$ rpki-client -vvf rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft File: C8B590D2951C1522B7D14E433BB02A22D081720B.mft (raw, json) Hash identifier: NfHcInXgUuWQ23GKEKL1AqkRtk1E1YtheeBIFSfGBvU= Subject key identifier: C3:FB:AF:35:71:2C:EB:B2:37:75:64:25:23:D9:B8:E8:8E:53:4F:E3 Authority key identifier: C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B Certificate issuer: /CN=C8B590D2951C1522B7D14E433BB02A22D081720B Certificate serial: 3265A17AC05FEBB4EDA676546419284EA1D3B0F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 22:28:10 +0000 Manifest this update: Fri 19 Jun 2026 22:23:10 +0000 Manifest next update: Sat 20 Jun 2026 23:19:10 +0000 Files and hashes: 1: C8B590D2951C1522B7D14E433BB02A22D081720B.crl (hash: a+e4rGAPrqUecCuAwJmaStT61CbEh/C7293QA9nrSGQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:65:a1:7a:c0:5f:eb:b4:ed:a6:76:54:64:19:28:4e:a1:d3:b0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B590D2951C1522B7D14E433BB02A22D081720B Validity Not Before: Jun 19 22:23:10 2026 GMT Not After : Jun 20 23:19:10 2026 GMT Subject: CN=C3FBAF35712CEBB23775642523D9B8E88E534FE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:29:93:49:5a:cb:ab:d6:74:7a:13:14:9c: 4a:50:51:22:40:c9:e8:ff:ae:d1:b6:a4:51:47:35: 2e:cc:10:94:af:35:13:61:29:63:3c:15:2d:cd:e9: 16:22:1a:34:88:6c:04:b1:73:2a:8b:79:3e:6b:b1: 95:f6:54:12:88:9b:cc:88:12:2c:3e:ab:23:b0:39: cb:09:78:5b:2e:26:03:e3:fd:cd:77:53:8c:b0:98: ca:43:6a:90:21:41:68:dd:20:bb:75:62:8b:c6:9c: 6d:7c:0d:1a:5d:88:58:47:67:8f:ec:a1:9c:0c:22: 3c:6c:70:8a:db:ec:f4:5d:85:3b:09:9e:46:4f:34: d1:96:26:22:b7:16:7d:89:30:e9:29:ff:46:5c:2c: a8:ea:29:45:19:e7:cc:35:5b:fc:b1:f2:82:41:8b: ec:f6:93:d4:c7:c5:f6:2e:cc:ea:69:d5:a8:5a:19: c4:11:7b:1c:43:9c:89:52:3a:6e:f0:a4:ff:51:37: a7:3d:77:b5:93:bc:7b:a7:29:54:5f:1c:fb:bb:d4: 3b:31:45:12:e2:eb:cd:de:4c:52:1b:03:35:9f:a7: 04:c4:95:98:6d:c3:96:98:ea:a1:66:56:98:b4:45: d3:5f:3f:bf:67:ac:3e:77:8e:18:7c:f4:de:bf:f4: 01:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FB:AF:35:71:2C:EB:B2:37:75:64:25:23:D9:B8:E8:8E:53:4F:E3 X509v3 Authority Key Identifier: keyid:C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:87:74:32:e6:7b:7b:91:55:eb:e1:ca:29:3a:48:4c:34:6b: 23:fb:8e:17:45:b3:8e:e1:8f:e4:59:63:8b:20:2a:e7:b4:d5: 86:fe:bb:e0:23:c1:6b:f1:75:6c:f6:71:e7:12:4c:9b:01:4d: 85:df:3c:48:cd:cb:55:69:c6:95:f5:3e:fc:d8:67:47:54:78: 2e:6b:f8:79:b9:01:56:e1:f2:10:f7:db:16:eb:e4:58:c4:91: 9f:36:5b:5c:53:32:1d:7a:58:5b:80:63:64:df:b3:63:6f:1b: f5:63:00:55:39:14:5c:24:e0:73:41:bf:b4:07:b1:2f:21:cf: 6e:8d:40:fa:da:c1:bc:d7:cd:8d:61:f8:69:a1:61:d5:1b:f8: 6a:25:1e:07:5a:bc:1a:71:98:72:7e:2a:b6:59:56:88:c5:44: 55:46:2b:14:44:11:02:08:36:6b:7b:5d:9c:09:af:f9:bb:1f: 81:04:45:68:53:0c:75:15:d7:13:e5:2d:06:f0:47:a5:94:0e: bb:77:ec:57:80:8f:f4:83:b1:ac:82:2e:3e:1a:6d:0d:86:8b: 4f:c0:1c:2e:c2:64:3c:55:99:87:94:64:d1:2f:92:1c:fb:ab: 4a:98:7d:db:a3:0e:6d:99:7c:63:dc:69:e6:84:4b:80:3f:16: 43:3a:d1:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmWhesBf67TtpnZUZBkoTqHTsPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJE MDgxNzIwQjAeFw0yNjA2MTkyMjIzMTBaFw0yNjA2MjAyMzE5MTBaMDMxMTAvBgNV BAMTKEMzRkJBRjM1NzEyQ0VCQjIzNzc1NjQyNTIzRDlCOEU4OEU1MzRGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFymTSVrLq9Z0ehMUnEpQUSJA yej/rtG2pFFHNS7MEJSvNRNhKWM8FS3N6RYiGjSIbASxcyqLeT5rsZX2VBKIm8yI Eiw+qyOwOcsJeFsuJgPj/c13U4ywmMpDapAhQWjdILt1YovGnG18DRpdiFhHZ4/s oZwMIjxscIrb7PRdhTsJnkZPNNGWJiK3Fn2JMOkp/0ZcLKjqKUUZ58w1W/yx8oJB i+z2k9THxfYuzOpp1ahaGcQRexxDnIlSOm7wpP9RN6c9d7WTvHunKVRfHPu71Dsx RRLi683eTFIbAzWfpwTElZhtw5aY6qFmVpi0RdNfP79nrD53jhh89N6/9AGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/uvNXEs67I3dWQlI9m46I5TT+MwHwYDVR0j BBgwFoAUyLWQ0pUcFSK30U5DO7AqItCBcgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2NmIwMDUtMTcyMS00OTQ1LTg1YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5 NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJEMDgxNzIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEI1OTBEMjk1MUMxNTIyQjdEMTRFNDMzQkIwMkEyMkQwODE3 MjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJB MjJEMDgxNzIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGHdDLme3uRVevhyik6SEw0ayP7jhdFs47h j+RZY4sgKue01Yb+u+AjwWvxdWz2cecSTJsBTYXfPEjNy1VpxpX1PvzYZ0dUeC5r +Hm5AVbh8hD32xbr5FjEkZ82W1xTMh16WFuAY2Tfs2NvG/VjAFU5FFwk4HNBv7QH sS8hz26NQPrawbzXzY1h+GmhYdUb+GolHgdavBpxmHJ+KrZZVojFRFVGKxREEQII Nmt7XZwJr/m7H4EERWhTDHUV1xPlLQbwR6WUDrt37FeAj/SDsayCLj4abQ2Gi0/A HC7CZDxVmYeUZNEvkhz7q0qYfdujDm2ZfGPcaeaES4A/FkM60RU= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:38 2026 by rpki-client