$ rpki-client -vvf rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft File: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft (raw, json) Hash identifier: yl8FHIbaT1nvzBRGycbj1KumuNKmmqLyDUoGQXUJN04= Subject key identifier: 7E:B3:7E:1D:60:66:68:61:1C:26:C7:B0:F7:49:5F:40:1B:92:EA:4D Authority key identifier: 8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC Certificate issuer: /CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Certificate serial: 1E5CDEF7501DD27D2F98488A896AF3285C023C68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft Manifest number: 0E Signing time: Tue 12 May 2026 14:59:40 +0000 Manifest this update: Tue 12 May 2026 14:54:40 +0000 Manifest next update: Wed 13 May 2026 15:06:40 +0000 Files and hashes: 1: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl (hash: +mmx9nEoSqDOpuT3aCETTX2TQ07ZuDfEqFQDudz6WYQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:5c:de:f7:50:1d:d2:7d:2f:98:48:8a:89:6a:f3:28:5c:02:3c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Validity Not Before: May 12 14:54:40 2026 GMT Not After : May 13 15:06:40 2026 GMT Subject: CN=7EB37E1D606668611C26C7B0F7495F401B92EA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:59:f4:70:ec:82:60:4a:54:dd:8f:1c:d1: 20:74:35:fe:e7:2a:b3:9f:83:cf:e8:59:8a:ca:f1: 53:a7:68:de:c7:b9:e3:ea:6a:51:6e:99:0c:8f:bf: 66:60:dd:c1:4a:f0:81:15:47:5f:8d:c1:8e:72:f1: 92:75:91:9d:78:b7:91:25:63:55:94:2d:76:c1:ab: ba:c8:81:52:03:bc:ba:bc:1d:47:90:83:84:0c:10: 0d:17:67:43:58:bd:99:fd:67:aa:e8:fc:a8:6f:db: 9d:21:77:2a:d7:ae:66:89:1d:39:e4:c0:ff:4c:7e: 19:d6:e7:1c:30:d7:6d:13:c8:92:4b:0b:cc:2e:0f: 76:0e:23:00:d6:8a:ea:27:c2:e9:c8:d6:43:28:13: dd:a9:49:49:cd:5f:a1:59:31:45:ea:f5:a9:f1:83: d3:f9:c6:bb:d3:10:64:e8:d4:d0:32:ba:76:88:a8: e1:ce:21:f5:2e:4b:22:4a:5c:04:91:c8:e5:f3:00: 0b:5b:04:78:99:b3:8e:0d:7d:06:6e:01:e5:8d:dd: 9f:97:53:b8:21:db:52:d1:dd:33:d0:69:7f:2b:64: 47:b9:90:14:9a:eb:19:cf:85:9c:89:24:be:9e:10: 30:cf:29:d3:01:58:98:fb:c3:34:41:8b:e4:1b:69: ef:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B3:7E:1D:60:66:68:61:1C:26:C7:B0:F7:49:5F:40:1B:92:EA:4D X509v3 Authority Key Identifier: keyid:8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:27:80:73:57:40:55:60:37:5a:8f:df:da:93:4c:c6:1d:bf: 52:ec:16:1d:d6:da:57:e0:5c:28:42:8f:e3:cd:ad:4b:4d:fe: 38:f0:17:56:a6:85:3d:e4:6b:3d:ee:b8:95:42:83:82:08:9c: c1:33:1d:3a:db:81:4a:c2:51:d1:8e:c1:2c:56:f5:57:87:73: e7:47:bf:d0:58:b1:83:81:16:c1:96:05:ad:e4:de:1c:e7:ce: 2b:e9:b8:2d:cb:11:2b:bd:a4:22:ff:1c:90:9a:17:ad:e6:8c: b4:21:7a:83:82:b0:e1:ef:f3:8e:bf:35:58:93:b0:d6:30:3c: 90:b6:40:10:94:c3:ea:3b:36:d4:43:62:4a:90:dc:03:b9:e4: 5a:79:cf:17:76:ea:9f:3a:a0:11:df:f3:ae:66:0b:a4:fe:ff: 61:19:6d:0c:0b:88:ce:d4:a6:f0:6f:1b:61:b0:41:2d:53:c4: ea:52:1c:4a:b1:50:f6:9b:18:43:28:34:3a:90:c0:d7:98:6b: 8d:ca:de:e9:61:c7:db:c5:be:68:40:9d:fc:5e:c9:4e:98:4e: 7a:44:97:35:a4:79:27:de:e9:69:1a:cf:1c:09:00:61:82:73: 24:b8:4f:08:d7:06:c4:cd:7e:fb:46:0e:24:49:69:a0:c8:70: ac:78:a3:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHlze91Ad0n0vmEiKiWrzKFwCPGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhCNEMy MUEyQzJEQzAeFw0yNjA1MTIxNDU0NDBaFw0yNjA1MTMxNTA2NDBaMDMxMTAvBgNV BAMTKDdFQjM3RTFENjA2NjY4NjExQzI2QzdCMEY3NDk1RjQwMUI5MkVBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC391n0cOyCYEpU3Y8c0SB0Nf7n KrOfg8/oWYrK8VOnaN7HuePqalFumQyPv2Zg3cFK8IEVR1+NwY5y8ZJ1kZ14t5El Y1WULXbBq7rIgVIDvLq8HUeQg4QMEA0XZ0NYvZn9Z6ro/Khv250hdyrXrmaJHTnk wP9MfhnW5xww120TyJJLC8wuD3YOIwDWiuonwunI1kMoE92pSUnNX6FZMUXq9anx g9P5xrvTEGTo1NAyunaIqOHOIfUuSyJKXASRyOXzAAtbBHiZs44NfQZuAeWN3Z+X U7gh21LR3TPQaX8rZEe5kBSa6xnPhZyJJL6eEDDPKdMBWJj7wzRBi+Qbae9TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfrN+HWBmaGEcJsew90lfQBuS6k0wHwYDVR0j BBgwFoAUi3yU5dr2a7lW3568N+SLTCGiwtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDE4YzY4MzEtOGY0MC00YTIwLTgxM2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVE QUY2NkJCOTU2REY5RUJDMzdFNDhCNEMyMUEyQzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjdDOTRFNURBRjY2QkI5NTZERjlFQkMzN0U0OEI0QzIxQTJD MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhC NEMyMUEyQzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIngHNXQFVgN1qP39qTTMYdv1LsFh3W2lfg XChCj+PNrUtN/jjwF1amhT3kaz3uuJVCg4IInMEzHTrbgUrCUdGOwSxW9VeHc+dH v9BYsYOBFsGWBa3k3hznzivpuC3LESu9pCL/HJCaF63mjLQheoOCsOHv846/NViT sNYwPJC2QBCUw+o7NtRDYkqQ3AO55Fp5zxd26p86oBHf865mC6T+/2EZbQwLiM7U pvBvG2GwQS1TxOpSHEqxUPabGEMoNDqQwNeYa43K3ulhx9vFvmhAnfxeyU6YTnpE lzWkeSfe6WkazxwJAGGCcyS4TwjXBsTNfvtGDiRJaaDIcKx4o0E= -----END CERTIFICATE-----Generated at Wed May 13 02:47:53 2026 by rpki-client