$ rpki-client -vvf rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft File: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft (raw, json) Hash identifier: 7z2C/URUEEzYqiHX3HV7H1biwMuNg8ryN6hR9q1OIuM= Subject key identifier: 84:26:59:D9:46:0D:CD:7C:38:E7:EC:FD:B0:0F:69:46:43:CB:35:66 Authority key identifier: 8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 Certificate issuer: /CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Certificate serial: 57DB818DE1BE02B7A132E4BA9FDF1648C3F693F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 03:39:09 +0000 Manifest this update: Sat 20 Jun 2026 03:34:09 +0000 Manifest next update: Sun 21 Jun 2026 03:59:09 +0000 Files and hashes: 1: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl (hash: oSz0l0XDL53SODPEJH2i8e9CBCdK06d2nvempgutjy8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:db:81:8d:e1:be:02:b7:a1:32:e4:ba:9f:df:16:48:c3:f6:93:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Validity Not Before: Jun 20 03:34:09 2026 GMT Not After : Jun 21 03:59:09 2026 GMT Subject: CN=842659D9460DCD7C38E7ECFDB00F694643CB3566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:cc:39:c7:ab:1e:23:89:53:7d:b3:26:15: 31:ac:02:51:d7:98:49:ec:69:5a:1b:69:83:93:11: 53:dd:b3:10:2e:a5:cd:df:30:37:c6:17:bb:83:43: d1:39:d1:bf:5a:c3:b5:c2:63:1e:ed:34:54:36:91: df:d9:f3:9e:e6:4a:f5:f9:d6:d1:a3:a7:2e:0d:ec: 1c:2c:81:fa:da:1b:7b:65:24:c6:92:2a:3a:26:c3: 90:3a:11:d3:ae:30:0a:34:17:e3:91:1f:f0:8e:9a: 02:95:c8:31:6a:f5:b0:b3:65:c6:fb:28:8b:fd:00: 13:b7:0f:84:75:af:8e:5e:78:30:3f:f8:63:1b:86: 50:bd:86:36:35:6d:42:84:e0:7d:75:47:3e:25:ca: d1:38:33:98:7e:9c:ad:7c:aa:37:7e:b7:e6:99:fd: 61:33:75:97:93:07:27:f4:c8:e5:e4:99:f9:e5:69: 6d:fa:63:11:61:ab:db:8a:72:90:bc:b2:c1:93:20: 67:81:b4:38:98:61:69:f9:20:a4:fa:aa:fd:a8:ff: 1b:52:fb:38:1b:c3:ff:ce:29:1d:43:b6:5e:cd:f1: 0e:75:4d:72:dd:7e:01:1e:95:b3:06:a1:c4:4d:52: f4:f6:aa:a0:96:4b:15:5c:66:b8:a6:07:21:31:1a: 60:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:26:59:D9:46:0D:CD:7C:38:E7:EC:FD:B0:0F:69:46:43:CB:35:66 X509v3 Authority Key Identifier: keyid:8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4a:04:2d:41:13:81:a6:37:e9:de:d3:04:ff:4a:eb:91:40: d9:76:eb:f1:13:50:09:10:03:57:b0:61:27:c4:e6:20:32:57: 88:2c:31:1f:ab:5c:7d:d0:50:b6:29:21:b4:c1:2c:93:7d:f1: 15:c6:84:ed:a1:45:ab:f4:29:25:b7:10:67:65:d8:ef:88:d9: b3:11:10:ea:76:55:a6:0c:f5:00:51:cc:89:7f:f0:ec:3c:83: f5:8a:87:44:05:e4:33:43:3a:8d:7e:11:f1:d4:e6:11:7f:38: bb:77:bb:22:3e:41:2c:c6:51:de:49:6c:9c:79:54:27:5c:10: ac:b3:86:c9:63:22:ed:45:4b:74:00:48:0d:58:2a:3f:d6:d7: aa:09:9a:5b:60:95:84:a4:7e:59:33:c1:bd:a7:24:4f:77:28: d1:6a:74:89:32:92:9b:e5:42:43:a4:55:87:03:45:63:6d:09: 2a:56:34:0e:c0:0a:8d:ec:b9:0d:3d:56:c9:16:0c:da:f8:5e: cf:d2:c1:71:09:65:21:27:f6:1d:9f:17:24:35:2f:2f:4f:d6: c9:47:3d:50:c9:ea:4e:35:3d:65:73:bd:39:70:ed:33:2d:c3: a9:30:f3:fc:eb:e3:39:67:bb:0c:8d:00:90:c6:f8:1a:5d:4b: 2f:0a:a7:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9uBjeG+ArehMuS6n98WSMP2k/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3 RDkxMDAzMTAeFw0yNjA2MjAwMzM0MDlaFw0yNjA2MjEwMzU5MDlaMDMxMTAvBgNV BAMTKDg0MjY1OUQ5NDYwRENEN0MzOEU3RUNGREIwMEY2OTQ2NDNDQjM1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qMw5x6seI4lTfbMmFTGsAlHX mEnsaVobaYOTEVPdsxAupc3fMDfGF7uDQ9E50b9aw7XCYx7tNFQ2kd/Z857mSvX5 1tGjpy4N7BwsgfraG3tlJMaSKjomw5A6EdOuMAo0F+ORH/COmgKVyDFq9bCzZcb7 KIv9ABO3D4R1r45eeDA/+GMbhlC9hjY1bUKE4H11Rz4lytE4M5h+nK18qjd+t+aZ /WEzdZeTByf0yOXkmfnlaW36YxFhq9uKcpC8ssGTIGeBtDiYYWn5IKT6qv2o/xtS +zgbw//OKR1Dtl7N8Q51TXLdfgEelbMGocRNUvT2qqCWSxVcZrimByExGmCLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhCZZ2UYNzXw45+z9sA9pRkPLNWYwHwYDVR0j BBgwFoAUjJX82S/mBxvh1rJ7eTDv432RADEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjk1NWY1YTYtZjM3OC00MjUyLTgwNGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDky RkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3RDkxMDAzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Qzk1RkNEOTJGRTYwNzFCRTFENkIyN0I3OTMwRUZFMzdEOTEw MDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVG RTM3RDkxMDAzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtKBC1BE4GmN+ne0wT/SuuRQNl26/ETUAkQ A1ewYSfE5iAyV4gsMR+rXH3QULYpIbTBLJN98RXGhO2hRav0KSW3EGdl2O+I2bMR EOp2VaYM9QBRzIl/8Ow8g/WKh0QF5DNDOo1+EfHU5hF/OLt3uyI+QSzGUd5JbJx5 VCdcEKyzhsljIu1FS3QASA1YKj/W16oJmltglYSkflkzwb2nJE93KNFqdIkykpvl QkOkVYcDRWNtCSpWNA7ACo3suQ09VskWDNr4Xs/SwXEJZSEn9h2fFyQ1Ly9P1slH PVDJ6k41PWVzvTlw7TMtw6kw8/zr4zlnuwyNAJDG+BpdSy8Kp6M= -----END CERTIFICATE-----Generated at Sat Jun 20 09:01:31 2026 by rpki-client