$ rpki-client -vvf rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft File: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft (raw, json) Hash identifier: gCkw1HTmkKVtQ5xYu5/oleva704V8oeIRQ4uL7PEd+o= Subject key identifier: D2:D7:15:CD:E5:D3:04:68:29:E7:A0:88:52:2B:01:F1:73:65:EC:2E Authority key identifier: 8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 Certificate issuer: /CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Certificate serial: 526CFAFC260BF976E7BAD93C1FED4139982065F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:25:39 +0000 Manifest this update: Wed 17 Jun 2026 02:20:39 +0000 Manifest next update: Thu 18 Jun 2026 05:10:39 +0000 Files and hashes: 1: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl (hash: lGCcYKsp5MJtovLwjxQ0hHlFIdYOOKJ2hxr7l4hHpD0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6c:fa:fc:26:0b:f9:76:e7:ba:d9:3c:1f:ed:41:39:98:20:65:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Validity Not Before: Jun 17 02:20:39 2026 GMT Not After : Jun 18 05:10:39 2026 GMT Subject: CN=D2D715CDE5D3046829E7A088522B01F17365EC2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:96:4a:f3:3c:79:a6:fa:14:2f:a4:30:0b:aa: a3:e4:84:82:a3:7e:2c:a2:90:08:db:bc:90:b0:85: 27:9c:db:a4:75:10:e3:57:f0:aa:1b:b0:3c:b9:f9: be:2d:58:f7:cb:63:75:92:77:4d:f3:03:f8:af:23: 5f:53:03:a9:03:f2:55:ed:ea:3c:ef:c4:5e:57:f1: 3f:c9:c1:1d:7d:3b:76:39:9d:54:df:1a:b8:a5:e3: dc:c0:1e:34:37:dc:0d:d7:30:0e:f6:c1:86:53:00: fa:ba:24:e1:7b:35:45:72:a9:41:a9:a1:64:f0:75: 1a:01:ac:83:93:0c:71:89:51:b1:89:2d:1e:f7:9a: d7:fe:78:f3:9d:03:2b:f3:ef:b1:09:0b:20:10:3b: 2b:f5:00:50:d1:7a:d6:76:8f:34:71:47:b3:f9:b5: 7b:89:85:57:70:ad:25:2b:30:db:75:36:ae:98:03: d8:9f:4d:a4:34:c6:c1:60:e1:fd:4f:64:d5:08:b2: f0:5d:fc:f8:f6:0d:fe:55:08:1e:c3:ae:43:9e:3c: cd:28:30:c4:60:7a:38:a5:4d:e7:7b:09:5d:3a:44: 81:31:3e:a3:73:25:e0:5d:05:b2:02:3c:e0:6d:b3: 35:6f:19:ef:d5:5b:9b:5d:1b:5f:40:1b:dc:2f:aa: 4e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D7:15:CD:E5:D3:04:68:29:E7:A0:88:52:2B:01:F1:73:65:EC:2E X509v3 Authority Key Identifier: keyid:8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d9:23:82:26:ee:29:14:5c:ca:3b:9e:f2:95:12:ae:85:d1: 40:5b:c8:a5:d4:c2:3c:f0:3c:d1:37:39:65:b7:77:17:3c:9e: 2e:a6:11:3a:ac:18:e1:8c:12:c0:4b:ae:4e:22:01:41:5a:0a: 2c:df:c5:74:b1:07:26:14:63:52:71:0a:ac:a9:88:f5:da:7c: 34:11:5e:15:72:4f:53:93:21:94:39:f3:b4:31:f4:e5:95:32: b9:6c:63:c8:1d:9f:ee:36:08:e7:23:b4:56:59:89:76:ce:7b: 5d:76:0c:14:59:3c:79:c9:35:cf:9e:86:5f:80:76:de:79:05: a3:a2:dd:54:e8:58:e0:d5:a3:66:e5:c1:04:7d:a8:b6:3b:a0: 14:2a:d0:d9:57:ac:72:b0:4b:0f:5d:ef:a8:fb:bc:de:7e:8e: 2a:c6:04:da:07:98:5b:f5:47:c4:b0:d3:14:21:1c:3c:af:7c: ca:bc:25:51:27:24:3b:0f:43:ec:b9:5b:cb:dd:b8:70:88:3c: 03:ab:b3:9b:b7:d6:1d:91:67:88:62:05:01:9b:4f:e2:1e:38: f2:7e:de:f0:63:d6:eb:98:12:84:60:1b:08:22:0f:f4:53:69: 24:f9:dc:9f:b4:8d:c9:52:1b:ae:db:ff:a8:94:9a:57:80:38: 4e:1e:a1:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmz6/CYL+Xbnutk8H+1BOZggZfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI4QjUzNjMwRDRDRURCMUZDODI0QzIwQUU5QURGNDY4 QTdENDNFNzAeFw0yNjA2MTcwMjIwMzlaFw0yNjA2MTgwNTEwMzlaMDMxMTAvBgNV BAMTKEQyRDcxNUNERTVEMzA0NjgyOUU3QTA4ODUyMkIwMUYxNzM2NUVDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJlkrzPHmm+hQvpDALqqPkhIKj fiyikAjbvJCwhSec26R1EONX8KobsDy5+b4tWPfLY3WSd03zA/ivI19TA6kD8lXt 6jzvxF5X8T/JwR19O3Y5nVTfGril49zAHjQ33A3XMA72wYZTAPq6JOF7NUVyqUGp oWTwdRoBrIOTDHGJUbGJLR73mtf+ePOdAyvz77EJCyAQOyv1AFDRetZ2jzRxR7P5 tXuJhVdwrSUrMNt1Nq6YA9ifTaQ0xsFg4f1PZNUIsvBd/Pj2Df5VCB7DrkOePM0o MMRgejilTed7CV06RIExPqNzJeBdBbICPOBtszVvGe/VW5tdG19AG9wvqk5TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0tcVzeXTBGgp56CIUisB8XNl7C4wHwYDVR0j BBgwFoAUi4tTYw1M7bH8gkwgrprfRop9Q+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg2YTEzYmQtYjc5YS00NTBlLTliZTMtM2Q1YTAzYWI5M2IxLzAvOEI4QjUzNjMw RDRDRURCMUZDODI0QzIwQUU5QURGNDY4QTdENDNFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjhCNTM2MzBENENFREIxRkM4MjRDMjBBRTlBREY0NjhBN0Q0 M0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvOEI4QjUzNjMwRDRDRURCMUZDODI0QzIwQUU5QURG NDY4QTdENDNFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbZI4Im7ikUXMo7nvKVEq6F0UBbyKXUwjzw PNE3OWW3dxc8ni6mETqsGOGMEsBLrk4iAUFaCizfxXSxByYUY1JxCqypiPXafDQR XhVyT1OTIZQ587Qx9OWVMrlsY8gdn+42COcjtFZZiXbOe112DBRZPHnJNc+ehl+A dt55BaOi3VToWODVo2blwQR9qLY7oBQq0NlXrHKwSw9d76j7vN5+jirGBNoHmFv1 R8Sw0xQhHDyvfMq8JVEnJDsPQ+y5W8vduHCIPAOrs5u31h2RZ4hiBQGbT+IeOPJ+ 3vBj1uuYEoRgGwgiD/RTaST53J+0jclSG67b/6iUmleAOE4eoa0= -----END CERTIFICATE-----Generated at Wed Jun 17 10:14:10 2026 by rpki-client