$ rpki-client -vvf rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft File: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft (raw, json) Hash identifier: r2ov1alMcufHboM1yTDXTfI3E1HygfG9tC9zKVISFd4= Subject key identifier: 50:B7:46:99:1E:9E:A7:53:30:E9:24:72:10:59:31:6F:4E:F5:64:2F Authority key identifier: 8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 Certificate issuer: /CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Certificate serial: 7A41BD3D478918FA4E1B42F33CD7C75F0213FC88 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:00:42 +0000 Manifest this update: Thu 23 Jul 2026 20:55:42 +0000 Manifest next update: Fri 24 Jul 2026 23:48:42 +0000 Files and hashes: 1: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl (hash: D7kdIfwUkEcYMgleJqKTS8Mmyc+XJH65Z7OV7i7rH5M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:41:bd:3d:47:89:18:fa:4e:1b:42:f3:3c:d7:c7:5f:02:13:fc:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Validity Not Before: Jul 23 20:55:42 2026 GMT Not After : Jul 24 23:48:42 2026 GMT Subject: CN=50B746991E9EA75330E924721059316F4EF5642F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:5d:32:19:81:4f:cd:8f:94:d5:45:bf:1b: dc:38:5e:61:4a:47:d2:03:44:69:1b:88:4b:04:df: 54:8d:c3:1b:12:ad:ce:c9:fb:60:b2:fb:75:f4:6a: 68:14:b8:42:fd:89:af:d1:08:ac:c9:15:3a:06:1c: 16:b4:c5:04:14:1d:8a:3d:85:0d:7a:a2:48:28:c2: 2c:05:df:fc:01:ce:99:18:7a:0d:75:ab:3f:52:58: bf:85:ac:11:e8:e7:d0:c1:ac:1d:53:93:48:00:22: 6f:36:0d:d0:3b:0c:9c:0e:7e:56:38:ce:73:1d:60: a3:4e:f1:0e:47:c2:13:79:20:81:55:ad:a4:05:0b: d6:b1:49:cb:b3:46:de:bd:56:7f:f3:eb:fc:4c:e9: b7:6c:ce:a7:ef:2f:8e:ed:d6:1d:3b:8e:17:42:24: 2e:8f:b5:1d:9c:a9:e8:ed:79:ac:e7:17:ea:6a:2d: 58:38:37:65:c5:86:f5:9d:8c:d8:92:7c:21:a2:09: 7a:c4:7f:bb:cb:56:01:2c:20:a4:58:0e:8b:a7:a0: 4a:80:61:5c:06:de:b5:cc:e0:6a:77:02:23:1e:38: 68:c6:29:b8:c8:4d:3b:7a:c5:db:68:1d:ef:13:a0: 3b:56:fd:50:42:91:1c:c6:b6:18:8c:80:37:e0:02: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B7:46:99:1E:9E:A7:53:30:E9:24:72:10:59:31:6F:4E:F5:64:2F X509v3 Authority Key Identifier: keyid:8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f6:b7:e2:58:97:ca:bc:da:0e:60:61:c4:8d:ce:15:44:03: 02:cd:17:f4:e9:b5:d8:0d:60:e5:e9:8c:9b:95:b0:04:21:6c: 51:bb:51:d7:4e:39:69:7a:4b:38:18:35:1f:ab:a9:bd:b0:96: 36:21:e3:07:64:6c:76:7a:9d:50:ce:b7:46:39:42:76:31:16: 01:72:02:06:d1:77:d3:16:84:9e:f1:f2:5d:e5:5e:cf:39:bb: bc:e2:8b:39:ca:d0:e0:29:5d:9e:89:d6:0b:02:ea:88:07:32: 81:d4:04:85:37:c0:93:36:75:11:d1:99:39:fc:be:75:1c:d2: 3b:f7:7c:15:c4:c1:03:e0:c9:61:e3:1a:07:7e:36:c9:d1:fd: e1:c4:4f:d7:47:44:e4:25:f6:c4:3e:d7:a3:ba:04:9f:0a:db: b0:3a:c4:93:39:51:79:95:15:c2:c5:05:30:1d:6a:56:f9:e0: 62:f8:0f:94:d5:0f:9b:2b:2c:3a:ee:56:86:d1:d5:7c:e3:a0: b8:15:ac:02:c7:fb:53:48:18:93:97:cf:a3:84:ac:c8:8a:4e: 70:d4:e6:3c:7a:a9:82:66:8b:38:d9:74:a2:13:a1:52:df:dd: ca:e5:98:d0:bb:a3:28:2a:4b:4f:ff:bc:54:fa:e9:a1:04:1c: 91:f6:46:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUekG9PUeJGPpOG0LzPNfHXwIT/IgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3 RDkxMDAzMTAeFw0yNjA3MjMyMDU1NDJaFw0yNjA3MjQyMzQ4NDJaMDMxMTAvBgNV BAMTKDUwQjc0Njk5MUU5RUE3NTMzMEU5MjQ3MjEwNTkzMTZGNEVGNTY0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOQV0yGYFPzY+U1UW/G9w4XmFK R9IDRGkbiEsE31SNwxsSrc7J+2Cy+3X0amgUuEL9ia/RCKzJFToGHBa0xQQUHYo9 hQ16okgowiwF3/wBzpkYeg11qz9SWL+FrBHo59DBrB1Tk0gAIm82DdA7DJwOflY4 znMdYKNO8Q5HwhN5IIFVraQFC9axScuzRt69Vn/z6/xM6bdszqfvL47t1h07jhdC JC6PtR2cqejteaznF+pqLVg4N2XFhvWdjNiSfCGiCXrEf7vLVgEsIKRYDounoEqA YVwG3rXM4Gp3AiMeOGjGKbjITTt6xdtoHe8ToDtW/VBCkRzGthiMgDfgAnLjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUULdGmR6ep1Mw6SRyEFkxb071ZC8wHwYDVR0j BBgwFoAUjJX82S/mBxvh1rJ7eTDv432RADEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjk1NWY1YTYtZjM3OC00MjUyLTgwNGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDky RkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3RDkxMDAzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Qzk1RkNEOTJGRTYwNzFCRTFENkIyN0I3OTMwRUZFMzdEOTEw MDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVG RTM3RDkxMDAzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABX2t+JYl8q82g5gYcSNzhVEAwLNF/TptdgN YOXpjJuVsAQhbFG7UddOOWl6SzgYNR+rqb2wljYh4wdkbHZ6nVDOt0Y5QnYxFgFy AgbRd9MWhJ7x8l3lXs85u7ziiznK0OApXZ6J1gsC6ogHMoHUBIU3wJM2dRHRmTn8 vnUc0jv3fBXEwQPgyWHjGgd+NsnR/eHET9dHROQl9sQ+16O6BJ8K27A6xJM5UXmV FcLFBTAdalb54GL4D5TVD5srLDruVobR1XzjoLgVrALH+1NIGJOXz6OErMiKTnDU 5jx6qYJmizjZdKIToVLf3crlmNC7oygqS0//vFT66aEEHJH2Rm0= -----END CERTIFICATE-----Generated at Fri Jul 24 15:16:01 2026 by rpki-client