$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft File: C8B590D2951C1522B7D14E433BB02A22D081720B.mft (raw, json) Hash identifier: rh3bukJBL6JracWtlrNxKAtNiafcdrg7qmcLmu034Y4= Subject key identifier: 3B:68:4F:83:08:C0:4F:DE:7F:84:AF:9C:A6:4A:AE:5A:D4:1A:1E:3D Authority key identifier: C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B Certificate issuer: /CN=C8B590D2951C1522B7D14E433BB02A22D081720B Certificate serial: 72B8CF8B063F6962B7286CA23D56C16908428820 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft Manifest number: B6 Signing time: Thu 17 Sep 2026 06:26:30 +0000 Manifest this update: Thu 17 Sep 2026 06:21:30 +0000 Manifest next update: Fri 18 Sep 2026 08:04:30 +0000 Files and hashes: 1: C8B590D2951C1522B7D14E433BB02A22D081720B.crl (hash: xxtT8PucK5s+nyXIrS7Lt+W/mpgdLif15BazDwCd1k4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b8:cf:8b:06:3f:69:62:b7:28:6c:a2:3d:56:c1:69:08:42:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B590D2951C1522B7D14E433BB02A22D081720B Validity Not Before: Sep 17 06:21:30 2026 GMT Not After : Sep 18 08:04:30 2026 GMT Subject: CN=3B684F8308C04FDE7F84AF9CA64AAE5AD41A1E3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:38:b1:1c:71:f7:5d:a5:a7:63:d2:17:37:83: 28:38:ba:f0:fc:ca:bd:a0:49:1c:c6:1e:82:9b:97: 6d:6e:e2:80:29:1e:80:8e:94:39:3e:50:09:ca:b4: be:0e:9e:a7:5f:de:5a:f7:40:2e:af:b4:9b:92:56: bf:99:cc:0a:5e:33:7e:64:8c:78:9a:c1:bb:7c:30: 85:d9:53:d4:bf:81:2e:68:03:d3:be:8a:e7:9f:93: 31:d6:d5:02:28:a9:28:ba:4a:4f:fc:7b:c1:ce:61: db:f9:e0:33:b8:e6:1b:55:73:d3:c2:80:d4:8f:ca: f2:c7:76:48:fd:9e:be:f8:ce:87:77:62:5e:fc:f4: 85:d3:6b:9a:09:57:d5:b0:f8:bb:59:86:1a:01:5b: 59:ed:10:da:a8:36:ea:83:dd:7c:fc:1a:f3:3c:fb: 2d:21:f8:93:f7:12:50:c2:25:fa:62:29:89:10:55: 53:66:9d:e0:dc:5c:24:9d:26:a4:94:68:01:d7:3e: 9d:9a:37:e3:d9:ba:d9:dd:4e:d0:58:e9:c3:3d:e5: 35:98:81:7f:bb:67:d3:81:c2:9d:15:e1:85:5b:1b: 43:cb:6b:68:16:44:e0:09:58:4c:1e:0d:fc:fa:8f: 4d:09:41:b7:64:cf:fd:ed:5f:35:fc:73:2a:a9:e9: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:68:4F:83:08:C0:4F:DE:7F:84:AF:9C:A6:4A:AE:5A:D4:1A:1E:3D X509v3 Authority Key Identifier: keyid:C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:56:4c:f0:c2:1e:aa:0b:a1:49:8a:03:da:63:c6:65:77:29: 16:2d:80:ed:9f:2f:4f:5f:4c:a4:8e:71:5b:d0:97:49:8f:0e: 80:6f:53:4a:5d:dd:21:56:0c:d4:4a:62:ee:f1:41:cf:75:72: a1:d7:ad:8e:ab:4a:6a:43:29:70:ad:44:a7:57:f9:fd:42:8f: da:ca:c2:55:3d:ff:ad:41:5f:8d:43:7d:b6:06:b6:f1:b3:16: 28:93:1b:1b:0f:42:85:79:5b:7a:f0:93:fe:cc:48:40:0c:0e: 39:a3:34:2c:a6:93:d3:96:1b:fe:ac:bc:7b:88:83:92:11:3d: 18:9d:c8:d5:3a:d5:e7:1b:20:da:a0:93:48:d4:72:a3:58:9c: b3:88:fb:e5:d7:4f:e3:df:5a:bc:c9:b0:6d:f4:5c:f6:f3:c4: a4:57:02:25:b4:0a:30:9e:1d:6a:d3:59:66:ae:8c:85:4f:df: a4:cb:b2:02:83:a4:06:2c:90:d2:ca:ce:e4:13:9f:5b:3c:1f: b6:50:8f:3e:8d:da:fb:80:1e:1a:31:90:8f:99:6a:c9:46:19: 46:2a:9d:be:b2:ba:d6:7a:85:ee:61:42:c1:0e:af:0f:4f:70: f6:6a:c6:34:d3:4d:f2:9a:b7:b8:39:a3:50:a6:6e:4b:d8:c4: 89:33:30:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrjPiwY/aWK3KGyiPVbBaQhCiCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJE MDgxNzIwQjAeFw0yNjA5MTcwNjIxMzBaFw0yNjA5MTgwODA0MzBaMDMxMTAvBgNV BAMTKDNCNjg0RjgzMDhDMDRGREU3Rjg0QUY5Q0E2NEFBRTVBRDQxQTFFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0OLEccfddpadj0hc3gyg4uvD8 yr2gSRzGHoKbl21u4oApHoCOlDk+UAnKtL4Onqdf3lr3QC6vtJuSVr+ZzApeM35k jHiawbt8MIXZU9S/gS5oA9O+iuefkzHW1QIoqSi6Sk/8e8HOYdv54DO45htVc9PC gNSPyvLHdkj9nr74zod3Yl789IXTa5oJV9Ww+LtZhhoBW1ntENqoNuqD3Xz8GvM8 +y0h+JP3ElDCJfpiKYkQVVNmneDcXCSdJqSUaAHXPp2aN+PZutndTtBY6cM95TWY gX+7Z9OBwp0V4YVbG0PLa2gWROAJWEweDfz6j00JQbdkz/3tXzX8cyqp6X+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO2hPgwjAT95/hK+cpkquWtQaHj0wHwYDVR0j BBgwFoAUyLWQ0pUcFSK30U5DO7AqItCBcgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2NmIwMDUtMTcyMS00OTQ1LTg1YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5 NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJEMDgxNzIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEI1OTBEMjk1MUMxNTIyQjdEMTRFNDMzQkIwMkEyMkQwODE3 MjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJB MjJEMDgxNzIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdWTPDCHqoLoUmKA9pjxmV3KRYtgO2fL09f TKSOcVvQl0mPDoBvU0pd3SFWDNRKYu7xQc91cqHXrY6rSmpDKXCtRKdX+f1Cj9rK wlU9/61BX41DfbYGtvGzFiiTGxsPQoV5W3rwk/7MSEAMDjmjNCymk9OWG/6svHuI g5IRPRidyNU61ecbINqgk0jUcqNYnLOI++XXT+PfWrzJsG30XPbzxKRXAiW0CjCe HWrTWWaujIVP36TLsgKDpAYskNLKzuQTn1s8H7ZQjz6N2vuAHhoxkI+ZaslGGUYq nb6yutZ6he5hQsEOrw9PcPZqxjTTTfKat7g5o1CmbkvYxIkzMHg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:44:16 2026 by rpki-client