$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft File: C8B590D2951C1522B7D14E433BB02A22D081720B.mft (raw, json) Hash identifier: afE0VjTnpubMDL1cQo/HW32yi9U6mjJb4AxwtrEVaeY= Subject key identifier: C0:DD:C5:83:6F:BB:C8:3A:54:02:83:D3:26:0F:02:1F:FD:B3:E4:AC Authority key identifier: C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B Certificate issuer: /CN=C8B590D2951C1522B7D14E433BB02A22D081720B Certificate serial: 4D5F8653FBFB1346EF363008E54787CCEC3C156A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft Manifest number: BF Signing time: Thu 24 Sep 2026 02:44:08 +0000 Manifest this update: Thu 24 Sep 2026 02:39:08 +0000 Manifest next update: Fri 25 Sep 2026 05:28:08 +0000 Files and hashes: 1: C8B590D2951C1522B7D14E433BB02A22D081720B.crl (hash: NQOAlK8zVMYZO5xa+wAoec8gPB2uWIqOCwn+38DfBOI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5f:86:53:fb:fb:13:46:ef:36:30:08:e5:47:87:cc:ec:3c:15:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B590D2951C1522B7D14E433BB02A22D081720B Validity Not Before: Sep 24 02:39:08 2026 GMT Not After : Sep 25 05:28:08 2026 GMT Subject: CN=C0DDC5836FBBC83A540283D3260F021FFDB3E4AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:ec:ac:b3:42:7c:52:93:3a:35:58:9d:40: 81:22:24:c4:42:af:fd:11:37:3a:b8:d4:33:69:38: 81:d1:af:d5:f1:54:b7:6b:61:3a:a7:78:8e:a2:5d: ec:38:3c:5c:e4:37:a6:32:29:4d:9b:e4:b8:a4:31: 6d:e6:bc:bf:0d:11:c5:7b:17:80:aa:91:b8:9d:05: ed:73:60:5c:b5:51:c5:b1:19:55:9d:dd:aa:d5:ab: 23:a8:15:66:49:d1:ec:3c:c2:24:5d:e9:9b:95:70: 56:cd:ae:c6:63:7b:3b:c0:24:d5:db:34:4f:f6:ec: 5a:e2:13:8c:b4:51:d9:5c:df:07:6d:a7:47:0c:8b: 8c:73:d1:f6:25:2b:44:0a:c8:f8:e6:72:fb:52:1a: cc:3b:a9:07:db:48:6e:0a:8f:ae:e8:06:6a:c2:0a: 88:00:6e:85:7c:c5:3b:71:19:39:7a:5d:70:f3:9c: 08:d0:6d:78:e9:16:2c:d5:30:01:17:75:90:b8:a2: 99:5c:ec:00:8c:d1:16:b7:e9:32:0f:c2:0b:84:2c: 52:34:00:b2:ce:e5:b2:37:5d:69:03:21:1d:32:b9: 0a:1c:f6:12:f7:b2:25:16:e6:d1:8a:49:7b:7d:09: 98:c6:57:f1:af:13:48:4f:88:a7:fb:6c:68:02:50: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DD:C5:83:6F:BB:C8:3A:54:02:83:D3:26:0F:02:1F:FD:B3:E4:AC X509v3 Authority Key Identifier: keyid:C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a8:21:88:4c:47:9b:1b:38:92:3c:9e:34:e4:48:5f:9c:56: 39:2e:bc:79:97:21:d9:6b:5c:0b:f6:5e:ed:b4:b3:1f:c9:07: 59:ca:0f:d6:01:36:11:f7:b4:95:fb:9c:2c:bd:f2:39:e3:34: 09:56:e3:e6:5c:9b:34:64:b3:d2:6c:7e:7d:0c:5c:9e:7d:32: 30:99:2f:27:a6:af:5e:a3:ec:a8:13:0f:04:70:7d:1d:35:da: 48:ce:3c:9e:5e:fb:b3:8f:01:8e:e3:ad:ba:2e:23:a9:ae:65: f2:70:30:2e:26:43:81:ef:12:fb:aa:9a:41:c4:12:be:6e:44: 91:4c:2d:50:1b:f5:e7:6e:b5:e2:a7:23:e5:33:a7:7a:29:55: 03:3e:d7:b2:80:cd:41:c5:78:df:34:f7:27:a1:73:8a:ff:72: 9c:34:ac:39:86:29:0a:75:1a:d7:09:7d:2f:6e:58:25:b5:9d: 9f:0e:33:1d:30:ff:3e:9c:86:eb:eb:ce:bd:5e:e1:1a:01:1a: ee:bc:42:c3:67:93:57:37:f8:78:cb:1e:ff:a6:99:2b:69:81: de:d0:06:4f:02:29:a2:b2:ba:ae:64:e4:69:fd:ce:2c:94:90: 3b:00:95:7f:7e:84:75:c9:ba:04:27:1d:d1:9e:35:46:a3:ec: c6:85:6c:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTV+GU/v7E0bvNjAI5UeHzOw8FWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJE MDgxNzIwQjAeFw0yNjA5MjQwMjM5MDhaFw0yNjA5MjUwNTI4MDhaMDMxMTAvBgNV BAMTKEMwRERDNTgzNkZCQkM4M0E1NDAyODNEMzI2MEYwMjFGRkRCM0U0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Veyss0J8UpM6NVidQIEiJMRC r/0RNzq41DNpOIHRr9XxVLdrYTqneI6iXew4PFzkN6YyKU2b5LikMW3mvL8NEcV7 F4CqkbidBe1zYFy1UcWxGVWd3arVqyOoFWZJ0ew8wiRd6ZuVcFbNrsZjezvAJNXb NE/27FriE4y0Udlc3wdtp0cMi4xz0fYlK0QKyPjmcvtSGsw7qQfbSG4Kj67oBmrC CogAboV8xTtxGTl6XXDznAjQbXjpFizVMAEXdZC4oplc7ACM0Ra36TIPwguELFI0 ALLO5bI3XWkDIR0yuQoc9hL3siUW5tGKSXt9CZjGV/GvE0hPiKf7bGgCUP1NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwN3Fg2+7yDpUAoPTJg8CH/2z5KwwHwYDVR0j BBgwFoAUyLWQ0pUcFSK30U5DO7AqItCBcgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2NmIwMDUtMTcyMS00OTQ1LTg1YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5 NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJEMDgxNzIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEI1OTBEMjk1MUMxNTIyQjdEMTRFNDMzQkIwMkEyMkQwODE3 MjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJB MjJEMDgxNzIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+oIYhMR5sbOJI8njTkSF+cVjkuvHmXIdlr XAv2Xu20sx/JB1nKD9YBNhH3tJX7nCy98jnjNAlW4+ZcmzRks9Jsfn0MXJ59MjCZ Lyemr16j7KgTDwRwfR012kjOPJ5e+7OPAY7jrbouI6muZfJwMC4mQ4HvEvuqmkHE Er5uRJFMLVAb9eduteKnI+Uzp3opVQM+17KAzUHFeN809yehc4r/cpw0rDmGKQp1 GtcJfS9uWCW1nZ8OMx0w/z6chuvrzr1e4RoBGu68QsNnk1c3+HjLHv+mmStpgd7Q Bk8CKaKyuq5k5Gn9ziyUkDsAlX9+hHXJugQnHdGeNUaj7MaFbFg= -----END CERTIFICATE-----Generated at Thu Sep 24 09:08:37 2026 by rpki-client