$ rpki-client -vvf rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft File: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft (raw, json) Hash identifier: at2KqqBAlAs4a6o/80SVpjMMBbN3H7yNLLOjB32yJk4= Subject key identifier: 43:EA:F5:55:28:4C:24:96:5C:9A:4B:1A:A2:D5:76:0E:C8:06:8C:01 Authority key identifier: 86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B Certificate issuer: /CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Certificate serial: 1B6290AA48B079AF64FDBDC6F4DD9679E25F9AC8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 23:14:02 +0000 Manifest this update: Fri 19 Jun 2026 23:09:02 +0000 Manifest next update: Sun 21 Jun 2026 03:03:02 +0000 Files and hashes: 1: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl (hash: W5vCSEJxl0EJ4BmjeBHH2En2j4b3d2oSvNuNIWv+MS4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:62:90:aa:48:b0:79:af:64:fd:bd:c6:f4:dd:96:79:e2:5f:9a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Validity Not Before: Jun 19 23:09:02 2026 GMT Not After : Jun 21 03:03:02 2026 GMT Subject: CN=43EAF555284C24965C9A4B1AA2D5760EC8068C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:62:7a:c6:10:8f:25:61:9f:d2:43:34:1c:65: bc:73:0a:19:5e:27:2f:bf:65:1d:79:2f:62:c9:e4: 1d:7e:83:ba:60:1c:6b:2b:16:5d:ea:ef:28:f9:80: fe:81:ef:a4:55:0a:dc:97:0e:5e:e3:a8:54:3c:8d: 72:e3:5c:94:16:74:16:fe:a3:bf:64:be:58:e6:63: 57:dc:d3:a3:b4:59:c4:52:46:31:43:1d:c5:82:c0: 26:76:f0:38:21:87:d9:8e:59:a6:0f:cb:49:6b:14: 69:0a:98:8d:ef:aa:46:69:a9:f7:05:20:e8:9f:34: 24:d5:a9:f9:3b:bc:5f:e1:eb:68:32:ea:b0:ae:14: 21:72:9a:6d:8a:c3:89:36:0c:fa:8a:fb:2e:62:ee: 98:d1:a8:4c:97:a3:20:41:b7:e1:27:f4:bc:19:6e: 49:34:69:7a:03:6b:df:b2:9c:ea:a7:40:67:67:aa: 10:ae:4a:cd:3a:8b:d6:80:02:b0:ef:9a:46:6e:95: 2e:16:7d:91:06:a3:c2:2f:90:a5:6f:24:53:3a:46: de:85:1b:78:2e:d9:2e:19:8a:70:dc:f5:06:0b:5d: 86:4f:49:fd:56:6a:c5:df:f1:63:2a:bf:35:0a:5c: 5e:5f:d1:29:38:cb:d2:62:25:da:71:d2:b1:8a:63: 8d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EA:F5:55:28:4C:24:96:5C:9A:4B:1A:A2:D5:76:0E:C8:06:8C:01 X509v3 Authority Key Identifier: keyid:86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:5d:53:f1:7b:9f:73:4f:41:8e:e1:30:89:e5:58:e3:b4:0d: a1:5b:a6:4e:8f:8e:18:eb:53:91:76:cd:5c:1d:9f:e8:89:f1: ed:1e:fc:51:2e:62:dc:20:89:87:cd:b4:48:61:3e:e7:2f:9c: d1:6f:a9:3b:a5:bc:76:4c:92:0a:f4:cb:74:02:e8:bc:44:52: 84:f9:8d:cc:c8:ac:c0:c1:33:eb:b4:eb:35:79:bb:54:9f:26: 66:30:04:c4:41:01:79:80:82:0f:b0:51:15:fd:71:a8:1e:d9: 3b:3d:44:95:6c:82:d9:d6:90:2f:83:14:0e:25:6d:a6:bf:b9: 75:21:13:7b:47:f5:1d:cb:36:60:83:9a:3e:a2:b1:32:de:94: e9:23:f9:0a:09:05:1c:7b:60:80:cb:9a:3c:9a:a0:6c:6b:a2: d6:1d:ea:09:77:e0:86:8d:25:ac:bf:27:e6:7e:8d:ad:c1:13: e5:b4:71:59:3a:05:90:bc:b4:4e:0c:1f:8b:4b:77:49:85:ef: bb:bd:1e:46:2b:21:ed:31:c8:e5:7e:5c:96:d8:d1:d3:36:89: e4:74:d6:f2:5c:65:67:8c:72:c4:ec:d5:d3:ec:2c:e6:d6:da: 8a:f5:64:88:6d:62:2e:e7:dd:2a:61:67:5f:0c:0f:54:04:32: 56:6b:ab:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2KQqkiwea9k/b3G9N2WeeJfmsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTEx RjAzREMxQjAeFw0yNjA2MTkyMzA5MDJaFw0yNjA2MjEwMzAzMDJaMDMxMTAvBgNV BAMTKDQzRUFGNTU1Mjg0QzI0OTY1QzlBNEIxQUEyRDU3NjBFQzgwNjhDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdYnrGEI8lYZ/SQzQcZbxzChle Jy+/ZR15L2LJ5B1+g7pgHGsrFl3q7yj5gP6B76RVCtyXDl7jqFQ8jXLjXJQWdBb+ o79kvljmY1fc06O0WcRSRjFDHcWCwCZ28Dghh9mOWaYPy0lrFGkKmI3vqkZpqfcF IOifNCTVqfk7vF/h62gy6rCuFCFymm2Kw4k2DPqK+y5i7pjRqEyXoyBBt+En9LwZ bkk0aXoDa9+ynOqnQGdnqhCuSs06i9aAArDvmkZulS4WfZEGo8IvkKVvJFM6Rt6F G3gu2S4ZinDc9QYLXYZPSf1WasXf8WMqvzUKXF5f0Sk4y9JiJdpx0rGKY40PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+r1VShMJJZcmksaotV2DsgGjAEwHwYDVR0j BBgwFoAUhnPiaY/LUromE1kqrPfi4R8D3BswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY5ZjI5ODgtY2FiMy00NWFhLTk3ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4 RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTExRjAzREMxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjczRTI2OThGQ0I1MkJBMjYxMzU5MkFBQ0Y3RTJFMTFGMDNE QzFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0Uy RTExRjAzREMxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALddU/F7n3NPQY7hMInlWOO0DaFbpk6Pjhjr U5F2zVwdn+iJ8e0e/FEuYtwgiYfNtEhhPucvnNFvqTulvHZMkgr0y3QC6LxEUoT5 jczIrMDBM+u06zV5u1SfJmYwBMRBAXmAgg+wURX9cage2Ts9RJVsgtnWkC+DFA4l baa/uXUhE3tH9R3LNmCDmj6isTLelOkj+QoJBRx7YIDLmjyaoGxrotYd6gl34IaN Jay/J+Z+ja3BE+W0cVk6BZC8tE4MH4tLd0mF77u9HkYrIe0xyOV+XJbY0dM2ieR0 1vJcZWeMcsTs1dPsLObW2or1ZIhtYi7n3SphZ18MD1QEMlZrq7o= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:45 2026 by rpki-client