPFmXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2sMV9U4Q2SgKMx5dp7Af2jkA3McwHwYDVR0j BBgwFoAUisGM4zWXeqCpvJrv/vUwyJNNmdswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5Y2NlYjYtYTRlNy00ZTgyLTg4YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMz NTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5MzREOTlEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUMxOENFMzM1OTc3QUEwQTlCQzlBRUZGRUY1MzBDODkzNEQ5 OURCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMw Qzg5MzREOTlEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyo7APNHGN+qMiiJQ0YoUtQ7hcDip8fauNY y+4YzhOTN8muymufdliXVHXBXJOlkO+wwke5fdcuO+3YvOJlwyexXoL4qnlP4cXw foymPy2905OIDuzAJm4y2dpQVRfxPstyhWS9lpdoTLlBUY2sExhlUP12eyJNanCy E3yIclVkw5Lmaf91ZmSjih0IbPXNXzccyXJ0SEeSkTb4k4DHd8W2zvjlaSVQyIx9 V4N6O5LH4VWFi+guswBGI4s9wIFL2ot1lPi4wZtkZHrYbOZnpyaTuFs6iJIvxrTJ pj41RyRCwIQGVAAIO4stMkVgw5zBBZ8gElCzrwVU2JT6ZTWkSfM= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:23 2026 by rpki-client