$ rpki-client -vvf rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft File: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft (raw, json) Hash identifier: 4RikUc5m1PE980KIb2orfznX2mk9Q8h2pRgbNVWrAlA= Subject key identifier: A0:94:0F:AF:4B:05:7C:67:42:55:6C:8F:E2:36:FB:ED:B5:EA:B9:08 Authority key identifier: 8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC Certificate issuer: /CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Certificate serial: 13441365D2DA287FE5F8652DB5081705572CE758 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:15:59 +0000 Manifest this update: Thu 23 Jul 2026 21:10:59 +0000 Manifest next update: Fri 24 Jul 2026 22:36:59 +0000 Files and hashes: 1: 8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl (hash: 2r1cebiTv6giTt0wiI5VmdVmgv6WuWmsHUqrkayvWnE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:44:13:65:d2:da:28:7f:e5:f8:65:2d:b5:08:17:05:57:2c:e7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC Validity Not Before: Jul 23 21:10:59 2026 GMT Not After : Jul 24 22:36:59 2026 GMT Subject: CN=A0940FAF4B057C6742556C8FE236FBEDB5EAB908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4b:d8:c5:e3:16:95:1c:15:42:b8:fa:02:ee: 34:41:36:d0:d7:d8:71:a5:52:7d:cd:29:fc:82:5c: 51:65:89:89:94:c0:55:5d:49:06:2e:48:94:1c:86: a7:93:79:20:07:64:89:bf:e3:8d:21:87:88:f5:5e: 3b:51:21:3f:bc:c7:58:1d:57:0d:3d:fa:40:35:42: 6e:79:89:70:0c:de:63:4b:99:88:e0:4f:55:ac:ff: 82:fb:25:ff:94:6b:38:0b:1c:a4:6a:94:ff:08:d6: 09:55:ac:7b:bc:78:ae:3a:77:c3:f4:01:85:bb:5d: b2:e5:fe:ce:d4:63:93:51:e2:27:76:16:c8:b0:1c: 0c:1e:ba:95:fd:1a:4e:5f:0f:3b:25:9f:be:16:40: 47:f3:e3:1e:81:f4:e6:b5:38:49:0f:b6:97:6e:72: 95:3d:09:8b:54:26:cf:e4:c0:65:ae:43:54:68:f8: 06:85:2c:b1:e3:26:69:a3:a6:8f:b2:56:b7:fb:80: d8:30:0c:c9:9c:b6:31:10:5a:a3:ae:71:58:2e:e8: 4a:14:ae:15:29:f9:e4:22:b7:63:60:c9:c7:bd:ed: 5b:b9:d2:fd:18:3f:c9:a6:18:4b:a4:b4:b5:e8:43: d3:bd:ce:74:e8:28:51:64:64:4b:34:97:65:fb:1e: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:94:0F:AF:4B:05:7C:67:42:55:6C:8F:E2:36:FB:ED:B5:EA:B9:08 X509v3 Authority Key Identifier: keyid:8B:7C:94:E5:DA:F6:6B:B9:56:DF:9E:BC:37:E4:8B:4C:21:A2:C2:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/8B7C94E5DAF66BB956DF9EBC37E48B4C21A2C2DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c7:a1:84:54:ee:7c:ea:f9:25:d1:32:3d:35:3f:07:6a:fb: ba:75:e2:5b:30:5d:fb:50:92:cc:e8:be:10:86:c5:1b:2c:0a: 39:14:a7:39:0d:5c:83:fe:4b:38:aa:9e:d1:8c:8f:aa:43:7d: 04:2a:d2:e4:aa:47:a0:44:e9:30:a7:6c:c1:8e:cf:3b:16:cb: 2c:53:a7:2f:f6:4e:c2:15:2f:05:c5:27:79:04:5d:fb:03:de: 9b:da:ee:d3:d6:79:c3:be:40:cb:7b:cd:b7:62:8d:cb:5d:cb: 66:65:c3:bc:15:b7:e5:9f:b0:ad:29:72:91:cc:05:2b:cb:cd: d1:00:cb:1b:0a:fa:a6:c1:b6:d4:f1:c0:2d:1e:7a:22:74:fe: 92:21:ef:8d:79:2a:b6:ad:2c:ca:04:11:6e:14:99:fd:a2:6c: 29:56:73:36:b3:71:1a:85:9d:d9:4d:a1:b3:99:be:b4:ba:d0: 25:36:cc:c0:cf:bf:83:47:20:92:08:d5:ed:53:26:b6:b6:52: d5:3c:14:71:7e:c7:68:eb:84:67:7c:32:90:a3:1d:fc:9b:85: 34:a8:4f:f8:b5:78:fb:ab:31:fc:4d:3c:a0:52:f1:17:af:ba: ba:9c:72:02:8a:30:aa:35:db:ad:89:34:cd:2e:83:3b:af:e6: 67:56:d2:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0QTZdLaKH/l+GUttQgXBVcs51gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhCNEMy MUEyQzJEQzAeFw0yNjA3MjMyMTEwNTlaFw0yNjA3MjQyMjM2NTlaMDMxMTAvBgNV BAMTKEEwOTQwRkFGNEIwNTdDNjc0MjU1NkM4RkUyMzZGQkVEQjVFQUI5MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaS9jF4xaVHBVCuPoC7jRBNtDX 2HGlUn3NKfyCXFFliYmUwFVdSQYuSJQchqeTeSAHZIm/440hh4j1XjtRIT+8x1gd Vw09+kA1Qm55iXAM3mNLmYjgT1Ws/4L7Jf+UazgLHKRqlP8I1glVrHu8eK46d8P0 AYW7XbLl/s7UY5NR4id2FsiwHAweupX9Gk5fDzsln74WQEfz4x6B9Oa1OEkPtpdu cpU9CYtUJs/kwGWuQ1Ro+AaFLLHjJmmjpo+yVrf7gNgwDMmctjEQWqOucVgu6EoU rhUp+eQit2Ngyce97Vu50v0YP8mmGEuktLXoQ9O9znToKFFkZEs0l2X7Hu8tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoJQPr0sFfGdCVWyP4jb77bXquQgwHwYDVR0j BBgwFoAUi3yU5dr2a7lW3568N+SLTCGiwtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDE4YzY4MzEtOGY0MC00YTIwLTgxM2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVE QUY2NkJCOTU2REY5RUJDMzdFNDhCNEMyMUEyQzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjdDOTRFNURBRjY2QkI5NTZERjlFQkMzN0U0OEI0QzIxQTJD MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvOEI3Qzk0RTVEQUY2NkJCOTU2REY5RUJDMzdFNDhC NEMyMUEyQzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrHoYRU7nzq+SXRMj01Pwdq+7p14lswXftQ kszovhCGxRssCjkUpzkNXIP+SziqntGMj6pDfQQq0uSqR6BE6TCnbMGOzzsWyyxT py/2TsIVLwXFJ3kEXfsD3pva7tPWecO+QMt7zbdijctdy2Zlw7wVt+WfsK0pcpHM BSvLzdEAyxsK+qbBttTxwC0eeiJ0/pIh7415KratLMoEEW4Umf2ibClWczazcRqF ndlNobOZvrS60CU2zMDPv4NHIJII1e1TJra2UtU8FHF+x2jrhGd8MpCjHfybhTSo T/i1ePurMfxNPKBS8RevurqccgKKMKo1262JNM0ugzuv5mdW0iE= -----END CERTIFICATE-----Generated at Fri Jul 24 04:21:44 2026 by rpki-client