$ rpki-client -vvf rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft File: C8B590D2951C1522B7D14E433BB02A22D081720B.mft (raw, json) Hash identifier: XJ5N7nDu1+WgI962nxqsU4+aV/Xoix5OvxndWmLGuZg= Subject key identifier: F0:8B:37:4D:87:14:57:87:70:FB:3D:B3:45:C3:00:26:1C:2E:43:6E Authority key identifier: C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B Certificate issuer: /CN=C8B590D2951C1522B7D14E433BB02A22D081720B Certificate serial: 5E968D2F751C38EB0C6CBBC0BC9F12FF6EEB8522 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 00:55:12 +0000 Manifest this update: Fri 24 Jul 2026 00:50:12 +0000 Manifest next update: Sat 25 Jul 2026 04:24:12 +0000 Files and hashes: 1: C8B590D2951C1522B7D14E433BB02A22D081720B.crl (hash: 0qz+vN5ciUaYV85aa//TfDPWV+7Z0K/NV4s19+EKZE8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:96:8d:2f:75:1c:38:eb:0c:6c:bb:c0:bc:9f:12:ff:6e:eb:85:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B590D2951C1522B7D14E433BB02A22D081720B Validity Not Before: Jul 24 00:50:12 2026 GMT Not After : Jul 25 04:24:12 2026 GMT Subject: CN=F08B374D8714578770FB3DB345C300261C2E436E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:68:3a:27:95:15:f1:99:70:e4:6e:72:74: 11:d4:90:61:82:fe:a5:64:c0:86:a0:3d:31:b8:71: d9:89:9b:5d:38:64:5f:cf:dd:19:77:d7:08:1c:11: de:3d:b5:5b:a5:f5:b7:bc:a1:f1:7e:cc:b1:85:db: 2c:e8:ea:55:ac:46:37:8b:83:a4:ab:ab:44:7c:89: 78:ec:4c:6b:5d:8d:f6:66:6e:00:c0:38:25:4d:c6: 9c:1a:f7:13:25:ad:6d:c9:e3:84:af:df:c7:ee:02: 0f:64:21:8a:2d:62:d2:bc:07:fa:b5:20:2d:05:e5: a1:72:6a:f6:66:af:2a:a0:d6:f0:99:6c:ce:e6:d4: 60:b1:38:a5:c5:fa:e5:81:d1:e8:2f:c8:c8:4d:ea: 95:52:e6:a8:30:0b:63:e0:34:b5:6a:bf:94:51:f0: fe:59:95:4b:f7:65:2f:d9:72:d8:be:ee:5a:22:53: 5d:f7:1e:2a:5c:4b:b8:d6:b9:91:01:b6:3d:44:6b: 86:0b:9e:59:d9:bd:de:fa:0d:04:cd:f1:79:d4:76: a9:31:b5:13:1d:37:98:4b:99:01:3c:f6:5d:ef:24: 15:ed:ad:fb:44:ed:4a:55:63:d0:c7:bd:a1:e5:70: a7:c2:2a:c1:1f:03:26:ea:3b:cd:21:31:de:aa:01: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8B:37:4D:87:14:57:87:70:FB:3D:B3:45:C3:00:26:1C:2E:43:6E X509v3 Authority Key Identifier: keyid:C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:0e:18:a1:21:68:bb:e3:6a:bd:b1:59:08:05:9a:98:0d:6d: a9:0b:35:39:ee:91:c7:53:2a:90:8d:0a:1b:3c:82:e5:ad:38: 5a:5c:27:2f:af:3a:a5:31:e9:c3:90:72:c8:56:99:73:ff:e9: 0c:d0:30:4c:c2:1e:9b:68:a9:d8:2a:3b:64:b2:74:94:fc:6a: 76:73:6d:ac:6d:4f:a9:db:3e:5b:10:92:f1:d4:07:d5:de:f3: 89:10:4b:5a:9c:dc:7c:9e:ab:c4:0f:58:34:ca:62:dd:de:2a: da:07:e5:da:a9:e2:51:62:1b:d2:65:d8:58:d5:1c:5e:45:4d: 27:80:6c:59:7c:06:15:37:45:69:87:0a:70:61:ab:3c:9b:ff: 21:70:37:c8:62:15:29:da:57:96:c2:79:0a:fb:93:47:f7:6e: 31:18:af:d4:df:64:55:62:13:93:90:00:48:a3:8e:90:8d:dd: 67:2e:a6:34:ff:eb:95:c6:0d:c5:9c:e4:77:87:c9:ed:7d:05: 01:20:ec:4d:21:3e:03:97:5a:ab:96:6d:54:0b:28:48:f5:ac: 3a:ea:38:d3:6a:95:1f:4c:1f:aa:09:da:40:a4:86:59:d5:94: 39:fe:ff:b0:14:71:e4:20:25:d8:fc:56:47:f6:61:53:6d:d6: e2:6d:d4:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpaNL3UcOOsMbLvAvJ8S/27rhSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJE MDgxNzIwQjAeFw0yNjA3MjQwMDUwMTJaFw0yNjA3MjUwNDI0MTJaMDMxMTAvBgNV BAMTKEYwOEIzNzREODcxNDU3ODc3MEZCM0RCMzQ1QzMwMDI2MUMyRTQzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNGg6J5UV8Zlw5G5ydBHUkGGC /qVkwIagPTG4cdmJm104ZF/P3Rl31wgcEd49tVul9be8ofF+zLGF2yzo6lWsRjeL g6Srq0R8iXjsTGtdjfZmbgDAOCVNxpwa9xMlrW3J44Sv38fuAg9kIYotYtK8B/q1 IC0F5aFyavZmryqg1vCZbM7m1GCxOKXF+uWB0egvyMhN6pVS5qgwC2PgNLVqv5RR 8P5ZlUv3ZS/Zcti+7loiU133HipcS7jWuZEBtj1Ea4YLnlnZvd76DQTN8XnUdqkx tRMdN5hLmQE89l3vJBXtrftE7UpVY9DHvaHlcKfCKsEfAybqO80hMd6qATA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Is3TYcUV4dw+z2zRcMAJhwuQ24wHwYDVR0j BBgwFoAUyLWQ0pUcFSK30U5DO7AqItCBcgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2NmIwMDUtMTcyMS00OTQ1LTg1YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5 NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJEMDgxNzIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEI1OTBEMjk1MUMxNTIyQjdEMTRFNDMzQkIwMkEyMkQwODE3 MjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJB MjJEMDgxNzIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMOGKEhaLvjar2xWQgFmpgNbakLNTnukcdT KpCNChs8guWtOFpcJy+vOqUx6cOQcshWmXP/6QzQMEzCHptoqdgqO2SydJT8anZz baxtT6nbPlsQkvHUB9Xe84kQS1qc3Hyeq8QPWDTKYt3eKtoH5dqp4lFiG9Jl2FjV HF5FTSeAbFl8BhU3RWmHCnBhqzyb/yFwN8hiFSnaV5bCeQr7k0f3bjEYr9TfZFVi E5OQAEijjpCN3WcupjT/65XGDcWc5HeHye19BQEg7E0hPgOXWquWbVQLKEj1rDrq ONNqlR9MH6oJ2kCkhlnVlDn+/7AUceQgJdj8Vkf2YVNt1uJt1NI= -----END CERTIFICATE-----Generated at Fri Jul 24 05:50:29 2026 by rpki-client