$ rpki-client -vvf rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft File: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft (raw, json) Hash identifier: gHPYUVMU06fRS+1w5iBGW2EAmDHEIzUImDQ83Sd6kvI= Subject key identifier: 73:61:4B:D7:E2:7E:29:78:6C:4F:83:4D:4C:30:6C:E1:DF:78:69:8C Authority key identifier: 8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC Certificate issuer: /CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Certificate serial: 3147E82CE2D2278F531E847EA0F172079A4B20FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 20:10:23 +0000 Manifest this update: Fri 19 Jun 2026 20:05:23 +0000 Manifest next update: Sat 20 Jun 2026 22:26:23 +0000 Files and hashes: 1: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl (hash: 4cpS6vABxtS9bq2bsUrl/ssq/br5dCrs0WYw/E7c3qw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:47:e8:2c:e2:d2:27:8f:53:1e:84:7e:a0:f1:72:07:9a:4b:20:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Validity Not Before: Jun 19 20:05:23 2026 GMT Not After : Jun 20 22:26:23 2026 GMT Subject: CN=73614BD7E27E29786C4F834D4C306CE1DF78698C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:91:db:dd:e2:8d:05:c7:01:c2:a8:5c:3c: 4c:b0:c9:f3:8c:63:39:cf:5c:85:2e:b0:ef:2b:76: 73:1d:3c:31:93:78:f5:ba:85:56:cd:0b:4c:69:a6: 60:d0:f5:69:39:16:31:2e:c8:4f:64:75:ad:5e:9b: 8b:dc:a8:18:93:d0:6b:d0:65:b4:77:ec:b1:6b:8f: a7:cd:8c:eb:c9:ea:32:f9:a0:97:96:9e:59:70:8a: c5:05:2c:88:1a:f1:3d:be:e8:41:73:c8:f7:32:f2: d4:1c:ca:27:a8:71:29:52:39:a5:5f:e6:2a:14:3f: 46:65:10:28:86:a6:5a:9d:92:42:60:1b:e4:1c:5d: 56:ff:ec:a0:8f:74:07:73:09:97:cd:2c:bc:dc:dc: c7:90:46:13:4c:5f:3b:12:5e:7c:75:dc:12:51:3a: d4:82:91:aa:0c:5a:ee:eb:3c:53:06:e6:e4:d7:cc: 54:3b:b2:6a:67:d5:96:1b:44:33:04:8e:f6:d5:80: 6d:5a:14:d0:ff:93:83:ab:3d:03:ee:af:41:e2:f4: e8:42:4f:d2:d0:60:e3:eb:39:0b:72:cd:b7:04:a1: 5f:b8:7f:7f:eb:1e:7f:96:db:4e:1d:c8:5a:13:37: f6:15:64:85:87:c0:79:19:3c:67:5e:cf:6f:16:9b: 97:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:61:4B:D7:E2:7E:29:78:6C:4F:83:4D:4C:30:6C:E1:DF:78:69:8C X509v3 Authority Key Identifier: keyid:8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:04:30:97:d9:b4:43:11:03:b1:6c:1c:e3:f7:e2:97:21:c6: 5c:16:37:13:b5:35:c8:0b:aa:94:2a:0d:fd:b1:76:bc:c1:95: 8b:6d:78:56:98:48:4e:8a:06:4d:15:d6:eb:f4:91:44:5b:f0: 66:4b:5c:2f:15:68:77:28:3c:f2:27:22:f8:86:bd:2b:51:34: 30:5b:93:a2:a7:56:e2:63:b4:e1:91:62:7f:f0:3c:56:5e:66: 20:1b:c0:58:a3:4b:db:e0:93:db:ca:12:1e:39:da:3e:5a:56: 90:76:6a:9b:c6:31:4d:b3:d8:31:1e:93:14:f0:d7:33:53:b2: 2a:28:91:72:cb:03:53:6a:97:3c:53:f7:d2:ea:90:6c:b7:48: 1a:62:46:d1:6b:61:2b:7b:2b:fc:1a:cf:17:a5:bf:9b:3a:fe: b5:ef:1c:bf:05:48:7e:bf:f8:10:8d:c3:16:e8:6d:cb:e2:d0: a7:81:c8:60:f2:d9:ae:5e:0e:ad:ef:7f:63:0d:17:1a:3c:1e: 6f:26:d2:78:9e:de:33:5c:b9:20:52:29:ec:1e:59:4e:0b:04: 51:d4:08:65:fe:62:b4:08:80:69:ca:cf:77:b5:a1:9c:1a:ae: 23:25:9d:3a:b1:f4:94:0a:48:3f:92:52:e6:17:b8:d9:c1:73: 00:ee:07:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMUfoLOLSJ49THoR+oPFyB5pLIPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhCNEMy MUEyQzJEQzAeFw0yNjA2MTkyMDA1MjNaFw0yNjA2MjAyMjI2MjNaMDMxMTAvBgNV BAMTKDczNjE0QkQ3RTI3RTI5Nzg2QzRGODM0RDRDMzA2Q0UxREY3ODY5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxlZHb3eKNBccBwqhcPEywyfOM YznPXIUusO8rdnMdPDGTePW6hVbNC0xppmDQ9Wk5FjEuyE9kda1em4vcqBiT0GvQ ZbR37LFrj6fNjOvJ6jL5oJeWnllwisUFLIga8T2+6EFzyPcy8tQcyieocSlSOaVf 5ioUP0ZlECiGplqdkkJgG+QcXVb/7KCPdAdzCZfNLLzc3MeQRhNMXzsSXnx13BJR OtSCkaoMWu7rPFMG5uTXzFQ7smpn1ZYbRDMEjvbVgG1aFND/k4OrPQPur0Hi9OhC T9LQYOPrOQtyzbcEoV+4f3/rHn+W204dyFoTN/YVZIWHwHkZPGdez28Wm5f3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc2FL1+J+KXhsT4NNTDBs4d94aYwwHwYDVR0j BBgwFoAUi3yU5dr2a7lW3568N+SLTCGiwtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDE4YzY4MzEtOGY0MC00YTIwLTgxM2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVE QUY2NkJCOTU2REY5RUJDMzdFNDhCNEMyMUEyQzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjdDOTRFNURBRjY2QkI5NTZERjlFQkMzN0U0OEI0QzIxQTJD MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhC NEMyMUEyQzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYEMJfZtEMRA7FsHOP34pchxlwWNxO1NcgL qpQqDf2xdrzBlYtteFaYSE6KBk0V1uv0kURb8GZLXC8VaHcoPPInIviGvStRNDBb k6KnVuJjtOGRYn/wPFZeZiAbwFijS9vgk9vKEh452j5aVpB2apvGMU2z2DEekxTw 1zNTsiookXLLA1NqlzxT99LqkGy3SBpiRtFrYSt7K/wazxelv5s6/rXvHL8FSH6/ +BCNwxbobcvi0KeByGDy2a5eDq3vf2MNFxo8Hm8m0nie3jNcuSBSKeweWU4LBFHU CGX+YrQIgGnKz3e1oZwariMlnTqx9JQKSD+SUuYXuNnBcwDuB8Y= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:40 2026 by rpki-client