$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft File: C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft (raw, json) Hash identifier: RzMyYjo/8blZ3zKKikh8yIZeiOYxnpPntMxHqr4aGZY= Subject key identifier: 8E:E2:B9:08:70:A5:41:44:1C:6B:FF:81:EE:9A:74:20:2E:18:44:63 Authority key identifier: C2:C5:4E:9E:E3:0A:39:6F:CD:B6:D5:5D:F7:02:3A:19:B2:46:DE:8C Certificate issuer: /CN=C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C Certificate serial: 11BA9D9B7EDC10DCC05DB926F25737EE7E7C3556 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 05:11:08 +0000 Manifest this update: Sat 20 Jun 2026 05:06:08 +0000 Manifest next update: Sun 21 Jun 2026 06:36:08 +0000 Files and hashes: 1: C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl (hash: wHJL3oVFudyfdZGB/RD4l/LYTr469cE6vlsh1nz4d3Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ba:9d:9b:7e:dc:10:dc:c0:5d:b9:26:f2:57:37:ee:7e:7c:35:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C Validity Not Before: Jun 20 05:06:08 2026 GMT Not After : Jun 21 06:36:08 2026 GMT Subject: CN=8EE2B90870A541441C6BFF81EE9A74202E184463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:eb:c0:c2:35:a3:5b:2f:91:5f:9d:68:7b: e0:0f:86:4f:02:12:53:69:cd:08:11:0a:58:54:f2: d3:5e:fa:31:fd:a0:29:dc:6f:a1:bf:00:1d:23:69: 7b:ee:ba:13:f4:79:be:a1:ce:2c:9e:8c:17:87:96: 3d:23:a6:c0:aa:3c:76:9b:69:cb:90:ce:26:2a:9e: c9:8f:71:7b:85:84:d5:e7:77:d9:5c:f0:ff:df:a3: 48:5f:51:e3:3c:4e:51:09:d4:6c:bd:a7:b4:72:1f: 22:a1:26:5a:3e:b6:86:d1:37:6e:f1:f9:90:2c:a8: 60:55:69:7b:f4:5c:6f:3d:05:07:45:c4:e8:9a:84: 02:4b:f2:0a:b6:c5:35:79:3e:2b:8c:0a:7d:80:ff: 7a:7c:3f:f6:44:6f:4d:6d:fd:37:5f:fc:5a:55:f5: 02:28:83:42:c8:a6:5b:65:33:5f:55:d8:25:2c:d6: 8a:27:d7:62:09:81:32:36:2d:ab:39:9d:57:f8:d1: 72:82:36:49:e9:31:39:2b:37:c6:aa:8b:ae:1c:e6: 1c:56:f6:be:db:19:7e:97:bb:45:e1:e0:5b:fd:53: fb:8a:f6:bc:53:ab:69:c1:75:d2:d6:8f:fa:1e:99: 69:c7:c5:15:38:f9:0c:c9:bc:63:d4:12:b7:a1:de: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E2:B9:08:70:A5:41:44:1C:6B:FF:81:EE:9A:74:20:2E:18:44:63 X509v3 Authority Key Identifier: keyid:C2:C5:4E:9E:E3:0A:39:6F:CD:B6:D5:5D:F7:02:3A:19:B2:46:DE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/C2C54E9EE30A396FCDB6D55DF7023A19B246DE8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:0d:04:40:f5:55:b2:a9:e1:67:8f:d8:ce:98:a5:cc:52:b7: f4:59:94:8a:84:69:f3:be:24:58:1e:e7:4e:ac:1c:de:68:6f: af:df:84:b0:2d:e6:a8:2b:1e:9e:19:0c:d1:ba:51:0a:bd:51: 8e:2f:28:14:a5:47:45:6f:e0:d9:4d:f6:2f:34:bb:75:c5:2f: 3a:31:9b:e4:e5:7f:9b:23:a3:d4:a3:d5:7f:3c:86:e9:0e:55: 7f:db:13:50:5c:fd:e7:c6:26:71:4e:17:a0:0e:5d:a2:06:f7: 4f:74:fd:eb:a4:81:fa:6d:48:bb:b9:78:84:86:ed:e7:52:30: a9:07:6a:ae:37:03:4e:46:71:89:e0:d1:aa:52:4b:62:b8:c5: 3b:5a:b4:d7:a9:75:d3:73:d0:4e:fa:9f:e3:0b:4a:b4:48:19: e1:b5:61:f7:b0:8d:7f:ec:e0:3d:af:7f:e3:5a:e1:3e:65:31: d3:67:40:58:8c:29:55:f9:93:a3:b4:2d:9b:7b:be:28:56:19: 85:d5:b4:76:f9:fe:58:8e:f2:f0:55:35:ec:e7:74:23:fd:e1: 74:d3:0f:3b:81:2c:67:ee:f4:80:0c:f0:48:a3:7b:4a:4b:88: f1:9f:0a:57:f1:19:19:1b:e2:eb:f2:1d:3d:80:55:e4:68:3b: ef:a6:f1:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbqdm37cENzAXbkm8lc37n58NVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDNTRFOUVFMzBBMzk2RkNEQjZENTVERjcwMjNBMTlC MjQ2REU4QzAeFw0yNjA2MjAwNTA2MDhaFw0yNjA2MjEwNjM2MDhaMDMxMTAvBgNV BAMTKDhFRTJCOTA4NzBBNTQxNDQxQzZCRkY4MUVFOUE3NDIwMkUxODQ0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfOvAwjWjWy+RX51oe+APhk8C ElNpzQgRClhU8tNe+jH9oCncb6G/AB0jaXvuuhP0eb6hziyejBeHlj0jpsCqPHab acuQziYqnsmPcXuFhNXnd9lc8P/fo0hfUeM8TlEJ1Gy9p7RyHyKhJlo+tobRN27x +ZAsqGBVaXv0XG89BQdFxOiahAJL8gq2xTV5PiuMCn2A/3p8P/ZEb01t/Tdf/FpV 9QIog0LIpltlM19V2CUs1oon12IJgTI2Las5nVf40XKCNknpMTkrN8aqi64c5hxW 9r7bGX6Xu0Xh4Fv9U/uK9rxTq2nBddLWj/oemWnHxRU4+QzJvGPUEreh3jSFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjuK5CHClQUQca/+B7pp0IC4YRGMwHwYDVR0j BBgwFoAUwsVOnuMKOW/NttVd9wI6GbJG3owwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGNmM2MyMTEtMDY0NS00ODgyLWE0ZjEtNDZiZTg2N2I3OTgzLzAvQzJDNTRFOUVF MzBBMzk2RkNEQjZENTVERjcwMjNBMTlCMjQ2REU4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkM1NEU5RUUzMEEzOTZGQ0RCNkQ1NURGNzAyM0ExOUIyNDZE RThDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvQzJDNTRFOUVFMzBBMzk2RkNEQjZENTVERjcwMjNB MTlCMjQ2REU4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgNBED1VbKp4WeP2M6YpcxSt/RZlIqEafO+ JFge506sHN5ob6/fhLAt5qgrHp4ZDNG6UQq9UY4vKBSlR0Vv4NlN9i80u3XFLzox m+Tlf5sjo9Sj1X88hukOVX/bE1Bc/efGJnFOF6AOXaIG9090/eukgfptSLu5eISG 7edSMKkHaq43A05GcYng0apSS2K4xTtatNepddNz0E76n+MLSrRIGeG1YfewjX/s 4D2vf+Na4T5lMdNnQFiMKVX5k6O0LZt7vihWGYXVtHb5/liO8vBVNezndCP94XTT DzuBLGfu9IAM8Eije0pLiPGfClfxGRkb4uvyHT2AVeRoO++m8eg= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:32 2026 by rpki-client