$ rpki-client -vvf rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft File: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft (raw, json) Hash identifier: 3rZinB+kzDSTzBatKz1onWdA+IV4i8vH87667VCl8Tg= Subject key identifier: C8:AF:99:63:D1:BF:E0:EA:3D:02:2F:70:34:9A:D2:95:4C:CB:5C:B7 Authority key identifier: 8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 Certificate issuer: /CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Certificate serial: 5D60D3EBE8233FF726419E1346386D5F51CD2AFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 04:40:28 +0000 Manifest this update: Sat 20 Jun 2026 04:35:28 +0000 Manifest next update: Sun 21 Jun 2026 04:59:28 +0000 Files and hashes: 1: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl (hash: WeGIhesCSLb8pUJed+8wjDp1Qw0YfkSdUAWM/ATUI30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:60:d3:eb:e8:23:3f:f7:26:41:9e:13:46:38:6d:5f:51:cd:2a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Validity Not Before: Jun 20 04:35:28 2026 GMT Not After : Jun 21 04:59:28 2026 GMT Subject: CN=C8AF9963D1BFE0EA3D022F70349AD2954CCB5CB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:91:ec:06:e7:66:35:d0:2f:81:1a:27:9f: 9a:c4:f4:a0:22:08:b0:0f:5a:25:f9:b7:ab:eb:74: ad:a0:2e:a2:da:96:b8:cf:53:c2:e4:ac:1e:90:eb: c2:81:f7:c9:8b:36:50:06:90:a5:14:55:0e:ab:ca: e5:f9:88:f1:b1:41:8f:24:18:1d:f8:a1:ae:e1:60: de:bb:62:cc:0d:4f:61:4c:24:7c:39:20:d1:e4:97: 46:e7:aa:ea:39:69:3c:95:27:64:1f:2b:c5:0d:1a: 9a:5a:cd:02:9d:d0:17:83:1a:e3:c4:b7:03:68:67: 85:34:ec:8e:32:09:ff:32:de:dd:22:3f:17:45:bc: 9b:4a:95:15:bd:3d:a6:ee:d0:56:6b:73:5d:81:0c: 93:e7:95:50:82:fc:82:db:9f:92:a2:5a:99:1e:36: 63:77:6e:0f:e4:85:28:85:42:51:fe:f2:5b:db:b1: c1:0d:ba:f2:bc:65:5a:bb:15:6c:b5:95:a8:d6:7b: 8e:f9:cc:2e:ad:ef:8e:54:38:ba:de:ac:40:97:84: 9d:8e:2d:25:a4:5d:cf:f1:cd:ff:af:59:97:b4:be: cf:31:65:0d:92:8e:eb:31:25:dd:22:a5:2b:9f:98: e6:f2:ad:d3:02:f2:46:cf:fa:36:be:2a:e1:5d:55: 02:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AF:99:63:D1:BF:E0:EA:3D:02:2F:70:34:9A:D2:95:4C:CB:5C:B7 X509v3 Authority Key Identifier: keyid:8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:39:88:e0:18:d8:f5:bb:f0:ba:ec:f9:3b:85:cc:eb:d7:2e: 64:85:50:6f:97:b2:3b:81:ae:4c:7d:5a:e7:0d:31:46:63:3f: 21:d2:52:a8:ce:8a:de:9c:e3:10:f8:1e:78:12:1e:84:ec:67: cf:c5:38:a8:6a:82:cc:57:3b:53:9a:a9:1b:be:8a:fa:89:a2: cd:53:59:cc:ee:65:78:70:41:46:2e:3c:72:a5:2c:1c:6f:06: 05:a4:2e:d1:89:a8:9b:32:8d:64:35:c2:b1:a7:7e:3d:08:80: eb:25:cd:53:ed:8b:d5:9b:e8:b9:0d:f7:63:4e:1f:67:12:0c: 38:3d:8a:93:e5:be:78:2a:61:10:ff:fd:e5:39:a8:77:96:cb: 21:05:ec:49:c9:60:e9:11:9e:22:91:1a:2f:bc:c1:2f:9e:ee: 32:ea:fe:17:fa:40:d9:ef:84:d3:76:db:b6:a9:10:cf:02:a4: f6:73:31:a4:36:b8:0c:36:5c:1f:f8:7d:71:5a:be:6d:a3:7d: 66:36:c8:f1:47:c6:7b:cd:c5:a9:96:c8:e2:1b:df:5f:1c:aa: 32:04:b5:e7:41:69:dd:50:53:93:d2:d7:fe:3a:19:35:7c:b5: c0:c8:e8:ad:e0:52:21:20:74:80:a2:b9:69:05:4c:8a:72:9a: 42:1f:e5:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWDT6+gjP/cmQZ4TRjhtX1HNKvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI4QjUzNjMwRDRDRURCMUZDODI0QzIwQUU5QURGNDY4 QTdENDNFNzAeFw0yNjA2MjAwNDM1MjhaFw0yNjA2MjEwNDU5MjhaMDMxMTAvBgNV BAMTKEM4QUY5OTYzRDFCRkUwRUEzRDAyMkY3MDM0OUFEMjk1NENDQjVDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jpHsBudmNdAvgRonn5rE9KAi CLAPWiX5t6vrdK2gLqLalrjPU8LkrB6Q68KB98mLNlAGkKUUVQ6ryuX5iPGxQY8k GB34oa7hYN67YswNT2FMJHw5INHkl0bnquo5aTyVJ2QfK8UNGppazQKd0BeDGuPE twNoZ4U07I4yCf8y3t0iPxdFvJtKlRW9Pabu0FZrc12BDJPnlVCC/ILbn5KiWpke NmN3bg/khSiFQlH+8lvbscENuvK8ZVq7FWy1lajWe475zC6t745UOLrerECXhJ2O LSWkXc/xzf+vWZe0vs8xZQ2SjusxJd0ipSufmObyrdMC8kbP+ja+KuFdVQI7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyK+ZY9G/4Oo9Ai9wNJrSlUzLXLcwHwYDVR0j BBgwFoAUi4tTYw1M7bH8gkwgrprfRop9Q+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg2YTEzYmQtYjc5YS00NTBlLTliZTMtM2Q1YTAzYWI5M2IxLzAvOEI4QjUzNjMw RDRDRURCMUZDODI0QzIwQUU5QURGNDY4QTdENDNFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjhCNTM2MzBENENFREIxRkM4MjRDMjBBRTlBREY0NjhBN0Q0 M0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvOEI4QjUzNjMwRDRDRURCMUZDODI0QzIwQUU5QURG NDY4QTdENDNFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJE5iOAY2PW78Lrs+TuFzOvXLmSFUG+XsjuB rkx9WucNMUZjPyHSUqjOit6c4xD4HngSHoTsZ8/FOKhqgsxXO1OaqRu+ivqJos1T WczuZXhwQUYuPHKlLBxvBgWkLtGJqJsyjWQ1wrGnfj0IgOslzVPti9Wb6LkN92NO H2cSDDg9ipPlvngqYRD//eU5qHeWyyEF7EnJYOkRniKRGi+8wS+e7jLq/hf6QNnv hNN227apEM8CpPZzMaQ2uAw2XB/4fXFavm2jfWY2yPFHxnvNxamWyOIb318cqjIE tedBad1QU5PS1/46GTV8tcDI6K3gUiEgdICiuWkFTIpymkIf5bI= -----END CERTIFICATE-----Generated at Sat Jun 20 08:58:54 2026 by rpki-client