$ rpki-client -vvf rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft File: 8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft (raw, json) Hash identifier: t5rcM7+6n1vmx+kr+QkdHUJNqwK0fuwpL+7CScQ02gw= Subject key identifier: E8:C5:09:09:96:57:19:0E:0A:AB:02:DC:D1:86:83:80:54:50:85:87 Authority key identifier: 81:96:C7:6B:50:63:27:D7:DB:35:5D:5A:AF:2F:74:52:7A:5F:3E:50 Certificate issuer: /CN=8196C76B506327D7DB355D5AAF2F74527A5F3E50 Certificate serial: 77077187D44503B339C1B08A9F912A3D5AB99FEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 04:55:48 +0000 Manifest this update: Sat 20 Jun 2026 04:50:48 +0000 Manifest next update: Sun 21 Jun 2026 06:45:48 +0000 Files and hashes: 1: 8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl (hash: PZNj4TowXxeyZbWnp4pBrFS6zzLOeeemG/5RsVp2cec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:07:71:87:d4:45:03:b3:39:c1:b0:8a:9f:91:2a:3d:5a:b9:9f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8196C76B506327D7DB355D5AAF2F74527A5F3E50 Validity Not Before: Jun 20 04:50:48 2026 GMT Not After : Jun 21 06:45:48 2026 GMT Subject: CN=E8C509099657190E0AAB02DCD186838054508587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f6:5d:59:30:89:d2:bd:95:50:3a:49:69:02: d2:5b:9d:73:a0:b1:1c:e0:6c:dc:14:f9:ae:2c:eb: 6a:e8:d7:91:7a:54:d9:91:fb:ab:1f:50:6f:e2:a5: cb:bb:50:9e:a8:5f:db:ae:19:6e:c4:f5:94:b3:c6: 01:6c:d5:83:62:93:61:23:81:90:9b:bb:03:9e:5c: e8:e3:4a:ad:78:38:09:26:30:40:f0:91:eb:ba:bb: f9:9b:19:7e:8f:90:51:11:cb:6e:aa:55:ea:e6:36: 49:aa:78:26:7c:39:94:d2:a6:76:0d:21:56:b9:5f: c0:04:94:db:e7:ff:b8:4e:a9:cc:87:f1:d4:af:e1: 84:76:f9:84:85:08:b4:18:01:67:f1:50:bc:a4:2c: ab:b0:49:be:35:e9:d8:82:04:6c:27:ae:4d:4e:da: 39:03:26:28:84:17:f0:1d:8d:ba:9b:10:1b:b7:4d: 7a:1d:a7:98:6c:63:66:10:86:0a:f0:c0:12:bf:1d: e3:e9:d5:7b:f9:c1:76:7c:77:fc:58:44:b4:2b:78: 5e:f7:94:47:dd:22:f7:33:1a:09:04:6f:7b:a6:c4: f5:6d:7e:87:65:f1:47:79:81:8d:b0:23:e7:97:24: 9d:8a:5b:b7:30:8f:8a:48:4d:60:67:63:68:1d:00: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C5:09:09:96:57:19:0E:0A:AB:02:DC:D1:86:83:80:54:50:85:87 X509v3 Authority Key Identifier: keyid:81:96:C7:6B:50:63:27:D7:DB:35:5D:5A:AF:2F:74:52:7A:5F:3E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8196C76B506327D7DB355D5AAF2F74527A5F3E50.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/8196C76B506327D7DB355D5AAF2F74527A5F3E50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:7f:c6:16:58:16:93:06:9b:06:aa:69:01:d0:4e:0a:b8:69: 7c:3a:02:46:3e:8f:69:c7:e4:93:90:ae:e8:7d:b1:fc:37:ab: 44:35:ff:8e:92:72:16:11:ca:8d:17:a7:4a:ef:d2:02:5f:0d: 6c:dd:04:39:2d:e3:88:c3:b2:0f:2f:4e:bc:ff:c4:43:b4:39: f0:95:f5:99:b5:8f:34:93:39:7a:fc:e6:8c:c5:ab:80:e5:1c: 4a:73:84:8c:a8:81:0b:ca:4e:fd:7b:5b:a8:7d:a6:74:71:47: 96:45:37:00:eb:e0:54:3b:2c:3f:39:fd:b7:4c:0f:bc:0e:93: 7c:a4:5a:c7:09:30:8c:2e:93:20:24:55:eb:51:96:69:37:fd: f2:0e:af:af:15:4c:97:5b:7d:c2:ab:d9:35:b6:0c:f9:07:b3: 9e:6e:65:9f:1b:fe:6e:fd:1b:2d:0e:88:9c:3b:72:85:d9:09: e6:b7:09:3b:0e:e9:e1:6f:96:55:84:07:14:6d:c6:c4:bf:11: 04:24:40:e8:f1:e3:24:12:24:3a:08:8b:8d:64:22:3c:55:29: a2:65:c8:9f:83:b0:63:4c:5f:7a:db:b1:49:b7:30:39:85:7f: 95:a8:23:a5:c6:b4:98:2b:de:ea:6a:af:40:e9:07:2d:eb:d1: fb:da:a8:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwdxh9RFA7M5wbCKn5EqPVq5n+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5NkM3NkI1MDYzMjdEN0RCMzU1RDVBQUYyRjc0NTI3 QTVGM0U1MDAeFw0yNjA2MjAwNDUwNDhaFw0yNjA2MjEwNjQ1NDhaMDMxMTAvBgNV BAMTKEU4QzUwOTA5OTY1NzE5MEUwQUFCMDJEQ0QxODY4MzgwNTQ1MDg1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL9l1ZMInSvZVQOklpAtJbnXOg sRzgbNwU+a4s62ro15F6VNmR+6sfUG/ipcu7UJ6oX9uuGW7E9ZSzxgFs1YNik2Ej gZCbuwOeXOjjSq14OAkmMEDwkeu6u/mbGX6PkFERy26qVermNkmqeCZ8OZTSpnYN IVa5X8AElNvn/7hOqcyH8dSv4YR2+YSFCLQYAWfxULykLKuwSb416diCBGwnrk1O 2jkDJiiEF/AdjbqbEBu3TXodp5hsY2YQhgrwwBK/HePp1Xv5wXZ8d/xYRLQreF73 lEfdIvczGgkEb3umxPVtfodl8Ud5gY2wI+eXJJ2KW7cwj4pITWBnY2gdANYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6MUJCZZXGQ4KqwLc0YaDgFRQhYcwHwYDVR0j BBgwFoAUgZbHa1BjJ9fbNV1ary90UnpfPlAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlhZDMxNGEtNzY1Ny00OTAxLWI3ZGQtM2I5YTliZmM2ZTljLzAvODE5NkM3NkI1 MDYzMjdEN0RCMzU1RDVBQUYyRjc0NTI3QTVGM0U1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTk2Qzc2QjUwNjMyN0Q3REIzNTVENUFBRjJGNzQ1MjdBNUYz RTUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvODE5NkM3NkI1MDYzMjdEN0RCMzU1RDVBQUYyRjc0 NTI3QTVGM0U1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZ/xhZYFpMGmwaqaQHQTgq4aXw6AkY+j2nH 5JOQruh9sfw3q0Q1/46SchYRyo0Xp0rv0gJfDWzdBDkt44jDsg8vTrz/xEO0OfCV 9Zm1jzSTOXr85ozFq4DlHEpzhIyogQvKTv17W6h9pnRxR5ZFNwDr4FQ7LD85/bdM D7wOk3ykWscJMIwukyAkVetRlmk3/fIOr68VTJdbfcKr2TW2DPkHs55uZZ8b/m79 Gy0OiJw7coXZCea3CTsO6eFvllWEBxRtxsS/EQQkQOjx4yQSJDoIi41kIjxVKaJl yJ+DsGNMX3rbsUm3MDmFf5WoI6XGtJgr3upqr0DpBy3r0fvaqMw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:19 2026 by rpki-client