$ rpki-client -vvf rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft File: C8B590D2951C1522B7D14E433BB02A22D081720B.mft (raw, json) Hash identifier: ktXikv9ACzHgFhKbD2Rn/1s1asZ6iLkk3i2p/BgBg2g= Subject key identifier: 77:2D:F5:42:39:17:D9:B6:DE:C6:44:C8:9C:2D:AA:EC:29:B7:E4:9F Authority key identifier: C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B Certificate issuer: /CN=C8B590D2951C1522B7D14E433BB02A22D081720B Certificate serial: 1B0D01111425BC5F8CC891564C9A06EC238A77A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft Manifest number: 0E Signing time: Tue 12 May 2026 22:30:57 +0000 Manifest this update: Tue 12 May 2026 22:25:57 +0000 Manifest next update: Wed 13 May 2026 23:13:57 +0000 Files and hashes: 1: C8B590D2951C1522B7D14E433BB02A22D081720B.crl (hash: nPIIxlQwnd7B8QTf/Mgd/dcM0VjKgcvn2wqy+Jtqeio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0d:01:11:14:25:bc:5f:8c:c8:91:56:4c:9a:06:ec:23:8a:77:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B590D2951C1522B7D14E433BB02A22D081720B Validity Not Before: May 12 22:25:57 2026 GMT Not After : May 13 23:13:57 2026 GMT Subject: CN=772DF5423917D9B6DEC644C89C2DAAEC29B7E49F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:96:74:d3:f5:4c:4f:4e:7e:43:aa:9f:5c:3f: 37:79:02:e6:6d:f4:fe:f7:3b:9b:92:2e:ef:54:c5: c5:e0:ac:0a:21:e6:b1:92:92:da:ec:98:ce:8c:6c: f0:23:79:fe:49:71:c1:9b:1b:75:63:9a:fb:a8:5e: c7:23:14:c7:4d:a7:8a:64:03:83:f9:04:3b:f6:ab: 88:40:2d:fc:2f:89:1e:19:8e:fb:89:24:f4:84:48: 83:97:c0:01:b1:9a:05:46:d0:68:c7:66:c8:0c:f3: 58:8e:82:ad:0f:ac:d4:27:75:6b:ae:f0:3d:d8:b7: d7:a4:1d:92:26:ac:c6:ca:1e:24:81:08:e2:c4:90: 73:dd:29:24:ea:13:20:28:0d:e9:1a:d6:65:7e:54: 8e:6b:82:e0:df:f5:fb:70:88:79:13:72:28:bd:f1: d9:3c:79:84:8c:c3:b9:88:25:b7:e4:0f:77:d1:24: 4c:5e:3d:fc:e1:86:df:93:ae:d7:fc:bc:92:e6:f1: 71:24:68:fc:c3:45:ab:31:3d:42:a1:5b:29:d5:a0: f1:ab:63:d5:ef:99:17:6c:6d:08:b2:f2:1c:b3:3b: b2:bf:38:7b:97:ec:3e:79:b8:5d:f7:ce:95:57:19: 92:ad:5d:93:57:03:32:75:62:a3:62:3b:32:92:88: e8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2D:F5:42:39:17:D9:B6:DE:C6:44:C8:9C:2D:AA:EC:29:B7:E4:9F X509v3 Authority Key Identifier: keyid:C8:B5:90:D2:95:1C:15:22:B7:D1:4E:43:3B:B0:2A:22:D0:81:72:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8B590D2951C1522B7D14E433BB02A22D081720B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/C8B590D2951C1522B7D14E433BB02A22D081720B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ba:2d:43:f7:9e:52:61:26:dd:ad:fe:fd:7f:f9:36:0a:2f: 00:fc:46:49:7f:df:6b:8d:6c:d3:94:2c:b7:26:c1:d2:60:e2: 0c:9c:c3:b2:96:9e:04:68:1c:23:b6:07:92:fa:4e:25:65:02: e6:de:cb:d6:6b:4c:9e:bc:8f:fc:41:5c:7e:e0:c9:04:68:8f: e0:df:e1:06:51:74:b7:2f:50:0d:e3:da:d8:f7:fb:76:ee:01: ec:5c:44:0e:2f:c4:40:d4:b0:21:1f:70:85:6d:ed:70:a5:63: be:3d:93:c7:d3:38:91:e7:7a:88:9e:b4:8c:14:94:7f:b1:1d: 0f:73:65:ad:fa:4f:76:9e:33:9c:ee:d5:ed:a5:1e:2f:52:97: 01:de:9f:65:dd:5a:f5:c7:0b:f6:83:34:bd:f8:fa:13:75:8a: f9:02:c8:68:1b:a9:ef:1b:bf:4d:4c:b4:d9:70:6a:eb:df:95: 57:16:89:70:68:ac:2a:00:8b:fa:bb:0c:05:d7:a3:fc:10:89: 57:5c:20:b7:58:10:81:27:2c:fe:ec:a3:88:ce:37:c5:d5:29: e2:d6:b5:9f:60:9d:41:46:ce:30:fd:4d:c9:a7:69:5c:e9:d3: 48:0b:53:84:f3:69:8c:24:61:c0:00:08:d6:d9:bb:6e:b7:70: cd:8a:d4:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGw0BERQlvF+MyJFWTJoG7COKd6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJE MDgxNzIwQjAeFw0yNjA1MTIyMjI1NTdaFw0yNjA1MTMyMzEzNTdaMDMxMTAvBgNV BAMTKDc3MkRGNTQyMzkxN0Q5QjZERUM2NDRDODlDMkRBQUVDMjlCN0U0OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlnTT9UxPTn5Dqp9cPzd5AuZt 9P73O5uSLu9UxcXgrAoh5rGSktrsmM6MbPAjef5JccGbG3VjmvuoXscjFMdNp4pk A4P5BDv2q4hALfwviR4ZjvuJJPSESIOXwAGxmgVG0GjHZsgM81iOgq0PrNQndWuu 8D3Yt9ekHZImrMbKHiSBCOLEkHPdKSTqEyAoDeka1mV+VI5rguDf9ftwiHkTcii9 8dk8eYSMw7mIJbfkD3fRJExePfzhht+Trtf8vJLm8XEkaPzDRasxPUKhWynVoPGr Y9XvmRdsbQiy8hyzO7K/OHuX7D55uF33zpVXGZKtXZNXAzJ1YqNiOzKSiOiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdy31QjkX2bbexkTInC2q7Cm35J8wHwYDVR0j BBgwFoAUyLWQ0pUcFSK30U5DO7AqItCBcgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2NmIwMDUtMTcyMS00OTQ1LTg1YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5 NTFDMTUyMkI3RDE0RTQzM0JCMDJBMjJEMDgxNzIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEI1OTBEMjk1MUMxNTIyQjdEMTRFNDMzQkIwMkEyMkQwODE3 MjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvQzhCNTkwRDI5NTFDMTUyMkI3RDE0RTQzM0JCMDJB MjJEMDgxNzIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+6LUP3nlJhJt2t/v1/+TYKLwD8Rkl/32uN bNOULLcmwdJg4gycw7KWngRoHCO2B5L6TiVlAubey9ZrTJ68j/xBXH7gyQRoj+Df 4QZRdLcvUA3j2tj3+3buAexcRA4vxEDUsCEfcIVt7XClY749k8fTOJHneoietIwU lH+xHQ9zZa36T3aeM5zu1e2lHi9SlwHen2XdWvXHC/aDNL34+hN1ivkCyGgbqe8b v01MtNlwauvflVcWiXBorCoAi/q7DAXXo/wQiVdcILdYEIEnLP7so4jON8XVKeLW tZ9gnUFGzjD9TcmnaVzp00gLU4TzaYwkYcAACNbZu263cM2K1D0= -----END CERTIFICATE-----Generated at Wed May 13 04:02:56 2026 by rpki-client