$ rpki-client -vvf rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft File: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft (raw, json) Hash identifier: +DptUIWj0f2x9jCkolbeCbVqv11Sir4OJRTLCoeJuhc= Subject key identifier: 05:D9:2C:5E:E1:D3:EF:70:D0:9F:3B:F2:77:7A:60:FC:75:E9:BA:2C Authority key identifier: 8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB Certificate issuer: /CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Certificate serial: 0E7F11B0CB96903F5D804D9D813C7A6E837A4D70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 04:40:33 +0000 Manifest this update: Sat 20 Jun 2026 04:35:33 +0000 Manifest next update: Sun 21 Jun 2026 04:40:33 +0000 Files and hashes: 1: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl (hash: KKgMA54HMbNMS29+nwckIUDh4g5rmwbinKINXWZdlsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7f:11:b0:cb:96:90:3f:5d:80:4d:9d:81:3c:7a:6e:83:7a:4d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Validity Not Before: Jun 20 04:35:33 2026 GMT Not After : Jun 21 04:40:33 2026 GMT Subject: CN=05D92C5EE1D3EF70D09F3BF2777A60FC75E9BA2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:b3:25:13:d0:01:cc:03:b5:5a:fa:9f:10: 1a:b3:21:6f:c4:a7:a4:a8:b2:76:a0:5f:33:0c:1b: 6a:16:d4:64:9b:04:16:1e:3f:23:d0:43:36:82:f7: e3:66:50:62:b9:cb:34:ae:e0:c8:6f:95:e4:a3:3c: 8e:9a:4e:c4:4d:e5:cd:e5:0c:d1:d4:b4:fb:77:4f: 6a:9a:95:90:8e:7c:d5:8d:d3:20:89:e8:e1:a4:9d: f9:4e:84:37:b3:eb:31:ac:3f:90:3b:b5:bf:88:b8: 73:bc:ed:77:5f:af:64:70:0e:eb:c4:1a:de:37:bb: 11:a0:ce:6a:bc:c3:1d:fd:10:ba:f2:47:f1:e7:85: b0:b0:61:8a:03:35:85:de:1a:56:b8:87:68:20:68: 7c:cc:97:95:ea:2e:36:95:0c:54:17:dc:1d:6a:6e: de:07:4b:ab:e9:1d:5c:16:3b:02:79:51:93:89:68: b8:bb:43:af:0b:e8:52:86:e0:e9:24:d7:ce:a3:b7: 30:de:ef:84:a0:19:d5:0e:d4:19:a0:e3:70:ff:fb: e7:4e:42:52:90:1a:2c:fa:e2:ff:9d:27:6f:34:41: 5c:b6:74:38:de:7d:6b:b2:07:ff:03:63:c6:d2:d4: b1:10:a2:49:18:76:c1:4e:d7:72:15:70:44:d9:79: 09:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D9:2C:5E:E1:D3:EF:70:D0:9F:3B:F2:77:7A:60:FC:75:E9:BA:2C X509v3 Authority Key Identifier: keyid:8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1c:8b:1d:9b:75:c0:e6:12:51:ed:af:03:68:71:a4:54:65: 96:9a:bd:18:5e:02:a3:50:f7:13:c6:23:7a:33:10:e7:6b:c8: 3a:0a:ee:9b:2a:22:60:9d:98:93:b8:a0:23:26:35:28:b0:62: d8:ca:1a:64:eb:4a:2b:7f:51:23:35:d8:41:35:1c:fa:a7:94: 2e:6f:30:9a:87:22:53:8e:92:57:82:20:5f:4a:ed:b3:9a:ea: 22:f3:f2:e0:d3:72:8f:28:4e:08:ea:dc:6d:aa:65:1f:9c:05: 86:9e:b9:67:da:cb:e2:4a:fc:13:13:bc:05:fb:eb:66:9d:7e: 36:80:2a:6e:c3:6d:fa:70:81:a1:69:44:7e:e2:7d:c7:a9:59: 0c:73:7c:a9:60:f3:0f:6b:e8:67:97:0a:23:4f:8e:c5:71:19: a1:b4:59:32:32:05:da:6e:f4:74:e3:5b:af:f3:35:17:41:c1: 10:1a:9d:34:5f:12:8e:32:5b:89:b1:21:ef:3d:59:b0:f5:59: c0:66:47:19:08:81:ad:48:3e:c0:56:84:0a:38:61:6d:d7:02: 16:b8:7e:4c:9e:45:61:11:6a:fb:8a:2f:02:4f:1d:67:e1:ed: 86:d8:fe:f7:9a:be:ee:df:58:3b:4d:f6:79:af:50:6e:71:8f: 41:7b:51:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDn8RsMuWkD9dgE2dgTx6boN6TXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5 MzREOTlEQjAeFw0yNjA2MjAwNDM1MzNaFw0yNjA2MjEwNDQwMzNaMDMxMTAvBgNV BAMTKDA1RDkyQzVFRTFEM0VGNzBEMDlGM0JGMjc3N0E2MEZDNzVFOUJBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZHrMlE9ABzAO1WvqfEBqzIW/E p6SosnagXzMMG2oW1GSbBBYePyPQQzaC9+NmUGK5yzSu4MhvleSjPI6aTsRN5c3l DNHUtPt3T2qalZCOfNWN0yCJ6OGknflOhDez6zGsP5A7tb+IuHO87Xdfr2RwDuvE Gt43uxGgzmq8wx39ELryR/HnhbCwYYoDNYXeGla4h2ggaHzMl5XqLjaVDFQX3B1q bt4HS6vpHVwWOwJ5UZOJaLi7Q68L6FKG4Okk186jtzDe74SgGdUO1Bmg43D/++dO QlKQGiz64v+dJ280QVy2dDjefWuyB/8DY8bS1LEQokkYdsFO13IVcETZeQkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBdksXuHT73DQnzvyd3pg/HXpuiwwHwYDVR0j BBgwFoAUisGM4zWXeqCpvJrv/vUwyJNNmdswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5Y2NlYjYtYTRlNy00ZTgyLTg4YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMz NTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5MzREOTlEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUMxOENFMzM1OTc3QUEwQTlCQzlBRUZGRUY1MzBDODkzNEQ5 OURCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMw Qzg5MzREOTlEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGscix2bdcDmElHtrwNocaRUZZaavRheAqNQ 9xPGI3ozEOdryDoK7psqImCdmJO4oCMmNSiwYtjKGmTrSit/USM12EE1HPqnlC5v MJqHIlOOkleCIF9K7bOa6iLz8uDTco8oTgjq3G2qZR+cBYaeuWfay+JK/BMTvAX7 62adfjaAKm7DbfpwgaFpRH7ifcepWQxzfKlg8w9r6GeXCiNPjsVxGaG0WTIyBdpu 9HTjW6/zNRdBwRAanTRfEo4yW4mxIe89WbD1WcBmRxkIga1IPsBWhAo4YW3XAha4 fkyeRWERavuKLwJPHWfh7YbY/veavu7fWDtN9nmvUG5xj0F7USQ= -----END CERTIFICATE-----Generated at Sat Jun 20 09:14:07 2026 by rpki-client