$ rpki-client -vvf rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft File: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft (raw, json) Hash identifier: rxZJE4KxmBfrZh8txuOs4i2m1O81mR9HaGDXvzm9QF8= Subject key identifier: C5:52:34:80:F7:37:9B:4A:D6:B3:7E:DA:0E:11:4B:31:D2:8D:6F:07 Authority key identifier: 8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 Certificate issuer: /CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Certificate serial: 5B11E3241EBA689AD3D3769DDEC6A9847CCE2387 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:54:56 +0000 Manifest this update: Tue 12 May 2026 21:49:56 +0000 Manifest next update: Wed 13 May 2026 23:07:56 +0000 Files and hashes: 1: 8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl (hash: IB4tSoLbk8sVny940YzZjWor1GQqLtN3UfPKKQ03sf4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:11:e3:24:1e:ba:68:9a:d3:d3:76:9d:de:c6:a9:84:7c:ce:23:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C95FCD92FE6071BE1D6B27B7930EFE37D910031 Validity Not Before: May 12 21:49:56 2026 GMT Not After : May 13 23:07:56 2026 GMT Subject: CN=C5523480F7379B4AD6B37EDA0E114B31D28D6F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:37:bb:d5:7a:dc:21:53:12:a4:e6:18:ba:67: 1b:fb:66:c7:45:58:95:65:71:96:db:86:f3:99:e6: b9:9f:c5:42:cd:6d:1d:cb:38:90:44:07:85:cd:30: 66:81:11:75:5d:39:88:38:87:a0:b5:33:7f:fe:22: 9b:69:b3:68:c4:68:92:d8:8a:9e:c1:9c:bc:98:b0: f3:f7:96:aa:9d:96:36:08:4f:53:81:67:d1:ad:a8: 2a:84:84:7a:aa:ec:1e:c2:32:d2:41:4a:0a:03:98: 26:4d:9e:19:6b:4c:e8:08:b3:42:ba:5e:80:7b:a2: 62:bd:01:e9:75:49:6b:30:e7:34:c3:9b:e8:3b:04: 7c:f5:60:fd:b0:74:83:c5:71:fa:83:c2:97:39:37: 75:fa:cb:33:f7:21:8b:20:aa:2b:66:ee:ee:9e:94: 12:6a:47:f8:4e:aa:17:6b:1c:f3:99:ab:5d:61:24: 09:40:9b:91:73:23:bb:49:1b:3a:61:29:b6:67:ae: 72:2d:03:b1:18:45:a1:b9:c8:f9:e3:3e:da:40:17: 94:75:21:15:25:a6:25:66:65:a4:bd:04:5a:f4:bb: 8e:94:f0:c3:ab:46:23:f5:52:23:1e:fc:3a:a6:92: 2a:60:04:27:83:81:b1:01:01:35:7b:2c:79:6c:f0: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:52:34:80:F7:37:9B:4A:D6:B3:7E:DA:0E:11:4B:31:D2:8D:6F:07 X509v3 Authority Key Identifier: keyid:8C:95:FC:D9:2F:E6:07:1B:E1:D6:B2:7B:79:30:EF:E3:7D:91:00:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/8C95FCD92FE6071BE1D6B27B7930EFE37D910031.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9d:f4:28:2d:95:11:e4:6a:f5:a3:4c:f5:6e:26:75:97:50: 67:cd:60:1f:95:a5:a2:48:32:25:61:5b:8f:03:93:11:f5:30: 92:1a:c3:18:24:55:c3:be:f7:1d:78:d7:60:eb:d1:6d:d8:d5: 0a:6c:d4:94:14:c1:28:46:a1:13:ff:c2:98:46:6d:f0:29:4b: 51:0f:f5:79:89:bb:c3:fe:3b:57:ca:e4:e6:91:66:8b:6e:4d: 40:ee:6f:37:7f:6e:94:dc:ec:a0:f0:7c:5b:81:0a:db:cf:56: f2:a9:0f:41:bd:ba:5d:18:2f:05:89:31:af:d4:01:45:2c:d7: 6e:d3:42:4d:ff:b7:20:87:f5:d7:09:78:19:b0:47:00:a9:a2: e5:8d:d6:18:bd:29:c5:3a:80:ad:3d:c5:69:59:d9:2e:97:91: 3d:6b:46:6f:32:a2:44:96:04:ad:b2:98:5a:97:c8:f9:71:6c: f0:8b:1a:fc:5b:71:f6:d5:06:aa:34:7c:36:89:83:ad:9b:9e: 99:8a:76:e1:f5:14:78:8d:6e:a7:a1:ee:19:85:67:50:e3:b0: c0:00:53:f1:a9:9c:c6:a9:cb:86:6f:9e:8e:da:e5:da:af:42: be:fe:ee:83:a8:70:94:67:65:06:da:9d:cb:6f:b0:6a:91:34: 93:c4:0e:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxHjJB66aJrT03ad3saphHzOI4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3 RDkxMDAzMTAeFw0yNjA1MTIyMTQ5NTZaFw0yNjA1MTMyMzA3NTZaMDMxMTAvBgNV BAMTKEM1NTIzNDgwRjczNzlCNEFENkIzN0VEQTBFMTE0QjMxRDI4RDZGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSN7vVetwhUxKk5hi6Zxv7ZsdF WJVlcZbbhvOZ5rmfxULNbR3LOJBEB4XNMGaBEXVdOYg4h6C1M3/+Iptps2jEaJLY ip7BnLyYsPP3lqqdljYIT1OBZ9GtqCqEhHqq7B7CMtJBSgoDmCZNnhlrTOgIs0K6 XoB7omK9Ael1SWsw5zTDm+g7BHz1YP2wdIPFcfqDwpc5N3X6yzP3IYsgqitm7u6e lBJqR/hOqhdrHPOZq11hJAlAm5FzI7tJGzphKbZnrnItA7EYRaG5yPnjPtpAF5R1 IRUlpiVmZaS9BFr0u46U8MOrRiP1UiMe/DqmkipgBCeDgbEBATV7LHls8OhJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxVI0gPc3m0rWs37aDhFLMdKNbwcwHwYDVR0j BBgwFoAUjJX82S/mBxvh1rJ7eTDv432RADEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjk1NWY1YTYtZjM3OC00MjUyLTgwNGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDky RkU2MDcxQkUxRDZCMjdCNzkzMEVGRTM3RDkxMDAzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Qzk1RkNEOTJGRTYwNzFCRTFENkIyN0I3OTMwRUZFMzdEOTEw MDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvOEM5NUZDRDkyRkU2MDcxQkUxRDZCMjdCNzkzMEVG RTM3RDkxMDAzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyd9CgtlRHkavWjTPVuJnWXUGfNYB+VpaJI MiVhW48DkxH1MJIawxgkVcO+9x1412Dr0W3Y1Qps1JQUwShGoRP/wphGbfApS1EP 9XmJu8P+O1fK5OaRZotuTUDubzd/bpTc7KDwfFuBCtvPVvKpD0G9ul0YLwWJMa/U AUUs127TQk3/tyCH9dcJeBmwRwCpouWN1hi9KcU6gK09xWlZ2S6XkT1rRm8yokSW BK2ymFqXyPlxbPCLGvxbcfbVBqo0fDaJg62bnpmKduH1FHiNbqeh7hmFZ1DjsMAA U/GpnMapy4Zvno7a5dqvQr7+7oOocJRnZQbanctvsGqRNJPEDpU= -----END CERTIFICATE-----Generated at Wed May 13 10:07:26 2026 by rpki-client