$ rpki-client -vvf rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft File: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft (raw, json) Hash identifier: 9Twd9VdX9PqyCC7uSqPI5MiyvsGv4ufMGhZHkm/LtGs= Subject key identifier: 90:DF:8B:32:A6:AA:8D:6E:4E:24:DB:C9:18:8F:6B:61:A8:C7:C1:7C Authority key identifier: 86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B Certificate issuer: /CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Certificate serial: 3FF10762AACC46C26CF00E16ED9D5C1B44B93B3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft Manifest number: 0E Signing time: Tue 12 May 2026 14:49:31 +0000 Manifest this update: Tue 12 May 2026 14:44:31 +0000 Manifest next update: Wed 13 May 2026 18:46:31 +0000 Files and hashes: 1: 8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl (hash: iPzAdu1JU0/yPdmZm1ZuuXoqB8dKdqIW8+c7i+LKmF8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f1:07:62:aa:cc:46:c2:6c:f0:0e:16:ed:9d:5c:1b:44:b9:3b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8673E2698FCB52BA2613592AACF7E2E11F03DC1B Validity Not Before: May 12 14:44:31 2026 GMT Not After : May 13 18:46:31 2026 GMT Subject: CN=90DF8B32A6AA8D6E4E24DBC9188F6B61A8C7C17C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:72:c0:3c:af:4c:aa:83:52:22:70:85:f1: 6a:8c:fa:10:7a:28:1f:82:5c:c4:16:bd:67:85:f5: 22:64:61:6c:92:e3:2b:ea:f4:dd:bd:81:c9:91:c9: a0:7f:16:fd:84:10:26:10:a7:37:27:27:bb:8e:e4: e1:26:b6:d4:26:0c:57:2d:11:8f:bf:37:bc:64:6b: 1c:a3:40:23:99:8a:90:2f:34:29:a0:8f:1f:87:2f: 5e:32:cd:13:c7:5c:cc:b7:46:94:e9:e6:e4:2d:c1: c0:32:58:e5:1e:45:6b:0c:39:58:b3:da:c6:1d:17: 92:cc:b7:af:07:40:b2:ac:46:b5:f3:66:2e:96:28: 3d:1d:06:b5:1f:2e:dd:ba:af:f5:84:06:f8:0d:22: db:1c:3d:73:2a:80:60:26:f4:02:37:65:91:18:a0: b9:4f:42:4f:9f:59:a1:94:56:66:2a:44:09:59:9c: 17:fc:32:cf:43:51:5d:c2:5a:5b:2f:e8:2b:57:32: ad:d4:57:00:2a:c3:40:4b:10:be:23:f5:5b:45:85: 7c:83:74:f2:51:92:6f:ac:99:6c:a5:f2:6e:55:ed: 3c:92:b5:ac:d5:48:a8:b6:d8:87:39:ba:1d:dd:cc: 5d:42:4a:fb:b8:7e:8d:8e:dc:99:dc:1b:00:c0:7c: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DF:8B:32:A6:AA:8D:6E:4E:24:DB:C9:18:8F:6B:61:A8:C7:C1:7C X509v3 Authority Key Identifier: keyid:86:73:E2:69:8F:CB:52:BA:26:13:59:2A:AC:F7:E2:E1:1F:03:DC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/8673E2698FCB52BA2613592AACF7E2E11F03DC1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:eb:0e:38:ac:d6:95:00:bf:a7:c3:35:65:5d:b7:99:ec:81: 71:51:26:da:fd:ae:d8:3f:f0:97:93:d3:8a:47:97:c0:70:4e: 42:3b:46:c8:1c:2b:b6:3b:a7:45:64:fa:a3:f8:b6:d2:14:ae: c1:32:cb:ea:ef:43:3c:24:a6:40:4c:9e:08:f4:1f:96:48:9d: 93:87:b6:8e:65:db:e6:30:d5:e2:26:7b:e8:03:93:60:3b:10: 48:56:db:b9:e4:ad:6d:7a:78:6a:73:c5:5a:e5:c6:d6:dc:cc: 3b:bf:19:ec:55:2a:c7:69:90:f3:c8:e9:4f:c8:58:99:be:ba: e6:d1:03:e7:ef:80:11:2d:9a:da:53:42:23:7a:39:d6:74:09: 42:ab:54:96:1e:1b:42:5e:a9:c1:87:53:cd:b5:c5:0d:83:e2: a0:b7:ad:45:c2:92:f8:21:50:10:13:32:7a:bc:20:78:34:7b: 89:73:71:ed:1f:39:3b:37:66:5d:c0:40:bc:8a:e2:35:27:18: e8:6f:4f:d6:09:8f:f5:72:05:29:7c:6f:e7:e0:5d:d2:1c:24: ef:88:5e:90:d6:4d:70:d8:19:ce:16:2a:27:44:d1:26:db:f9: df:84:f4:f2:87:31:81:9d:6d:94:f7:dc:09:b7:80:e6:ce:d4: 38:c5:b0:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/EHYqrMRsJs8A4W7Z1cG0S5Oz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTEx RjAzREMxQjAeFw0yNjA1MTIxNDQ0MzFaFw0yNjA1MTMxODQ2MzFaMDMxMTAvBgNV BAMTKDkwREY4QjMyQTZBQThENkU0RTI0REJDOTE4OEY2QjYxQThDN0MxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBHLAPK9MqoNSInCF8WqM+hB6 KB+CXMQWvWeF9SJkYWyS4yvq9N29gcmRyaB/Fv2EECYQpzcnJ7uO5OEmttQmDFct EY+/N7xkaxyjQCOZipAvNCmgjx+HL14yzRPHXMy3RpTp5uQtwcAyWOUeRWsMOViz 2sYdF5LMt68HQLKsRrXzZi6WKD0dBrUfLt26r/WEBvgNItscPXMqgGAm9AI3ZZEY oLlPQk+fWaGUVmYqRAlZnBf8Ms9DUV3CWlsv6CtXMq3UVwAqw0BLEL4j9VtFhXyD dPJRkm+smWyl8m5V7TyStazVSKi22Ic5uh3dzF1CSvu4fo2O3JncGwDAfKkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkN+LMqaqjW5OJNvJGI9rYajHwXwwHwYDVR0j BBgwFoAUhnPiaY/LUromE1kqrPfi4R8D3BswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY5ZjI5ODgtY2FiMy00NWFhLTk3ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4 RkNCNTJCQTI2MTM1OTJBQUNGN0UyRTExRjAzREMxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjczRTI2OThGQ0I1MkJBMjYxMzU5MkFBQ0Y3RTJFMTFGMDNE QzFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODY3M0UyNjk4RkNCNTJCQTI2MTM1OTJBQUNGN0Uy RTExRjAzREMxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMfrDjis1pUAv6fDNWVdt5nsgXFRJtr9rtg/ 8JeT04pHl8BwTkI7RsgcK7Y7p0Vk+qP4ttIUrsEyy+rvQzwkpkBMngj0H5ZInZOH to5l2+Yw1eIme+gDk2A7EEhW27nkrW16eGpzxVrlxtbczDu/GexVKsdpkPPI6U/I WJm+uubRA+fvgBEtmtpTQiN6OdZ0CUKrVJYeG0JeqcGHU821xQ2D4qC3rUXCkvgh UBATMnq8IHg0e4lzce0fOTs3Zl3AQLyK4jUnGOhvT9YJj/VyBSl8b+fgXdIcJO+I XpDWTXDYGc4WKidE0Sbb+d+E9PKHMYGdbZT33Am3gObO1DjFsNc= -----END CERTIFICATE-----Generated at Wed May 13 00:44:06 2026 by rpki-client